last executing test programs:

6.768147871s ago: executing program 4 (id=2296):
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

6.642965661s ago: executing program 4 (id=2300):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast1}}}}}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

6.427244182s ago: executing program 4 (id=2302):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000080)={0x100, 0x3, 0xffff, 0xffffffff, 0x8}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x8000}, 0x50) (async)
socket$kcm(0x10, 0x100000000002, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x41)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRES8=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x404c0d0}, 0x4048804)

6.253021944s ago: executing program 4 (id=2305):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001)
r4 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0)
writev(r4, &(0x7f0000000580)=[{&(0x7f00000006c0)="315e45f8d55ddc1c2a791c794a6e5a7bd2fac22373e932293e69229ccf123bad3acd6cd12d6b5e8aecb32854a1d8ecab030f02bc5a58dfff5afe766d67d9812383d0e38c2e6267fdc5b10ef0392a40cc34bef5067f0cd400237fda04", 0x5c}, {0x0}], 0x2)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x140d, 0x300, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040)
recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102)
close(r3)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x4080)
r7 = socket$kcm(0x21, 0x7, 0x2)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@ax25={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @bcast]}, 0x39, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r7], 0x18}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)

3.993100352s ago: executing program 1 (id=2314):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e22, @loopback}, {0x1, @multicast}, 0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_0\x00'})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="00005bcd27d80000183600000100"/30], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94)
sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000600}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008050}, 0x4)

3.876361662s ago: executing program 1 (id=2316):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r2, 0x0, r0, 0x0, 0xf3a, 0x0)
close(0x3)
write(r0, &(0x7f0000000240)="94", 0x1)
write(r1, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4)
sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x83}], 0x4000000000002a4, 0x0, 0x0)

3.483662854s ago: executing program 1 (id=2318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000000500000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000003c0)="31e780f6456c2dab401b3dd67108c33a", 0x3f, r0}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000040)="5ef1fcc29a6bdcd8e52d54d5a17c2067fb46494219608f02a5df722095cc86d886f8e2", &(0x7f00000000c0)=""/168}, 0x20) (async, rerun: 32)
r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000), 0x8)

3.3957102s ago: executing program 1 (id=2319):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x8, 0x80000}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000ab5c58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000010000000000", 0x58}], 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/238, 0x38}, {0x0}], 0x2}, 0xa9}], 0x1, 0x10002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0xff, 0xffffff00, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0xf, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000100)="0158bf8582b631dc550e90cbdebbd5b4ca0668d0ed377d545d2e5180fcbcc14fbc3c1f25068673b725cfae663e065ba56fe1564c554bfe7a88051d140efa7c203bf8d2c9f1db76c41043cddfc7cf67e1b751628eb622d29e9fc3413357c18130f34d48d12570f5ede35731ff1e90f2e874e6f3a12ef82aac046ee93f61af166570b2893256a6642a31baa8917a4ed218a59ce44eb6dcc860a04bfc6da57dc9bfcad014a7054fe30c16f3f2a70cc5", 0xae}], 0x1}}], 0x1, 0x240000d5)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x5, 0x1, &(0x7f00000002c0)="1a4f000002000000", 0x8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="170000000200", 0x6)
setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, 0x0, 0x0)
unshare(0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
unshare(0x20000400)
setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f00000003c0)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x48, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x44081)

3.196079682s ago: executing program 2 (id=2322):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9beb01001800000000008000000000200000000002bf03"], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x40000000, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x10001}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x44)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
unshare(0x2040400)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7)

3.032483845s ago: executing program 4 (id=2323):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="f27000003a00010024bd70070000000000000000"], 0x14}}, 0x4000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x2f0, 0x490, 0x1f8, 0x2f0, 0x2f0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xd0, 0x1f8, 0x1f000000, {0x0, 0x7}, [@common=@icmp6={{0x28}, {0xb, "b2dd"}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'unconfined\x00'}}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0xffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffff00, 0xff000000], 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x62, 0x3, 0x4, 0x27}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x1, @ipv4=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000006c0), 0x4)
connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'sit0\x00', <r6=>0x0})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x8, r6, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1e00e000151d3c181260f3b0d5685652c4173542a36764b62f4abdf1ade5eb5382846886880fc27eb042de77f953371c6f3365d4c13e96b6fa8424a75385dc49b83fa92a2463bb2ac98d116ecb1f45bc5ea0faff5bcee5", @ANYRES16=r10, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r2, @ANYRESDEC=r4], 0x1c}}, 0x20029000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r9, 0xf, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="000900000053b00700f5867962f72c2dbac3ef9912ddf2569c8fa9e6ce2e42e2868db3fe4e765c294946446de1e968cc28104ffc9ea9818b143a352dec138dc804c84efe1a8afc478ed73ec7", @ANYRES64=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES8=r2, @ANYBLOB="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"], 0x60}}, 0x911)
ioctl$EXT4_IOC_GETSTATE(r11, 0x40046629, &(0x7f0000000680))

2.352549274s ago: executing program 4 (id=2329):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x5, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xff], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x87, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02046bcad5110b403b8c251b3e1f5c9698470703070000002dbd7000fddbdf250500170000c000000a004e2200000007fc0100000000000000000000000000010200000000000000"], 0x38}}, 0x4000881)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
r4 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r4, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r7=>0x0})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x10001, 0x5}, 0x74}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x70, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x110, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x110}}, 0x20000000)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r15, 0x0)
bind$alg(r15, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a", 0x28)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.252847731s ago: executing program 1 (id=2330):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000100020000000000bf6f3b00121f"], 0x1d)
vmsplice(r1, 0x0, 0x0, 0x1)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
splice(r3, 0x0, r2, 0x0, 0x1, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)

2.080846428s ago: executing program 0 (id=2332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x80054)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7], 0x40}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040044)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000040a03000000000000000040020000080900010073797a300000000065000c00481715604b17b937f485a8ba2fabfa02e0001f0b3e634bf6af792ef5840e1e2273cb1cbb4f2ff9231ca637803120bfa66a8da3f8ce32c02cb439"], 0x88}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r3})
r10 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x1, 0x709d25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0x9}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x24008000)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1.812883781s ago: executing program 2 (id=2334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000011000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044800}, 0x40080)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x24000840)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb08000400"], 0x58}}, 0x4000)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
pipe(&(0x7f0000002740))
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fefffffff9ffff0000000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff8000000000000000000000000000000000000000b10000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r11, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r11, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)

1.806683538s ago: executing program 0 (id=2335):
r0 = epoll_create1(0x0) (async)
close(0x3)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getpeername(r1, 0x0, 0x0)
unshare(0x400) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) (async, rerun: 64)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async, rerun: 64)
unshare(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x68000005}) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r5=>0x0})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001a40)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x8000000, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1}, @remote, 0xff, 0x0, 0x3, 0x9, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x6, 0x0, 0x400, 0x8, 'geneve0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x8b999478824e41}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010102, 0x4}}}, {{@arp={@loopback, @private=0xa010101, 0xff000000, 0xff, 0xe, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x3ff, 0x28, 0x8000, 0x5, 0xffff, 0x48a3, 'xfrm0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xc0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x5, 0x1}}}, {{@arp={@rand_addr=0x64010101, @broadcast, 0xff, 0xff, 0x9, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x39, 0x3137, 0x3, 0x1, 0x2, 'veth0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket(0x2, 0x80805, 0x0) (async, rerun: 64)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
shutdown(r9, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000002c0), &(0x7f0000000300)=0x8) (async)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r7, 0x2) (async, rerun: 64)
syz_emit_ethernet(0x52, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "42f06b"}]}}}}}}}}, 0x0) (async, rerun: 64)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)

1.587737069s ago: executing program 2 (id=2336):
socket$inet6(0xa, 0x3, 0x7) (async)
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x5e)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x4}}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x41, 0x5}, @union={0xd, 0x3, 0x0, 0x5, 0x1, 0x5, [{0xb, 0x5, 0x6}, {0xe, 0x1, 0xfffffff8}, {0xf, 0x5, 0x14000}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x1}}, @struct={0xa, 0x3, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x3, 0x9175}, {0x10, 0x4}, {0xe, 0x0, 0xfffffffb}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x10]}}, &(0x7f0000000580)=""/165, 0xd6, 0xa5}, 0x28)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x54, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5f6734b2a68afb0c6ea9e9ec2d10cc638b0d42f682e63da1"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20008080}, 0x24044884)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r11, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r10}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b6e65745f0300000000000000665f6576656e4c20"], 0x15)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000023c0), r7)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000)

1.448890565s ago: executing program 1 (id=2337):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00')
unshare(0x62040400) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) (async)
unshare(0x20000400) (async)
tee(r1, r6, 0x8f5, 0xb) (async)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000640)={{}, "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"})
write(r3, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x4)

1.359626335s ago: executing program 0 (id=2338):
syz_emit_ethernet(0x14cd, &(0x7f00000007c0)={@local, @multicast, @void, {@mpls_mc={0x8848, {[{0x3e6}, {0x8}, {0x3, 0x0, 0x1}, {0x81}, {0x1, 0x0, 0x1}, {0xa}, {0xff, 0x0, 0x1}, {0x1}], @ipv6=@icmpv6={0x4, 0x6, "aabe09", 0x1477, 0x3a, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x1c}, {[@hopopts={0x89, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xa}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x81, [0x3]}}]}, @srh={0x11, 0xc, 0x4, 0x6, 0x3, 0x0, 0x0, [@mcast1, @rand_addr=' \x01\x00', @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0x12}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x89, 0x12, 0x4, 0x9, 0x8, 0x28, 0x8, [@private2, @empty, @mcast2, @private1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x25}, @loopback, @local]}, @hopopts={0x2b, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3b}, @pad1, @hao={0xc9, 0x10, @private1}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x15, "0bd9c3c3949867eeae5456f4397b840fdf985fa2c3902003f62d45aa8904aa489da45451d6e965cee554dcc580c58552edfdf20d887659e5c307f8a227cee9c771ca5b87c49e546af0dafa4f4cc4116b6c53b06592a2fff3c122aa179ca648a92fd18a6c3861314d94b0679e50f8d7ed507822f5bba77eec40b5442b6d9b38bbcf4bd9546c9b58116a849a46933e3f2b8be56981d6b0fcb88e183e4765399cdf34a44cc6daf0b142eb"}, {0x1, 0x3, "8410f48ddd71479cfa16b375e5898199525276b8a13c2b5f846558d220"}, {0x5, 0x18, "2dd421b879d9f9639f639c14f29ed7ede9e6d5e54db04f6e4c1ab24a46691861217bd5029c1055d30eeeb7693f19e85b7184e098d61e0cdb2f7eb83e5f57d2c08975dc420f68536402d976a09fe33010c93fc9024d60c086fac4507cca9fac5c0645ca7423a7c7ad1f2dacfd06e3dd1bc8b355a5d9b7ab76cbf0ac231a6e3fb6dcdd1e0b134cd5ca247b8b16275b03235e9361fadde279166da7ff7a976f42d16c035a11ddc675105b25a7055c7742ba4d4b56cb63b91ee8363fcc713cab5b3a906e480c"}, {0x5, 0x11, "f2775563c4ed474c32290bd48a0562713de42caa4102633089fbf2057dfa1ed215a898bed651bbf03ac848285512349def4cb40107936da884c39af0ba0bb14fce8e46f25ed050e5aa8385d3449f9bff526dde30afeafef1daf1dc42e0fd419f7381f0dadd24ddd9c322076f71f756214dbbc3e000e2b54eeabe511297fa5ba2b1c4961a41e1c596f769"}, {0x22, 0x200, "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"}, {0x1, 0x19, "a923178f6b0a50528768131b0834072ea0ff099c31308e33644be5f30b0fe1ddb24b7210c8d47ad7287d8e1ac1f2d4dfa4fead4f959891c3aa411f0f402bb271004bdf0425e6c16aaf74aa0738369353e7609c13bbfb13e4b8b2482a95fe68ddf0880c6dd72a8f14ab483c4bedb81665d6fa61b1195fc2f897ef98cc69d719b4d7e4237bb0eb457eed88167e384189184a1a8230b71774fad804cc8455e80f176f81541c78dc2baaf2390375b3f0946b226951d18c7106de9602e824a67fae6637853e1f6caef7"}]}}}}}}}, 0x0)

1.312971162s ago: executing program 2 (id=2339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0}) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x24, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async)
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xc6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0)

1.252480101s ago: executing program 0 (id=2340):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
socket(0x6, 0x808, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000480)={0x1d, r5}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x6, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

1.129515925s ago: executing program 2 (id=2341):
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xee6b2803}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x4040) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xee6b2803}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x4040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000380)="ed6606c370a5", 0x6)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) (async)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r11, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

1.045204086s ago: executing program 3 (id=2342):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dedbfd, {0x0, 0x0, 0x0, r1, {0xf, 0xd}, {0x3, 0x2}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

1.005898567s ago: executing program 0 (id=2343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000009514e59e1f05dd31c0099e42b0f17eb156ef9aa0f3000000000000711242"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

838.993843ms ago: executing program 3 (id=2344):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa87, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) (async)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f00000009c0)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000016c0)={{r1}, r2, 0x10, @unused=[0x5, 0x9, 0xf1d, 0x8], @subvolid=0x5})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) (async)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[], 0x8) (rerun: 64)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xffff}, 0x8) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':'], 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r8 = socket$netlink(0x10, 0x3, 0x4)
write(r8, &(0x7f00000000c0), 0x0)

637.261457ms ago: executing program 3 (id=2345):
unshare(0x10040000)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001400)=""/75, 0x4b}], 0x2}, 0x35}], 0x1, 0x2, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000100)=0xaf1, 0x4)
unshare(0x10000)

304.649298ms ago: executing program 3 (id=2346):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
listen(r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r4, 0x7)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100))
listen(r5, 0x100)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6)

238.989746ms ago: executing program 3 (id=2347):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200ff01000000000000000000000000000114000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20040001)

172.696639ms ago: executing program 2 (id=2348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf250400000008003b0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x24048884)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000030)
sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x200, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x2, 0x1, 0xc030, 0x5d5, 0x5, 0xee9, 0x6000000000, 0x400}, &(0x7f0000000480)={0x3, 0x2, 0x5, 0x2, 0x1, 0x9, 0x2}, 0x0, 0x0, &(0x7f00000005c0)={0x0})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x198, 0x20a, 0x278, 0x198, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [0xffffffff, 0xffffff00, 0xffffff00], [0x0, 0x0, 0x0, 0x807fffff], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x25}, @loopback, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xffffff00], 'nicvf0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x6, 0x68}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8)
socket$unix(0x1, 0xcc4d591701d27482, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000340)=@dstopts={0x81, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x5, 0xfffa, [0x4, 0xfffffffffffffbe1, 0x2, 0x8000, 0x1000]}}]}, 0x40)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032abd7000ffdbdf250900000006000c000400b7b952808c5a5dd567ae2060e3531d4e000005002e0a0100008008002b00090000000500352440"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40081)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$sock(r8, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0xcb0}}], 0x18}}], 0x1, 0x404c804)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

20.668108ms ago: executing program 3 (id=2349):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x5, 0x0, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000000000000000000007", @ANYRES32], 0x30}}], 0x2, 0x4000800)

