last executing test programs:

3.307473327s ago: executing program 1 (id=6953):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000304001300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002400128009000100766cd8ecc0aa9c146c9cb9fcbd97029d6e000000001400028006000100000000", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x40488c4)

3.307175204s ago: executing program 3 (id=6954):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
getpeername$inet(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
epoll_create(0x10001)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xaf)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

3.241131559s ago: executing program 1 (id=6956):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x8, 0xa, 0x8)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x0, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x100009, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xfffffffe, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x6, 0x100, 0x5, 0x252, 0x2000081, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2.361185355s ago: executing program 3 (id=6961):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4800)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_netdev_private(r1, 0x8923, &(0x7f0000000d00)=':')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0x2b})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r13, 0x0, 0x2, 0x0, &(0x7f0000020e00))
getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x4a, 0x0, 0x0, 0x200, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)

2.053626129s ago: executing program 2 (id=6966):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="13", 0x1}], 0x1}, 0x40f1)
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)='}@', 0x2}], 0x1}, 0x8001)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$packet(0x11, 0x3, 0x300)
write$tun(r0, &(0x7f00000001c0)={@val, @void, @mpls={[{0xffff8, 0x0, 0x1}], @ipv4=@generic={{0x26, 0x4, 0x2, 0x14, 0x114, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0xa5, [@broadcast, @local, @loopback]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0xda, [@broadcast, @empty, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}]}, @end, @timestamp_addr={0x44, 0x2c, 0xf2, 0x1, 0x6, [{@rand_addr=0x64010101, 0xcd}, {@loopback, 0x3}, {@private=0xa010102, 0x5}, {@loopback, 0x7}, {@local, 0x3}]}, @rr={0x7, 0x17, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @rand_addr=0x64010102, @private=0xa010102]}]}}, "63d95695620d4ac7a7080e8823191197cc6550bd940048be2e7ac232d22e4b415d82b3aab9c787a163066add454ec37e39faf2accd0e28f6d17614b7c2f3a0a64e379073d75378eca32618e4e20c4ff0b27d289883a884dc23531285e417e5e4333ba6cb46c5f2ecea09fa181c1b538cb18c128214f49ee2b09e774a"}}}, 0x11c)

2.052915867s ago: executing program 3 (id=6967):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x14}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
getsockopt$inet6_opts(r6, 0x29, 0x39, 0x0, &(0x7f0000000040))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="28005080110001009fc99462abff97d7c0160000470000000500020002000000080003000cac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x4000095}, 0x24040080)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_DEL_MFC(r10, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c)
getsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, <r11=>0x0}, &(0x7f00000000c0)=0xc)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r11, 0x7}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xa}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc8814}, 0x20008041)
epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x7fffffff, &(0x7f00000000c0)={[0x5]}, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.919897048s ago: executing program 4 (id=6970):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x200, 0xffffffffffffffff, 0x2, 0x0, 0x200000001302, 0x1], 0x0, 0x0, 0x0}, 0x7a)
recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffece, 0x400000a2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca853"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00"], 0x80}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x160, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010106, 0xff, 0xffffffff, 'gretap0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x11, 0x0, 0x0, 0xfffffffd, 0x533, 0xffffffff, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x1000, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea68dba902bdc2ff8a930811d5ab686316d51d4773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
socket$key(0xf, 0x3, 0x2)

1.458279592s ago: executing program 4 (id=6971):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
getpeername$inet(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
epoll_create(0x10001)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xaf)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

1.415959085s ago: executing program 2 (id=6972):
pipe(&(0x7f0000000080))
close(0x3)
unshare(0x400)
unshare(0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108)
close(r1)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.328130455s ago: executing program 3 (id=6973):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ed2ef384", 0x4}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r4, 0xe}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x74, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e21, 0x3, @mcast2}, @in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r5, 0x2, 0x40}, &(0x7f00000000c0)=0xc)

1.20732459s ago: executing program 2 (id=6974):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='\\\\&+(^\'\x00', 0x105202, &(0x7f0000000080)={@_ha_fsid={[0x2, 0xdc46]}, {0x0, 0x5, 0x1, 0x3e1}}, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x7})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8, 0x2, "a8a25365"}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x40c0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'veth0_to_team\x00', {0x1}, 0x9})
shutdown(r1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3312}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000004c0)=0x51, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0xfa}}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x11)
bind$alg(r1, &(0x7f0000000680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000001740)={'hsr0\x00', {0x2, 0x0, @multicast1}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet(r1, &(0x7f0000001780)="94d4b854b7403dc37fe095d14904ed3274fcf34bc3d64c0e7a89911fc8d71d4138d5e25ef4896b6f28dd25cff1", 0x2d, 0x4000, &(0x7f00000017c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001800)={<r7=>0x0, 0x7}, &(0x7f0000001840)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001880)={r7, 0x1}, &(0x7f00000018c0)=0x8)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001900)=@buf)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001980), r1)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r6)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80020040}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x44, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x198}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}]]}, 0x44}, 0x1, 0x0, 0x0, 0x4884}, 0x8091)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001d00)={<r10=>r3, &(0x7f0000001c00)='\x00', 0x0, &(0x7f0000001c40)={@align=0x8, {0x1, 0x8, 0x6, 0xfffffffffffffff9}}, 0x40, &(0x7f0000001c80), &(0x7f0000001cc0)=0xe})
r11 = openat$cgroup_ro(r10, &(0x7f0000001d40)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001d80))
sendmsg$nl_route(r11, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x90070100}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@getroute={0x14, 0x1a, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c800)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

984.126584ms ago: executing program 2 (id=6976):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0xf3, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f0000000f00)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r3=>0x0})
sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000240)={<r7=>r6, &(0x7f0000000040)='cgroup.max.depth\x00', 0x40302, &(0x7f0000000140)={@align=0x7, {0x91, 0x33, 0x80000001, 0x6}}, 0x4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x8})
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', r3, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0x0, r7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
close(0x4)
close(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000280))
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x22, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r12], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

875.196092ms ago: executing program 0 (id=6978):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, 0x0, 0x30, 0x27, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)

840.360108ms ago: executing program 1 (id=6979):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x7000000}, 0x0)

806.207364ms ago: executing program 0 (id=6980):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1664}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x40000080}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={r4, @broadcast, @private=0xa010102}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a0000020000000000000000000001"], 0x10}}, 0x0)
recvmmsg(r6, &(0x7f0000009200)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x20, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x0)
getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000480), &(0x7f0000000500)=0x4)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r7, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc)
close(0x4)

691.850124ms ago: executing program 1 (id=6981):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x200, 0xffffffffffffffff, 0x2, 0x0, 0x200000001302, 0x1], 0x0, 0x0, 0x0}, 0x7a)
recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffece, 0x400000a2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca853"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00"], 0x80}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x160, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010106, 0xff, 0xffffffff, 'gretap0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x11, 0x0, 0x0, 0xfffffffd, 0x533, 0xffffffff, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x1000, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea68dba902bdc2ff8a930811d5ab686316d51d4773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
socket$key(0xf, 0x3, 0x2)

691.287948ms ago: executing program 0 (id=6982):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0x50)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

664.358443ms ago: executing program 1 (id=6983):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x14}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
getsockopt$inet6_opts(r6, 0x29, 0x39, 0x0, &(0x7f0000000040))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="28005080110001009fc99462abff97d7c0160000470000000500020002000000080003000cac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x4000095}, 0x24040080)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_DEL_MFC(r10, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c)
getsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, <r11=>0x0}, &(0x7f00000000c0)=0xc)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r11, 0x7}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xa}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc8814}, 0x20008041)
epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x7fffffff, &(0x7f00000000c0)={[0x5]}, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