0s ago: executing program 0 (id=2350):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x0, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x5, 0x170e, [0x0, 0x2000000007c0, 0x200000001afc, 0x200000001c0a], 0x0, &(0x7f0000000300), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x9, 0x68, 0x88a8, 'wg0\x00', 'pimreg1\x00', 'bond_slave_0\x00', 'vlan0\x00', @local, [0x0, 0x0, 0xff, 0xff], @link_local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xf6, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x9, {0x90000}}}}}, {0x0, 0x0, 0x8809, 'vlan0\x00', 'veth0_to_bond\x00', 'veth1_macvtap\x00', '\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xf12836371cec8621, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x11ae, 0x11de, 0x1216, [@among={{'among\x00', 0x0, 0x898}, {{@offset=0xc, @offset=0x45c, 0x0, {[0x2, 0x1, 0xce65, 0x4, 0x8, 0x39, 0x8, 0x5, 0x4, 0x4, 0x43f7, 0x9, 0x8, 0x7, 0x0, 0x7, 0x2, 0xfffff801, 0x8, 0xfffffffd, 0x4, 0xe, 0xa, 0x5e, 0x2, 0x7, 0x7, 0x3, 0x9, 0x5, 0x2, 0x3, 0xffff, 0x5, 0x1, 0x8, 0x101, 0x7d1e, 0x5, 0x3, 0x32, 0xb4, 0x5, 0x3, 0x6, 0x1, 0x0, 0x1, 0x8, 0x5, 0x5208, 0x9, 0x7, 0x9, 0x40, 0x3, 0xe0000000, 0xb, 0x7, 0x1, 0x9, 0x40, 0x7, 0x80000001, 0x6, 0x67a, 0x80000000, 0x2a, 0x0, 0x5, 0x9, 0xbfb, 0x5, 0x3, 0x1, 0x0, 0x10000, 0x58e7, 0x0, 0x9, 0x1ff, 0xfffffffc, 0x0, 0x55, 0x4, 0x2, 0xa2, 0x0, 0x97a, 0x80000001, 0x2, 0x33, 0x4, 0x3, 0x1, 0xfffff000, 0x358b, 0x4, 0x8, 0x3ff, 0xffffff23, 0x9, 0x6, 0x1, 0x1, 0xadc, 0x4, 0x0, 0x40, 0x74be68d8, 0x96e, 0x0, 0x9, 0xadc3, 0x7, 0x3ff, 0xdd08, 0x80, 0xa, 0x2, 0xfffffff3, 0x3, 0x9, 0x2, 0x9, 0x7, 0x2, 0x4, 0x4, 0x1000, 0x8000, 0xffffffff, 0x9, 0x740, 0x7, 0xff, 0x1000, 0x0, 0x8da, 0x7, 0x2, 0x0, 0x10000, 0x3, 0x9, 0x0, 0x7fff, 0x18df33b4, 0x7ff, 0x180, 0x5, 0x0, 0x33, 0x5, 0x3, 0x7, 0xc, 0x6, 0x6, 0x200, 0x8, 0x0, 0x9, 0xd, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x0, 0x80000001, 0x6, 0x8f3, 0x7, 0x8, 0x8001, 0x80000000, 0xfffffff7, 0x3, 0xcceb, 0x5, 0x5, 0x4, 0xf, 0x2709, 0x3, 0x10, 0x1, 0x4, 0x9, 0x80000001, 0x6ba1, 0x5, 0x0, 0x280, 0x8, 0x900000, 0x4, 0x40, 0x2, 0x335d8283, 0x2, 0x5, 0x2, 0x58a, 0x8001, 0xc9, 0x534, 0x8, 0x8, 0x100000, 0x9, 0x8, 0x4, 0x6, 0x0, 0x0, 0x9, 0x1, 0x0, 0xb38, 0xe1b, 0x5, 0x9, 0x3, 0xa, 0x4, 0x3, 0xb, 0x401000, 0xb24f, 0xffffff9c, 0x9f, 0x4, 0x299, 0x8, 0x173445b9, 0xc, 0x6, 0x27, 0x0, 0x4, 0x1, 0x4, 0x436e, 0x62b, 0x7, 0x9, 0x81, 0x4, 0x40, 0x6, 0x41, 0x0, 0x9, 0x7b], 0x6, [{[0x80, 0xec], @loopback}, {[0x5], @dev={0xac, 0x14, 0x14, 0x2f}}, {[0x1000, 0x101], @multicast1}, {[0x6, 0xe4], @empty}, {[0x101, 0xe], @private=0xa010100}, {[0x9, 0x7], @rand_addr=0x64010100}]}, {[0x9, 0xffff, 0x7fffffff, 0x1, 0x8000, 0xe26, 0x401, 0x3, 0x4, 0x3, 0xc2, 0x2, 0x4, 0x4, 0xfffffffb, 0xe, 0xe77, 0x8001, 0x9, 0x7, 0x5, 0x3, 0x4, 0x80, 0x8, 0x2500, 0x8, 0x5, 0xffffff98, 0x400, 0x0, 0x38, 0x7, 0x2, 0x8, 0x8, 0x7, 0x6, 0x9, 0x1, 0x0, 0x0, 0x4, 0xc1843fe9, 0x5, 0x7ff, 0x3, 0x2, 0x0, 0x1, 0x5, 0x6, 0x6, 0x4, 0x300, 0x5, 0x7, 0x7, 0x6, 0xcc800, 0x9, 0x7fff, 0x3, 0x2, 0x26b40000, 0x1, 0xce, 0x0, 0x80000001, 0x3b3, 0x10001, 0xe, 0x8, 0x3bb, 0x10, 0x40, 0x13f, 0x9225, 0x8d, 0x1, 0x6, 0x10, 0x3d62, 0x7, 0x1, 0x4, 0x7ff, 0x8, 0x3, 0xf05e, 0x1, 0xfe, 0xb, 0xfffffff9, 0x8, 0xd04, 0xcdd, 0x3ff, 0x7, 0x4, 0x1, 0x6, 0xa94b, 0x4, 0xfffffffd, 0x4, 0xe9fc, 0x1, 0x7, 0x7, 0x40, 0x4, 0x200, 0x8, 0x4, 0x8, 0xfffffffa, 0xfff, 0x10, 0x3, 0x400, 0x0, 0x2, 0x7f, 0x7, 0x8, 0x5, 0xfffffff0, 0x6, 0xe513, 0xfffffffa, 0x7, 0x2, 0x0, 0x0, 0x8, 0x8546, 0x1, 0x6, 0x5, 0x100, 0x7, 0xffffffff, 0xff, 0xdc, 0x1, 0x10001, 0x5, 0x0, 0x1b, 0x6, 0xfffffff8, 0x13c, 0x8, 0x8, 0x3, 0x8d3, 0x65a4, 0xfffff256, 0x2, 0xb, 0x5, 0x5, 0x6aa, 0x8, 0x1ff, 0x2, 0x2, 0x0, 0x7ff, 0xb9, 0xffffffff, 0x4c5, 0x4, 0x5, 0x28a4, 0xfffffffb, 0x5, 0x0, 0x6, 0x10001, 0x5, 0x1, 0x4, 0xfff, 0xff, 0x3, 0x3, 0x3, 0xf, 0xb, 0x4, 0x6, 0xfffff630, 0x9, 0x4, 0x80, 0x3, 0x2, 0x1, 0x10, 0x0, 0x32, 0x9, 0xc, 0x2, 0x800, 0x7, 0x3ff, 0x7fff, 0x4, 0xd, 0xfffffffe, 0x0, 0x8, 0xc, 0x9, 0xb5a, 0x0, 0x9, 0x5, 0x1, 0xffff, 0x10, 0x10, 0x8, 0x53c, 0xffff, 0xffff, 0xc8000000, 0xfffffbff, 0x2877, 0x80000001, 0x39, 0xe, 0x2, 0xb3, 0x40, 0xfff, 0xfffffffe, 0x8001, 0x4, 0x7fff, 0x7ff, 0x4, 0x7ff, 0x9, 0xd0e, 0x5b8, 0x7, 0x2, 0x0, 0x2, 0x80000001, 0x8, 0x1, 0x9], 0x4, [{[0x80000001, 0x1], @remote}, {[0x4, 0x9], @dev={0xac, 0x14, 0x14, 0x14}}, {[0x3, 0x3ff], @empty}, {[0x49, 0xff], @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}}, @among={{'among\x00', 0x0, 0x858}, {{@offset=0xc, @zero, 0x1, {[0x4, 0x4, 0x4, 0x101, 0x6, 0x7, 0x6, 0x3, 0x2d, 0x0, 0x5, 0x3, 0x5, 0x3, 0x4, 0xc4f6, 0x2, 0x2091f524, 0x1000, 0x6, 0x5, 0x5, 0x2, 0x7f, 0x89, 0x98, 0x786, 0x1, 0x2, 0xfff, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x9, 0x2fd8ca7a, 0xa400000, 0x79, 0x3, 0x7, 0x1, 0x1, 0x6, 0xf5, 0x1, 0x6, 0x80000001, 0x6, 0x3, 0x200, 0xa, 0xffff, 0x6, 0x1, 0x7, 0x7, 0x7, 0x5206, 0xb06, 0xf, 0x6, 0x8, 0x4, 0xfffffffc, 0xe, 0x800, 0x9, 0x4, 0x3, 0x7, 0x10, 0xfffffff8, 0x26a, 0x2, 0x2, 0x0, 0xa8c6, 0x3, 0x2, 0x4, 0x2dd, 0xfffffffd, 0x76637638, 0x6, 0x314, 0x0, 0x1, 0x4, 0x3ff, 0x3, 0xa44, 0x3, 0x5, 0xff18, 0x2, 0x1, 0x2, 0x63, 0x100, 0x0, 0x1, 0x6, 0x6, 0x2, 0xffffff09, 0x8, 0x401, 0x5, 0x6, 0xb, 0xfffffffa, 0x4, 0x7f, 0xfffffff5, 0x4, 0x3ff, 0x9, 0x7, 0x800, 0x7, 0x8, 0xffffffff, 0x4, 0x8, 0xffffe017, 0x4, 0xfad60000, 0x3, 0x353e, 0x58b, 0x2, 0xc000000, 0x5, 0x1, 0x3, 0x0, 0x2c, 0x2, 0x4, 0xf6, 0x5, 0x6, 0x4, 0x1, 0x7, 0x3ff, 0xb02, 0x401, 0x7, 0x81, 0x3, 0x13ab, 0x10, 0x705, 0x0, 0x0, 0x2, 0x1, 0x5, 0x800, 0x9ae6, 0xfffffff7, 0x1c, 0xd4f, 0x5, 0x3, 0x9bc0, 0x8, 0x7, 0x1, 0x7, 0x2, 0x8000, 0xf4f2, 0x40, 0x36, 0x2, 0xc, 0x6, 0xf, 0x3ff, 0x7, 0x7fff, 0x0, 0x5, 0x84, 0x2, 0x8, 0x8, 0xf, 0xfffffffd, 0x6, 0x3, 0x4, 0x1, 0xf, 0x9, 0x10001, 0x3099, 0x10000, 0x19285ea3, 0xf, 0x0, 0x0, 0x9, 0x5d, 0xfffffffb, 0x8, 0x6, 0x81, 0xfffff800, 0x638, 0x3ff, 0x2, 0x9, 0xc58, 0x3, 0x8, 0x40, 0x4, 0x1, 0x0, 0x7, 0x401, 0x80000000, 0x6, 0xa86, 0x2, 0x809, 0x5, 0x3, 0xfffffff5, 0xbcb, 0x800, 0xe9, 0x5531, 0xc42c, 0xffffffff, 0x6, 0x4, 0x6, 0x688, 0x5, 0x39, 0x9, 0xe93, 0x4, 0x9, 0x5, 0xd1, 0x2, 0x517, 0xffffff01, 0x0, 0x8, 0x2], 0x4, [{[0x6, 0x8001], @broadcast}, {[0x3ff, 0x3], @multicast2}, {[0x7c0], @dev={0xac, 0x14, 0x14, 0x3e}}, {[0x8, 0xe11], @rand_addr=0x64010100}]}, {[0x80000001, 0x0, 0x1b9f, 0x4, 0x1, 0x6, 0x1, 0xf, 0x16e, 0x1cbe, 0x14, 0x5, 0x5, 0x5, 0x6, 0x5, 0x100000, 0x2, 0x401, 0x0, 0xa02e, 0x5, 0x8000, 0xfffffffe, 0xc, 0x200, 0x1, 0x0, 0x5, 0x2, 0x100, 0x1, 0x4, 0xad4, 0x4, 0x9, 0x45, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x4, 0x1, 0xff, 0x9fe, 0x9, 0xb, 0x4, 0xe, 0x7fff, 0x4, 0x101, 0x1, 0x5, 0x1, 0x3, 0x3, 0xffff8001, 0x6, 0x7, 0x9, 0x6, 0x0, 0x4, 0x5, 0xe28, 0x8001, 0x6, 0x0, 0x3, 0x7, 0x80000000, 0x2, 0x1f618df8, 0x7, 0x6, 0x8, 0xb, 0x0, 0x97, 0xb, 0x5, 0x54c07ea8, 0xc, 0x5, 0x80, 0xec, 0x80000001, 0xff, 0x2, 0xa05, 0x5, 0x3, 0x1, 0xffffffff, 0x6, 0x2, 0x1, 0x6, 0x6, 0x7, 0x0, 0x2, 0x6, 0x9, 0x2, 0x3, 0x7, 0x0, 0x4, 0x5a7, 0xb8a2, 0x4000000, 0x3, 0x3, 0x8, 0x5, 0x9, 0x4, 0x0, 0x80000001, 0x3, 0x0, 0x5, 0xfff, 0x3, 0x800, 0x9, 0x8001, 0xe58, 0xb31e, 0x10000, 0x7, 0x3, 0x2, 0x6, 0x767, 0xff, 0x8, 0x3, 0x76, 0xff, 0x82b6, 0xbf2a, 0x7ff, 0x5, 0xfc, 0x0, 0x9, 0x101, 0x5, 0x8001, 0x2, 0x200, 0xd, 0x5, 0x5, 0x5, 0x96b8, 0x81, 0x1, 0x4, 0x4, 0x7, 0x8, 0x1, 0x9, 0xfff, 0x403ec966, 0xffff, 0x8, 0xc, 0x7f, 0x541d, 0x5d3f, 0x1, 0xb, 0x5, 0x3, 0xfffffffb, 0x2, 0x9, 0x47c3, 0x1, 0x81, 0xfffffffa, 0x5, 0x2, 0x9, 0x80000001, 0x0, 0x3, 0x800, 0x6, 0x1ff, 0x9, 0x0, 0x3, 0x1db, 0x7, 0x7, 0x9, 0x5, 0x5, 0x8, 0xa165, 0x4, 0xfffffffc, 0x6, 0x40, 0x81, 0x3a2, 0x20000, 0x50, 0x5, 0x9, 0x5, 0xf4, 0x41, 0x4, 0x9, 0xbc, 0x1, 0x2, 0x4, 0x9, 0x1, 0x8, 0x138, 0x1, 0xfffffffe, 0x9, 0x9, 0x20ad, 0x8, 0x881, 0x4, 0x1000, 0x7, 0x6, 0xd507, 0x6, 0x9, 0xffffff09, 0x80000001, 0x1, 0x4ac1, 0x6, 0x101, 0xfffffffe, 0x8, 0x100, 0x2, 0x7859684a, 0x4, 0x9], 0x1, [{[0x6, 0x510], @empty}]}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x0, 0xf9, 'wg2\x00', 'macsec0\x00', 'rose0\x00', 'batadv0\x00', @remote, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xae, 0xae, 0xde, [@time={{'time\x00', 0x0, 0x18}, {{0xffff, 0x8, 0xcd4a, 0x123fa, 0x40, 0x7, 0x1}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x4, 0x8864, 'geneve0\x00', 'ipvlan1\x00', 'veth1_vlan\x00', 'syz_tun\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@log={'log\x00', 0x28, {{0x5, "5455387ec03673d7446ccd72ff6af756acd38add77acc72a93aee1b575d3", 0x5}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}, {0x9, 0x14, 0xf7, 'virt_wifi0\x00', 'batadv0\x00', 'syzkaller1\x00', 'vxcan1\x00', @link_local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @random='@\\`I\x00\f', [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xce, 0x176, 0x1a6, [@cgroup0={{'cgroup\x00', 0x0, 0x8}}, @state={{'state\x00', 0x0, 0x8}, {{0x4}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x3, 0x85, 0x0, 0x0, "eff5fe16de4a39f61bd5dba619b1e28e45c9ca9c6f19f8594a7f5cf6c44c4bec05892e0444b5de8c92807c81342842f89d0bd44381e5dc60eed6ea3c2c8732c4"}}}], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x1786)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r7, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r9 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x29, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async)
getsockopt$ax25_int(r3, 0x101, 0x4, 0x0, &(0x7f0000000400)) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040004000000000200020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800024000000002080005400000000008000340000000000800084000000001140000001100010000000000000000000000000afaf7ce254d34f1d0873218fffce3095568a271628267a9fd1bff55ca162b33f751df38f6ec049719aa47364c6ad8704a1f17ea058d2c61ce82e997db97ed51febc67e4cedf2b9b19c1b4a841c10900"/236], 0x94}}, 0x0) (async)
r11 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)

kernel console output (not intermixed with test programs):