522.101869ms ago: executing program 4 (id=6984):
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0xe)
unshare(0x2c060000)
unshare(0x24020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x4b3c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x39c, 0x3, 0x0, 0x1, [{0x398, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "44c1bbb97a66624789a40bd6ec8571b4a2391778d14b8edc94722894b2be9b87a8603a033af8db35f0f1529fe4a0a4dafe3c6751b58fe861c686bd2bd34a9b8c5e7ecb95ebd027d710fa8ca3c8a7ca0671c856d9e4f812b3b29776549ce27a18145f7796e46e0576b0d5098f072a675df5cf6d36d0ebcaeb8debf04cb5ccae8680fcdf50b1f716fe83d191469c2cf1e3b3d6500f3c9ee281aa0dc323b8cef2e2bd1245dce25d1ebcff1514ac1cfbfb8ca30efa04093280a544d46461a314c3241bb036f7d9a32a5a689879d824930e7f"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x957}, @NFTA_SET_ELEM_KEY={0x204, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "162653ec027b2d2bd8e324be552f49579ed51c39ba66bf3029ae35f779de6b6f4d0c78fffd26598fe453f2175ab6885b3e67d75f22387d3134d502001f2edb4e079430b708913df8bd3592075fe4e25cc19ea7e4d9c37497025f81d5307e9581f83097ffcb8044ab5787c9712051f70b1a8b960ba829729ee1a6f80524f075a977dcc4"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x65, 0x1, "305a002b669642c0419cbee497441b9d4df3a44cee884a85fcd3e50f7e526a9689841d278a25e247c40f76acf52ac794bba89a0a17c2a94a46ff622d89553798c48b04d676dbac46f8d9f697d26a4a0a871ed73afce7cb9cff46abf0dbd001ec66"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x37, 0x1, "6e49872a8653b6ba92448bcc8065b54035d8d00c334b15ba005b27634e9a4b5cc26a671a83028eac13aa28a9083653bbdae837"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28d0, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x43, 0x6, 0x1, 0x0, "05ce1943c90f07d1b5e8b4cb885824d10b0e5f8e246106a8dbe5011ebca8e8fa2ccecaf668f1221fa4e394fa10ca386c908bc7a08fb59b6af49f26a8582b1b"}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x200, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x54, 0x6, 0x1, 0x0, "eef6393b062cd1159dcfb744c95ecfc3a481ea9ba6440ded95a5d92b4308e5a3ba58b48ca110772122a99d93d579e96928b4daf2fee2b21c86b33dd8ef42f5d0ac9050cd6779416bfde8cdb374021168"}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9fa5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x47}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe0, 0x1, "d183fcf173ad5b726d0967aeb81f93884ce8e7bee49607fcc3da3f185622bf00aff15536d32c2413685f091155d382bd082c725010bb9b471750e9bf902eee1f1fb29a5e1d37150c8143662e9def9159b3ee549e9b79264afd5f4bbd6b81ac99f9a8fb219fea03ca4d4b9c4bdaaa910b98a4798607d8beb9c01b5b03f063b4e53c9b8496f4d1307856b7c4d95dddc85ef9611c7b0113ee7562c00c41721eeba4ae467a56e70b74d3001d13682f53e20dad578c541e3f85c021a5c67912c1537396571a0cfad4082023e97d5b5d227bb012494fb26a7588522917c1c9"}, @NFTA_DATA_VALUE={0x8, 0x1, "61b06934"}]}]}, {0x1334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "53a07f5b9f0c88e3639b6df0"}, @NFTA_DATA_VALUE={0xf2, 0x1, "e9b6e9f839e9181a0a10c52b07c684e6bc4e2dc3c4b3d8d902a1dd221488824ed28c43a2f13088bbfb75ae1e1f111612df77232e03035b933c396c0a662bfd1d6be99246c7a4ec12ad8027c10103698c90014fd83bb42ca37642179ad364fc4014512ba2b3541cec61a5d235801282c64defa4bb7c1407b32439a40e766b90050f7ef100faee5cc48dafcb8bae8771c6d8718798c0e44c081e0c09e65d51158e58770f49236fd4281b3164ca32c09b40b248d71abe10e5626875100d52f67968c010effad776e7b30095b26c7f8ad7ef2bb4a2c00517e98185678afd2b4d05a971fcc00f26fd2779a44dd1fc8550"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_DATA={0x2f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xba, 0x1, "c220aa7f2073742d7a2fa9d1218b2978c4cbfe0aac7beceb1a77d34169cd416a16738ea892f5b9f922e6d9a43b29610c7ae263830ce168267cb332dd5eb1234dbbd042404ac166ef7b0a99badfb7c479b1633c81fd6e6a68a64e9e5fee0cd5b64e71912b8af9a2e97d6378b396d8f924bca183039230645ed20ff6cac2a679ac187ebb2bf486bef46b1ced61dd20ea84749e8f1135131f2c61647c6385701302bbdbdffb93a91df13e9b0c09856d9c9e401f7e97b06e"}, @NFTA_DATA_VALUE={0xf0, 0x1, "4a1ed0147ebc324f34a67e1733737856f21f6eceb518d2a1d9c1fd3d4bda3c290a0b960edfd37cec657c338fd323c1a81825f4bd85a9de140deb187f7f6eb80763a59dd6e727225b5c149be9f1f2de40df31f2c0b3b9364cd0cc089cab563efc71a1e6c8844caf62a61a6b902b8de70b59ddb23e54cc5d86e17c0ed40433ab04ac01ae48c8c80f2648bfb941281e9154f2e73471204714e4317b4a21ebf0b9b7d9f0cdd65828876b8501c9fda5e0bba8c61a0af3213703d7f32fe5b596fe8a39b4994286b4bef05c3e465c08d51426919d26a3b9c06aaa5ede49a2ab5610ef22e2f0a3b0d263434b8e4a1bd2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc5, 0x1, "4aa9ac4a9b345f6df6cb7b72a47ba63365d84388b3baaf80feefec60e9a75fa5c1eb497b0084fecfefc277c3db64e78f69d52e28a3fde4e8394b9e1a24d59a04e6f8b532b1aa4748e3e73282593b148e3fc4dbc62f8bad70d9e1e600bf6579624c0e207bbeb78b64e6a4d091d33d251dd09ee8a5d49d27e411f6881f905d923cc0fb89dfa4858db16aac1687a797020047c8af540e9df691cbc63458a6a8c45094c1db43026891a1573334e672ede3747921247507852167b0df95cdad28089b70"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0xe20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe04, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0xf2, 0x6, 0x1, 0x0, "7244d76f020fd8dcb510037320927ecc8e0f0675eafe0146163f197b3fa8c5201c28399e582ca2a1d4d675bdc933346955ba4b89bfb0c50f2d1b6425719aa66780626826836d7f90fe3fd24d84f908d737aac1194fe18bf6d9065a929ac8d362b42a831808097291eefb9fb27679bc433b48f4dd3cb88bea2ad7b99e594b46e7e74c74e5cd7915db8303e7aae6edb0695346533ef6e37a372144ff37796fae1515697ae9faa3037c3bc679f256715f79f4dff13c99bb484687e71c949059830a0a58bde4aa0bbc989cac5d280acffee1c3fbaa49c5ee021d2d9e4ac48d2f2c6d454b941c493b38af9eadb4aad2e1"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}, {0x12c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x22, 0x1, "82b9c09048119fbc1d5f263c67275bd6406fd6ca1c1cea093d51b5be0716"}, @NFTA_DATA_VALUE={0x70, 0x1, "4cbed4c660e3700c14285c916115e50e02d8b765fcbabba001f026530840b88db3cdd97f5e7f149545f3c0d02c0cb4b832c4aab98a2ccbaabbf0b44e2989735d7a2f5b597b0d785def58f72aae124c161bcab51ecd09d190676ccd06ab61c3975640295a9d11da4d613551f8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "fdfaea0a14c56b234cdd69acb05a0da357f1e6895b524408e389cc7e499c28"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x10ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0xfc, 0x6, 0x1, 0x0, "973701de892e296cc2f2411956ec7f70be0744db5784cc8ae63710c2dab5cf3b69b124d8a0ca502ddcf0639f1179f94a4fa5a2d053b0b923694e3dc5c60b374b88f6b03533f3d4fe9983b0ee221f65b9b2c83d3275a7f197db3aa6f44f03a065d6f43fb35703297e2d391b95416887084e3fe6e39c30584dd479b76bc4812269a483d98a881882dbfcb2df778d4bd728a725b1471575442dc9ee533cd111c03acddbfe0652f1f931ff21dad5019d27862593bef3cc22231744844219c68e02addaa15333637eaf68e32698aabac714c29f965f6e125fcbac85c92cf2b5ea8ab2ed040f33bc7ba6da588ca6e82d16e0b74bbb653624907843"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c1c, 0x3, 0x0, 0x1, [{0x1320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "1ecfe26ef8fdb23a18db6d5dabeafe11bd75e725fcc03af8df46d9cfbc9d51c35c65a8d635b71ffa44d876c453507ad1834dc5f17966ba8be7672b4fb5caffffd7f013c1693f565a6dce80e8323de6ed3aab3ed13da24c15cab97b2169d881d89bf14a37c595b97eb34ffbbd7924fbca677fb22889e6803939c911b80f43f1e1685e2e1b8aed5ae91b18d3a8f917629bf70a80bcf8791c767a6f1c2826a056208080fa08"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "9c806d5b5218bc2e2dace9ab7a0851fdba3b98ece0677817cb7f13768f7b396cc19ccba92fc4bcd20a8ffc7e10dbd01672199a09c7bf4b4d0ed6f34c488c0db246c40adcd61970dca8a0741cf13ce57d379b2e7a0902eb927b779a81b4b40dd52bf9d03bc614bacc25c1d0dc52551659c9df25d8876903a9328e8a0303bf21e2dfba9540adee2287f5555f1cfc1ac471ba54d9ee2c8ae7092e71016bdb3b6f3ca0c19ac5d97366c38c30639cb95c3769e8182353c5f3a9aede423c714c321437afde1d808b6fef329c573f4de94d472913494250745d6e2fc636b8f8143cf1ffdb44caf4964e2e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xe1d7a614cfdb1224}]}]}, @NFTA_SET_ELEM_DATA={0x108c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x28, 0x1, "24aad441a427992190c640eb43b0e6b0d6fcb92329b6cd2b18ee8ab1141584320f04e887"}, @NFTA_DATA_VALUE={0x12, 0x1, "95fc9b0ff0f54efbefb1a69a68a3"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x2e, 0x6, 0x1, 0x0, "013c93013c5ff6dbb68c726301ea237f9622b2fe661214215ed4e3f747734d072394c8a20035cbf8ac1f"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "0df6235e033f0d41e578229cfee16c8a7b8215608fb6c0936bb68a2a0eee3d3ad2d69cbbe3334115f1c57530b564db7f0f8e416ae735351251110b0f4fc5cb206f829ce15131ffddf6fc7458c80fc1e6ad9823db24c3f183d48907235c2268e20727862e7eda903b097a540759986420e2aa9c7253a2f1fd3ea3f9feaa03d929e5ee215afa1ab451dc05b3f1a54f19ab9d5de64fb1a48dbde4aeac49ef00af4f6c77e0aaa0aa74d47dd2c6acabb88f7fe02647473034a92423c97425a16617795e9c97686bf15139d514b00459f67b4c97d6d51f04a3fb2c4616914f2a662a248709953eb0c4f408d96873e76ea52485a4c3109500"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x64, 0x1, "3d2f58e97a858342b74cfb95b79fde5343bf00df79796e7a87d67eb7d0295cacc91e066629ab2f5809e20821a4ab9380ed94e8c6406321d169fa17537add9eb911663a3d375ae16f79728712167d33daa45f06b35221f8aaa843f72c2015cb11"}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "b9a42556a05fdd37a8e71d35b0401153734e980761b5f2da5f04361e14c8c432e8c4bef84569a7b194e98fa39e2c6ea0d95d829a46a10aa44365af66ce4d1a7b110f1948a124636029f5b4f2a2af6afb2a3d23972bfdcfaeec27c96c179ae6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x4cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7857}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_KEY={0x2b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "7029a90956f06c2802840db90a1c6cb2385d4595aebc1acd782bb15996ef8c0ffb678adfec00dbd8509fd343f54e57b15c44d9f7f55f59c0a01306556db0205a34c3d24b57643b69ab2e4b662366c37f87daec1b3ff0fd9b2389ecc828a7f15b69a96c791f70bc206894a74d1b092f439c07c9ee465c3e644ecd4f02097c1dfd22ce5e372e027a2d2ec6c7cacf18ab1b97d2b9623e2e6b5d3eed8a82cbd0f1ba34049529f1d7b05568d536b246b65c3ffb705af556b46a3859008584f55c3cb80c72806f5b755bbc3c6d58a032a67d2c778170760a4602ae04c85084b7646121769a5b7c9d8d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x19, 0x1, "b1302d6754a51837c40a8dc5b4cea3f3ce24dc7050"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "25d94afaedf1afbbaea2749d81ab95df161fb0de6fd81b3e1db1b27d4dc593c24365897206b1bd6b908ee9ff9eac47bedb6754f49544d78ba439f6869d7bfe39bc64d007a61a00950575855931d5e098502a4d5fecd853ca6fca145875501f63320f6ec59eafdcf69baa46dc895973b3b175f75e2514c51d1a6268437b9771893849144a58466bb6826a368462b0ba3ab50d4ae0ee4a23a280baee906f670d6456020db7ebbe6a812a14d7b5aba6cf1c4fa8ab63810aa5b6630733f1ce377692"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "61e712d88e4dce8f4d5b50217bade755de4a72b34b4a6407ddcc95d85b7b795a5dd89d70ee26f471a314cfdc3bc8f33a77a804d10b3096724ab8398e7cca20ad326f00e67254660507d5087076cee24c8a711127445de3f8ed70cc32fc55af0ec9b7baa87233d2a1b2df95e4dff4f08c96c938b0984b3ebc3d26db968d86802c1eac9e307bab94b12c67e5"}]}, @NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "8052f70a253cec32691a9e8b28a857dde4ec5204441006f26718ddc9b75f04c70f41cd6ead21743929d73ebbcf8c7e332782d470f66199070fc75008305d362960302f9dac1ec5ac98ea2e385529c5e9f1f692c232425801bdb6f8fb18c14ce634c21ba08f0664d21f27a019ff4d471b02c25bc7ec42f5c51e2808aeaca59ad1b3580254"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "e4d137908d59ec943506a7bf2049a464d5caa685e4661278282914cb84dbf6d2da561285914f17b71752444e2c32aa7ce7ec0b25019b625f2711f879f2eb4e59899d2c70fe390e416e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf0, 0x1, "eae00cc97115f0efb53c52271c1ffbbbe761ca8e9cd7cf16ca852381c1a342d7bbedc859bb73ddbe748600fbd7b67770899d1ea9a1c8f027fea1596b3b199c82aa1120a25f0355c71534d20df0450b30bc787c32b61a030a4bfc87a75f05448e97ece95f711910994f266a2d4db9be547bfa445d2cf08c16b560078d7111bff26df70e37612c5307a2aee2cc3b3280540dfe649e3e32bead421bf0a2a7991dcc3d58278e171ab22f9d65366de4703e97e636f0d3beb15fe5cf4edb898adfd91880e9930cd4256cbbea59ab63e3b643d3daad710ad5e08687f1d2fc2be3e6ddf1d558266d4ce4f0cc98589fcb"}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28c, 0x3, 0x0, 0x1, [{0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x138, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "6692dbd26414d95c8ec11a9ddebe2a64d1a25cfc55efaf96d1caddbcabda972c45922c2113fa29d8bab147a3f348df4ff4dc51313157dadc59c7137dfc364be030fc31b58cd1fa2bce2fa72445e4f818cfb6d2e5a3414f82dc42c7e9133ca334b9288ad4bd604848d56e9916a6ddfd75f8d60a19dc4f28e7d810cd"}, @NFTA_DATA_VALUE={0x80, 0x1, "2f1d9d22f213385ced3601c3c553a60eb29c02b4a9a8fccc69dc6df53e5610e3f44e3021d5b21fc4c0d1a88bdff3b33c4412d3c600cbc39eb08339c9da0302c1df3b980164acf5d7cfdfbb3a99e1b918cfffda5f70adf1bc7be674d05ddd972a269d3f0303857e672cc72861009a927927a56ec84da981965b8280b1"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x824}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xfe, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4b84}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x5c, r6, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4008000)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

521.55404ms ago: executing program 0 (id=6985):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000002c0)={'ip_vti0\x00', @ifru_map={0x3, 0xe, 0xc000, 0x8, 0x3, 0x5}})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff8c, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40814) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000c00000000000000a4f1ffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005591f0ff0000000018240000", @ANYRES32, @ANYBLOB="00000000060000007fc5000004000000950000070000000bbf91000000000000b70200ea0000001c8500000084000000b7130000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0xf3, &(0x7f0000000340)=""/243, 0x40f00, 0x0, '\x00', r2, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0xc, 0x2}], 0x10, 0x37}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESDEC=r1], &(0x7f0000000c40)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

364.062117ms ago: executing program 3 (id=6986):
pipe(&(0x7f0000000080))
close(0x3)
unshare(0x400)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x9000000, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

269.19407ms ago: executing program 0 (id=6987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x174}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xb7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x56, &(0x7f00000000c0)=""/86, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1], 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x71, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

250.801416ms ago: executing program 4 (id=6988):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

201.602677ms ago: executing program 3 (id=6989):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x4, @mcast1, 0x3}}, 0x0, 0x0, 0xd, 0x0, "225ffe1434fa51fe8aeaa3cd789e5b86ec2bb09c7871d7553f9c65ee8e415a4a419b21580c3aae32fcc37e7cf1a5742a7c722c9bd815e8c7a9656358bcce79ef815b1722ee2f70e4b22f34af3889a1ad"}, 0xd8)
sendto$inet6(r0, &(0x7f00000000c0)="ef21a84149c91d5a1afdd22c14ad75feff26494fcfca1ae0fd32bb86029ca9d38032386c261625c741ad362328a9bd4045dc7afe614b2bc944022c6b08421f6ba571755383d0a29aaee885c395d3546c53e945483c32b1d8b1a0560db59034e584befb56a58afe58f831e377e0031ebe0a34a7acbd31c14d02187b40c74e1981c70f6734c25762f1d276f684", 0x8c, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x61b9dcb8}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000000), 0x4)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) (async)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000003e40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f00000013c0)=[{0x0}], 0x1, &(0x7f0000001440)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x5, [{@remote, 0x9}]}, @cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{0x0}], 0x1}}], 0x2, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) (async)
r7 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x100000)
setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x22847525, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000000)

200.8964ms ago: executing program 1 (id=6990):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'})
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt(0xffffffffffffffff, 0xff, 0x9, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket(0x8, 0xa, 0x8)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x80800)
unshare(0x20000400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x0, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x100009, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xfffffffe, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x6, 0x100, 0x5, 0x252, 0x2000081, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

111.521355ms ago: executing program 4 (id=6991):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x48})
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)

101.077577ms ago: executing program 2 (id=6992):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4840)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe0ff}}]}, 0x2c}}, 0x0)

84.246916ms ago: executing program 0 (id=6993):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x200, 0xffffffffffffffff, 0x2, 0x0, 0x200000001302, 0x1], 0x0, 0x0, 0x0}, 0x7a)
recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffece, 0x400000a2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca853"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00"], 0x80}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00.\x00'], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0x148, 0x160, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010106, 0xff, 0xffffffff, 'gretap0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x11, 0x0, 0x0, 0xfffffffd, 0x533, 0xffffffff, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x1000, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea68dba902bdc2ff8a930811d5ab686316d51d4773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
socket$key(0xf, 0x3, 0x2)

19.910606ms ago: executing program 4 (id=6994):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
getpeername$inet(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
epoll_create(0x10001)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xaf)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000002100)={0x1, 0x8, 0x0, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x890c, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

0s ago: executing program 2 (id=6995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x555}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40000000}, 0x50)

kernel console output (not intermixed with test programs):

2c0
[  895.827624][T24007]  ipip6_tunnel_create+0x112/0x2c0
[  895.827651][T24007]  ipip6_newlink+0x326/0x5d0
[  895.827680][T24007]  ? __pfx_ipip6_newlink+0x10/0x10
[  895.827710][T24007]  ? __pfx_ipip6_newlink+0x10/0x10
[  895.827738][T24007]  rtnl_newlink_create+0x329/0xb70
[  895.827769][T24007]  ? __mutex_lock+0x5ac/0x1300
[  895.827797][T24007]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  895.827827][T24007]  ? __pfx___mutex_lock+0x10/0x10
[  895.827862][T24007]  ? ns_capable+0x89/0xe0
[  895.827888][T24007]  rtnl_newlink+0x1666/0x1be0
[  895.827926][T24007]  ? __pfx_rtnl_newlink+0x10/0x10
[  895.827959][T24007]  ? __lock_acquire+0x6b5/0x2cf0
[  895.827987][T24007]  ? __lock_acquire+0x6b5/0x2cf0
[  895.828010][T24007]  ? __lock_acquire+0x6b5/0x2cf0
[  895.828043][T24007]  ? unwind_next_frame+0xa5/0x23c0
[  895.828092][T24007]  ? __lock_acquire+0x6b5/0x2cf0
[  895.828117][T24007]  ? is_bpf_text_address+0x26/0x2b0
[  895.828141][T24007]  ? kernel_text_address+0xa5/0xe0
[  895.828185][T24007]  ? __pfx_rtnl_newlink+0x10/0x10
[  895.828208][T24007]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  895.828234][T24007]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  895.828258][T24007]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  895.828285][T24007]  ? __lock_acquire+0x6b5/0x2cf0
[  895.828318][T24007]  netlink_rcv_skb+0x232/0x4b0
[  895.828345][T24007]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  895.828371][T24007]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  895.828407][T24007]  ? netlink_deliver_tap+0x2e/0x1b0
[  895.828439][T24007]  netlink_unicast+0x80f/0x9b0
[  895.828471][T24007]  ? __pfx_netlink_unicast+0x10/0x10
[  895.828495][T24007]  ? netlink_sendmsg+0x650/0xb40
[  895.828518][T24007]  ? skb_put+0x11b/0x210
[  895.828546][T24007]  netlink_sendmsg+0x813/0xb40
[  895.828580][T24007]  ? __pfx_netlink_sendmsg+0x10/0x10
[  895.828608][T24007]  ? aa_sock_msg_perm+0xf1/0x1b0
[  895.828634][T24007]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  895.828659][T24007]  ____sys_sendmsg+0x972/0x9f0
[  895.828687][T24007]  ? __pfx_____sys_sendmsg+0x10/0x10
[  895.828722][T24007]  ? import_iovec+0x73/0xa0
[  895.828753][T24007]  ___sys_sendmsg+0x2a5/0x360
[  895.828777][T24007]  ? __pfx____sys_sendmsg+0x10/0x10
[  895.828831][T24007]  ? __fget_files+0x2a/0x420
[  895.828857][T24007]  ? __fget_files+0x3a0/0x420
[  895.828892][T24007]  __x64_sys_sendmsg+0x1bd/0x2a0
[  895.828914][T24007]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  895.828943][T24007]  ? __pfx_ksys_write+0x10/0x10
[  895.828979][T24007]  do_syscall_64+0x14d/0xf80
[  895.829003][T24007]  ? trace_irq_disable+0x3b/0x150
[  895.829028][T24007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.829046][T24007]  ? clear_bhb_loop+0x40/0x90
[  895.829069][T24007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.829087][T24007] RIP: 0033:0x7f40f7f9c799
[  895.829105][T24007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  895.829121][T24007] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  895.829140][T24007] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  895.829154][T24007] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  895.829166][T24007] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  895.829178][T24007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  895.829189][T24007] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  895.829219][T24007]  </TASK>
[  896.412271][T24012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5896'.
[  896.893517][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5904'.
[  897.004136][T24035] lo speed is unknown, defaulting to 1000
[  897.449617][T24053] netlink: 'syz.1.5911': attribute type 1 has an invalid length.
[  897.569580][T24056] bond18: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  897.589391][T24056] bond18: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  897.610512][T24056] bond18: (slave ip6gre1): making interface the new active one
[  897.619374][T24056] bond18: (slave ip6gre1): Enslaving as an active interface with an up link
[  898.163946][T24071] FAULT_INJECTION: forcing a failure.
[  898.163946][T24071] name failslab, interval 1, probability 0, space 0, times 0
[  898.187942][T24071] CPU: 1 UID: 0 PID: 24071 Comm: syz.3.5917 Not tainted syzkaller #0 PREEMPT(full) 
[  898.187970][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  898.187981][T24071] Call Trace:
[  898.187989][T24071]  <TASK>
[  898.187998][T24071]  dump_stack_lvl+0xe8/0x150
[  898.188028][T24071]  should_fail_ex+0x412/0x560
[  898.188057][T24071]  should_failslab+0xa8/0x100
[  898.188082][T24071]  __kvmalloc_node_noprof+0x178/0x8a0
[  898.188105][T24071]  ? __nf_hook_entries_try_shrink+0x328/0x700
[  898.188232][T24071]  __nf_hook_entries_try_shrink+0x328/0x700
[  898.188273][T24071]  __nf_unregister_net_hook+0x4cc/0x6f0
[  898.188315][T24071]  nf_unregister_net_hooks+0xcb/0x140
[  898.188343][T24071]  nf_ct_netns_put+0x3b9/0x520
[  898.188401][T24071]  ? __pfx_nft_masq_ipv4_destroy+0x10/0x10
[  898.188456][T24071]  __nft_release_table+0x56c/0x11f0
[  898.188499][T24071]  ? __pfx___nft_release_table+0x10/0x10
[  898.188544][T24071]  nft_rcv_nl_event+0xc25/0xdb0
[  898.188568][T24071]  ? net_generic+0x1e/0x240
[  898.188604][T24071]  ? __pfx_nft_rcv_nl_event+0x10/0x10
[  898.188638][T24071]  ? nfulnl_rcv_nl_event+0x380/0x3c0
[  898.188662][T24071]  ? nfqnl_rcv_nl_event+0x299/0x2d0
[  898.188693][T24071]  notifier_call_chain+0x1be/0x400
[  898.188731][T24071]  blocking_notifier_call_chain+0x6a/0x90
[  898.188761][T24071]  netlink_release+0x123b/0x1ad0
[  898.188794][T24071]  ? netlink_release+0x101/0x1ad0
[  898.188820][T24071]  ? __pfx_netlink_release+0x10/0x10
[  898.188842][T24071]  ? down_write+0x16d/0x200
[  898.188861][T24071]  ? __pfx_down_write+0x10/0x10
[  898.188876][T24071]  ? locks_remove_posix+0x14f/0x6d0
[  898.188907][T24071]  sock_close+0xc3/0x240
[  898.188931][T24071]  ? __pfx_sock_close+0x10/0x10
[  898.188952][T24071]  __fput+0x44f/0xa70
[  898.188989][T24071]  fput_close_sync+0x11f/0x240
[  898.189015][T24071]  ? __pfx_fput_close_sync+0x10/0x10
[  898.189053][T24071]  __x64_sys_close+0x7e/0x110
[  898.189081][T24071]  do_syscall_64+0x14d/0xf80
[  898.189104][T24071]  ? trace_irq_disable+0x3b/0x150
[  898.189129][T24071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.189148][T24071]  ? clear_bhb_loop+0x40/0x90
[  898.189172][T24071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.189190][T24071] RIP: 0033:0x7f40f7f9c799
[  898.189208][T24071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  898.189224][T24071] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  898.189244][T24071] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  898.189257][T24071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  898.189268][T24071] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  898.189279][T24071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  898.189290][T24071] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  898.189330][T24071]  </TASK>
[  898.583756][T24035] lo speed is unknown, defaulting to 1000
[  899.120613][T24087] netlink: 'syz.3.5923': attribute type 1 has an invalid length.
[  899.224016][T24087] bond10: entered promiscuous mode
[  899.241948][T24087] 8021q: adding VLAN 0 to HW filter on device bond10
[  899.272042][T24087] IPv6: Can't replace route, no match found
[  899.278402][T24087] IPv6: Can't replace route, no match found
[  899.316918][T24093] 8021q: adding VLAN 0 to HW filter on device bond10
[  899.350668][T24093] bond10: (slave wireguard4): The slave device specified does not support setting the MAC address
[  899.367114][T24093] bond10: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  899.413369][T24093] bond10: (slave wireguard4): making interface the new active one
[  899.423781][T24093] wireguard4: entered promiscuous mode
[  899.465924][T24093] bond10: (slave wireguard4): Enslaving as an active interface with an up link
[  899.517378][T23949] net_ratelimit: 391 callbacks suppressed
[  899.517397][T23949] Set syz1 is full, maxelem 65536 reached
[  899.529328][T24095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5924'.
[  899.575676][T24087] bond10: (slave wireguard5): The slave device specified does not support setting the MAC address
[  899.598610][T24092] netlink: 'syz.2.5924': attribute type 3 has an invalid length.
[  899.614158][T24092] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5924'.
[  899.627473][T24087] bond10: (slave wireguard5): Enslaving as a backup interface with an up link
[  899.636986][T24098] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5924'.
[  900.333084][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.582395][T24126] netlink: 'syz.1.5934': attribute type 1 has an invalid length.
[  900.817012][T24142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5937'.
[  900.857114][T24135] lo speed is unknown, defaulting to 1000
[  900.916804][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5937'.
[  901.115372][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'.
[  901.857573][T24196] bond11: entered promiscuous mode
[  901.968924][T24135] lo speed is unknown, defaulting to 1000
[  902.058427][T24207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5959'.
[  902.084792][T24207] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5959'.
[  902.095973][T24207] netlink: 'syz.2.5959': attribute type 3 has an invalid length.
[  902.104023][T24207] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5959'.
[  902.191527][T24215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5962'.
[  902.224489][T24215] netlink: 'syz.2.5962': attribute type 3 has an invalid length.
[  902.678610][T24233] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  902.817193][T24238] lo speed is unknown, defaulting to 1000
[  903.115382][T24253] syzkaller1: entered promiscuous mode
[  903.123719][T24253] syzkaller1: entered allmulticast mode
[  903.383922][T24270] dvmrp12: entered allmulticast mode
[  903.432090][T24269] dvmrp12: left allmulticast mode
[  903.877036][T24293] bond12 (unregistering): Released all slaves
[  903.985893][T24302] dummy0: entered promiscuous mode
[  904.019076][T24302] macsec2: entered allmulticast mode
[  904.031534][T24302] dummy0: entered allmulticast mode
[  904.046034][T24302] dummy0: left allmulticast mode
[  904.059746][T24302] dummy0: left promiscuous mode
[  904.121386][T24238] lo speed is unknown, defaulting to 1000
[  904.345196][T24318] Set syz1 is full, maxelem 65536 reached
[  904.351726][T24318] Set syz1 is full, maxelem 65536 reached
[  904.363656][T24326] sysfs: cannot create duplicate filename '/class/ieee80211/