.954593][ T9397]  __sys_sendmmsg+0x27c/0x4e0
[  177.954620][ T9397]  ? __pfx___sys_sendmmsg+0x10/0x10
[  177.954642][ T9397]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  177.954687][ T9397]  ? ksys_write+0x242/0x270
[  177.954709][ T9397]  ? __pfx_ksys_write+0x10/0x10
[  177.954735][ T9397]  __x64_sys_sendmmsg+0xa0/0xc0
[  177.954759][ T9397]  do_syscall_64+0x14d/0xf80
[  177.954780][ T9397]  ? trace_irq_disable+0x3b/0x150
[  177.954806][ T9397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.954824][ T9397]  ? clear_bhb_loop+0x40/0x90
[  177.954847][ T9397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.954866][ T9397] RIP: 0033:0x7f6ba0d9c799
[  177.954883][ T9397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.954899][ T9397] RSP: 002b:00007f6ba1ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  177.954919][ T9397] RAX: ffffffffffffffda RBX: 00007f6ba1015fa0 RCX: 00007f6ba0d9c799
[  177.954932][ T9397] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  177.954944][ T9397] RBP: 00007f6ba1ba2090 R08: 0000000000000000 R09: 0000000000000000
[  177.954955][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  177.954966][ T9397] R13: 00007f6ba1016038 R14: 00007f6ba1015fa0 R15: 00007fffe1bbb2a8
[  177.954995][ T9397]  </TASK>
[  178.313087][ T9389] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  178.328170][ T9389] bond6 (unregistering): Released all slaves
[  178.414881][ T9414] netlink: 'syz.0.904': attribute type 4 has an invalid length.
[  178.453200][ T9414] netlink: 'syz.0.904': attribute type 4 has an invalid length.
[  178.648396][ T9418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.843959][ T9420] dummy0: entered promiscuous mode
[  178.896768][ T9420] macsec1: entered allmulticast mode
[  178.902113][ T9420] dummy0: entered allmulticast mode
[  178.929357][ T9420] bridge0: port 3(macsec1) entered blocking state
[  178.957907][ T9420] bridge0: port 3(macsec1) entered disabled state
[  178.978861][ T9420] macsec1: entered promiscuous mode
[  178.992060][ T9420] bridge0: port 3(macsec1) entered blocking state
[  178.998670][ T9420] bridge0: port 3(macsec1) entered forwarding state
[  179.270153][ T9435] 8021q: adding VLAN 0 to HW filter on device bond4
[  179.331497][ T9436] __nla_validate_parse: 7 callbacks suppressed
[  179.331517][ T9436] netlink: 244 bytes leftover after parsing attributes in process `syz.0.910'.
[  179.380994][ T9443] bond4: (slave geneve3): making interface the new active one
[  179.396003][ T9443] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  179.449190][ T9453] netlink: 72 bytes leftover after parsing attributes in process `syz.1.915'.
[  179.629298][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'.
[  179.673055][ T9464] netlink: 64 bytes leftover after parsing attributes in process `syz.2.917'.
[  179.776464][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'.
[  179.931123][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'.
[  179.948767][ T9483] netlink: 52 bytes leftover after parsing attributes in process `syz.2.925'.
[  179.958659][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.924'.
[  180.180735][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[  180.189774][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  180.209398][  T492] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.228042][  T492] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.252496][  T492] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.264106][  T492] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.491871][ T9501] lo speed is unknown, defaulting to 1000
[  180.778010][ T9511] netlink: 'syz.0.933': attribute type 11 has an invalid length.
[  181.145829][ T9534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.169124][ T9548] tunl0: Caught tx_queue_len zero misconfig
[  181.906850][ T9582] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  182.321008][ T9610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.341388][ T9610] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.369241][ T9610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.370079][ T9614] validate_nla: 7 callbacks suppressed
[  182.370096][ T9614] netlink: 'syz.3.959': attribute type 1 has an invalid length.
[  182.391058][ T9610] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.415028][ T9610] batman_adv: batadv0: Removing interface: gretap1
[  182.604597][ T9618] erspan2: entered allmulticast mode
[  182.807285][ T9638] FAULT_INJECTION: forcing a failure.
[  182.807285][ T9638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.907277][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz.1.965 Not tainted syzkaller #0 PREEMPT(full) 
[  182.907304][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  182.907315][ T9638] Call Trace:
[  182.907323][ T9638]  <TASK>
[  182.907331][ T9638]  dump_stack_lvl+0xe8/0x150
[  182.907363][ T9638]  should_fail_ex+0x412/0x560
[  182.907394][ T9638]  _copy_from_user+0x2d/0xb0
[  182.907417][ T9638]  ___sys_sendmsg+0x1c6/0x360
[  182.907446][ T9638]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.907516][ T9638]  __sys_sendmmsg+0x27c/0x4e0
[  182.907543][ T9638]  ? __pfx___sys_sendmmsg+0x10/0x10
[  182.907564][ T9638]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  182.907610][ T9638]  ? ksys_write+0x242/0x270
[  182.907632][ T9638]  ? __pfx_ksys_write+0x10/0x10
[  182.907659][ T9638]  __x64_sys_sendmmsg+0xa0/0xc0
[  182.907684][ T9638]  do_syscall_64+0x14d/0xf80
[  182.907705][ T9638]  ? trace_irq_disable+0x3b/0x150
[  182.907731][ T9638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.907749][ T9638]  ? clear_bhb_loop+0x40/0x90
[  182.907772][ T9638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.907791][ T9638] RIP: 0033:0x7f3f6599c799
[  182.907808][ T9638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.907824][ T9638] RSP: 002b:00007f3f668c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  182.907844][ T9638] RAX: ffffffffffffffda RBX: 00007f3f65c15fa0 RCX: 00007f3f6599c799
[  182.907857][ T9638] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  182.907869][ T9638] RBP: 00007f3f668c5090 R08: 0000000000000000 R09: 0000000000000000
[  182.907881][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  182.907892][ T9638] R13: 00007f3f65c16038 R14: 00007f3f65c15fa0 R15: 00007ffc036d2d48
[  182.907920][ T9638]  </TASK>
[  183.225783][ T9651] netlink: 'syz.0.970': attribute type 3 has an invalid length.
[  183.369491][ T9662] siw: device registration error -23
[  183.452306][ T9662] bond0: left promiscuous mode
[  183.496677][ T9662] bond_slave_0: left promiscuous mode
[  183.502301][ T9662] bond_slave_1: left promiscuous mode
[  183.508473][ T9662] dummy0: left promiscuous mode
[  183.550805][ T9662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.637236][ T9666] af_packet: tpacket_rcv: packet too big, clamped from 13308 to 3952. macoff=96
[  183.697758][ T9675] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[  183.777403][ T9675] 8021q: adding VLAN 0 to HW filter on device bond6
[  183.955207][ T9693] netlink: 'syz.3.981': attribute type 22 has an invalid length.
[  183.980965][ T9693] netlink: 'syz.3.981': attribute type 22 has an invalid length.
[  184.131830][ T9692] bridge2: entered promiscuous mode
[  184.145669][ T9692] bridge2: entered allmulticast mode
[  184.421063][ T9715] netlink: 'syz.3.988': attribute type 16 has an invalid length.
[  184.438822][ T9717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.446373][ T9717] syzkaller0: entered promiscuous mode
[  184.453577][ T9717] syzkaller0: entered allmulticast mode
[  184.464551][ T9715] netlink: 'syz.3.988': attribute type 17 has an invalid length.
[  184.496209][ T9708] tipc: Resetting bearer <eth:syzkaller0>
[  184.519378][ T9715] bridge0: port 3(macsec1) entered blocking state
[  184.526019][ T9715] bridge0: port 3(macsec1) entered listening state
[  184.532840][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.540046][ T9715] bridge0: port 2(bridge_slave_1) entered listening state
[  184.547535][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.554706][ T9715] bridge0: port 1(bridge_slave_0) entered listening state
[  184.574118][ T9715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.590529][ T9707] tipc: Resetting bearer <eth:syzkaller0>
[  184.639244][ T9707] tipc: Disabling bearer <eth:syzkaller0>
[  184.665417][ T9721] __nla_validate_parse: 16 callbacks suppressed
[  184.665437][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'.
[  184.713549][ T9721] syzkaller0: entered promiscuous mode
[  184.730607][ T9721] syzkaller0: entered allmulticast mode
[  184.936764][ T9735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.994'.
[  185.032610][ T9743] netlink: 'syz.2.994': attribute type 10 has an invalid length.
[  185.054160][ T9743] bridge0: port 1(macsec0) entered disabled state
[  185.084612][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'.
[  185.088461][ T9743] bridge0: port 1(macsec0) entered blocking state
[  185.100015][ T9743] bridge0: port 1(macsec0) entered forwarding state
[  185.141680][ T9743] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  185.159742][ T9750] macsec0: left promiscuous mode
[  185.177669][ T9750] bridge0: port 1(macsec0) entered disabled state
[  185.230112][ T9750] bond0: (slave bridge0): Releasing backup interface
[  185.280033][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1004'.
[  185.289834][ T9758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1004'.
[  185.361953][ T9753] lo speed is unknown, defaulting to 1000
[  186.152915][ T9747] lo speed is unknown, defaulting to 1000
[  186.456112][ T9790] FAULT_INJECTION: forcing a failure.
[  186.456112][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.499417][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.4.1013 Not tainted syzkaller #0 PREEMPT(full) 
[  186.499445][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  186.499456][ T9790] Call Trace:
[  186.499463][ T9790]  <TASK>
[  186.499471][ T9790]  dump_stack_lvl+0xe8/0x150
[  186.499503][ T9790]  should_fail_ex+0x412/0x560
[  186.499534][ T9790]  _copy_from_user+0x2d/0xb0
[  186.499557][ T9790]  ___sys_sendmsg+0x1c6/0x360
[  186.499587][ T9790]  ? __pfx____sys_sendmsg+0x10/0x10
[  186.499657][ T9790]  __sys_sendmmsg+0x27c/0x4e0
[  186.499686][ T9790]  ? __pfx___sys_sendmmsg+0x10/0x10
[  186.499708][ T9790]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  186.499755][ T9790]  ? ksys_write+0x242/0x270
[  186.499778][ T9790]  ? __pfx_ksys_write+0x10/0x10
[  186.499804][ T9790]  __x64_sys_sendmmsg+0xa0/0xc0
[  186.499829][ T9790]  do_syscall_64+0x14d/0xf80
[  186.499848][ T9790]  ? trace_irq_disable+0x3b/0x150
[  186.499875][ T9790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.499894][ T9790]  ? clear_bhb_loop+0x40/0x90
[  186.499918][ T9790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.499937][ T9790] RIP: 0033:0x7f6ba0d9c799
[  186.499955][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.499971][ T9790] RSP: 002b:00007f6ba1ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  186.499991][ T9790] RAX: ffffffffffffffda RBX: 00007f6ba1015fa0 RCX: 00007f6ba0d9c799
[  186.500005][ T9790] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  186.500018][ T9790] RBP: 00007f6ba1ba2090 R08: 0000000000000000 R09: 0000000000000000
[  186.500030][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  186.500041][ T9790] R13: 00007f6ba1016038 R14: 00007f6ba1015fa0 R15: 00007fffe1bbb2a8
[  186.500071][ T9790]  </TASK>
[  186.955641][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'.
[  187.260146][ T9803] xfrm0: entered promiscuous mode
[  187.286326][ T9803] xfrm0: entered allmulticast mode
[  187.413366][ T9783] lo speed is unknown, defaulting to 1000
[  187.574369][ T9816] block nbd4: not configured, cannot reconfigure
[  187.597577][ T9818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'.
[  187.994139][ T9833] netlink: 'syz.4.1024': attribute type 1 has an invalid length.
[  188.166481][ T9833] 8021q: adding VLAN 0 to HW filter on device bond6
[  188.231950][ T9837] bond6: (slave geneve2): making interface the new active one
[  188.243709][ T9837] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  188.496644][ T9845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1028'.
[  188.995215][ T1563] IPVS: starting estimator thread 0...
[  188.999440][ T9864] netlink: 'syz.2.1034': attribute type 16 has an invalid length.
[  189.016706][ T9864] netlink: 'syz.2.1034': attribute type 17 has an invalid length.
[  189.018422][ T9862] lo speed is unknown, defaulting to 1000
[  189.063484][ T9864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.136739][ T9865] IPVS: using max 32 ests per chain, 76800 per kthread
[  189.248553][ T9870] netlink: 'syz.3.1035': attribute type 1 has an invalid length.
[  189.260229][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'.
[  189.594976][ T9885] netlink: 'syz.2.1038': attribute type 1 has an invalid length.
[  189.727168][ T9890] netlink: 'syz.0.1039': attribute type 1 has an invalid length.
[  189.734943][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'.
[  189.814416][ T9885] 8021q: adding VLAN 0 to HW filter on device bond7
[  189.849120][ T9891] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1039'.
[  189.869934][ T9889] bond7: (slave geneve4): making interface the new active one
[  189.885110][ T9889] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  190.090271][ T9895] lo speed is unknown, defaulting to 1000
[  190.661969][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'.
[  190.732927][ T9899] lo speed is unknown, defaulting to 1000
[  190.836082][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'.
[  190.885008][ T9921] bridge3: port 1(veth7) entered blocking state
[  190.893302][ T9921] bridge3: port 1(veth7) entered disabled state
[  190.900259][ T9921] veth7: entered allmulticast mode
[  190.908228][ T9921] veth7: entered promiscuous mode
[  190.929896][ T9911] lo speed is unknown, defaulting to 1000
[  190.985966][ T9921] bridge3: port 2(veth9) entered blocking state
[  191.002361][ T9921] bridge3: port 2(veth9) entered disabled state
[  191.014766][ T9921] veth9: entered allmulticast mode
[  191.037620][ T9921] veth9: entered promiscuous mode
[  191.230354][ T9913] lo speed is unknown, defaulting to 1000
[  192.637471][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1053'.
[  193.174085][ T9943] netlink: 'syz.3.1056': attribute type 8 has an invalid length.
[  193.189992][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'.
[  193.643051][ T9961] netlink: 'syz.3.1060': attribute type 10 has an invalid length.
[  193.647529][ T9947] lo speed is unknown, defaulting to 1000
[  193.669120][ T9961] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1060'.
[  193.702426][ T9961] netlink: 'syz.3.1060': attribute type 1 has an invalid length.
[  193.949956][ T9962] gretap2: entered allmulticast mode
[  194.210271][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[  194.438209][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'.
[  194.670401][ T9981] xfrm0: entered promiscuous mode
[  194.677799][ T9981] xfrm0: entered allmulticast mode
[  194.961899][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  195.105596][ T9995] netlink: 'syz.0.1070': attribute type 1 has an invalid length.
[  195.249741][ T9995] 8021q: adding VLAN 0 to HW filter on device bond4
[  195.285353][ T9999] bond4: (slave geneve4): making interface the new active one
[  195.294098][ T9999] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  195.313425][   T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.335740][   T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.388804][T10005] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001
[  195.407783][   T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.408070][T10005] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1072'.
[  195.425409][   T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.571119][T10012] xt_l2tp: unknown flags: 51
[  195.598185][T10012] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1075'.
[  195.796442][T10023] netlink: 'syz.3.1080': attribute type 10 has an invalid length.
[  195.815762][T10023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1080'.
[  195.859720][T10023] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  195.885520][T10021] openvswitch: netlink: IP tunnel dst address not specified
[  196.061835][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.088717][T10031] netlink: 'syz.3.1082': attribute type 1 has an invalid length.
[  196.106818][T10026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.154298][T10027] bridge0: entered promiscuous mode
[  196.231912][T10031] 8021q: adding VLAN 0 to HW filter on device bond6
[  196.260495][T10035] netlink: 'syz.0.1076': attribute type 83 has an invalid length.
[  196.275670][T10033] bond6: (slave geneve4): making interface the new active one
[  196.320500][T10033] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  196.373748][T10044] xt_limit: Overflow, try lower: 324382443/0
[  196.525034][T10049] lo speed is unknown, defaulting to 1000
[  196.651329][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'.
[  196.656072][T10058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'.
[  196.972723][T10076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1095'.
[  197.158709][T10087] syzkaller1: entered promiscuous mode
[  197.169324][T10087] syzkaller1: entered allmulticast mode
[  197.381772][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'.
[  197.470910][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'.
[  197.584351][T10107] vlan0: entered promiscuous mode
[  197.617324][T10109] lo speed is unknown, defaulting to 1000
[  197.715893][T10116] geneve3: entered promiscuous mode
[  197.800012][T10118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.066289][T10125] netlink: 'syz.0.1110': attribute type 16 has an invalid length.
[  198.096069][T10125] netlink: 'syz.0.1110': attribute type 17 has an invalid length.
[  198.175604][T10125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.519246][T10142] netlink: 'syz.2.1116': attribute type 9 has an invalid length.
[  198.534203][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[  198.887960][T10159] netlink: 'syz.4.1121': attribute type 1 has an invalid length.
[  198.937241][T10155] netlink: 'syz.2.1119': attribute type 1 has an invalid length.
[  199.011244][T10169] netlink: 'syz.1.1122': attribute type 13 has an invalid length.
[  199.043945][T10169] netlink: 'syz.1.1122': attribute type 17 has an invalid length.
[  199.094594][T10159] 8021q: adding VLAN 0 to HW filter on device bond7
[  199.101926][T10170] nbd0: detected capacity change from 0 to 63
[  199.189434][T10167] bond7: (slave geneve4): making interface the new active one
[  199.200688][T10167] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  199.325794][T10178] netlink: 'syz.2.1123': attribute type 23 has an invalid length.
[  199.551439][T10163] bridge0: port 3(syz_tun) entered disabled state
[  199.654923][T10163] tipc: Resetting bearer <eth:syzkaller0>
[  199.684490][ T5836] block nbd0: Receive control failed (result -104)
[  199.774220][T10169] bridge0: port 3(syz_tun) entered blocking state
[  199.780850][T10169] bridge0: port 3(syz_tun) entered forwarding state
[  199.798070][T10169] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.798084][T10189] xt_TPROXY: Can be used only with -p tcp or -p udp
[  199.814149][T10169] 8021q: adding VLAN 0 to HW filter on device team0
[  199.825097][T10169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.929544][T10192] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  199.959055][T10192] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  200.099270][T10204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.175147][T10207] __nla_validate_parse: 4 callbacks suppressed
[  200.175166][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'.
[  200.342017][T10216] netlink: 'syz.1.1134': attribute type 1 has an invalid length.
[  200.425141][T10216] 8021q: adding VLAN 0 to HW filter on device bond6
[  200.443951][T10222] bond6: (slave geneve4): making interface the new active one
[  200.459882][T10222] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  200.469044][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.488824][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.500498][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.524601][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.729540][T10241] netlink: 'syz.3.1143': attribute type 5 has an invalid length.
[  200.750737][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'.
[  200.762232][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'.
[  200.764799][T10241] tipc: Enabled bearer <eth:geneve1>, priority 10
[  200.811423][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1144'.
[  200.824824][T10247] lo speed is unknown, defaulting to 1000
[  200.848132][T10247] lo speed is unknown, defaulting to 1000
[  200.874972][T10247] lo speed is unknown, defaulting to 1000
[  200.892424][T10251] smc: removing ib device sqz0
[  200.919378][T10247] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  200.962854][T10247] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  200.996293][T10247] lo speed is unknown, defaulting to 1000
[  201.006148][T10247] lo speed is unknown, defaulting to 1000
[  201.007706][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'.
[  201.014853][T10247] lo speed is unknown, defaulting to 1000
[  201.028834][T10247] lo speed is unknown, defaulting to 1000
[  201.036509][T10247] lo speed is unknown, defaulting to 1000
[  201.044173][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'.
[  201.182055][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  201.206915][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  201.215914][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'.
[  201.368731][T10271] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1153'.
[  201.851598][T10287] netlink: 'syz.2.1159': attribute type 16 has an invalid length.
[  201.864061][T10287] netlink: 'syz.2.1159': attribute type 17 has an invalid length.
[  201.902066][T10287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.278779][T10299] bridge4: entered promiscuous mode
[  202.284580][T10299] bridge4: entered allmulticast mode
[  202.759422][T10313] xt_l2tp: v2 doesn't support IP mode
[  203.083011][  T492] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.139618][  T492] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.155652][  T492] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.206257][T10343] bridge0: entered promiscuous mode
[  203.221543][T10343] bridge0: entered allmulticast mode
[  203.292723][T10342] bridge4: entered promiscuous mode
[  203.301999][T10342] bridge4: port 1(macvtap1) entered blocking state
[  203.309020][T10342] bridge4: port 1(macvtap1) entered disabled state
[  203.315978][T10342] macvtap1: entered allmulticast mode
[  203.321944][T10342] bridge4: entered allmulticast mode
[  203.330279][T10342] macvtap1: left allmulticast mode
[  203.335511][T10342] bridge4: left allmulticast mode
[  203.345965][T10342] bridge4: left promiscuous mode
[  203.388153][  T492] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.488731][T10358] gretap0: entered promiscuous mode
[  204.052990][T10384] validate_nla: 6 callbacks suppressed
[  204.053008][T10384] netlink: 'syz.4.1188': attribute type 1 has an invalid length.
[  204.283822][T10388] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  204.294996][T10388] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  204.325003][T10388] bond8: (slave ip6gre1): making interface the new active one
[  204.334433][T10388] bond8: (slave ip6gre1): Enslaving as an active interface with an up link
[  204.345120][T10355] lo speed is unknown, defaulting to 1000
[  204.581742][T10399] netlink: 'syz.2.1191': attribute type 22 has an invalid length.
[  204.702011][T10402] bridge0: entered promiscuous mode
[  204.717707][T10402] bridge0: entered allmulticast mode
[  205.078752][T10421] netlink: 'syz.3.1196': attribute type 13 has an invalid length.
[  205.113337][T10421] netlink: 'syz.3.1196': attribute type 17 has an invalid length.
[  205.446076][T10421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.472583][T10360] lo speed is unknown, defaulting to 1000
[  205.785763][T10396] lo speed is unknown, defaulting to 1000
[  206.152710][T10437] __nla_validate_parse: 24 callbacks suppressed
[  206.152728][T10437] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1198'.
[  206.772866][T10459] batman_adv: batadv0: Adding interface: gretap1
[  206.794287][T10459] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.827278][T10459] batman_adv: batadv0: Interface activated: gretap1
[  206.844384][T10458] macvlan0: entered promiscuous mode
[  206.850359][T10458] netlink: 'syz.2.1204': attribute type 2 has an invalid length.
[  207.031394][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'.
[  207.202564][T10473] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1207'.
[  207.462235][T10489] syzkaller1: entered promiscuous mode
[  207.475836][T10489] syzkaller1: entered allmulticast mode
[  207.488996][T10465] lec:lec_atm_close: lec0: Shut down!
[  207.528968][T10491] SET target dimension over the limit!
[  207.888634][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'.
[  207.914924][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'.
[  208.110267][T10495] lo speed is unknown, defaulting to 1000
[  208.532106][T10535] tipc: Disabling bearer <udp:syz2>
[  208.602691][T10541] netlink: 'syz.2.1220': attribute type 39 has an invalid length.
[  208.670335][T10499] lo speed is unknown, defaulting to 1000
[  208.983552][  T796] lec:lec_start_xmit: lec0:No lecd attached
[  209.265853][T10574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  209.312510][T10574] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1231'.
[  209.479920][T10579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'.
[  209.513648][T10579] tipc: Bearer <eth:geneve1>: already 2 bearers with priority 10
[  209.543510][T10579] tipc: Bearer <eth:geneve1>: trying with adjusted priority
[  209.571947][T10579] tipc: Enabled bearer <eth:geneve1>, priority 9
[  209.637805][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1235'.
[  209.658668][T10590] Cannot find del_set index 2 as target
[  209.923521][T10606] netlink: 'syz.4.1240': attribute type 5 has an invalid length.
[  209.964367][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1241'.
[  209.965435][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'.
[  210.045516][T10606] tipc: Enabling of bearer <eth:geneve1> rejected, already enabled
[  210.249872][T10625] vlan2: entered promiscuous mode
[  210.255062][T10625] hsr_slave_1: entered promiscuous mode
[  210.262419][T10625] vlan2: entered allmulticast mode
[  210.268224][T10625] hsr_slave_1: entered allmulticast mode
[  210.662242][T10644] bond7: option lp_interval: invalid value (0)
[  210.670347][T10644] bond7: option lp_interval: allowed values 1 - 2147483647
[  210.691115][T10644] bond7 (unregistering): Released all slaves
[  210.702458][T10648] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  210.814278][T10648] 8021q: adding VLAN 0 to HW filter on device bond5
[  210.863552][T10662] syzkaller0: left promiscuous mode
[  210.868961][T10662] syzkaller0: left allmulticast mode
[  211.158497][T10675] __nla_validate_parse: 2 callbacks suppressed
[  211.158518][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'.
[  212.070180][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'.
[  212.088581][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'.
[  212.122273][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'.
[  212.418683][T10688] dummy0: left allmulticast mode
[  212.566117][T10707] bridge5: port 1(geneve5) entered blocking state
[  212.573237][T10707] bridge5: port 1(geneve5) entered disabled state
[  212.580545][T10707] geneve5: entered allmulticast mode
[  212.588479][T10707] geneve5: entered promiscuous mode
[  212.605818][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.625802][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.700127][T10723] netlink: 'syz.2.1267': attribute type 2 has an invalid length.
[  212.707995][T10723] netlink: 'syz.2.1267': attribute type 1 has an invalid length.
[  212.715728][T10723] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1267'.
[  212.733709][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.760107][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.769615][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.778314][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.788700][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.798854][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.983553][T10736] syzkaller0: create flow: hash 2974553163 index 1
[  213.012275][   T13] syzkaller0: tun_net_xmit 76
[  213.017892][   T13] syzkaller0: tun_net_xmit 48
[  213.036958][ T1563] syzkaller0: tun_net_xmit 76
[  213.130263][T10705] lo speed is unknown, defaulting to 1000
[  213.138662][T10730] syzkaller0: delete flow: hash 2974553163 index 1
[  213.399916][T10752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1277'.
[  213.409631][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  214.046641][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms
[  214.055032][    C0] lec:lec_tx_timeout: lec0
[  214.060180][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  214.474537][T10713] lo speed is unknown, defaulting to 1000
[  214.652685][T10769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1278'.
[  214.679273][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  214.687455][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  214.694692][    C0] bridge0: port 3(macsec1) entered learning state
[  215.126330][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  215.154695][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'.
[  215.165775][T10792] netlink: 'syz.2.1285': attribute type 18 has an invalid length.
[  215.401077][T10802] netlink: 'syz.4.1289': attribute type 4 has an invalid length.
[  215.410094][T10803] netlink: 'syz.2.1290': attribute type 16 has an invalid length.
[  215.418900][T10803] netlink: 'syz.2.1290': attribute type 17 has an invalid length.
[  215.470130][T10803] gretap0: left promiscuous mode
[  215.527723][T10803] 8021q: adding VLAN 0 to HW filter on device team0
[  215.535589][T10803] dummy0: left promiscuous mode
[  215.544597][T10803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.722235][T10817] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.727960][T10808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.897894][T10808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.072112][T10808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.124970][T10836] netlink: 'syz.0.1299': attribute type 1 has an invalid length.
[  216.207957][T10836] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.305919][T10808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.550615][   T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.601602][  T152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.652859][   T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.710062][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.040045][T10880] netlink: 'syz.2.1311': attribute type 21 has an invalid length.
[  217.128509][T10884] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  217.338810][T10898] netlink: 'syz.0.1316': attribute type 13 has an invalid length.
[  217.346956][T10898] netlink: 'syz.0.1316': attribute type 17 has an invalid length.
[  217.359685][T10901] netlink: 'syz.4.1317': attribute type 1 has an invalid length.
[  217.368088][T10900] __nla_validate_parse: 1 callbacks suppressed
[  217.368108][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'.
[  217.623562][T10895] batman_adv: batadv0: Interface deactivated: gretap1
[  217.692321][T10916] netlink: 'syz.1.1320': attribute type 11 has an invalid length.
[  218.125867][T10898] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.138771][T10898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.269472][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.283813][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.321726][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.351363][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.389372][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.433777][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.461294][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.487171][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.729532][T10961] netlink: 'syz.0.1329': attribute type 13 has an invalid length.
[  218.970853][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'.
[  219.055430][T10966] bridge0: port 3(syz_tun) entered disabled state
[  219.093525][T10966] xfrm0: left promiscuous mode
[  219.098585][T10966] xfrm0: left allmulticast mode
[  219.119794][T10966] tipc: Resetting bearer <eth:syzkaller0>
[  219.131479][T10966] vlan0: left promiscuous mode
[  219.136490][T10966] bridge0: left promiscuous mode
[  219.203180][ T1563] lo speed is unknown, defaulting to 1000
[  219.210269][   T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.215317][ T1563] syz2: Port: 1 Link DOWN
[  219.238201][   T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.283322][   T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.307123][   T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.453777][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'.
[  219.667759][T11000] x_tables: duplicate underflow at hook 1
[  220.050624][T11018] macsec0: entered promiscuous mode
[  220.193331][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'.
[  220.203139][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'.
[  220.221411][T11020] netlink: 'syz.2.1349': attribute type 13 has an invalid length.
[  220.229892][T11020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1349'.
[  220.735418][T11042] tipc: Resetting bearer <eth:geneve1>
[  220.806405][T11047] debugfs: '1ùà^!' already exists in 'ieee80211'
[  221.131799][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'.
[  221.443983][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1366'.
[  221.530364][T11099] netlink: 'syz.3.1366': attribute type 4 has an invalid length.
[  221.558314][T11099] netlink: 'syz.3.1366': attribute type 4 has an invalid length.
[  221.809710][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'.
[  222.063825][T11137] netlink: 'syz.4.1376': attribute type 2 has an invalid length.
[  222.071943][T11137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1376'.
[  222.086360][T11143] vlan2: entered promiscuous mode
[  222.091678][T11143] geneve1: entered promiscuous mode
[  222.106452][T11143] vlan2: entered allmulticast mode
[  222.123763][T11143] geneve1: entered allmulticast mode
[  222.451815][T11165] x_tables: ip_tables: osf match: only valid for protocol 6
[  222.737414][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'.
[  222.812117][T11175] bond7: entered promiscuous mode
[  222.817823][T11175] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.865603][T11181] 8021q: adding VLAN 0 to HW filter on device bond7
[  222.873937][T11181] bond7: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  222.899890][T11181] bond7: (slave ip6tnl2): Error -95 calling set_mac_address
[  222.947090][T11155] lo speed is unknown, defaulting to 1000
[  223.278211][T11195] netlink: 'syz.4.1385': attribute type 13 has an invalid length.
[  223.497578][   T29] audit: type=1800 audit(1774122039.401:6): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1386" name="cgroup.controllers" dev="tmpfs" ino=1515 res=0 errno=0
[  224.182406][T11206] lo: Caught tx_queue_len zero misconfig
[  224.290492][T11216] syz_tun: left allmulticast mode
[  224.555709][T11223] sit0: Caught tx_queue_len zero misconfig
[  224.632392][T11235] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1399'.
[  224.797040][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'.
[  224.807513][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'.
[  224.884233][T11244] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  224.916581][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms
[  224.924697][    C0] lec:lec_tx_timeout: lec0
[  224.936951][T11228] lo speed is unknown, defaulting to 1000
[  225.007856][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'.
[  225.152646][T11252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1403'.
[  225.235558][T11256] netlink: 'syz.0.1405': attribute type 10 has an invalid length.
[  225.258116][T11256] bond0: (slave wlan1): Opening slave failed
[  225.429587][T11265] tunl0: Caught tx_queue_len zero misconfig
[  225.454883][T11243] lo speed is unknown, defaulting to 1000
[  225.548383][T11266] syzkaller0: entered promiscuous mode
[  225.560786][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  225.568346][T11266] syzkaller0: entered allmulticast mode
[  225.916504][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1410'.
[  225.956253][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'.
[  225.981855][T11275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1410'.
[  226.155065][T11258] lo speed is unknown, defaulting to 1000
[  226.205837][T11252] lo speed is unknown, defaulting to 1000
[  226.357229][T11297] netlink: 'syz.1.1416': attribute type 8 has an invalid length.
[  226.365291][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'.
[  226.444634][T11297] bond0: entered promiscuous mode
[  226.452488][T11297] bond_slave_0: entered promiscuous mode
[  226.458868][T11297] bond_slave_1: entered promiscuous mode
[  226.467790][T11297] gretap0: entered promiscuous mode
[  226.474901][T11297] hsr1: entered promiscuous mode
[  226.506510][T11303] netlink: 'syz.4.1418': attribute type 1 has an invalid length.
[  226.541274][T11303] 8021q: adding VLAN 0 to HW filter on device bond10
[  226.575100][T11303] bond10: (slave geneve5): making interface the new active one
[  226.584096][T11303] bond10: (slave geneve5): Enslaving as an active interface with an up link
[  227.943356][T11360] team_slave_0: entered promiscuous mode
[  227.949442][T11360] team_slave_1: entered promiscuous mode
[  227.963713][T11360] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  227.981442][T11360] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  228.013990][T11362] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  228.033028][T11364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.133750][T11367] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  228.351259][T11376] netlink: 'syz.1.1439': attribute type 1 has an invalid length.
[  228.369959][T11366] lo speed is unknown, defaulting to 1000
[  228.396752][T11376] netlink: 'syz.1.1439': attribute type 2 has an invalid length.
[  228.463482][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.983632][T11405] ip6tnl0: Caught tx_queue_len zero misconfig
[  229.082717][T11402] __nla_validate_parse: 4 callbacks suppressed
[  229.082737][T11402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1445'.
[  229.119594][T11402] netlink: 242 bytes leftover after parsing attributes in process `syz.2.1445'.
[  229.410317][T11377] lo speed is unknown, defaulting to 1000
[  229.410330][ T5158] block nbd0: Possible stuck request ffff888055208000: control (read@0,1024B). Runtime 30 seconds
[  229.430262][ T5158] block nbd0: Possible stuck request ffff888055208200: control (read@1024,1024B). Runtime 30 seconds
[  229.431247][T11420] netlink: 'syz.3.1452': attribute type 6 has an invalid length.
[  229.446448][ T5158] block nbd0: Possible stuck request ffff888055208400: control (read@2048,1024B). Runtime 30 seconds
[  229.461421][ T5158] block nbd0: Possible stuck request ffff888055208600: control (read@3072,1024B). Runtime 30 seconds