Ï€ã,ÄûÔxµ…üb©)%ë�	]ô‚3DûLÌ¥”!'
[  904.364929][T24318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  904.387910][T24326] CPU: 1 UID: 0 PID: 24326 Comm: syz.2.5994 Not tainted syzkaller #0 PREEMPT(full) 
[  904.387938][T24326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  904.387952][T24326] Call Trace:
[  904.387959][T24326]  <TASK>
[  904.387969][T24326]  dump_stack_lvl+0xe8/0x150
[  904.388002][T24326]  sysfs_warn_dup+0x8e/0xa0
[  904.388033][T24326]  sysfs_do_create_link_sd+0xc0/0x110
[  904.388065][T24326]  device_add_class_symlinks+0x1cf/0x240
[  904.388093][T24326]  device_add+0x475/0xb70
[  904.388119][T24326]  wiphy_register+0x1d73/0x2d50
[  904.388162][T24326]  ? __pfx_wiphy_register+0x10/0x10
[  904.388185][T24326]  ? __pfx_netdev_run_todo+0x10/0x10
[  904.388208][T24326]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  904.388238][T24326]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  904.388270][T24326]  ieee80211_register_hw+0x35f0/0x42c0
[  904.388318][T24326]  ? ieee80211_register_hw+0x1431/0x42c0
[  904.388360][T24326]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  904.388419][T24326]  ? __hrtimer_setup+0x181/0x200
[  904.388448][T24326]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  904.388478][T24326]  mac80211_hwsim_new_radio+0x3334/0x5b60
[  904.388531][T24326]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  904.388553][T24326]  ? kstrndup+0xbf/0x160
[  904.388589][T24326]  hwsim_new_radio_nl+0xf6a/0x1c00
[  904.388631][T24326]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  904.388659][T24326]  ? rcu_is_watching+0x15/0xb0
[  904.388684][T24326]  ? trace_kmalloc+0x2a/0x110
[  904.388711][T24326]  ? __nla_parse+0x40/0x60
[  904.388741][T24326]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  904.388766][T24326]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  904.388795][T24326]  genl_family_rcv_msg_doit+0x22a/0x330
[  904.388825][T24326]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  904.388861][T24326]  ? bpf_lsm_capable+0x9/0x20
[  904.388888][T24326]  ? security_capable+0x7e/0x2c0
[  904.388920][T24326]  genl_rcv_msg+0x61c/0x7a0
[  904.388947][T24326]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.388967][T24326]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  904.388988][T24326]  ? __lock_acquire+0x6b5/0x2cf0
[  904.389026][T24326]  netlink_rcv_skb+0x232/0x4b0
[  904.389056][T24326]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.389079][T24326]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  904.389127][T24326]  ? down_read+0x272/0x2e0
[  904.389145][T24326]  ? genl_rcv+0xd/0x40
[  904.389168][T24326]  genl_rcv+0x28/0x40
[  904.389187][T24326]  netlink_unicast+0x80f/0x9b0
[  904.389222][T24326]  ? __pfx_netlink_unicast+0x10/0x10
[  904.389249][T24326]  ? netlink_sendmsg+0x650/0xb40
[  904.389274][T24326]  ? skb_put+0x11b/0x210
[  904.389305][T24326]  netlink_sendmsg+0x813/0xb40
[  904.389343][T24326]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.389376][T24326]  ? aa_sock_msg_perm+0xf1/0x1b0
[  904.389412][T24326]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  904.389440][T24326]  ____sys_sendmsg+0x972/0x9f0
[  904.389460][T24326]  ? futex_unqueue+0x211/0x240
[  904.389493][T24326]  ? __pfx_____sys_sendmsg+0x10/0x10
[  904.389524][T24326]  ? import_iovec+0x73/0xa0
[  904.389559][T24326]  ___sys_sendmsg+0x2a5/0x360
[  904.389587][T24326]  ? __pfx____sys_sendmsg+0x10/0x10
[  904.389613][T24326]  ? futex_wait+0x29a/0x380
[  904.389666][T24326]  ? __fget_files+0x2a/0x420
[  904.389693][T24326]  ? __fget_files+0x3a0/0x420
[  904.389730][T24326]  __x64_sys_sendmsg+0x1bd/0x2a0
[  904.389751][T24326]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  904.389780][T24326]  ? rcu_is_watching+0x15/0xb0
[  904.389816][T24326]  do_syscall_64+0x14d/0xf80
[  904.389845][T24326]  ? trace_irq_disable+0x3b/0x150
[  904.389874][T24326]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.389895][T24326]  ? clear_bhb_loop+0x40/0x90
[  904.389918][T24326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.389937][T24326] RIP: 0033:0x7eff6919c799
[  904.389956][T24326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  904.389974][T24326] RSP: 002b:00007eff69fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.389996][T24326] RAX: ffffffffffffffda RBX: 00007eff69415fa0 RCX: 00007eff6919c799
[  904.390013][T24326] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  904.390027][T24326] RBP: 00007eff69232c99 R08: 0000000000000000 R09: 0000000000000000
[  904.390040][T24326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  904.390052][T24326] R13: 00007eff69416038 R14: 00007eff69415fa0 R15: 00007ffce9ad80e8
[  904.390086][T24326]  </TASK>
[  904.945271][T24338] netlink: 'syz.3.5996': attribute type 21 has an invalid length.
[  904.963530][T24338] __nla_validate_parse: 6 callbacks suppressed
[  904.963548][T24338] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5996'.
[  905.017089][T24340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  905.100140][T24338] netlink: 'syz.3.5996': attribute type 4 has an invalid length.
[  905.162027][T24338] netlink: 'syz.3.5996': attribute type 5 has an invalid length.
[  905.201938][T24338] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5996'.
[  905.845757][T24371] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6007'.
[  906.082037][T24386] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  906.100307][T24386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  906.130535][T24386] openvswitch: netlink: Actions may not be safe on all matching packets
[  906.180021][T24398] netlink: 'syz.3.6015': attribute type 1 has an invalid length.
[  906.306053][T24398] bond11: entered promiscuous mode
[  906.311946][T24398] 8021q: adding VLAN 0 to HW filter on device bond11
[  906.367972][T24409] FAULT_INJECTION: forcing a failure.
[  906.367972][T24409] name failslab, interval 1, probability 0, space 0, times 0
[  906.369455][T24410] IPv6: Can't replace route, no match found
[  906.397794][T24409] CPU: 1 UID: 0 PID: 24409 Comm: syz.2.6018 Not tainted syzkaller #0 PREEMPT(full) 
[  906.397820][T24409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  906.397831][T24409] Call Trace:
[  906.397838][T24409]  <TASK>
[  906.397847][T24409]  dump_stack_lvl+0xe8/0x150
[  906.397878][T24409]  should_fail_ex+0x412/0x560
[  906.397907][T24409]  should_failslab+0xa8/0x100
[  906.397932][T24409]  __kvmalloc_node_noprof+0x178/0x8a0
[  906.397954][T24409]  ? __nf_hook_entries_try_shrink+0x328/0x700
[  906.397991][T24409]  __nf_hook_entries_try_shrink+0x328/0x700
[  906.398031][T24409]  __nf_unregister_net_hook+0x4cc/0x6f0
[  906.398068][T24409]  nf_unregister_net_hooks+0xcb/0x140
[  906.398096][T24409]  nf_ct_netns_put+0x3b9/0x520
[  906.398121][T24409]  ? __pfx_nft_masq_ipv4_destroy+0x10/0x10
[  906.398147][T24409]  __nft_release_table+0x56c/0x11f0
[  906.398187][T24409]  ? __pfx___nft_release_table+0x10/0x10
[  906.398231][T24409]  nft_rcv_nl_event+0xc25/0xdb0
[  906.398256][T24409]  ? net_generic+0x1e/0x240
[  906.398289][T24409]  ? __pfx_nft_rcv_nl_event+0x10/0x10
[  906.398322][T24409]  ? nfulnl_rcv_nl_event+0x380/0x3c0
[  906.398346][T24409]  ? nfqnl_rcv_nl_event+0x299/0x2d0
[  906.398378][T24409]  notifier_call_chain+0x1be/0x400
[  906.398414][T24409]  blocking_notifier_call_chain+0x6a/0x90
[  906.398444][T24409]  netlink_release+0x123b/0x1ad0
[  906.398478][T24409]  ? netlink_release+0x101/0x1ad0
[  906.398503][T24409]  ? __pfx_netlink_release+0x10/0x10
[  906.398525][T24409]  ? down_write+0x16d/0x200
[  906.398544][T24409]  ? __pfx_down_write+0x10/0x10
[  906.398560][T24409]  ? locks_remove_posix+0x14f/0x6d0
[  906.398591][T24409]  sock_close+0xc3/0x240
[  906.398615][T24409]  ? __pfx_sock_close+0x10/0x10
[  906.398644][T24409]  __fput+0x44f/0xa70
[  906.398681][T24409]  fput_close_sync+0x11f/0x240
[  906.398705][T24409]  ? __pfx_fput_close_sync+0x10/0x10
[  906.398741][T24409]  __x64_sys_close+0x7e/0x110
[  906.398768][T24409]  do_syscall_64+0x14d/0xf80
[  906.398792][T24409]  ? trace_irq_disable+0x3b/0x150
[  906.398817][T24409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.398837][T24409]  ? clear_bhb_loop+0x40/0x90
[  906.398860][T24409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.398879][T24409] RIP: 0033:0x7eff6919c799
[  906.398897][T24409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  906.398912][T24409] RSP: 002b:00007eff69fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  906.398932][T24409] RAX: ffffffffffffffda RBX: 00007eff69415fa0 RCX: 00007eff6919c799
[  906.398944][T24409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  906.398955][T24409] RBP: 00007eff69fe6090 R08: 0000000000000000 R09: 0000000000000000
[  906.398965][T24409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  906.398975][T24409] R13: 00007eff69416038 R14: 00007eff69415fa0 R15: 00007ffce9ad80e8
[  906.399007][T24409]  </TASK>
[  906.399938][T24410] IPv6: Can't replace route, no match found
[  906.510686][T24417] FAULT_INJECTION: forcing a failure.
[  906.510686][T24417] name failslab, interval 1, probability 0, space 0, times 0
[  906.710771][T24417] CPU: 1 UID: 0 PID: 24417 Comm: syz.2.6020 Not tainted syzkaller #0 PREEMPT(full) 
[  906.710797][T24417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  906.710808][T24417] Call Trace:
[  906.710816][T24417]  <TASK>
[  906.710824][T24417]  dump_stack_lvl+0xe8/0x150
[  906.710853][T24417]  should_fail_ex+0x412/0x560
[  906.710883][T24417]  should_failslab+0xa8/0x100
[  906.710908][T24417]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  906.710929][T24417]  ? __alloc_skb+0x186/0x7d0
[  906.710953][T24417]  ? __alloc_skb+0x1d0/0x7d0
[  906.710975][T24417]  ? __local_bh_enable_ip+0xd0/0x130
[  906.711003][T24417]  __alloc_skb+0x1d0/0x7d0
[  906.711028][T24417]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  906.711074][T24417]  netlink_sendmsg+0x5d4/0xb40
[  906.711107][T24417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  906.711129][T24417]  ? aa_sock_msg_perm+0xf1/0x1b0
[  906.711152][T24417]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  906.711176][T24417]  ____sys_sendmsg+0x972/0x9f0
[  906.711203][T24417]  ? __pfx_____sys_sendmsg+0x10/0x10
[  906.711228][T24417]  ? import_iovec+0x73/0xa0
[  906.711257][T24417]  ___sys_sendmsg+0x2a5/0x360
[  906.711285][T24417]  ? __pfx____sys_sendmsg+0x10/0x10
[  906.711335][T24417]  ? __fget_files+0x2a/0x420
[  906.711360][T24417]  ? __fget_files+0x3a0/0x420
[  906.711393][T24417]  __x64_sys_sendmsg+0x1bd/0x2a0
[  906.711413][T24417]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  906.711439][T24417]  ? __pfx_ksys_write+0x10/0x10
[  906.711469][T24417]  do_syscall_64+0x14d/0xf80
[  906.711494][T24417]  ? trace_irq_disable+0x3b/0x150
[  906.711518][T24417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.711537][T24417]  ? clear_bhb_loop+0x40/0x90
[  906.711559][T24417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.711576][T24417] RIP: 0033:0x7eff6919c799
[  906.711594][T24417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  906.711617][T24417] RSP: 002b:00007eff69fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  906.711636][T24417] RAX: ffffffffffffffda RBX: 00007eff69415fa0 RCX: 00007eff6919c799
[  906.711648][T24417] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  906.711660][T24417] RBP: 00007eff69fe6090 R08: 0000000000000000 R09: 0000000000000000
[  906.711671][T24417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  906.711682][T24417] R13: 00007eff69416038 R14: 00007eff69415fa0 R15: 00007ffce9ad80e8
[  906.711705][T24417]  </TASK>
[  906.712007][T24406] 8021q: adding VLAN 0 to HW filter on device bond11
[  906.974988][T24406] bond11: (slave wireguard6): The slave device specified does not support setting the MAC address
[  906.985694][T24406] bond11: (slave wireguard6): Setting fail_over_mac to active for active-backup mode
[  907.005765][T24406] bond11: (slave wireguard6): making interface the new active one
[  907.016733][T24406] wireguard6: entered promiscuous mode
[  907.036157][T24406] bond11: (slave wireguard6): Enslaving as an active interface with an up link
[  907.150561][T24410] bond11: (slave wireguard7): The slave device specified does not support setting the MAC address
[  907.186408][T24410] bond11: (slave wireguard7): Enslaving as a backup interface with an up link
[  907.264783][T24436] syz.0.6026 uses old SIOCAX25GETINFO
[  907.314375][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6027'.
[  907.338481][T24441] FAULT_INJECTION: forcing a failure.
[  907.338481][T24441] name failslab, interval 1, probability 0, space 0, times 0
[  907.356487][T24441] CPU: 0 UID: 0 PID: 24441 Comm: syz.3.6027 Not tainted syzkaller #0 PREEMPT(full) 
[  907.356513][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  907.356525][T24441] Call Trace:
[  907.356532][T24441]  <TASK>
[  907.356540][T24441]  dump_stack_lvl+0xe8/0x150
[  907.356572][T24441]  should_fail_ex+0x412/0x560
[  907.356600][T24441]  should_failslab+0xa8/0x100
[  907.356625][T24441]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  907.356646][T24441]  ? __alloc_skb+0x186/0x7d0
[  907.356671][T24441]  ? __alloc_skb+0x1d0/0x7d0
[  907.356693][T24441]  ? __local_bh_enable_ip+0xd0/0x130
[  907.356720][T24441]  __alloc_skb+0x1d0/0x7d0
[  907.356744][T24441]  ? netlink_ack_tlv_len+0x6c/0x210
[  907.356771][T24441]  netlink_ack+0x146/0xa50
[  907.356811][T24441]  netlink_rcv_skb+0x2b6/0x4b0
[  907.356837][T24441]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  907.356862][T24441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  907.356897][T24441]  ? bpf_lsm_capable+0x9/0x20
[  907.356920][T24441]  ? security_capable+0x7e/0x2c0
[  907.356949][T24441]  nfnetlink_rcv+0x2c0/0x27b0
[  907.356969][T24441]  ? is_bpf_text_address+0x26/0x2b0
[  907.356993][T24441]  ? is_bpf_text_address+0x292/0x2b0
[  907.357011][T24441]  ? is_bpf_text_address+0x26/0x2b0
[  907.357033][T24441]  ? kernel_text_address+0xa5/0xe0
[  907.357054][T24441]  ? __kernel_text_address+0xd/0x30
[  907.357072][T24441]  ? unwind_get_return_address+0x4d/0x90
[  907.357105][T24441]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  907.357125][T24441]  ? arch_stack_walk+0xfb/0x150
[  907.357158][T24441]  ? __lock_acquire+0x6b5/0x2cf0
[  907.357180][T24441]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  907.357202][T24441]  ? __pfx_stack_trace_save+0x10/0x10
[  907.357229][T24441]  ? __lock_acquire+0x6b5/0x2cf0
[  907.357259][T24441]  ? __lock_acquire+0x6b5/0x2cf0
[  907.357287][T24441]  ? __netlink_lookup+0xc6/0x8b0
[  907.357317][T24441]  ? __netlink_lookup+0x7e4/0x8b0
[  907.357349][T24441]  ? netlink_deliver_tap+0x2e/0x1b0
[  907.357378][T24441]  ? netlink_deliver_tap+0x2e/0x1b0
[  907.357407][T24441]  netlink_unicast+0x80f/0x9b0
[  907.357436][T24441]  ? __pfx_netlink_unicast+0x10/0x10
[  907.357455][T24441]  ? netlink_sendmsg+0x650/0xb40
[  907.357475][T24441]  ? skb_put+0x11b/0x210
[  907.357503][T24441]  netlink_sendmsg+0x813/0xb40
[  907.357533][T24441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  907.357558][T24441]  ? aa_sock_msg_perm+0xf1/0x1b0
[  907.357582][T24441]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  907.357605][T24441]  ____sys_sendmsg+0x972/0x9f0
[  907.357629][T24441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  907.357656][T24441]  ? import_iovec+0x73/0xa0
[  907.357686][T24441]  ___sys_sendmsg+0x2a5/0x360
[  907.357709][T24441]  ? __pfx____sys_sendmsg+0x10/0x10
[  907.357759][T24441]  ? __fget_files+0x2a/0x420
[  907.357783][T24441]  ? __fget_files+0x3a0/0x420
[  907.357817][T24441]  __x64_sys_sendmsg+0x1bd/0x2a0
[  907.357838][T24441]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  907.357866][T24441]  ? __pfx_ksys_write+0x10/0x10
[  907.357897][T24441]  do_syscall_64+0x14d/0xf80
[  907.357921][T24441]  ? trace_irq_disable+0x3b/0x150
[  907.357945][T24441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.357963][T24441]  ? clear_bhb_loop+0x40/0x90
[  907.357985][T24441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.358002][T24441] RIP: 0033:0x7f40f7f9c799
[  907.358020][T24441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  907.358035][T24441] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  907.358055][T24441] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  907.358067][T24441] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000009
[  907.358079][T24441] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  907.358096][T24441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  907.358107][T24441] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  907.358137][T24441]  </TASK>
[  907.940357][T24459] netlink: zone id is out of range
[  907.945518][T24459] netlink: zone id is out of range
[  907.973527][T24459] netlink: zone id is out of range
[  907.985158][T24459] netlink: zone id is out of range
[  907.990729][T24459] netlink: zone id is out of range
[  907.996330][T24459] netlink: zone id is out of range
[  908.507073][T24123] udevd[24123]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  908.650810][T24504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6054'.
[  908.696823][T24504] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  908.879739][T24510] bond12: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  909.088413][T24510] bond12 (unregistering): Released all slaves
[  909.263479][T24522] lo speed is unknown, defaulting to 1000
[  909.728421][T24545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6065'.
[  909.777342][T24544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  909.830307][T24549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6067'.
[  909.850947][T24549] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6067'.
[  910.191610][T24522] lo speed is unknown, defaulting to 1000
[  910.227850][    C1] net_ratelimit: 1196 callbacks suppressed
[  910.227869][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.467775][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.475103][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6077'.
[  910.485490][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6077'.
[  910.564288][T24576] netlink: zone id is out of range
[  910.569573][T24576] netlink: zone id is out of range
[  910.574691][T24576] netlink: zone id is out of range
[  910.580570][T24576] netlink: zone id is out of range
[  910.585746][T24576] netlink: zone id is out of range
[  910.588465][T24575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6079'.
[  910.590933][T24576] netlink: zone id is out of range
[  910.605051][T24576] netlink: zone id is out of range
[  910.611004][T24576] netlink: zone id is out of range
[  910.667421][T24573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  910.792420][T24584] ip6tnl2: entered promiscuous mode
[  910.797871][T24584] ip6tnl2: entered allmulticast mode
[  910.850488][T24590] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6084'.
[  910.939632][T24599] netlink: 'syz.1.6088': attribute type 27 has an invalid length.
[  911.039046][T24603] netlink: 'syz.1.6089': attribute type 1 has an invalid length.
[  911.119620][T24608] IPv6: Can't replace route, no match found
[  911.138709][T24608] IPv6: Can't replace route, no match found
[  911.168394][T24603] bond20: entered promiscuous mode
[  911.173987][T24603] 8021q: adding VLAN 0 to HW filter on device bond20
[  911.272315][T24612] lo speed is unknown, defaulting to 1000
[  911.278816][T24612] lo speed is unknown, defaulting to 1000
[  911.285437][T24612] lo speed is unknown, defaulting to 1000
[  911.304105][T24612] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  911.347507][T24619] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6095'.
[  911.379134][T24617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6093'.
[  911.392234][T24617] netem: incorrect ge model size
[  911.397437][T24617] netem: change failed
[  911.418783][T24612] lo speed is unknown, defaulting to 1000
[  911.426406][T24612] lo speed is unknown, defaulting to 1000
[  911.435833][T24613] syzkaller1: entered promiscuous mode
[  911.444102][T24613] syzkaller1: entered allmulticast mode
[  911.453290][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6097'.
[  911.475639][T24612] lo speed is unknown, defaulting to 1000
[  911.483643][T24612] lo speed is unknown, defaulting to 1000
[  911.486471][T24621] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6097'.
[  911.491280][T24612] lo speed is unknown, defaulting to 1000
[  911.502939][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6098'.
[  911.505853][T24627] lo: entered allmulticast mode
[  911.518243][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6097'.
[  911.536923][T24612] lo speed is unknown, defaulting to 1000
[  911.564503][T24621] lo: left allmulticast mode
[  911.747179][T24642] netlink: 'syz.0.6103': attribute type 9 has an invalid length.
[  911.774641][T24640] sysfs: cannot create duplicate filename '/class/ieee80211/

Ï€ã,ÄûÔxµ…üb©)%ë�	]ô‚3DûLÌ¥”!'
[  911.791232][T24640] CPU: 0 UID: 0 PID: 24640 Comm: syz.3.6105 Not tainted syzkaller #0 PREEMPT(full) 
[  911.791261][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  911.791276][T24640] Call Trace:
[  911.791285][T24640]  <TASK>
[  911.791294][T24640]  dump_stack_lvl+0xe8/0x150
[  911.791329][T24640]  sysfs_warn_dup+0x8e/0xa0
[  911.791357][T24640]  sysfs_do_create_link_sd+0xc0/0x110
[  911.791389][T24640]  device_add_class_symlinks+0x1cf/0x240
[  911.791417][T24640]  device_add+0x475/0xb70
[  911.791443][T24640]  wiphy_register+0x1d73/0x2d50
[  911.791484][T24640]  ? __pfx_wiphy_register+0x10/0x10
[  911.791507][T24640]  ? __pfx_netdev_run_todo+0x10/0x10
[  911.791530][T24640]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  911.791563][T24640]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  911.791598][T24640]  ieee80211_register_hw+0x35f0/0x42c0
[  911.791644][T24640]  ? ieee80211_register_hw+0x1431/0x42c0
[  911.791686][T24640]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  911.791735][T24640]  ? __hrtimer_setup+0x181/0x200
[  911.791763][T24640]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  911.791793][T24640]  mac80211_hwsim_new_radio+0x3334/0x5b60
[  911.791847][T24640]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  911.791868][T24640]  ? kstrndup+0xbf/0x160
[  911.791905][T24640]  hwsim_new_radio_nl+0xf6a/0x1c00
[  911.791952][T24640]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  911.791983][T24640]  ? rcu_is_watching+0x15/0xb0
[  911.792012][T24640]  ? trace_kmalloc+0x2a/0x110
[  911.792041][T24640]  ? __nla_parse+0x40/0x60
[  911.792073][T24640]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  911.792097][T24640]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  911.792128][T24640]  genl_family_rcv_msg_doit+0x22a/0x330
[  911.792167][T24640]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  911.792202][T24640]  ? bpf_lsm_capable+0x9/0x20
[  911.792230][T24640]  ? security_capable+0x7e/0x2c0
[  911.792261][T24640]  genl_rcv_msg+0x61c/0x7a0
[  911.792288][T24640]  ? __pfx_genl_rcv_msg+0x10/0x10
[  911.792308][T24640]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  911.792331][T24640]  ? __lock_acquire+0x6b5/0x2cf0
[  911.792370][T24640]  netlink_rcv_skb+0x232/0x4b0
[  911.792397][T24640]  ? __pfx_genl_rcv_msg+0x10/0x10
[  911.792420][T24640]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  911.792465][T24640]  ? down_read+0x272/0x2e0
[  911.792484][T24640]  ? genl_rcv+0xd/0x40
[  911.792505][T24640]  genl_rcv+0x28/0x40
[  911.792523][T24640]  netlink_unicast+0x80f/0x9b0
[  911.792558][T24640]  ? __pfx_netlink_unicast+0x10/0x10
[  911.792593][T24640]  ? netlink_sendmsg+0x650/0xb40
[  911.792620][T24640]  ? skb_put+0x11b/0x210
[  911.792652][T24640]  netlink_sendmsg+0x813/0xb40
[  911.792690][T24640]  ? __pfx_netlink_sendmsg+0x10/0x10
[  911.792723][T24640]  ? aa_sock_msg_perm+0xf1/0x1b0
[  911.792749][T24640]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  911.792776][T24640]  ____sys_sendmsg+0x972/0x9f0
[  911.792795][T24640]  ? futex_unqueue+0x211/0x240
[  911.792826][T24640]  ? __pfx_____sys_sendmsg+0x10/0x10
[  911.792856][T24640]  ? import_iovec+0x73/0xa0
[  911.792890][T24640]  ___sys_sendmsg+0x2a5/0x360
[  911.792916][T24640]  ? __pfx____sys_sendmsg+0x10/0x10
[  911.792943][T24640]  ? futex_wait+0x29a/0x380
[  911.792995][T24640]  ? __fget_files+0x2a/0x420
[  911.793025][T24640]  ? __fget_files+0x3a0/0x420
[  911.793063][T24640]  __x64_sys_sendmsg+0x1bd/0x2a0
[  911.793086][T24640]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  911.793117][T24640]  ? rcu_is_watching+0x15/0xb0
[  911.793166][T24640]  do_syscall_64+0x14d/0xf80
[  911.793196][T24640]  ? trace_irq_disable+0x3b/0x150
[  911.793226][T24640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  911.793247][T24640]  ? clear_bhb_loop+0x40/0x90
[  911.793271][T24640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  911.793290][T24640] RIP: 0033:0x7f40f7f9c799
[  911.793311][T24640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  911.793329][T24640] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  911.793351][T24640] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  911.793367][T24640] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  911.793381][T24640] RBP: 00007f40f8032c99 R08: 0000000000000000 R09: 0000000000000000
[  911.793393][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  911.793405][T24640] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  911.793437][T24640]  </TASK>
[  911.827864][T24639] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  911.860994][T24644] delete_channel: no stack
[  911.942150][T24649] FAULT_INJECTION: forcing a failure.
[  911.942150][T24649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  912.295446][T24649] CPU: 1 UID: 0 PID: 24649 Comm: syz.3.6107 Not tainted syzkaller #0 PREEMPT(full) 
[  912.295471][T24649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  912.295482][T24649] Call Trace:
[  912.295489][T24649]  <TASK>
[  912.295496][T24649]  dump_stack_lvl+0xe8/0x150
[  912.295524][T24649]  should_fail_ex+0x412/0x560
[  912.295551][T24649]  _copy_from_user+0x2d/0xb0
[  912.295579][T24649]  memdup_user+0x5e/0xd0
[  912.295601][T24649]  strndup_user+0x68/0xd0
[  912.295624][T24649]  bpf_uprobe_multi_link_attach+0x35e/0x1020
[  912.295666][T24649]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  912.295691][T24649]  ? __fget_files+0x2a/0x420
[  912.295717][T24649]  ? __fget_files+0x2a/0x420
[  912.295740][T24649]  ? __fget_files+0x3a0/0x420
[  912.295762][T24649]  ? __fget_files+0x2a/0x420
[  912.295788][T24649]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  912.295810][T24649]  link_create+0x673/0x850
[  912.295832][T24649]  __sys_bpf+0x468/0x950
[  912.295859][T24649]  ? __pfx___sys_bpf+0x10/0x10
[  912.295895][T24649]  ? ksys_write+0x242/0x270
[  912.295914][T24649]  ? __pfx_ksys_write+0x10/0x10
[  912.295938][T24649]  __x64_sys_bpf+0x7c/0x90
[  912.295959][T24649]  do_syscall_64+0x14d/0xf80
[  912.295983][T24649]  ? trace_irq_disable+0x3b/0x150
[  912.296007][T24649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.296023][T24649]  ? clear_bhb_loop+0x40/0x90
[  912.296044][T24649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  912.296062][T24649] RIP: 0033:0x7f40f7f9c799
[  912.296079][T24649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  912.296095][T24649] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  912.296115][T24649] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  912.296129][T24649] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 000000000000001c
[  912.296140][T24649] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  912.296152][T24649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  912.296163][T24649] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  912.296202][T24649]  </TASK>
[  912.794966][T24672] lo speed is unknown, defaulting to 1000
[  913.746768][T24672] lo speed is unknown, defaulting to 1000
[  913.768766][T24672] lo speed is unknown, defaulting to 1000
[  914.428565][T24713] bond12: entered promiscuous mode
[  915.550720][T24740] __nla_validate_parse: 10 callbacks suppressed
[  915.550738][T24740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6134'.
[  915.585741][T24740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6134'.
[  915.628157][T24740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6134'.
[  915.645454][T24740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6134'.
[  916.213953][T24758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  916.244206][T24758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  916.366358][T24760] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  916.450908][T24765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6145'.
[  916.652986][T24771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  916.666749][T24771] syzkaller0: entered promiscuous mode
[  916.677841][T24771] syzkaller0: entered allmulticast mode
[  916.865673][T24666] net_ratelimit: 1196 callbacks suppressed
[  916.865693][T24666] Set syz1 is full, maxelem 65536 reached
[  917.222641][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6157'.
[  917.231997][T24797] FAULT_INJECTION: forcing a failure.
[  917.231997][T24797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  917.245381][T24797] CPU: 0 UID: 0 PID: 24797 Comm: syz.0.6157 Not tainted syzkaller #0 PREEMPT(full) 
[  917.245403][T24797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  917.245415][T24797] Call Trace:
[  917.245423][T24797]  <TASK>
[  917.245431][T24797]  dump_stack_lvl+0xe8/0x150
[  917.245461][T24797]  should_fail_ex+0x412/0x560
[  917.245487][T24797]  _copy_to_user+0x31/0xb0
[  917.245515][T24797]  simple_read_from_buffer+0xe1/0x170
[  917.245542][T24797]  proc_fail_nth_read+0x1bb/0x230
[  917.245567][T24797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  917.245592][T24797]  ? rw_verify_area+0x2a6/0x4d0
[  917.245609][T24797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  917.245632][T24797]  vfs_read+0x20c/0xa70
[  917.245657][T24797]  ? fdget_pos+0x246/0x320
[  917.245686][T24797]  ? __pfx___mutex_lock+0x10/0x10
[  917.245712][T24797]  ? __pfx_vfs_read+0x10/0x10
[  917.245733][T24797]  ? __fget_files+0x2a/0x420
[  917.245761][T24797]  ? __fget_files+0x3a0/0x420
[  917.245784][T24797]  ? __fget_files+0x2a/0x420
[  917.245816][T24797]  ksys_read+0x150/0x270
[  917.245835][T24797]  ? __pfx_ksys_read+0x10/0x10
[  917.245863][T24797]  do_syscall_64+0x14d/0xf80
[  917.245886][T24797]  ? trace_irq_disable+0x3b/0x150
[  917.245910][T24797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.245927][T24797]  ? clear_bhb_loop+0x40/0x90
[  917.245945][T24797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.245962][T24797] RIP: 0033:0x7fb39fd5cfce
[  917.245980][T24797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  917.245994][T24797] RSP: 002b:00007fb3a0c91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  917.246011][T24797] RAX: ffffffffffffffda RBX: 00007fb3a0c926c0 RCX: 00007fb39fd5cfce
[  917.246023][T24797] RDX: 000000000000000f RSI: 00007fb3a0c920a0 RDI: 000000000000000c
[  917.246034][T24797] RBP: 00007fb3a0c92090 R08: 0000000000000000 R09: 0000000000000000
[  917.246045][T24797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.246056][T24797] R13: 00007fb3a0016038 R14: 00007fb3a0015fa0 R15: 00007ffe9cb1f728
[  917.246082][T24797]  </TASK>
[  917.572031][T24771] tipc: Resetting bearer <eth:syzkaller0>
[  917.691646][T24771] tipc: Disabling bearer <eth:syzkaller0>
[  917.808351][T24818] netlink: 'syz.0.6165': attribute type 9 has an invalid length.
[  917.909382][T24827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.952639][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6165'.
[  918.819382][T24856] bond13: entered promiscuous mode
[  918.979896][T24864] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6179'.
[  919.278637][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'.
[  920.085610][T24891] netlink: 'syz.4.6187': attribute type 12 has an invalid length.
[  920.117267][T24893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6188'.
[  920.358987][T24909] openvswitch: netlink: Flow key attr not present in new flow.
[  920.639288][T24926] __nla_validate_parse: 3 callbacks suppressed
[  920.639307][T24926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6201'.
[  920.645903][T24928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6202'.
[  920.761420][T24935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6204'.
[  920.782442][T24939] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6206'.
[  920.834088][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6208'.
[  920.844844][T24945] netem: incorrect ge model size
[  920.850547][T24945] netem: change failed
[  920.890497][T24948] pim6reg1: entered promiscuous mode
[  920.895884][T24948] pim6reg1: entered allmulticast mode
[  920.962190][T24951] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6210'.
[  921.188267][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.301573][T24978] FAULT_INJECTION: forcing a failure.
[  921.301573][T24978] name failslab, interval 1, probability 0, space 0, times 0
[  921.316881][T24979] FAULT_INJECTION: forcing a failure.
[  921.316881][T24979] name failslab, interval 1, probability 0, space 0, times 0
[  921.329687][T24978] CPU: 0 UID: 0 PID: 24978 Comm: syz.0.6220 Not tainted syzkaller #0 PREEMPT(full) 
[  921.329713][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  921.329724][T24978] Call Trace:
[  921.329733][T24978]  <TASK>
[  921.329740][T24978]  dump_stack_lvl+0xe8/0x150
[  921.329793][T24978]  should_fail_ex+0x412/0x560
[  921.329828][T24978]  should_failslab+0xa8/0x100