[  229.488349][T11376] lo speed is unknown, defaulting to 1000
[  229.498275][T11420] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1452'.
[  230.123460][T11447] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1457'.
[  230.230011][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'.
[  230.479592][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'.
[  230.534736][T11458] bond11: invalid ARP target 0.0.0.0 specified for addition
[  230.542284][T11458] bond11: option arp_ip_target: invalid value (0)
[  230.552766][T11458] bond11 (unregistering): Released all slaves
[  230.802222][T11474] netlink: 'syz.0.1466': attribute type 9 has an invalid length.
[  230.836689][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms
[  230.844734][    C0] lec:lec_tx_timeout: lec0
[  230.856663][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  230.856716][T11474] netlink: 'syz.0.1466': attribute type 11 has an invalid length.
[  230.906965][T11474] netlink: 'syz.0.1466': attribute type 12 has an invalid length.
[  230.914827][T11474] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1466'.
[  230.964965][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'.
[  231.001098][T11488] sctp: [Deprecated]: syz.4.1468 (pid 11488) Use of struct sctp_assoc_value in delayed_ack socket option.
[  231.001098][T11488] Use struct sctp_sack_info instead
[  231.067697][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'.
[  231.107490][T11492] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  231.188325][T11497] Bluetooth: MGMT ver 1.23
[  231.281208][T11497] bridge0: port 3(macsec1) entered disabled state
[  231.287871][T11497] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.295265][T11497] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.453243][T11497] tipc: Resetting bearer <eth:geneve1>
[  231.518373][T11497] dummy0: left allmulticast mode
[  231.668726][   T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.677945][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.686444][   T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.724964][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.809166][   T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.826948][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.841023][   T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.881264][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.323545][T11543] lo speed is unknown, defaulting to 1000
[  232.582232][T11534] lo speed is unknown, defaulting to 1000
[  233.031075][T11586] netlink: 'syz.1.1496': attribute type 16 has an invalid length.
[  233.081152][T11586] netlink: 'syz.1.1496': attribute type 17 has an invalid length.
[  233.094356][T11586] netlink: 'syz.1.1496': attribute type 27 has an invalid length.
[  233.514694][T11579] lo speed is unknown, defaulting to 1000
[  233.603258][T11602] netlink: 'syz.0.1500': attribute type 9 has an invalid length.
[  233.621691][T11602] netlink: 'syz.0.1500': attribute type 11 has an invalid length.
[  233.637711][T11602] netlink: 'syz.0.1500': attribute type 12 has an invalid length.
[  233.645620][T11602] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1500'.
[  233.803121][T11607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.822387][T11607] syzkaller0: entered promiscuous mode
[  233.838756][T11607] syzkaller0: entered allmulticast mode
[  233.863060][T11606] tipc: Resetting bearer <eth:syzkaller0>
[  233.893503][T11606] tipc: Disabling bearer <eth:syzkaller0>
[  233.929599][T11594] lo speed is unknown, defaulting to 1000
[  234.053499][T11616] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  234.264232][T11623] netlink: 'syz.3.1507': attribute type 16 has an invalid length.
[  234.501625][T11628] __nla_validate_parse: 1 callbacks suppressed
[  234.501644][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1508'.
[  234.563630][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'.
[  234.585222][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'.
[  234.612012][T11628] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1508'.
[  234.646873][T11628] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1508'.
[  235.339079][T11639] lo speed is unknown, defaulting to 1000
[  235.379128][T11668] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1516'.
[  235.863361][T11640] lo speed is unknown, defaulting to 1000
[  235.876575][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  235.884757][    C0] lec:lec_tx_timeout: lec0
[  236.106228][T11702] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1530'.
[  236.122425][T11699] xt_cgroup: xt_cgroup: no path or classid specified
[  236.129883][T11702] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1530'.
[  236.366765][T11712] erspan0: entered promiscuous mode
[  236.434132][T11712] bridge0: port 3(syz_tun) entered blocking state
[  236.440760][T11712] bridge0: port 3(syz_tun) entered forwarding state
[  236.476094][T11712] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.522934][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'.
[  236.524306][T11712] 8021q: adding VLAN 0 to HW filter on device team0
[  236.562789][T11722] validate_nla: 7 callbacks suppressed
[  236.562804][T11722] netlink: 'syz.0.1536': attribute type 1 has an invalid length.
[  236.577894][T11712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.577932][T11722] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1536'.
[  236.622064][ T6065] lo speed is unknown, defaulting to 1000
[  236.637020][ T6065] syz2: Port: 1 Link ACTIVE
[  236.655352][T11719] bond8: Invalid ad_actor_system MAC address.
[  236.662078][T11719] bond8: option ad_actor_system: invalid value (7)
[  236.682271][T11719] bond8 (unregistering): Released all slaves
[  236.780189][T11728] IPVS: Scheduler module ip_vs_
 not found
[  237.014920][T11752] ip6tnl3: entered allmulticast mode
[  237.257283][T10633] lec:lec_start_xmit: lec0:No lecd attached
[  237.407448][T11748] lo speed is unknown, defaulting to 1000
[  237.883411][T11794] tipc: Enabling of bearer <eth:geneve1> rejected, already enabled
[  238.328694][T11783] lo speed is unknown, defaulting to 1000
[  238.962416][T11844] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003
[  239.460729][T11848] lo speed is unknown, defaulting to 1000
[  239.764774][T11846] lo speed is unknown, defaulting to 1000
[  240.083759][T11876] __nla_validate_parse: 6 callbacks suppressed
[  240.083776][T11876] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1578'.
[  240.138801][T11873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1578'.
[  240.171773][T11875] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.275117][T11879] netlink: 64126 bytes leftover after parsing attributes in process `syz.0.1580'.
[  240.586963][T11875] syzkaller0: entered promiscuous mode
[  240.592609][T11875] syzkaller0: entered allmulticast mode
[  240.751917][T11884] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1581'.
[  242.509080][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1593'.
[  242.632588][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'.
[  242.697295][T11921] lo speed is unknown, defaulting to 1000
[  242.709374][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'.
[  242.732173][T11946] 8021q: VLANs not supported on ip6tnl0
[  242.853824][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms
[  242.861931][    C0] lec:lec_tx_timeout: lec0
[  242.866645][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  242.999633][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'.
[  243.377282][T11973] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  243.417777][T11973] syzkaller0: entered promiscuous mode
[  243.436798][T11973] syzkaller0: entered allmulticast mode
[  243.503578][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'.
[  243.527514][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'.
[  243.890735][T12000] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.929457][T12000] dummy0: left promiscuous mode
[  244.006927][T12000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.035799][T12014] openvswitch: netlink: Flow actions attr not present in new flow.
[  244.096251][T12006] bridge0: entered allmulticast mode
[  244.372880][T12021] rdma_op ffff8880270a21f0 conn xmit_rdma 0000000000000000
[  244.474164][T12029] netlink: 'syz.3.1615': attribute type 16 has an invalid length.
[  244.495389][T11987] lo speed is unknown, defaulting to 1000
[  244.510119][T12029] netlink: 'syz.3.1615': attribute type 17 has an invalid length.
[  244.521727][T12034] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  244.621497][T12029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.822289][T12058] netlink: 'syz.3.1626': attribute type 1 has an invalid length.
[  244.880769][T12058] bond7: entered promiscuous mode
[  244.886422][T12058] 8021q: adding VLAN 0 to HW filter on device bond7
[  244.953614][T12056] syzkaller1: entered promiscuous mode
[  244.973612][T12056] syzkaller1: entered allmulticast mode
[  244.990109][T12068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  245.008118][T12065] netlink: 'syz.4.1625': attribute type 13 has an invalid length.
[  245.544330][T12074] netlink: 'syz.4.1631': attribute type 9 has an invalid length.
[  245.552745][T12074] netlink: 'syz.4.1631': attribute type 11 has an invalid length.
[  245.561600][T12074] netlink: 'syz.4.1631': attribute type 12 has an invalid length.
[  245.570676][T12074] __nla_validate_parse: 9 callbacks suppressed
[  245.570693][T12074] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1631'.
[  245.606449][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'.
[  245.840887][T12070] lo speed is unknown, defaulting to 1000
[  245.974179][T12069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.210306][T12101] netlink: 'syz.2.1640': attribute type 13 has an invalid length.
[  246.282802][T12101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.675079][T12122] pim6reg: entered allmulticast mode
[  246.702481][T12122] pim6reg: left allmulticast mode
[  246.754267][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'.
[  247.489272][T12162] ipt_ECN: cannot use operation on non-tcp rule
[  247.573726][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1659'.
[  247.876576][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  247.884624][    C0] lec:lec_tx_timeout: lec0
[  248.178680][T12204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1669'.
[  248.202529][T12204] netlink: 'syz.2.1669': attribute type 5 has an invalid length.
[  248.215266][T12208] openvswitch: netlink: ERSPAN option length err (len 4112, max 255).
[  248.277462][T12205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.332830][T12183] lo speed is unknown, defaulting to 1000
[  248.391291][T12214] netlink: 'syz.2.1671': attribute type 1 has an invalid length.
[  248.448767][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1671'.
[  248.474731][T12214] bond8: (slave bridge0): making interface the new active one
[  248.489717][T12214] bond8: (slave bridge0): Enslaving as an active interface with an up link
[  248.544771][T12214] bond8: (slave bridge6): Enslaving as an active interface with a down link
[  248.562470][T12214] macvlan4: entered promiscuous mode
[  248.568273][T12214] macvlan4: entered allmulticast mode
[  248.574270][T12214] bond8: entered promiscuous mode
[  248.579491][T12214] bridge0: entered promiscuous mode
[  248.585521][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'.
[  248.585600][T12214] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  248.602969][T12214] bond8: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  248.619100][T12214] bond8: left promiscuous mode
[  248.623874][T12214] bridge0: left promiscuous mode
[  248.903847][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1678'.
[  249.334753][T12259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.357880][T12259] syzkaller0: entered promiscuous mode
[  249.389354][T12259] syzkaller0: entered allmulticast mode
[  249.409767][T12259] tipc: Resetting bearer <eth:syzkaller0>
[  249.425107][T12258] tipc: Resetting bearer <eth:syzkaller0>
[  249.467224][T12258] tipc: Disabling bearer <eth:syzkaller0>
[  249.485847][T12262] validate_nla: 1 callbacks suppressed
[  249.485865][T12262] netlink: 'syz.3.1684': attribute type 3 has an invalid length.
[  249.524143][T12262] siw: device registration error -23
[  249.871080][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1693'.
[  250.152203][T12301] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  250.159587][T12301] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  250.756713][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  250.793742][T12343] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1704'.
[  250.881058][T12338] lo: Caught tx_queue_len zero misconfig
[  251.352466][T12346] lo speed is unknown, defaulting to 1000
[  251.403356][T12361] netlink: 'syz.2.1712': attribute type 1 has an invalid length.
[  251.462614][T12361] bond9: (slave veth5): Enslaving as an active interface with a down link
[  251.494368][T12361] bond9: (slave veth7): Enslaving as an active interface with a down link
[  251.517078][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1712'.
[  251.537077][T12361] 8021q: adding VLAN 0 to HW filter on device bond9
[  251.656026][T12369] netlink: 'syz.0.1715': attribute type 16 has an invalid length.
[  251.679270][T12369] netlink: 'syz.0.1715': attribute type 17 has an invalid length.
[  251.802829][T12369] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.814694][T12369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.858788][T12376] netlink: 'syz.1.1717': attribute type 10 has an invalid length.
[  251.908894][T12376] bridge0: port 3(syz_tun) entered disabled state
[  252.062767][T12389] veth1: entered allmulticast mode
[  252.242304][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'.
[  252.374642][T12408] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1728'.
[  252.420934][T12411] FAULT_INJECTION: forcing a failure.
[  252.420934][T12411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.468976][T12413] ipt_rpfilter: unknown options
[  252.490098][T12411] CPU: 1 UID: 0 PID: 12411 Comm: syz.1.1727 Not tainted syzkaller #0 PREEMPT(full) 
[  252.490125][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  252.490152][T12411] Call Trace:
[  252.490160][T12411]  <TASK>
[  252.490167][T12411]  dump_stack_lvl+0xe8/0x150
[  252.490200][T12411]  should_fail_ex+0x412/0x560
[  252.490231][T12411]  _copy_from_user+0x2d/0xb0
[  252.490254][T12411]  __sys_bpf+0x229/0x950
[  252.490284][T12411]  ? __pfx___sys_bpf+0x10/0x10
[  252.490327][T12411]  ? ksys_write+0x242/0x270
[  252.490350][T12411]  ? __pfx_ksys_write+0x10/0x10
[  252.490378][T12411]  __x64_sys_bpf+0x7c/0x90
[  252.490405][T12411]  do_syscall_64+0x14d/0xf80
[  252.490427][T12411]  ? trace_irq_disable+0x3b/0x150
[  252.490454][T12411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.490473][T12411]  ? clear_bhb_loop+0x40/0x90
[  252.490496][T12411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.490514][T12411] RIP: 0033:0x7f3f6599c799
[  252.490533][T12411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.490550][T12411] RSP: 002b:00007f3f668c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  252.490571][T12411] RAX: ffffffffffffffda RBX: 00007f3f65c15fa0 RCX: 00007f3f6599c799
[  252.490584][T12411] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000001
[  252.490596][T12411] RBP: 00007f3f668c5090 R08: 0000000000000000 R09: 0000000000000000
[  252.490608][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.490619][T12411] R13: 00007f3f65c16038 R14: 00007f3f65c15fa0 R15: 00007ffc036d2d48
[  252.490648][T12411]  </TASK>
[  252.521356][T12415] pimreg: entered allmulticast mode
[  252.714154][T12419] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  252.729476][T12419] netlink: 'syz.2.1730': attribute type 5 has an invalid length.
[  252.737401][T12419] netlink: 'syz.2.1730': attribute type 17 has an invalid length.
[  252.804512][T12419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.923912][T12429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'.
[  252.937255][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'.
[  253.040100][T12436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.068470][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'.
[  253.128241][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1735'.
[  253.130018][T12441] bond10: entered promiscuous mode
[  253.157278][T12441] 8021q: adding VLAN 0 to HW filter on device bond10
[  253.177962][T12447] 8021q: adding VLAN 0 to HW filter on device bond10
[  253.195643][T12447] bond10: (slave ip6tnl2): The slave device specified does not support setting the MAC address
[  253.210668][T12447] bond10: (slave ip6tnl2): Error -95 calling set_mac_address
[  253.242981][T12390] lo speed is unknown, defaulting to 1000
[  253.568445][T12468] FAULT_INJECTION: forcing a failure.
[  253.568445][T12468] name failslab, interval 1, probability 0, space 0, times 0
[  253.592716][T12468] CPU: 0 UID: 0 PID: 12468 Comm: syz.4.1741 Not tainted syzkaller #0 PREEMPT(full) 
[  253.592744][T12468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  253.592756][T12468] Call Trace:
[  253.592764][T12468]  <TASK>
[  253.592772][T12468]  dump_stack_lvl+0xe8/0x150
[  253.592804][T12468]  should_fail_ex+0x412/0x560
[  253.592836][T12468]  should_failslab+0xa8/0x100
[  253.592863][T12468]  __kvmalloc_node_noprof+0x178/0x8a0
[  253.592885][T12468]  ? __fget_files+0x2a/0x420
[  253.592911][T12468]  ? vmemdup_user+0x2b/0xd0
[  253.592943][T12468]  vmemdup_user+0x2b/0xd0
[  253.592967][T12468]  map_lookup_elem+0x3c6/0x9b0
[  253.593003][T12468]  __sys_bpf+0x513/0x950
[  253.593033][T12468]  ? __pfx___sys_bpf+0x10/0x10
[  253.593084][T12468]  ? ksys_write+0x242/0x270
[  253.593107][T12468]  ? __pfx_ksys_write+0x10/0x10
[  253.593135][T12468]  __x64_sys_bpf+0x7c/0x90
[  253.593161][T12468]  do_syscall_64+0x14d/0xf80
[  253.593183][T12468]  ? trace_irq_disable+0x3b/0x150
[  253.593209][T12468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.593229][T12468]  ? clear_bhb_loop+0x40/0x90
[  253.593252][T12468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.593271][T12468] RIP: 0033:0x7f6ba0d9c799
[  253.593289][T12468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.593305][T12468] RSP: 002b:00007f6ba1ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  253.593326][T12468] RAX: ffffffffffffffda RBX: 00007f6ba1015fa0 RCX: 00007f6ba0d9c799
[  253.593340][T12468] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000001
[  253.593351][T12468] RBP: 00007f6ba1ba2090 R08: 0000000000000000 R09: 0000000000000000
[  253.593362][T12468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.593374][T12468] R13: 00007f6ba1016038 R14: 00007f6ba1015fa0 R15: 00007fffe1bbb2a8
[  253.593404][T12468]  </TASK>
[  253.672011][T12471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1740'.
[  253.857415][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'.
[  254.370816][T12505] netlink: 'syz.0.1750': attribute type 15 has an invalid length.
[  254.580164][T12514] FAULT_INJECTION: forcing a failure.
[  254.580164][T12514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.616949][T12514] CPU: 0 UID: 0 PID: 12514 Comm: syz.3.1753 Not tainted syzkaller #0 PREEMPT(full) 
[  254.616972][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  254.616981][T12514] Call Trace:
[  254.616987][T12514]  <TASK>
[  254.616994][T12514]  dump_stack_lvl+0xe8/0x150
[  254.617020][T12514]  should_fail_ex+0x412/0x560
[  254.617044][T12514]  _copy_from_user+0x2d/0xb0
[  254.617061][T12514]  vmemdup_user+0x5e/0xd0
[  254.617112][T12514]  map_lookup_elem+0x3c6/0x9b0
[  254.617140][T12514]  __sys_bpf+0x513/0x950
[  254.617162][T12514]  ? __pfx___sys_bpf+0x10/0x10
[  254.617194][T12514]  ? ksys_write+0x242/0x270
[  254.617213][T12514]  ? __pfx_ksys_write+0x10/0x10
[  254.617234][T12514]  __x64_sys_bpf+0x7c/0x90
[  254.617253][T12514]  do_syscall_64+0x14d/0xf80