[  921.329851][T24978]  ? do_getname_kernel+0x54/0x230
[  921.329875][T24978]  kmem_cache_alloc_noprof+0x87/0x650
[  921.329903][T24978]  do_getname_kernel+0x54/0x230
[  921.329923][T24978]  ? kern_path+0x1b/0x150
[  921.329949][T24978]  kern_path+0x25/0x150
[  921.329975][T24978]  bpf_uprobe_multi_link_attach+0x3ae/0x1020
[  921.330017][T24978]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  921.330041][T24978]  ? __fget_files+0x2a/0x420
[  921.330068][T24978]  ? __fget_files+0x2a/0x420
[  921.330094][T24978]  ? __fget_files+0x2a/0x420
[  921.330122][T24978]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  921.330148][T24978]  link_create+0x673/0x850
[  921.330171][T24978]  __sys_bpf+0x468/0x950
[  921.330200][T24978]  ? __pfx___sys_bpf+0x10/0x10
[  921.330239][T24978]  ? ksys_write+0x242/0x270
[  921.330260][T24978]  ? __pfx_ksys_write+0x10/0x10
[  921.330286][T24978]  __x64_sys_bpf+0x7c/0x90
[  921.330310][T24978]  do_syscall_64+0x14d/0xf80
[  921.330334][T24978]  ? trace_irq_disable+0x3b/0x150
[  921.330357][T24978]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.330375][T24978]  ? clear_bhb_loop+0x40/0x90
[  921.330397][T24978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.330415][T24978] RIP: 0033:0x7fb39fd9c799
[  921.330433][T24978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.330448][T24978] RSP: 002b:00007fb3a0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  921.330466][T24978] RAX: ffffffffffffffda RBX: 00007fb3a0015fa0 RCX: 00007fb39fd9c799
[  921.330480][T24978] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 000000000000001c
[  921.330493][T24978] RBP: 00007fb3a0c92090 R08: 0000000000000000 R09: 0000000000000000
[  921.330504][T24978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  921.330515][T24978] R13: 00007fb3a0016038 R14: 00007fb3a0015fa0 R15: 00007ffe9cb1f728
[  921.330543][T24978]  </TASK>
[  921.330711][T24979] CPU: 0 UID: 0 PID: 24979 Comm: syz.3.6221 Not tainted syzkaller #0 PREEMPT(full) 
[  921.330731][T24979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  921.330742][T24979] Call Trace:
[  921.330750][T24979]  <TASK>
[  921.330757][T24979]  dump_stack_lvl+0xe8/0x150
[  921.330785][T24979]  should_fail_ex+0x412/0x560
[  921.330825][T24979]  should_failslab+0xa8/0x100
[  921.330847][T24979]  ? __kernfs_new_node+0xe9/0x8e0
[  921.330873][T24979]  kmem_cache_alloc_noprof+0x87/0x650
[  921.330902][T24979]  __kernfs_new_node+0xe9/0x8e0
[  921.330934][T24979]  ? __pfx___kernfs_new_node+0x10/0x10
[  921.330961][T24979]  ? kernfs_root+0x1c/0x230
[  921.330991][T24979]  ? kernfs_root+0x1c/0x230
[  921.331014][T24979]  ? kernfs_root+0x1c/0x230
[  921.331036][T24979]  ? kernfs_root+0x1c/0x230
[  921.331066][T24979]  kernfs_new_node+0x102/0x210
[  921.331097][T24979]  __kernfs_create_file+0x4b/0x2e0
[  921.331121][T24979]  sysfs_add_file_mode_ns+0x238/0x300
[  921.331151][T24979]  internal_create_group+0x673/0x1180
[  921.331192][T24979]  ? __pfx_internal_create_group+0x10/0x10
[  921.331221][T24979]  ? up_write+0x1ab/0x410
[  921.331244][T24979]  sysfs_create_groups+0x59/0x120
[  921.331272][T24979]  device_add_attrs+0x1bf/0x5b0
[  921.331294][T24979]  ? __pfx_device_add_attrs+0x10/0x10
[  921.331319][T24979]  ? device_add_class_symlinks+0x21f/0x240
[  921.331342][T24979]  device_add+0x496/0xb70
[  921.331360][T24979]  ? device_initialize+0x24b/0x440
[  921.331381][T24979]  netdev_register_kobject+0x178/0x310
[  921.331409][T24979]  register_netdevice+0x12c0/0x1cf0
[  921.331429][T24979]  ? net_generic+0x1e/0x240
[  921.331465][T24979]  ? __pfx_register_netdevice+0x10/0x10
[  921.331489][T24979]  ? __asan_memset+0x22/0x50
[  921.331507][T24979]  ? dev_addr_mod+0x354/0x520
[  921.331526][T24979]  ? ipip6_tunnel_create+0x79/0x2c0
[  921.331555][T24979]  ipip6_tunnel_create+0x112/0x2c0
[  921.331582][T24979]  ipip6_newlink+0x326/0x5d0
[  921.331610][T24979]  ? __pfx_ipip6_newlink+0x10/0x10
[  921.331643][T24979]  ? __pfx_ipip6_newlink+0x10/0x10
[  921.331667][T24979]  rtnl_newlink_create+0x329/0xb70
[  921.331694][T24979]  ? __pfx___nla_validate_parse+0x10/0x10
[  921.331731][T24979]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  921.331761][T24979]  ? __pfx___mutex_lock+0x10/0x10
[  921.331803][T24979]  ? ns_capable+0x89/0xe0
[  921.331829][T24979]  rtnl_newlink+0x1666/0x1be0
[  921.331868][T24979]  ? __pfx_rtnl_newlink+0x10/0x10
[  921.331901][T24979]  ? __lock_acquire+0x6b5/0x2cf0
[  921.331930][T24979]  ? __lock_acquire+0x6b5/0x2cf0
[  921.331955][T24979]  ? __lock_acquire+0x6b5/0x2cf0
[  921.331988][T24979]  ? unwind_next_frame+0xa5/0x23c0
[  921.332033][T24979]  ? __lock_acquire+0x6b5/0x2cf0
[  921.332058][T24979]  ? is_bpf_text_address+0x26/0x2b0
[  921.332079][T24979]  ? kernel_text_address+0xa5/0xe0
[  921.332124][T24979]  ? __pfx_rtnl_newlink+0x10/0x10
[  921.332147][T24979]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  921.332176][T24979]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  921.332200][T24979]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  921.332227][T24979]  ? __lock_acquire+0x6b5/0x2cf0
[  921.332258][T24979]  netlink_rcv_skb+0x232/0x4b0
[  921.332285][T24979]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  921.332312][T24979]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  921.332346][T24979]  ? netlink_deliver_tap+0x2e/0x1b0
[  921.332377][T24979]  netlink_unicast+0x80f/0x9b0
[  921.332408][T24979]  ? __pfx_netlink_unicast+0x10/0x10
[  921.332432][T24979]  ? netlink_sendmsg+0x650/0xb40
[  921.332455][T24979]  ? skb_put+0x11b/0x210
[  921.332482][T24979]  netlink_sendmsg+0x813/0xb40
[  921.332517][T24979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  921.332546][T24979]  ? aa_sock_msg_perm+0xf1/0x1b0
[  921.332571][T24979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  921.332596][T24979]  ____sys_sendmsg+0x972/0x9f0
[  921.332622][T24979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  921.332649][T24979]  ? import_iovec+0x73/0xa0
[  921.332676][T24979]  ___sys_sendmsg+0x2a5/0x360
[  921.332697][T24979]  ? __pfx____sys_sendmsg+0x10/0x10
[  921.332753][T24979]  ? __fget_files+0x2a/0x420
[  921.332777][T24979]  ? __fget_files+0x3a0/0x420
[  921.332818][T24979]  __x64_sys_sendmsg+0x1bd/0x2a0
[  921.332841][T24979]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  921.332870][T24979]  ? __pfx_ksys_write+0x10/0x10
[  921.332902][T24979]  do_syscall_64+0x14d/0xf80
[  921.332926][T24979]  ? trace_irq_disable+0x3b/0x150
[  921.332948][T24979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.332966][T24979]  ? clear_bhb_loop+0x40/0x90
[  921.332988][T24979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.333005][T24979] RIP: 0033:0x7f40f7f9c799
[  921.333023][T24979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.333038][T24979] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  921.333058][T24979] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  921.333072][T24979] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  921.333083][T24979] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  921.333094][T24979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  921.333104][T24979] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  921.333133][T24979]  </TASK>
[  922.182062][T24983] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6223'.
[  922.205264][T24988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  922.727635][T25007] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6231'.
[  922.739790][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6231'.
[  922.795142][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6234'.
[  922.827385][T25011] batman_adv: batadv0: Removing interface: batadv_slave_1
[  922.983979][T25021] bond21: entered promiscuous mode
[  923.010609][T25026] netlink: 'syz.4.6239': attribute type 3 has an invalid length.
[  923.159122][T25034] vlan3: entered allmulticast mode
[  923.931341][T25074] bond12: entered promiscuous mode
[  924.285431][T25096] bond12: entered promiscuous mode
[  924.525782][T25111] udevd[25111]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  924.540253][T25038] udevd[25038]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  924.693788][T25121] bond14: entered promiscuous mode
[  925.369925][T25151] bond13: entered promiscuous mode
[  925.700608][T25166] nbd0: detected capacity change from 0 to 63
[  925.717397][ T5825] block nbd0: Receive control failed (result -32)
[  925.728308][T25038] block nbd0: Dead connection, failed to find a fallback
[  925.745153][T25038] block nbd0: shutting down sockets
[  925.763890][T25038] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  925.786134][T25038] Buffer I/O error on dev nbd0, logical block 0, async page read
[  925.796055][T25038] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  925.805810][T25038] Buffer I/O error on dev nbd0, logical block 1, async page read
[  925.814099][T25038] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  925.824064][T25038] Buffer I/O error on dev nbd0, logical block 2, async page read
[  925.867522][T25038] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  925.895923][T25038] Buffer I/O error on dev nbd0, logical block 3, async page read
[  925.910343][T25038] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  925.920154][T25038] Buffer I/O error on dev nbd0, logical block 0, async page read
[  925.937293][T25038] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  925.958407][T25038] Buffer I/O error on dev nbd0, logical block 1, async page read
[  925.986544][T25038] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  926.001682][T25038] Buffer I/O error on dev nbd0, logical block 2, async page read
[  926.044936][T25038] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  926.094648][T25038] Buffer I/O error on dev nbd0, logical block 3, async page read
[  926.114683][T25038] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  926.131844][T25038] Buffer I/O error on dev nbd0, logical block 0, async page read
[  926.149292][T25038] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  926.158113][T25195] netlink: 'syz.4.6293': attribute type 1 has an invalid length.
[  926.185932][T25038] Buffer I/O error on dev nbd0, logical block 1, async page read
[  926.206459][T25038] ldm_validate_partition_table(): Disk read failed.
[  926.233266][T25038] Dev nbd0: unable to read RDB block 0
[  926.247185][T25038]  nbd0: unable to read partition table
[  926.294880][T25038] ldm_validate_partition_table(): Disk read failed.
[  926.340191][T25038] Dev nbd0: unable to read RDB block 0
[  926.363684][T25038]  nbd0: unable to read partition table
[  926.520434][T25212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  926.538632][T25212] syzkaller0: entered promiscuous mode
[  926.547508][T25212] syzkaller0: entered allmulticast mode
[  926.791063][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.119431][T25243] __nla_validate_parse: 11 callbacks suppressed
[  927.119450][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6309'.
[  927.139145][T25242] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6306'.
[  927.172401][T25243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6309'.
[  927.207255][T25249] netlink: 'syz.0.6306': attribute type 3 has an invalid length.
[  927.215268][T25249] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6306'.
[  927.272976][T25220] tipc: Resetting bearer <eth:syzkaller0>
[  927.315256][T25220] tipc: Disabling bearer <eth:syzkaller0>
[  927.515500][T25239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6306'.
[  927.901931][ T9200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.093536][T25281] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6318'.
[  928.100516][T25283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6319'.
[  928.187285][T25288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6318'.
[  928.203865][T25283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6319'.
[  928.256485][T25291] vlan1: entered allmulticast mode
[  928.261801][T25291] team0: entered allmulticast mode
[  928.266924][T25291] team_slave_0: entered allmulticast mode
[  928.308693][T25291] team_slave_1: entered allmulticast mode
[  928.522724][T25305] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6323'.
[  928.613627][T25308] netlink: 'syz.4.6323': attribute type 3 has an invalid length.
[  928.931473][T25162] Set syz1 is full, maxelem 65536 reached
[  929.026827][T25313] netlink: 'syz.4.6326': attribute type 3 has an invalid length.
[  929.089575][T25316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  931.201795][T25393] netlink: 'syz.4.6352': attribute type 11 has an invalid length.
[  931.238462][T25393] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) !
[  931.833228][T25408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  932.101458][T25415] bond14: entered promiscuous mode
[  932.380127][T25433] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  932.670818][T25441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  932.696725][T25441] __nla_validate_parse: 7 callbacks suppressed
[  932.696743][T25441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6363'.
[  932.793261][T25445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6364'.
[  932.815846][T25445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6364'.
[  932.848457][T25351] Set syz1 is full, maxelem 65536 reached
[  933.013319][T25461] netlink: 'syz.4.6366': attribute type 1 has an invalid length.
[  933.038529][T25461] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6366'.
[  933.276684][T25471] bond15: entered promiscuous mode
[  933.411144][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6376'.
[  933.920921][T25509] bond15: entered promiscuous mode
[  933.966147][T25518] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6384'.
[  934.004673][T25518] syzkaller1: entered promiscuous mode
[  934.012757][T25518] syzkaller1: entered allmulticast mode
[  934.253387][T25529] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6391'.
[  934.485965][T25537] lo speed is unknown, defaulting to 1000
[  934.613754][T25546] netlink: 'syz.1.6397': attribute type 1 has an invalid length.
[  934.623286][T25546] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.6397'.
[  934.863845][T25551] bond22: entered promiscuous mode
[  934.992184][T25554] lo speed is unknown, defaulting to 1000
[  935.041061][T25556] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6399'.
[  935.058409][T25537] lo speed is unknown, defaulting to 1000
[  935.076582][T25537] lo speed is unknown, defaulting to 1000
[  935.354992][T25565] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6403'.
[  935.560647][T25577] vlan6: entered allmulticast mode
[  935.671359][T25554] lo speed is unknown, defaulting to 1000
[  935.700107][T25554] lo speed is unknown, defaulting to 1000
[  936.085139][T25592] syzkaller1: entered promiscuous mode
[  936.100800][T25592] syzkaller1: entered allmulticast mode
[  936.346878][T25608] FAULT_INJECTION: forcing a failure.
[  936.346878][T25608] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  936.368136][T25608] CPU: 1 UID: 0 PID: 25608 Comm: syz.3.6415 Not tainted syzkaller #0 PREEMPT(full) 
[  936.368163][T25608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  936.368175][T25608] Call Trace:
[  936.368182][T25608]  <TASK>
[  936.368191][T25608]  dump_stack_lvl+0xe8/0x150
[  936.368222][T25608]  should_fail_ex+0x412/0x560
[  936.368252][T25608]  _copy_from_user+0x2d/0xb0
[  936.368280][T25608]  ___sys_sendmsg+0x1c6/0x360
[  936.368308][T25608]  ? __pfx____sys_sendmsg+0x10/0x10
[  936.368360][T25608]  ? __fget_files+0x2a/0x420
[  936.368385][T25608]  ? __fget_files+0x3a0/0x420
[  936.368420][T25608]  __x64_sys_sendmsg+0x1bd/0x2a0
[  936.368463][T25608]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  936.368491][T25608]  ? __pfx_ksys_write+0x10/0x10
[  936.368522][T25608]  do_syscall_64+0x14d/0xf80
[  936.368549][T25608]  ? trace_irq_disable+0x3b/0x150
[  936.368581][T25608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.368600][T25608]  ? clear_bhb_loop+0x40/0x90
[  936.368623][T25608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.368641][T25608] RIP: 0033:0x7f40f7f9c799
[  936.368659][T25608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  936.368675][T25608] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  936.368695][T25608] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  936.368710][T25608] RDX: 0000000024004052 RSI: 0000200000000000 RDI: 0000000000000004
[  936.368723][T25608] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  936.368735][T25608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  936.368746][T25608] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  936.368776][T25608]  </TASK>
[  937.093427][T25628] netlink: 'syz.0.6422': attribute type 3 has an invalid length.
[  937.677038][T25653] netlink: 'syz.2.6431': attribute type 1 has an invalid length.
[  937.705007][T25653] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  937.742457][T25662] __nla_validate_parse: 6 callbacks suppressed
[  937.742480][T25662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6436'.
[  937.796415][T25663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6435'.
[  937.815239][T25667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6438'.
[  937.920347][T25673] xt_TCPMSS: Only works on TCP SYN packets
[  937.948420][T25673] x_tables: duplicate underflow at hook 1
[  938.036782][T25684] veth0: entered promiscuous mode
[  938.058789][T25684] bond0: entered promiscuous mode
[  938.063876][T25684] bond_slave_0: entered promiscuous mode
[  938.083966][T25684] bond_slave_1: entered promiscuous mode
[  938.097434][T25683] bond0: left promiscuous mode
[  938.104801][T25683] bond_slave_0: left promiscuous mode
[  938.111698][T25683] bond_slave_1: left promiscuous mode
[  938.118054][T25683] veth0: left promiscuous mode
[  938.210022][T25688] xt_CT: No such helper "pptp"
[  938.251909][T25694] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6448'.
[  938.312352][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6452'.
[  938.496516][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6456'.
[  938.567325][T25721] bond23: entered promiscuous mode
[  938.876681][T25739] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6463'.
[  938.886200][T25739] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  938.894090][T25739] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  938.956412][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6464'.
[  939.212878][T25752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6469'.
[  939.329316][T25759] bond19: entered promiscuous mode
[  939.466613][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6475'.
[  939.747902][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.942758][T25794] bond16: entered promiscuous mode
[  940.477242][T25821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.543060][T25821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.801344][T25840] vlan3: entered allmulticast mode
[  940.968796][T25853] FAULT_INJECTION: forcing a failure.
[  940.968796][T25853] name failslab, interval 1, probability 0, space 0, times 0
[  940.984621][T25853] CPU: 1 UID: 0 PID: 25853 Comm: syz.4.6505 Not tainted syzkaller #0 PREEMPT(full) 
[  940.984648][T25853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  940.984661][T25853] Call Trace:
[  940.984668][T25853]  <TASK>
[  940.984677][T25853]  dump_stack_lvl+0xe8/0x150
[  940.984707][T25853]  should_fail_ex+0x412/0x560
[  940.984735][T25853]  should_failslab+0xa8/0x100
[  940.984760][T25853]  __kvmalloc_node_noprof+0x178/0x8a0
[  940.984783][T25853]  ? bpf_uprobe_multi_link_attach+0x59b/0x1020
[  940.984812][T25853]  ? bpf_uprobe_multi_link_attach+0x572/0x1020
[  940.984845][T25853]  bpf_uprobe_multi_link_attach+0x59b/0x1020
[  940.984888][T25853]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  940.984914][T25853]  ? __fget_files+0x2a/0x420
[  940.984941][T25853]  ? __fget_files+0x2a/0x420
[  940.984966][T25853]  ? __fget_files+0x2a/0x420
[  940.984995][T25853]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  940.985020][T25853]  link_create+0x673/0x850
[  940.985043][T25853]  __sys_bpf+0x468/0x950
[  940.985071][T25853]  ? __pfx___sys_bpf+0x10/0x10
[  940.985112][T25853]  ? ksys_write+0x242/0x270
[  940.985134][T25853]  ? __pfx_ksys_write+0x10/0x10
[  940.985159][T25853]  __x64_sys_bpf+0x7c/0x90
[  940.985181][T25853]  do_syscall_64+0x14d/0xf80
[  940.985204][T25853]  ? trace_irq_disable+0x3b/0x150
[  940.985227][T25853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  940.985245][T25853]  ? clear_bhb_loop+0x40/0x90
[  940.985264][T25853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  940.985279][T25853] RIP: 0033:0x7f83e099c799
[  940.985295][T25853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  940.985309][T25853] RSP: 002b:00007f83e17c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  940.985327][T25853] RAX: ffffffffffffffda RBX: 00007f83e0c15fa0 RCX: 00007f83e099c799
[  940.985340][T25853] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 000000000000001c
[  940.985352][T25853] RBP: 00007f83e17c7090 R08: 0000000000000000 R09: 0000000000000000
[  940.985364][T25853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  940.985374][T25853] R13: 00007f83e0c16038 R14: 00007f83e0c15fa0 R15: 00007fff7f281c48
[  940.985403][T25853]  </TASK>
[  941.346068][T25860] netlink: 'syz.2.6506': attribute type 1 has an invalid length.
[  941.471167][T25860] bond16: (slave vxcan5): The slave device specified does not support setting the MAC address
[  941.518520][T25860] bond16: (slave vxcan5): Error -95 calling set_mac_address
[  941.576346][T25869] bond16: (slave bridge6): Enslaving as an active interface with a down link
[  941.648961][T25874] bond16: (slave bridge7): Enslaving as an active interface with a down link
[  941.668160][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.682478][T25860] macvlan3: entered promiscuous mode
[  941.691082][T25860] macvlan3: entered allmulticast mode
[  941.701744][T25860] bond16: entered promiscuous mode
[  941.707647][T25860] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  941.802701][T25860] bond16: left promiscuous mode
[  941.871768][T25857] delete_channel: no stack
[  942.011014][T25901] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  942.921652][T25955] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  942.948737][T25955] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  942.984407][T25955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  943.002115][T25962] netlink: 'syz.4.6538': attribute type 4 has an invalid length.
[  943.046862][T25962] netlink: 'syz.4.6538': attribute type 4 has an invalid length.
[  943.055064][T11942] lo speed is unknown, defaulting to 1000
[  943.068138][T11942] syz2: Port: 1 Link DOWN
[  943.079909][T11942] lo speed is unknown, defaulting to 1000
[  943.098182][T11942] syz2: Port: 1 Link ACTIVE
[  943.243848][T25970] lo speed is unknown, defaulting to 1000
[  943.901683][T25970] lo speed is unknown, defaulting to 1000
[  943.910081][T25970] lo speed is unknown, defaulting to 1000
[  944.909275][T26026] __nla_validate_parse: 15 callbacks suppressed
[  944.909294][T26026] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6555'.
[  944.943585][T26026] ip6gre2: entered promiscuous mode
[  944.964052][T26026] ip6gre2: entered allmulticast mode
[  945.096224][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6557'.
[  945.233947][T26044] netlink: 'syz.0.6561': attribute type 3 has an invalid length.
[  945.256492][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6561'.
[  945.256499][T26038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  945.256540][T26044] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6561'.
[  945.313622][T26038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.768593][T26064] SET target dimension over the limit!
[  945.805444][T26071] netlink: 'syz.1.6569': attribute type 3 has an invalid length.
[  945.813906][T26071] netlink: 'syz.1.6569': attribute type 3 has an invalid length.
[  946.212092][T26088] batman_adv: batadv0: Adding interface: vlan3
[  946.221149][T26088] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  946.247847][T26088] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  946.387351][T26102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6579'.
[  946.467635][T26108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  946.581803][T26113] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6585'.
[  946.918416][T26134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6589'.
[  947.095924][T26139] bridge8: entered promiscuous mode
[  947.115057][T26139] bridge8: entered allmulticast mode
[  947.513744][T26154] netlink: 'syz.3.6597': attribute type 1 has an invalid length.
[  947.529252][ T9200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.548510][T26154] bond17: entered promiscuous mode
[  947.554107][T26154] 8021q: adding VLAN 0 to HW filter on device bond17
[  947.593742][T26159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.601956][T26154] bond17: (slave bridge8): making interface the new active one
[  947.609927][T26154] bridge8: entered promiscuous mode
[  947.616413][T26154] bond17: (slave bridge8): Enslaving as an active interface with an up link
[  947.654747][T26154] bond17: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  947.667608][T26154] bond17: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  947.955918][T26178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  948.186615][T26196] netlink: 'syz.0.6609': attribute type 2 has an invalid length.