[  254.617269][T12514]  ? trace_irq_disable+0x3b/0x150
[  254.617289][T12514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.617303][T12514]  ? clear_bhb_loop+0x40/0x90
[  254.617322][T12514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.617336][T12514] RIP: 0033:0x7f0f4df9c799
[  254.617351][T12514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.617363][T12514] RSP: 002b:00007f0f4edb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  254.617378][T12514] RAX: ffffffffffffffda RBX: 00007f0f4e215fa0 RCX: 00007f0f4df9c799
[  254.617388][T12514] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000001
[  254.617397][T12514] RBP: 00007f0f4edb1090 R08: 0000000000000000 R09: 0000000000000000
[  254.617406][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.617415][T12514] R13: 00007f0f4e216038 R14: 00007f0f4e215fa0 R15: 00007ffc34edc628
[  254.617439][T12514]  </TASK>
[  254.823911][T12521] netlink: 'syz.2.1756': attribute type 9 has an invalid length.
[  254.831730][T12521] netlink: 'syz.2.1756': attribute type 6 has an invalid length.
[  254.839694][T12521] netlink: 'syz.2.1756': attribute type 7 has an invalid length.
[  254.847474][T12521] netlink: 'syz.2.1756': attribute type 8 has an invalid length.
[  255.465374][T12557] tipc: Resetting bearer <eth:syzkaller0>
[  255.476467][ T6309] lo speed is unknown, defaulting to 1000
[  255.649029][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[  255.655309][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  256.060181][T12580] ipt_ECN: cannot use operation on non-tcp rule
[  256.069182][T12580] netlink: 'syz.0.1770': attribute type 16 has an invalid length.
[  256.077177][T12580] netlink: 'syz.0.1770': attribute type 17 has an invalid length.
[  256.215108][T12580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.652878][T12603] geneve6: entered promiscuous mode
[  256.677833][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.687092][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.695307][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.705522][T12608] __nla_validate_parse: 8 callbacks suppressed
[  256.705543][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'.
[  256.722108][T12611] netlink: 'syz.2.1782': attribute type 64 has an invalid length.
[  256.727646][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.763224][T12613] geneve6: entered promiscuous mode
[  256.864288][T12624] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1786'.
[  256.877950][T12621] netlink: 'syz.1.1785': attribute type 16 has an invalid length.
[  256.896082][T12621] netlink: 'syz.1.1785': attribute type 17 has an invalid length.
[  256.921327][T12627] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.1784'.
[  256.921848][T12621] bridge0: port 3(syz_tun) entered blocking state
[  256.937329][T12621] bridge0: port 3(syz_tun) entered forwarding state
[  256.957787][T12621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.105758][T12630] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  257.114372][T12630] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  257.124129][T12630] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  257.348412][T12642] veth1: left allmulticast mode
[  257.359636][T12642] xfrm0: left promiscuous mode
[  257.364451][T12642] xfrm0: left allmulticast mode
[  257.376777][T12647] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  257.388262][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'.
[  257.537322][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'.
[  257.943710][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1806'.
[  258.030154][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'.
[  258.073938][T12696] netlink: 'syz.2.1808': attribute type 9 has an invalid length.
[  258.088202][T12696] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1808'.
[  258.116776][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'.
[  258.351012][T12705] lo: Caught tx_queue_len zero misconfig
[  258.839663][T12721] FAULT_INJECTION: forcing a failure.
[  258.839663][T12721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.853071][T12721] CPU: 0 UID: 0 PID: 12721 Comm: syz.0.1816 Not tainted syzkaller #0 PREEMPT(full) 
[  258.853098][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  258.853109][T12721] Call Trace:
[  258.853117][T12721]  <TASK>
[  258.853125][T12721]  dump_stack_lvl+0xe8/0x150
[  258.853159][T12721]  should_fail_ex+0x412/0x560
[  258.853191][T12721]  _copy_from_user+0x2d/0xb0
[  258.853212][T12721]  ___sys_sendmsg+0x1c6/0x360
[  258.853241][T12721]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.853270][T12721]  ? kstrtouint+0x6e/0xe0
[  258.853320][T12721]  ? __fget_files+0x2a/0x420
[  258.853347][T12721]  ? __fget_files+0x3a0/0x420
[  258.853383][T12721]  __sys_sendmmsg+0x27c/0x4e0
[  258.853412][T12721]  ? __pfx___sys_sendmmsg+0x10/0x10
[  258.853434][T12721]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  258.853481][T12721]  ? ksys_write+0x242/0x270
[  258.853505][T12721]  ? __pfx_ksys_write+0x10/0x10
[  258.853533][T12721]  __x64_sys_sendmmsg+0xa0/0xc0
[  258.853558][T12721]  do_syscall_64+0x14d/0xf80
[  258.853579][T12721]  ? trace_irq_disable+0x3b/0x150
[  258.853611][T12721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.853630][T12721]  ? clear_bhb_loop+0x40/0x90
[  258.853654][T12721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.853672][T12721] RIP: 0033:0x7f27f259c799
[  258.853690][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.853706][T12721] RSP: 002b:00007f27f33a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  258.853726][T12721] RAX: ffffffffffffffda RBX: 00007f27f2815fa0 RCX: 00007f27f259c799
[  258.853739][T12721] RDX: 0000000000000001 RSI: 0000200000003640 RDI: 0000000000000003
[  258.853749][T12721] RBP: 00007f27f33a3090 R08: 0000000000000000 R09: 0000000000000000
[  258.853761][T12721] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[  258.853772][T12721] R13: 00007f27f2816038 R14: 00007f27f2815fa0 R15: 00007fff96938818
[  258.853801][T12721]  </TASK>
[  259.095149][T12723] FAULT_INJECTION: forcing a failure.
[  259.095149][T12723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.116218][T12723] CPU: 0 UID: 0 PID: 12723 Comm: syz.0.1817 Not tainted syzkaller #0 PREEMPT(full) 
[  259.116247][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  259.116257][T12723] Call Trace:
[  259.116265][T12723]  <TASK>
[  259.116273][T12723]  dump_stack_lvl+0xe8/0x150
[  259.116303][T12723]  should_fail_ex+0x412/0x560
[  259.116335][T12723]  _copy_to_user+0x31/0xb0
[  259.116357][T12723]  map_lookup_elem+0x663/0x9b0
[  259.116391][T12723]  __sys_bpf+0x513/0x950
[  259.116417][T12723]  ? __pfx___sys_bpf+0x10/0x10
[  259.116456][T12723]  ? ksys_write+0x242/0x270
[  259.116478][T12723]  ? __pfx_ksys_write+0x10/0x10
[  259.116504][T12723]  __x64_sys_bpf+0x7c/0x90
[  259.116527][T12723]  do_syscall_64+0x14d/0xf80
[  259.116550][T12723]  ? trace_irq_disable+0x3b/0x150
[  259.116572][T12723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.116589][T12723]  ? clear_bhb_loop+0x40/0x90
[  259.116638][T12723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.116653][T12723] RIP: 0033:0x7f27f259c799
[  259.116670][T12723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.116684][T12723] RSP: 002b:00007f27f33a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  259.116702][T12723] RAX: ffffffffffffffda RBX: 00007f27f2815fa0 RCX: 00007f27f259c799
[  259.116714][T12723] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000001
[  259.116725][T12723] RBP: 00007f27f33a3090 R08: 0000000000000000 R09: 0000000000000000
[  259.116735][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.116745][T12723] R13: 00007f27f2816038 R14: 00007f27f2815fa0 R15: 00007fff96938818
[  259.116772][T12723]  </TASK>
[  259.327507][T12714] bridge0: port 1(gretap0) entered blocking state
[  259.334065][T12714] bridge0: port 1(gretap0) entered disabled state
[  259.351377][T12714] gretap0: entered allmulticast mode
[  259.359712][T12714] gretap0: left allmulticast mode
[  259.403686][T12725] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1819'.
[  259.486203][ T5158] block nbd0: Possible stuck request ffff888055208000: control (read@0,1024B). Runtime 60 seconds
[  259.498711][ T5158] block nbd0: Possible stuck request ffff888055208200: control (read@1024,1024B). Runtime 60 seconds
[  259.510630][ T5158] block nbd0: Possible stuck request ffff888055208400: control (read@2048,1024B). Runtime 60 seconds
[  259.527024][ T5158] block nbd0: Possible stuck request ffff888055208600: control (read@3072,1024B). Runtime 60 seconds
[  259.575435][T12727] netlink: zone id is out of range
[  259.594524][T12727] netlink: zone id is out of range
[  259.626007][T12727] netlink: zone id is out of range
[  259.639327][T12727] netlink: del zone limit has 8 unknown bytes
[  259.831191][T12760] siw: device registration error -23
[  259.846078][T12761] FAULT_INJECTION: forcing a failure.
[  259.846078][T12761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.878986][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.0.1827 Not tainted syzkaller #0 PREEMPT(full) 
[  259.879021][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  259.879033][T12761] Call Trace:
[  259.879041][T12761]  <TASK>
[  259.879049][T12761]  dump_stack_lvl+0xe8/0x150
[  259.879082][T12761]  should_fail_ex+0x412/0x560
[  259.879114][T12761]  _copy_from_user+0x2d/0xb0
[  259.879136][T12761]  __copy_msghdr+0x3c5/0x5b0
[  259.879164][T12761]  ___sys_sendmsg+0x213/0x360
[  259.879193][T12761]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.879222][T12761]  ? kstrtouint+0x6e/0xe0
[  259.879271][T12761]  ? __fget_files+0x2a/0x420
[  259.879302][T12761]  ? __fget_files+0x3a0/0x420
[  259.879339][T12761]  __sys_sendmmsg+0x27c/0x4e0
[  259.879367][T12761]  ? __pfx___sys_sendmmsg+0x10/0x10
[  259.879389][T12761]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  259.879436][T12761]  ? ksys_write+0x242/0x270
[  259.879460][T12761]  ? __pfx_ksys_write+0x10/0x10
[  259.879487][T12761]  __x64_sys_sendmmsg+0xa0/0xc0
[  259.879512][T12761]  do_syscall_64+0x14d/0xf80
[  259.879533][T12761]  ? trace_irq_disable+0x3b/0x150
[  259.879558][T12761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.879578][T12761]  ? clear_bhb_loop+0x40/0x90
[  259.879599][T12761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.879616][T12761] RIP: 0033:0x7f27f259c799
[  259.879632][T12761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.879646][T12761] RSP: 002b:00007f27f33a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  259.879665][T12761] RAX: ffffffffffffffda RBX: 00007f27f2815fa0 RCX: 00007f27f259c799
[  259.879678][T12761] RDX: 0000000000000001 RSI: 0000200000003640 RDI: 0000000000000003
[  259.879689][T12761] RBP: 00007f27f33a3090 R08: 0000000000000000 R09: 0000000000000000
[  259.879699][T12761] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[  259.879708][T12761] R13: 00007f27f2816038 R14: 00007f27f2815fa0 R15: 00007fff96938818
[  259.879732][T12761]  </TASK>
[  260.308633][   T29] audit: type=1107 audit(1774122076.201:7): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  260.340398][T12779] validate_nla: 5 callbacks suppressed
[  260.340415][T12779] netlink: 'syz.3.1834': attribute type 9 has an invalid length.
[  260.367572][T12779] netlink: 'syz.3.1834': attribute type 11 has an invalid length.
[  260.389183][T12779] netlink: 'syz.3.1834': attribute type 12 has an invalid length.
[  260.390234][ T5193] udevd[5193]: worker [5822] /devices/virtual/block/nbd0 is taking a long time
[  260.658395][T12797] FAULT_INJECTION: forcing a failure.
[  260.658395][T12797] name failslab, interval 1, probability 0, space 0, times 0
[  260.706625][T12797] CPU: 1 UID: 0 PID: 12797 Comm: syz.4.1841 Not tainted syzkaller #0 PREEMPT(full) 
[  260.706650][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  260.706660][T12797] Call Trace:
[  260.706666][T12797]  <TASK>
[  260.706673][T12797]  dump_stack_lvl+0xe8/0x150
[  260.706702][T12797]  should_fail_ex+0x412/0x560
[  260.706729][T12797]  should_failslab+0xa8/0x100
[  260.706752][T12797]  __kmalloc_noprof+0xe8/0x760
[  260.706768][T12797]  ? __lock_acquire+0x6b5/0x2cf0
[  260.706791][T12797]  ? sock_kmalloc+0xd6/0x160
[  260.706818][T12797]  sock_kmalloc+0xd6/0x160
[  260.706840][T12797]  ____sys_sendmsg+0x1c2/0x9f0
[  260.706876][T12797]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.706906][T12797]  ? import_iovec+0x73/0xa0
[  260.706928][T12797]  ___sys_sendmsg+0x2a5/0x360
[  260.706955][T12797]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.706981][T12797]  ? kstrtouint+0x6e/0xe0
[  260.707024][T12797]  ? __fget_files+0x2a/0x420
[  260.707049][T12797]  ? __fget_files+0x3a0/0x420
[  260.707086][T12797]  __sys_sendmmsg+0x27c/0x4e0
[  260.707115][T12797]  ? __pfx___sys_sendmmsg+0x10/0x10
[  260.707137][T12797]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  260.707185][T12797]  ? ksys_write+0x242/0x270
[  260.707209][T12797]  ? __pfx_ksys_write+0x10/0x10
[  260.707236][T12797]  __x64_sys_sendmmsg+0xa0/0xc0
[  260.707262][T12797]  do_syscall_64+0x14d/0xf80
[  260.707283][T12797]  ? trace_irq_disable+0x3b/0x150
[  260.707308][T12797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.707326][T12797]  ? clear_bhb_loop+0x40/0x90
[  260.707348][T12797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.707367][T12797] RIP: 0033:0x7f6ba0d9c799
[  260.707385][T12797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.707401][T12797] RSP: 002b:00007f6ba1ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  260.707423][T12797] RAX: ffffffffffffffda RBX: 00007f6ba1015fa0 RCX: 00007f6ba0d9c799
[  260.707436][T12797] RDX: 0000000000000001 RSI: 0000200000003640 RDI: 0000000000000003
[  260.707448][T12797] RBP: 00007f6ba1ba2090 R08: 0000000000000000 R09: 0000000000000000
[  260.707459][T12797] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001
[  260.707471][T12797] R13: 00007f6ba1016038 R14: 00007f6ba1015fa0 R15: 00007fffe1bbb2a8
[  260.707502][T12797]  </TASK>
[  260.876748][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms
[  260.951844][    C0] lec:lec_tx_timeout: lec0
[  260.964493][T12802] netlink: 'syz.3.1842': attribute type 16 has an invalid length.
[  260.972461][T12802] netlink: 'syz.3.1842': attribute type 17 has an invalid length.
[  261.014098][T12802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.068271][T12813] netlink: 'syz.4.1845': attribute type 1 has an invalid length.
[  261.330379][T12801] lo speed is unknown, defaulting to 1000
[  261.446429][T12835] FAULT_INJECTION: forcing a failure.
[  261.446429][T12835] name failslab, interval 1, probability 0, space 0, times 0
[  261.465390][T12835] CPU: 0 UID: 0 PID: 12835 Comm: syz.4.1850 Not tainted syzkaller #0 PREEMPT(full) 
[  261.465417][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  261.465429][T12835] Call Trace:
[  261.465437][T12835]  <TASK>
[  261.465444][T12835]  dump_stack_lvl+0xe8/0x150
[  261.465476][T12835]  should_fail_ex+0x412/0x560
[  261.465508][T12835]  should_failslab+0xa8/0x100
[  261.465530][T12835]  ? skb_clone+0x212/0x3a0
[  261.465553][T12835]  kmem_cache_alloc_noprof+0x87/0x650
[  261.465571][T12835]  ? __netlink_lookup+0xc6/0x8b0
[  261.465599][T12835]  skb_clone+0x212/0x3a0
[  261.465627][T12835]  __netlink_deliver_tap+0x404/0x850
[  261.465658][T12835]  ? netlink_deliver_tap+0x2e/0x1b0
[  261.465678][T12835]  netlink_deliver_tap+0x19c/0x1b0
[  261.465697][T12835]  netlink_unicast+0x7e3/0x9b0
[  261.465731][T12835]  ? __pfx_netlink_unicast+0x10/0x10
[  261.465761][T12835]  ? netlink_sendmsg+0x650/0xb40
[  261.465777][T12835]  ? skb_put+0x11b/0x210
[  261.465800][T12835]  netlink_sendmsg+0x813/0xb40
[  261.465833][T12835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.465856][T12835]  ? aa_sock_msg_perm+0xf1/0x1b0
[  261.465885][T12835]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.465910][T12835]  ____sys_sendmsg+0x972/0x9f0
[  261.465942][T12835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.465972][T12835]  ? import_iovec+0x73/0xa0
[  261.465995][T12835]  ___sys_sendmsg+0x2a5/0x360
[  261.466022][T12835]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.466076][T12835]  ? __fget_files+0x2a/0x420
[  261.466102][T12835]  ? __fget_files+0x3a0/0x420
[  261.466138][T12835]  __x64_sys_sendmsg+0x1bd/0x2a0
[  261.466165][T12835]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  261.466198][T12835]  ? __pfx_ksys_write+0x10/0x10
[  261.466231][T12835]  do_syscall_64+0x14d/0xf80
[  261.466250][T12835]  ? trace_irq_disable+0x3b/0x150
[  261.466272][T12835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.466298][T12835]  ? clear_bhb_loop+0x40/0x90
[  261.466320][T12835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.466337][T12835] RIP: 0033:0x7f6ba0d9c799
[  261.466355][T12835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.466371][T12835] RSP: 002b:00007f6ba1ba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.466390][T12835] RAX: ffffffffffffffda RBX: 00007f6ba1015fa0 RCX: 00007f6ba0d9c799
[  261.466404][T12835] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  261.466416][T12835] RBP: 00007f6ba1ba2090 R08: 0000000000000000 R09: 0000000000000000
[  261.466428][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.466439][T12835] R13: 00007f6ba1016038 R14: 00007f6ba1015fa0 R15: 00007fffe1bbb2a8
[  261.466470][T12835]  </TASK>
[  261.805748][T12835] __nla_validate_parse: 8 callbacks suppressed
[  261.805767][T12835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1850'.
[  261.821419][T12835] tipc: Enabling of bearer <eth:geneve1> rejected, already enabled
[  261.829754][T12803] lo speed is unknown, defaulting to 1000
[  262.007443][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'.
[  262.018438][T12850] tipc: Enabled bearer <eth:geneve1>, priority 10
[  262.043897][T12848] syzkaller0: entered promiscuous mode
[  262.050051][T12848] syzkaller0: entered allmulticast mode
[  262.498180][T12843] lo speed is unknown, defaulting to 1000
[  262.858846][T12890] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1859'.
[  262.964340][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  263.100120][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'.
[  263.131969][T12898] FAULT_INJECTION: forcing a failure.
[  263.131969][T12898] name failslab, interval 1, probability 0, space 0, times 0
[  263.147417][T12898] CPU: 1 UID: 0 PID: 12898 Comm: syz.2.1863 Not tainted syzkaller #0 PREEMPT(full) 
[  263.147443][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  263.147455][T12898] Call Trace:
[  263.147462][T12898]  <TASK>
[  263.147470][T12898]  dump_stack_lvl+0xe8/0x150
[  263.147502][T12898]  should_fail_ex+0x412/0x560
[  263.147535][T12898]  should_failslab+0xa8/0x100
[  263.147561][T12898]  __kmalloc_noprof+0xe8/0x760
[  263.147584][T12898]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  263.147616][T12898]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  263.147643][T12898]  ? __dev_queue_xmit+0x28b/0x3870
[  263.147674][T12898]  genl_family_rcv_msg_doit+0xd9/0x330
[  263.147699][T12898]  ? __asan_memcpy+0x40/0x70
[  263.147722][T12898]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  263.147748][T12898]  ? __pfx___mutex_lock+0x10/0x10
[  263.147772][T12898]  ? __pfx_genl_get_cmd+0x10/0x10
[  263.147794][T12898]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  263.147822][T12898]  ? __dev_queue_xmit+0x28b/0x3870
[  263.147855][T12898]  genl_rcv_msg+0x61c/0x7a0
[  263.147887][T12898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.147910][T12898]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  263.147933][T12898]  ? __lock_acquire+0x6b5/0x2cf0
[  263.147969][T12898]  netlink_rcv_skb+0x232/0x4b0
[  263.147990][T12898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  263.148016][T12898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.148086][T12898]  ? down_read+0x272/0x2e0
[  263.148107][T12898]  ? genl_rcv+0xd/0x40
[  263.148131][T12898]  genl_rcv+0x28/0x40
[  263.148152][T12898]  netlink_unicast+0x80f/0x9b0
[  263.148184][T12898]  ? __pfx_netlink_unicast+0x10/0x10
[  263.148213][T12898]  ? netlink_sendmsg+0x650/0xb40
[  263.148230][T12898]  ? skb_put+0x11b/0x210
[  263.148255][T12898]  netlink_sendmsg+0x813/0xb40
[  263.148284][T12898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.148308][T12898]  ? aa_sock_msg_perm+0xf1/0x1b0
[  263.148337][T12898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.148362][T12898]  ____sys_sendmsg+0x972/0x9f0
[  263.148395][T12898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.148428][T12898]  ? import_iovec+0x73/0xa0
[  263.148453][T12898]  ___sys_sendmsg+0x2a5/0x360
[  263.148482][T12898]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.148542][T12898]  ? __fget_files+0x2a/0x420
[  263.148568][T12898]  ? __fget_files+0x3a0/0x420
[  263.148605][T12898]  __x64_sys_sendmsg+0x1bd/0x2a0
[  263.148632][T12898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.148666][T12898]  ? __pfx_ksys_write+0x10/0x10
[  263.148699][T12898]  do_syscall_64+0x14d/0xf80
[  263.148720][T12898]  ? trace_irq_disable+0x3b/0x150
[  263.148747][T12898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.148766][T12898]  ? clear_bhb_loop+0x40/0x90
[  263.148790][T12898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.148808][T12898] RIP: 0033:0x7f917f99c799
[  263.148826][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.148843][T12898] RSP: 002b:00007f918084b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.148863][T12898] RAX: ffffffffffffffda RBX: 00007f917fc15fa0 RCX: 00007f917f99c799
[  263.148877][T12898] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  263.148889][T12898] RBP: 00007f918084b090 R08: 0000000000000000 R09: 0000000000000000
[  263.148900][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.148911][T12898] R13: 00007f917fc16038 R14: 00007f917fc15fa0 R15: 00007ffe443fd268
[  263.148942][T12898]  </TASK>
[  263.509902][T12896] bond0: Caught tx_queue_len zero misconfig
[  263.638092][T12903] netlink: 'syz.2.1864': attribute type 3 has an invalid length.
[  263.646143][T12903] netlink: 'syz.2.1864': attribute type 3 has an invalid length.
[  263.656843][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1864'.
[  263.751369][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'.
[  263.913014][T12914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.939237][T12914] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85
[  263.962449][T12914] siw: device registration error -23
[  264.093395][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'.
[  264.297936][T12938] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1874'.
[  264.506102][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'.
[  264.920093][T12958] xt_hashlimit: size too large, truncated to 1048576
[  264.927208][T12958] xt_hashlimit: overflow, try lower: 0/0
[  264.935439][T12958] syz_tun: entered allmulticast mode
[  264.977690][T12957] syz_tun: left allmulticast mode
[  265.082205][T12964] netlink: 'syz.4.1881': attribute type 9 has an invalid length.
[  265.096490][T12964] netlink: 'syz.4.1881': attribute type 11 has an invalid length.
[  265.385230][T12942] lo speed is unknown, defaulting to 1000
[  265.570979][T12973] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.873180][T12973] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.956702][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  265.973377][T12984] 5nè‹Ò: entered promiscuous mode
[  266.012462][T12973] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.188901][T12973] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.386490][T12995] macsec3: entered promiscuous mode
[  266.392116][T12995] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  266.500608][T13001] IPv6: sit1: Disabled Multicast RS
[  266.817376][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.844556][T13013] __nla_validate_parse: 9 callbacks suppressed
[  266.844574][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1892'.
[  266.864273][T13009] IPv6: NLM_F_REPLACE set, but no existing node found!
[  266.928510][   T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.937494][   T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.951332][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1892'.
[  266.990370][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.147792][T13027] validate_nla: 1 callbacks suppressed
[  267.147812][T13027] netlink: 'syz.4.1895': attribute type 2 has an invalid length.
[  267.178579][T13029] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  267.183748][T13027] netlink: 'syz.4.1895': attribute type 8 has an invalid length.
[  267.204909][T13027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1895'.
[  267.233969][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'.
[  267.300069][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'.
[  267.309226][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.317633][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.325931][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.339240][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.424743][T13021] lo speed is unknown, defaulting to 1000
[  268.484891][T13092] netlink: 'syz.3.1904': attribute type 13 has an invalid length.
[  268.653290][T13100] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1905'.
[  268.682940][T13100] netlink: 'syz.1.1905': attribute type 2 has an invalid length.
[  268.724525][T13100] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1905'.
[  269.122532][T13124] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  269.315913][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'.
[  269.367102][T13110] tipc: Enabled bearer <eth:geneve1>, priority 10
[  269.531368][T13145] netlink: 'syz.0.1912': attribute type 9 has an invalid length.
[  269.544578][T13145] netlink: 'syz.0.1912': attribute type 11 has an invalid length.
[  269.563181][T13145] netlink: 'syz.0.1912': attribute type 12 has an invalid length.
[  269.575340][T13149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.582614][T13145] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1912'.
[  269.597550][T13148] syzkaller0: entered promiscuous mode
[  269.605661][T13148] syzkaller0: entered allmulticast mode
[  269.611845][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'.
[  269.664751][T13148] tipc: Resetting bearer <eth:syzkaller0>
[  269.768079][T13148] tipc: Disabling bearer <eth:syzkaller0>
[  270.348431][T13190] netlink: 'syz.4.1924': attribute type 9 has an invalid length.
[  270.366726][T13190] netlink: 'syz.4.1924': attribute type 11 has an invalid length.
[  270.384066][T13190] netlink: 'syz.4.1924': attribute type 12 has an invalid length.
[  270.976619][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  270.984647][    C0] lec:lec_tx_timeout: lec0
[  270.989222][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  275.996664][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  276.004690][    C0] lec:lec_tx_timeout: lec0
[  276.046721][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  281.796641][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  281.804689][    C0] lec:lec_tx_timeout: lec0
[  281.809424][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  286.836655][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  286.844695][    C0] lec:lec_tx_timeout: lec0
[  289.557705][ T5158] block nbd0: Possible stuck request ffff888055208000: control (read@0,1024B). Runtime 90 seconds
[  289.568411][ T5158] block nbd0: Possible stuck request ffff888055208200: control (read@1024,1024B). Runtime 90 seconds
[  289.579380][ T5158] block nbd0: Possible stuck request ffff888055208400: control (read@2048,1024B). Runtime 90 seconds
[  289.590475][ T5158] block nbd0: Possible stuck request ffff888055208600: control (read@3072,1024B). Runtime 90 seconds
[  291.156752][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  295.548176][T13282] siw: device registration error -23
[  295.562268][T13287] netlink: 'syz.4.1937': attribute type 9 has an invalid length.
[  295.579685][T13287] netlink: 'syz.4.1937': attribute type 11 has an invalid length.
[  295.596921][T13287] netlink: 'syz.4.1937': attribute type 12 has an invalid length.
[  295.622320][T13287] __nla_validate_parse: 11 callbacks suppressed
[  295.622339][T13287] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1937'.
[  295.660861][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'.
[  295.808586][T13302] sctp: [Deprecated]: syz.4.1940 (pid 13302) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.808586][T13302] Use struct sctp_sack_info instead
[  295.828066][T13302] sctp: [Deprecated]: syz.4.1940 (pid 13302) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.828066][T13302] Use struct sctp_sack_info instead
[  295.857236][T13302] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1940'.
[  295.866401][T13302] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1940'.
[  295.881964][T13302] netlink: 'syz.4.1940': attribute type 5 has an invalid length.
[  295.890385][T13302] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1940'.
[  295.968922][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'.
[  295.974208][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'.
[  295.993411][T13311] gtp0: entered promiscuous mode
[  295.999106][T13311] gtp0: entered allmulticast mode
[  296.236111][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'.
[  296.250270][T13322] gretap0: entered promiscuous mode
[  296.330475][T13324] x_tables: unsorted underflow at hook 4
[  296.340391][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'.
[  296.349523][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'.
[  296.473187][T13331] batadv_slave_0: entered promiscuous mode
[  296.485042][T13330] batadv_slave_0: left promiscuous mode
[  296.659314][T13338] netlink: 'syz.0.1950': attribute type 9 has an invalid length.
[  296.667816][T13338] netlink: 'syz.0.1950': attribute type 11 has an invalid length.
[  296.676128][T13338] netlink: 'syz.0.1950': attribute type 12 has an invalid length.
[  296.836684][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms
[  296.844760][    C0] lec:lec_tx_timeout: lec0
[  296.849488][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  297.374469][T13364] 8021q: adding VLAN 0 to HW filter on device bond8
[  297.449278][T13371] netlink: 'syz.2.1962': attribute type 9 has an invalid length.
[  297.460804][T13371] netlink: 'syz.2.1962': attribute type 11 has an invalid length.
[  297.469881][T13371] netlink: 'syz.2.1962': attribute type 12 has an invalid length.
[  297.553990][T13377] bond11: option ad_select: invalid value (34)
[  297.568237][T13377] bond11 (unregistering): Released all slaves
[  297.794510][T13397] tipc: Enabled bearer <eth:veth0_virt_wifi>, priority 10
[  297.849276][T13401] geneve5: entered promiscuous mode
[  297.863091][T13401] geneve5: entered allmulticast mode
[  298.678015][T13466] ip6_vti0: Caught tx_queue_len zero misconfig
[  299.021160][T13485] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  299.203695][T13467] lo speed is unknown, defaulting to 1000
[  299.298318][T13511] ip6tnl2: entered promiscuous mode
[  299.303673][T13511] ip6tnl2: entered allmulticast mode
[  299.490230][T13489] lo speed is unknown, defaulting to 1000
[  299.909213][T13522] lo speed is unknown, defaulting to 1000
[  301.856609][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  301.864669][    C0] lec:lec_tx_timeout: lec0
[  302.007418][T13504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  302.165604][T13555] __nla_validate_parse: 87 callbacks suppressed
[  302.165625][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'.
[  302.170448][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'.
[  302.250285][T13555] 8021q: adding VLAN 0 to HW filter on device bond8
[  302.275854][T13554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.472805][T13572] tipc: Resetting bearer <eth:geneve1>
[  302.606358][T13594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2022'.
[  302.607551][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'.
[  302.648573][T13582] macvtap1: entered promiscuous mode
[  302.654262][T13582] batadv0: entered promiscuous mode
[  302.661051][T13582] macvtap1: entered allmulticast mode
[  302.666534][T13582] batadv0: entered allmulticast mode
[  302.674063][T13582] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  302.789051][T13603] validate_nla: 71 callbacks suppressed
[  302.789070][T13603] netlink: 'syz.4.2024': attribute type 16 has an invalid length.
[  302.803889][T13603] netlink: 'syz.4.2024': attribute type 17 has an invalid length.
[  302.830098][T13603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.882521][T13607] netlink: 'syz.0.2026': attribute type 1 has an invalid length.
[  302.890809][T13607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2026'.
[  303.291766][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2033'.
[  303.406227][T13639] openvswitch: netlink: IP tunnel dst address not specified
[  303.508624][T13632] lo speed is unknown, defaulting to 1000
[  303.546685][T13644] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  303.650857][T13650] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0
[  303.715733][T13652] IPv6: sit1: Disabled Multicast RS
[  303.912225][T13659] netlink: 'syz.2.2042': attribute type 1 has an invalid length.
[  304.220090][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'.
[  304.239888][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'.
[  304.468232][T13685] xt_bpf: check failed: parse error
[  304.593687][T13696] macsec0: entered allmulticast mode
[  304.601472][T13696] erspan0: entered allmulticast mode
[  304.630966][T13696] erspan0: left allmulticast mode
[  304.793205][T13711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.974462][T13719] netlink: 206268 bytes leftover after parsing attributes in process `syz.2.2063'.
[  304.985877][T13715] veth1_to_team: entered allmulticast mode
[  305.124706][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'.
[  305.152586][T13722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.231522][T13699] lo speed is unknown, defaulting to 1000
[  305.318195][T13734] macvtap0: entered promiscuous mode
[  305.374206][T13734] macvtap0 (unregistering): left promiscuous mode
[  305.647212][T13744] veth0_to_bond: Caught tx_queue_len zero misconfig
[  305.712218][T13744] syzkaller0: entered promiscuous mode
[  305.718285][T13744] syzkaller0: entered allmulticast mode
[  306.278670][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  306.538864][T13770] netlink: 'syz.2.2078': attribute type 3 has an invalid length.
[  306.548929][T13770] netlink: 'syz.2.2078': attribute type 2 has an invalid length.
[  306.557252][T13770] netlink: 'syz.2.2078': attribute type 2 has an invalid length.
[  307.586209][T13777] batadv_slave_0: entered promiscuous mode
[  307.706433][T13789] __nla_validate_parse: 5 callbacks suppressed
[  307.706453][T13789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2084'.
[  307.761401][T13773] batadv_slave_0: left promiscuous mode
[  307.862167][T13800] netlink: 'syz.1.2086': attribute type 3 has an invalid length.
[  307.871880][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2086'.
[  308.086944][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'.
[  308.241705][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  308.256151][T13820] netlink: 'syz.4.2092': attribute type 13 has an invalid length.
[  308.286411][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  308.326256][T13824] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  308.389264][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  308.416732][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  308.869385][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  308.892907][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'.
[  309.149806][T13858] netlink: 'syz.0.2101': attribute type 1 has an invalid length.
[  309.165185][T13858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2101'.
[  309.194892][T13858] NCSI netlink: No device for ifindex 0
[  309.358820][T13868] netlink: 'syz.1.2105': attribute type 16 has an invalid length.
[  309.385869][T13868] netlink: 'syz.1.2105': attribute type 17 has an invalid length.
[  309.447987][T13868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  309.633531][T13881] netlink: 'syz.4.2110': attribute type 13 has an invalid length.
[  309.970338][T13906] netlink: 'syz.1.2119': attribute type 16 has an invalid length.
[  309.978580][T13906] netlink: 'syz.1.2119': attribute type 17 has an invalid length.
[  310.009218][T13906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.060243][T13908] netlink: zone id is out of range
[  310.065408][T13908] netlink: zone id is out of range
[  310.100570][T13910] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  310.103302][T13908] netlink: zone id is out of range
[  310.143584][T13908] netlink: zone id is out of range
[  310.167029][T13915] netlink: 'syz.3.2120': attribute type 4 has an invalid length.
[  310.194735][T13908] netlink: zone id is out of range
[  310.215197][T13908] netlink: zone id is out of range
[  310.220648][T13908] netlink: zone id is out of range
[  310.225880][T13908] netlink: zone id is out of range
[  310.439428][T13918] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.477732][T13923] lo speed is unknown, defaulting to 1000
[  311.796633][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms
[  311.804716][    C0] lec:lec_tx_timeout: lec0
[  311.809484][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  313.306893][T13929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  313.461757][T13989] validate_nla: 2 callbacks suppressed
[  313.461777][T13989] netlink: 'syz.2.2145': attribute type 16 has an invalid length.
[  313.475915][T13989] netlink: 'syz.2.2145': attribute type 17 has an invalid length.
[  313.482048][T13994] __nla_validate_parse: 8 callbacks suppressed
[  313.482072][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2146'.
[  313.508081][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2146'.
[  313.546409][T13989] 8021q: adding VLAN 0 to HW filter on device team0
[  313.654705][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'.
[  313.674351][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'.
[  313.711954][T14017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.747250][T14018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.771850][T14017] tipc: Resetting bearer <eth:syzkaller0>
[  313.794880][   T49] tipc: Resetting bearer <eth:syzkaller0>
[  313.828923][T14016] tipc: Resetting bearer <eth:syzkaller0>
[  313.916345][T14024] netlink: 'syz.2.2155': attribute type 9 has an invalid length.
[  313.925171][T14024] netlink: 'syz.2.2155': attribute type 11 has an invalid length.
[  313.936459][T14024] netlink: 'syz.2.2155': attribute type 12 has an invalid length.
[  313.945219][T14024] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2155'.
[  313.955258][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'.
[  313.974452][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'.
[  313.988518][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'.
[  314.072716][T14034] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2159'.
[  314.159654][T14040] netlink: 'syz.0.2162': attribute type 16 has an invalid length.
[  314.167935][T14040] netlink: 'syz.0.2162': attribute type 17 has an invalid length.
[  314.263169][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'.
[  314.662851][T14059] netlink: 'syz.3.2168': attribute type 9 has an invalid length.
[  314.680837][T14059] netlink: 'syz.3.2168': attribute type 11 has an invalid length.
[  314.697921][T14059] netlink: 'syz.3.2168': attribute type 12 has an invalid length.
[  314.954511][T14064] vlan1: entered allmulticast mode
[  315.326198][T14073] net_ratelimit: 51 callbacks suppressed
[  315.326211][T14073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  315.466889][T14094] lo: Caught tx_queue_len zero misconfig
[  315.487561][T14094] sch_fq: defrate 0 ignored.
[  315.936506][T14105] lo: entered allmulticast mode
[  315.959297][T14105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.084429][T14116] syzkaller1: entered promiscuous mode
[  316.094945][T14116] syzkaller1: entered allmulticast mode
[  316.607813][T14158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.669918][T14158] bond13: entered promiscuous mode
[  316.675477][T14158] 8021q: adding VLAN 0 to HW filter on device bond13
[  316.701655][T14158] bond13 (unregistering): Released all slaves
[  316.794434][   T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.813975][   T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.826843][   T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.837361][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  316.845436][    C0] lec:lec_tx_timeout: lec0
[  316.853302][ T9065] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.910285][T14173] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.964305][T14173] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.035172][T14173] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.082194][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL
[  317.088959][ T1299] lec:lec_start_xmit: lec0:No lecd attached
[  317.094986][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  317.118485][T14173] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.275411][   T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.315847][   T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.352458][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.368632][T14196] pim6reg1: entered promiscuous mode
[  317.384282][T14196] pim6reg1: entered allmulticast mode
[  317.416930][ T9065] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.587127][T14210] geneve1: Caught tx_queue_len zero misconfig
[  317.692394][T14215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.735654][T14216] can: request_module (can-proto-0) failed.
[  317.836397][T14224] vlan2: entered promiscuous mode
[  317.845417][T14224] geneve1: entered promiscuous mode
[  317.851267][T14224] vlan2: entered allmulticast mode
[  317.856892][T14224] geneve1: entered allmulticast mode
[  317.952995][   T29] audit: type=1804 audit(1774122133.841:8): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2222" name="/newroot/431/memory.events" dev="tmpfs" ino=2224 res=1 errno=0
[  317.982995][T14198] lo speed is unknown, defaulting to 1000
[  318.016321][   T29] audit: type=1800 audit(1774122133.841:9): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2222" name="memory.events" dev="tmpfs" ino=2224 res=0 errno=0
[  318.077225][   T29] audit: type=1804 audit(1774122133.841:10): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2222" name="/newroot/431/memory.events" dev="tmpfs" ino=2224 res=1 errno=0
[  318.378600][T14222] lo speed is unknown, defaulting to 1000
[  318.738290][T14256] validate_nla: 9 callbacks suppressed
[  318.738309][T14256] netlink: 'syz.4.2228': attribute type 83 has an invalid length.
[  318.767377][T14257] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  318.965328][T14273] __nla_validate_parse: 82 callbacks suppressed
[  318.965348][T14273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2236'.
[  319.021828][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'.
[  319.131219][T14281] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2237'.
[  319.163342][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2237'.
[  319.537995][T14306] netlink: 'syz.3.2240': attribute type 1 has an invalid length.
[  319.550923][T14305] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2244'.
[  319.577206][T14305] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2244'.
[  319.613531][T14305] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2244'.
[  319.617699][T14306] 8021q: adding VLAN 0 to HW filter on device bond9
[  319.645269][T14304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.652615][T14304] IPv6: NLM_F_CREATE should be set when creating new route
[  319.670588][ T5158] block nbd0: Possible stuck request ffff888055208000: control (read@0,1024B). Runtime 120 seconds
[  319.681634][ T5158] block nbd0: Possible stuck request ffff888055208200: control (read@1024,1024B). Runtime 120 seconds
[  319.692724][T14308] bond9: (slave geneve7): making interface the new active one
[  319.700483][T14308] bond9: (slave geneve7): Enslaving as an active interface with an up link
[  319.709772][ T5158] block nbd0: Possible stuck request ffff888055208400: control (read@2048,1024B). Runtime 120 seconds
[  319.721044][ T5158] block nbd0: Possible stuck request ffff888055208600: control (read@3072,1024B). Runtime 120 seconds
[  319.790859][T14310] FAULT_INJECTION: forcing a failure.
[  319.790859][T14310] name failslab, interval 1, probability 0, space 0, times 0
[  319.812672][T14310] CPU: 0 UID: 0 PID: 14310 Comm: syz.2.2239 Not tainted syzkaller #0 PREEMPT(full) 
[  319.812700][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  319.812712][T14310] Call Trace:
[  319.812720][T14310]  <TASK>
[  319.812728][T14310]  dump_stack_lvl+0xe8/0x150
[  319.812762][T14310]  should_fail_ex+0x412/0x560
[  319.812794][T14310]  should_failslab+0xa8/0x100
[  319.812820][T14310]  __kmalloc_noprof+0xe8/0x760
[  319.812843][T14310]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  319.812877][T14310]  tomoyo_realpath_from_path+0xe3/0x5d0
[  319.812916][T14310]  ? tomoyo_path_number_perm+0x219/0x630
[  319.812940][T14310]  tomoyo_path_number_perm+0x246/0x630
[  319.812968][T14310]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  319.812995][T14310]  ? __lock_acquire+0x6b5/0x2cf0
[  319.813031][T14310]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  319.813075][T14310]  ? __fget_files+0x2a/0x420
[  319.813105][T14310]  ? __fget_files+0x2a/0x420
[  319.813131][T14310]  ? __fget_files+0x3a0/0x420
[  319.813156][T14310]  ? __fget_files+0x2a/0x420
[  319.813187][T14310]  security_file_ioctl+0xc3/0x2a0
[  319.813213][T14310]  __se_sys_ioctl+0x47/0x170
[  319.813238][T14310]  do_syscall_64+0x14d/0xf80
[  319.813259][T14310]  ? trace_irq_disable+0x3b/0x150
[  319.813284][T14310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.813304][T14310]  ? clear_bhb_loop+0x40/0x90
[  319.813327][T14310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.813346][T14310] RIP: 0033:0x7f917f99c799
[  319.813364][T14310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.813380][T14310] RSP: 002b:00007f918082a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  319.813400][T14310] RAX: ffffffffffffffda RBX: 00007f917fc16090 RCX: 00007f917f99c799
[  319.813415][T14310] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000005
[  319.813433][T14310] RBP: 00007f918082a090 R08: 0000000000000000 R09: 0000000000000000
[  319.813444][T14310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.813455][T14310] R13: 00007f917fc16128 R14: 00007f917fc16090 R15: 00007ffe443fd268
[  319.813485][T14310]  </TASK>
[  319.813494][T14310] ERROR: Out of memory at tomoyo_realpath_from_path.
[  320.065499][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2245'.
[  320.237500][T14304] batadv0: left allmulticast mode
[  320.242592][T14304] batadv0: left promiscuous mode
[  320.249663][T14304] macvtap1: left promiscuous mode
[  320.254796][T14304] macvtap1: left allmulticast mode
[  320.338236][T14319] veth1_to_team: Caught tx_queue_len zero misconfig
[  320.345243][  T492] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  320.374272][  T492] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  320.452119][  T492] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  320.491595][  T492] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  320.509106][T14330] netlink: 'syz.3.2247': attribute type 27 has an invalid length.
[  320.554203][T14333] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20004
[  320.708392][T14338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.727510][T14316] lo speed is unknown, defaulting to 1000
[  320.838548][T14348] netlink: 'syz.0.2251': attribute type 1 has an invalid length.
[  320.868119][T14348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.004055][T14355] IPVS: Error connecting to the multicast addr
[  321.037045][T14352] sctp: [Deprecated]: syz.3.2249 (pid 14352) Use of int in max_burst socket option.
[  321.037045][T14352] Use struct sctp_assoc_value instead
[  321.273040][T14366] syzkaller0: entered promiscuous mode
[  321.298042][T14366] syzkaller0: entered allmulticast mode
[  321.526150][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'.
[  322.142684][T14403] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2267'.
[  322.763438][T14417] bond9: option updelay: invalid value (18446744072924056005)
[  322.768440][T14422] netlink: 'syz.4.2272': attribute type 21 has an invalid length.
[  322.771096][T14417] bond9: option updelay: allowed values 0 - 2147483647
[  322.812558][T14417] bond9 (unregistering): Released all slaves
[  322.836980][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  322.845025][    C0] lec:lec_tx_timeout: lec0
[  323.517856][T14443] netlink: 'syz.4.2277': attribute type 16 has an invalid length.
[  323.543486][T14443] netlink: 'syz.4.2277': attribute type 17 has an invalid length.
[  323.590908][T14443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.754576][T14453] netlink: 'syz.4.2280': attribute type 13 has an invalid length.
[  323.857909][T14457] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  324.271210][T14474] 8021q: adding VLAN 0 to HW filter on device bond9
[  324.280691][T14474] __nla_validate_parse: 2 callbacks suppressed
[  324.280710][T14474] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2287'.
[  324.314605][T14474] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  324.327081][T14474] bond9: option mode: unable to set because the bond device has slaves
[  324.378383][  T492] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  324.511164][   T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  324.971105][T14512] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2295'.
[  325.083768][T14521] netlink: 'syz.3.2298': attribute type 13 has an invalid length.
[  325.164228][T14526] netlink: 'syz.4.2300': attribute type 1 has an invalid length.
[  325.184677][T14526] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2300'.
[  325.196985][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'.
[  325.232171][T14533] tipc: New replicast peer: 0.0.0.0
[  325.254813][T14533] tipc: Enabled bearer <udp:syz2>, priority 10
[  325.637226][T14547] netlink: 'syz.1.2306': attribute type 13 has an invalid length.
[  325.745277][T14550] tipc: New replicast peer: 0.0.0.0
[  325.777362][T14550] tipc: Enabled bearer <udp:syz2>, priority 10
[  327.459862][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'.
[  327.479620][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  327.526714][T14570] netlink: 'syz.1.2309': attribute type 12 has an invalid length.
[  327.564194][ T9065] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0
[  327.573270][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'.
[  327.586688][ T9065] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.611554][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  327.630918][T14570] netlink: 'syz.1.2309': attribute type 12 has an invalid length.
[  327.639245][ T9065] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.696705][ T9065] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.981616][T14559] lo speed is unknown, defaulting to 1000
[  328.507165][T14612] xt_connbytes: Forcing CT accounting to be enabled
[  328.581647][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2322'.
[  328.812246][T14621] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  328.849785][T14621] sit0: entered allmulticast mode
[  328.861877][T14621] sit0: left allmulticast mode
[  329.064145][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2325'.
[  329.280328][T14619] lo speed is unknown, defaulting to 1000
[  329.528169][T14642] xt_hashlimit: size too large, truncated to 1048576
[  329.713725][T14645] lo speed is unknown, defaulting to 1000
[  329.769619][T14654] __nla_validate_parse: 1 callbacks suppressed
[  329.769640][T14654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2332'.
[  329.862584][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'.
[  329.891543][T14645] lo speed is unknown, defaulting to 1000
[  329.904322][T14645] lo speed is unknown, defaulting to 1000
[  330.075486][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2334'.
[  330.946480][T14704] No such timeout policy "syz1"
[  331.104149][T14675] lo speed is unknown, defaulting to 1000
[  331.116885][T14645] infiniband sqz0: set active
[  331.122428][T14645] infiniband sqz0: added lo
[  331.146689][ T6077] lo speed is unknown, defaulting to 1000
[  331.211895][T14645] RDS/IB: sqz0: added
[  331.215979][T14645] smc: adding ib device sqz0 with port count 1
[  331.232838][T14645] smc:    ib device sqz0 port 1 has no pnetid
[  331.245213][ T6309] lo speed is unknown, defaulting to 1000
[  331.252866][T14645] lo speed is unknown, defaulting to 1000
[  331.620638][T14718] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2347'.
[  331.660937][T14720] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2348'.
[  331.675093][T14645] lo speed is unknown, defaulting to 1000
[  331.705009][T14720] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  331.790084][    C0] ------------[ cut here ]------------
[  331.795904][    C0] sk->sk_forward_alloc
[  331.795935][    C0] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#0: ksoftirqd/0/15
[  331.810119][    C0] Modules linked in:
[  331.814376][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  331.823640][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  331.833758][    C0] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  331.839619][    C0] Code: 0f 0b 90 e9 58 fe ff ff e8 30 69 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 22 69 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 14 69 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  331.859366][    C0] RSP: 0018:ffffc90000147ae8 EFLAGS: 00010246
[  331.865457][    C0] RAX: ffffffff8a2637ec RBX: dffffc0000000000 RCX: ffff88801d691e80
[  331.873482][    C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000
[  331.881516][    C0] RBP: 0000000000000f70 R08: ffff8880293913a7 R09: 1ffff11005272274
[  331.889538][    C0] R10: dffffc0000000000 R11: ffffed1005272275 R12: ffff888029391100
[  331.897565][    C0] R13: dffffc0000000000 R14: ffff88802939138c R15: ffffffff8fca5540
[  331.905578][    C0] FS:  0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000
[  331.914562][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.921235][    C0] CR2: 00007f27f33456b8 CR3: 0000000067eae000 CR4: 00000000003526f0
[  331.929269][    C0] Call Trace:
[  331.932571][    C0]  <TASK>
[  331.935519][    C0]  ? __pfx_udp_destruct_sock+0x10/0x10
[  331.941049][    C0]  __sk_destruct+0x85/0x880
[  331.945581][    C0]  ? rcu_core+0x751/0x1070
[  331.950056][    C0]  ? __pfx___sk_destruct+0x10/0x10
[  331.955194][    C0]  rcu_core+0x7cd/0x1070
[  331.959516][    C0]  ? __pfx_rcu_core+0x10/0x10
[  331.964228][    C0]  handle_softirqs+0x22a/0x870
[  331.969071][    C0]  ? schedule+0x90/0x360
[  331.973328][    C0]  ? run_ksoftirqd+0x36/0x60
[  331.978011][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  331.983063][    C0]  run_ksoftirqd+0x36/0x60
[  331.987538][    C0]  smpboot_thread_fn+0x541/0xa50
[  331.992507][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  331.997587][    C0]  kthread+0x388/0x470
[  332.001670][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  332.007183][    C0]  ? __pfx_kthread+0x10/0x10
[  332.011790][    C0]  ret_from_fork+0x51e/0xb90
[  332.016411][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  332.021572][    C0]  ? __switch_to+0xc7d/0x1450
[  332.026274][    C0]  ? __pfx_kthread+0x10/0x10
[  332.030910][    C0]  ret_from_fork_asm+0x1a/0x30
[  332.035719][    C0]  </TASK>
[  332.038777][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  332.046066][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  332.055274][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  332.065349][    C0] Call Trace:
[  332.068645][    C0]  <TASK>
[  332.071590][    C0]  vpanic+0x56c/0xa60
[  332.075598][    C0]  ? __pfx__printk+0x10/0x10
[  332.080203][    C0]  ? __pfx_vpanic+0x10/0x10
[  332.084727][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  332.090031][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  332.095256][    C0]  panic+0xc5/0xd0
[  332.099012][    C0]  ? __pfx_panic+0x10/0x10
[  332.103467][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  332.108444][    C0]  __warn+0x315/0x4f0
[  332.112454][    C0]  ? inet_sock_destruct+0x62d/0x740
[  332.117671][    C0]  ? inet_sock_destruct+0x62d/0x740
[  332.122885][    C0]  __report_bug+0x29a/0x540
[  332.127393][    C0]  ? kasan_save_track+0x3e/0x80
[  332.132243][    C0]  ? kasan_save_free_info+0x46/0x50
[  332.137447][    C0]  ? inet_sock_destruct+0x62d/0x740
[  332.142645][    C0]  ? __pfx___report_bug+0x10/0x10
[  332.147667][    C0]  ? irqentry_exit+0x59e/0x620
[  332.152427][    C0]  ? trace_irq_disable+0x3b/0x150
[  332.157462][    C0]  ? inet_sock_destruct+0x62f/0x740
[  332.162656][    C0]  ? inet_sock_destruct+0x62d/0x740
[  332.167858][    C0]  ? inet_sock_destruct+0x62d/0x740
[  332.173050][    C0]  report_bug+0x16a/0x220
[  332.177376][    C0]  ? inet_sock_destruct+0x62d/0x740
[  332.182567][    C0]  ? inet_sock_destruct+0x62f/0x740
[  332.187764][    C0]  handle_bug+0x9c/0x200
[  332.192014][    C0]  exc_invalid_op+0x1a/0x50
[  332.196515][    C0]  asm_exc_invalid_op+0x1a/0x20
[  332.201363][    C0] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  332.207168][    C0] Code: 0f 0b 90 e9 58 fe ff ff e8 30 69 9f f7 90 0f 0b 90 e9 8b fe ff ff e8 22 69 9f f7 90 0f 0b 90 e9 b1 fe ff ff e8 14 69 9f f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  332.226775][    C0] RSP: 0018:ffffc90000147ae8 EFLAGS: 00010246
[  332.232844][    C0] RAX: ffffffff8a2637ec RBX: dffffc0000000000 RCX: ffff88801d691e80
[  332.240811][    C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000
[  332.248784][    C0] RBP: 0000000000000f70 R08: ffff8880293913a7 R09: 1ffff11005272274
[  332.256844][    C0] R10: dffffc0000000000 R11: ffffed1005272275 R12: ffff888029391100
[  332.264813][    C0] R13: dffffc0000000000 R14: ffff88802939138c R15: ffffffff8fca5540
[  332.272790][    C0]  ? inet_sock_destruct+0x62c/0x740
[  332.277996][    C0]  ? inet_sock_destruct+0x62c/0x740
[  332.283200][    C0]  ? __pfx_udp_destruct_sock+0x10/0x10
[  332.288665][    C0]  __sk_destruct+0x85/0x880
[  332.293167][    C0]  ? rcu_core+0x751/0x1070
[  332.297582][    C0]  ? __pfx___sk_destruct+0x10/0x10
[  332.302693][    C0]  rcu_core+0x7cd/0x1070
[  332.306945][    C0]  ? __pfx_rcu_core+0x10/0x10
[  332.311632][    C0]  handle_softirqs+0x22a/0x870
[  332.316398][    C0]  ? schedule+0x90/0x360
[  332.320639][    C0]  ? run_ksoftirqd+0x36/0x60
[  332.325238][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  332.330269][    C0]  run_ksoftirqd+0x36/0x60
[  332.334695][    C0]  smpboot_thread_fn+0x541/0xa50
[  332.339640][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  332.344675][    C0]  kthread+0x388/0x470
[  332.348742][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  332.354203][    C0]  ? __pfx_kthread+0x10/0x10
[  332.358791][    C0]  ret_from_fork+0x51e/0xb90
[  332.363384][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  332.368496][    C0]  ? __switch_to+0xc7d/0x1450
[  332.373178][    C0]  ? __pfx_kthread+0x10/0x10
[  332.377765][    C0]  ret_from_fork_asm+0x1a/0x30
[  332.382547][    C0]  </TASK>
[  332.385839][    C0] Kernel Offset: disabled
[  332.390158][    C0] Rebooting in 86400 seconds..