[  948.197902][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6609'.
[  948.228146][ T9200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.471832][T26209] lo speed is unknown, defaulting to 1000
[  948.697778][T26209] lo speed is unknown, defaulting to 1000
[  948.704574][T26209] lo speed is unknown, defaulting to 1000
[  949.203746][T26232] IPVS: length: 132 != 8
[  949.325374][T26232] pimreg: entered allmulticast mode
[  949.372932][T26240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6620'.
[  949.544535][T26244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  949.646649][T26248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6624'.
[  949.695569][T26233] lo speed is unknown, defaulting to 1000
[  950.101256][T26262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.313439][T26233] lo speed is unknown, defaulting to 1000
[  950.389027][T26233] lo speed is unknown, defaulting to 1000
[  950.968005][T26286] FAULT_INJECTION: forcing a failure.
[  950.968005][T26286] name failslab, interval 1, probability 0, space 0, times 0
[  951.017792][T26286] CPU: 1 UID: 0 PID: 26286 Comm: syz.4.6638 Not tainted syzkaller #0 PREEMPT(full) 
[  951.017820][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  951.017831][T26286] Call Trace:
[  951.017839][T26286]  <TASK>
[  951.017847][T26286]  dump_stack_lvl+0xe8/0x150
[  951.017881][T26286]  should_fail_ex+0x412/0x560
[  951.017912][T26286]  should_failslab+0xa8/0x100
[  951.017938][T26286]  __kmalloc_noprof+0xe8/0x760
[  951.017960][T26286]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  951.017993][T26286]  tomoyo_realpath_from_path+0xe3/0x5d0
[  951.018028][T26286]  ? tomoyo_path_number_perm+0x219/0x630
[  951.018050][T26286]  tomoyo_path_number_perm+0x246/0x630
[  951.018075][T26286]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  951.018098][T26286]  ? __lock_acquire+0x6b5/0x2cf0
[  951.018131][T26286]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  951.018174][T26286]  ? __fget_files+0x2a/0x420
[  951.018202][T26286]  ? __fget_files+0x2a/0x420
[  951.018225][T26286]  ? __fget_files+0x3a0/0x420
[  951.018249][T26286]  ? __fget_files+0x2a/0x420
[  951.018285][T26286]  security_file_ioctl+0xc3/0x2a0
[  951.018308][T26286]  __se_sys_ioctl+0x47/0x170
[  951.018333][T26286]  do_syscall_64+0x14d/0xf80
[  951.018357][T26286]  ? trace_irq_disable+0x3b/0x150
[  951.018383][T26286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.018402][T26286]  ? clear_bhb_loop+0x40/0x90
[  951.018426][T26286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.018445][T26286] RIP: 0033:0x7f83e099c799
[  951.018462][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  951.018478][T26286] RSP: 002b:00007f83e17c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  951.018498][T26286] RAX: ffffffffffffffda RBX: 00007f83e0c15fa0 RCX: 00007f83e099c799
[  951.018514][T26286] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004
[  951.018527][T26286] RBP: 00007f83e17c7090 R08: 0000000000000000 R09: 0000000000000000
[  951.018538][T26286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  951.018549][T26286] R13: 00007f83e0c16038 R14: 00007f83e0c15fa0 R15: 00007fff7f281c48
[  951.018581][T26286]  </TASK>
[  951.018821][T26286] ERROR: Out of memory at tomoyo_realpath_from_path.
[  951.328461][T26288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.477185][T26298] netlink: 'syz.1.6642': attribute type 1 has an invalid length.
[  951.548906][T26302] IPv6: Can't replace route, no match found
[  951.560915][T26298] bond24: entered promiscuous mode
[  951.566357][T26302] IPv6: Can't replace route, no match found
[  951.573237][T26298] 8021q: adding VLAN 0 to HW filter on device bond24
[  951.668125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.886735][T26313] lo speed is unknown, defaulting to 1000
[  952.008216][T26318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6648'.
[  952.154705][T26325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  952.325989][T26334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6655'.
[  952.348697][T26333] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  952.360655][ T9200] lo speed is unknown, defaulting to 1000
[  952.367602][ T9200] syz2: Port: 1 Link DOWN
[  952.368088][  T752] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  952.397812][  T752] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  952.406522][  T752] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  952.416165][  T752] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  952.425513][  T752] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  952.434555][  T752] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  952.443493][  T752] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  952.453319][  T752] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  952.568665][T26313] lo speed is unknown, defaulting to 1000
[  952.577040][T26313] lo speed is unknown, defaulting to 1000
[  952.977982][T26343] FAULT_INJECTION: forcing a failure.
[  952.977982][T26343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  953.018644][T26343] CPU: 1 UID: 0 PID: 26343 Comm: syz.1.6657 Not tainted syzkaller #0 PREEMPT(full) 
[  953.018669][T26343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  953.018680][T26343] Call Trace:
[  953.018687][T26343]  <TASK>
[  953.018694][T26343]  dump_stack_lvl+0xe8/0x150
[  953.018723][T26343]  should_fail_ex+0x412/0x560
[  953.018752][T26343]  _copy_from_user+0x2d/0xb0
[  953.018778][T26343]  ___sys_sendmsg+0x1c6/0x360
[  953.018804][T26343]  ? __pfx____sys_sendmsg+0x10/0x10
[  953.018828][T26343]  ? kstrtouint+0x6e/0xe0
[  953.018871][T26343]  ? __fget_files+0x2a/0x420
[  953.018896][T26343]  ? __fget_files+0x3a0/0x420
[  953.018931][T26343]  __sys_sendmmsg+0x27c/0x4e0
[  953.018955][T26343]  ? __pfx___sys_sendmmsg+0x10/0x10
[  953.018971][T26343]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  953.019019][T26343]  ? ksys_write+0x242/0x270
[  953.019041][T26343]  ? __pfx_ksys_write+0x10/0x10
[  953.019067][T26343]  __x64_sys_sendmmsg+0xa0/0xc0
[  953.019088][T26343]  do_syscall_64+0x14d/0xf80
[  953.019111][T26343]  ? trace_irq_disable+0x3b/0x150
[  953.019135][T26343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.019153][T26343]  ? clear_bhb_loop+0x40/0x90
[  953.019180][T26343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.019205][T26343] RIP: 0033:0x7fa8a9f9c799
[  953.019223][T26343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.019239][T26343] RSP: 002b:00007fa8aae26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  953.019259][T26343] RAX: ffffffffffffffda RBX: 00007fa8aa216090 RCX: 00007fa8a9f9c799
[  953.019272][T26343] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  953.019284][T26343] RBP: 00007fa8aae26090 R08: 0000000000000000 R09: 0000000000000000
[  953.019295][T26343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.019311][T26343] R13: 00007fa8aa216128 R14: 00007fa8aa216090 R15: 00007fff84e74678
[  953.019342][T26343]  </TASK>
[  953.231035][T26345] FAULT_INJECTION: forcing a failure.
[  953.231035][T26345] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  953.247742][T26345] CPU: 1 UID: 0 PID: 26345 Comm: syz.3.6658 Not tainted syzkaller #0 PREEMPT(full) 
[  953.247768][T26345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  953.247780][T26345] Call Trace:
[  953.247787][T26345]  <TASK>
[  953.247795][T26345]  dump_stack_lvl+0xe8/0x150
[  953.247825][T26345]  should_fail_ex+0x412/0x560
[  953.247854][T26345]  _copy_to_user+0x31/0xb0
[  953.247883][T26345]  simple_read_from_buffer+0xe1/0x170
[  953.247914][T26345]  proc_fail_nth_read+0x1bb/0x230
[  953.247943][T26345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  953.247971][T26345]  ? rw_verify_area+0x2a6/0x4d0
[  953.247990][T26345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  953.248016][T26345]  vfs_read+0x20c/0xa70
[  953.248033][T26345]  ? fdget_pos+0x246/0x320
[  953.248058][T26345]  ? ksys_write+0x1e6/0x270
[  953.248080][T26345]  ? __pfx___mutex_lock+0x10/0x10
[  953.248107][T26345]  ? __pfx_vfs_read+0x10/0x10
[  953.248129][T26345]  ? __fget_files+0x2a/0x420
[  953.248155][T26345]  ? __fget_files+0x3a0/0x420
[  953.248178][T26345]  ? __fget_files+0x2a/0x420
[  953.248211][T26345]  ksys_read+0x150/0x270
[  953.248233][T26345]  ? __pfx_ksys_read+0x10/0x10
[  953.248265][T26345]  do_syscall_64+0x14d/0xf80
[  953.248289][T26345]  ? trace_irq_disable+0x3b/0x150
[  953.248314][T26345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.248333][T26345]  ? clear_bhb_loop+0x40/0x90
[  953.248356][T26345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.248374][T26345] RIP: 0033:0x7f40f7f5cfce
[  953.248392][T26345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  953.248408][T26345] RSP: 002b:00007f40f8edafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  953.248429][T26345] RAX: ffffffffffffffda RBX: 00007f40f8edb6c0 RCX: 00007f40f7f5cfce
[  953.248443][T26345] RDX: 000000000000000f RSI: 00007f40f8edb0a0 RDI: 0000000000000005
[  953.248469][T26345] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  953.248532][T26345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.248543][T26345] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  953.248574][T26345]  </TASK>
[  953.532414][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6659'.
[  953.732424][T26358] FAULT_INJECTION: forcing a failure.
[  953.732424][T26358] name failslab, interval 1, probability 0, space 0, times 0
[  953.745143][T26358] CPU: 0 UID: 0 PID: 26358 Comm: syz.4.6663 Not tainted syzkaller #0 PREEMPT(full) 
[  953.745160][T26358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  953.745167][T26358] Call Trace:
[  953.745173][T26358]  <TASK>
[  953.745179][T26358]  dump_stack_lvl+0xe8/0x150
[  953.745199][T26358]  should_fail_ex+0x412/0x560
[  953.745216][T26358]  should_failslab+0xa8/0x100
[  953.745231][T26358]  __kmalloc_noprof+0xe8/0x760
[  953.745243][T26358]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  953.745261][T26358]  tomoyo_realpath_from_path+0xe3/0x5d0
[  953.745280][T26358]  ? tomoyo_path_number_perm+0x219/0x630
[  953.745292][T26358]  tomoyo_path_number_perm+0x246/0x630
[  953.745305][T26358]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  953.745318][T26358]  ? __lock_acquire+0x6b5/0x2cf0
[  953.745338][T26358]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  953.745364][T26358]  ? __fget_files+0x2a/0x420
[  953.745380][T26358]  ? __fget_files+0x2a/0x420
[  953.745393][T26358]  ? __fget_files+0x3a0/0x420
[  953.745406][T26358]  ? __fget_files+0x2a/0x420
[  953.745422][T26358]  security_file_ioctl+0xc3/0x2a0
[  953.745437][T26358]  __se_sys_ioctl+0x47/0x170
[  953.745451][T26358]  do_syscall_64+0x14d/0xf80
[  953.745465][T26358]  ? trace_irq_disable+0x3b/0x150
[  953.745479][T26358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.745490][T26358]  ? clear_bhb_loop+0x40/0x90
[  953.745503][T26358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.745513][T26358] RIP: 0033:0x7f83e099c799
[  953.745524][T26358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.745533][T26358] RSP: 002b:00007f83e17c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  953.745545][T26358] RAX: ffffffffffffffda RBX: 00007f83e0c15fa0 RCX: 00007f83e099c799
[  953.745552][T26358] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000007
[  953.745559][T26358] RBP: 00007f83e17c7090 R08: 0000000000000000 R09: 0000000000000000
[  953.745565][T26358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.745571][T26358] R13: 00007f83e0c16038 R14: 00007f83e0c15fa0 R15: 00007fff7f281c48
[  953.745588][T26358]  </TASK>
[  953.745593][T26358] ERROR: Out of memory at tomoyo_realpath_from_path.
[  953.992654][T26363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  954.042943][T26367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6666'.
[  954.469770][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6674'.
[  954.530871][T26389] netlink: 'syz.2.6673': attribute type 10 has an invalid length.
[  954.944461][T26404] netlink: 'syz.1.6679': attribute type 21 has an invalid length.
[  954.972739][T26404] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6679'.
[  954.992520][T26404] netlink: 'syz.1.6679': attribute type 4 has an invalid length.
[  955.000829][T26404] netlink: 'syz.1.6679': attribute type 5 has an invalid length.
[  955.009179][T26404] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6679'.
[  955.272423][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6680'.
[  955.633421][T26440] netlink: 'syz.4.6690': attribute type 8 has an invalid length.
[  955.643864][T26440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6690'.
[  955.661040][T26440] bond0: entered promiscuous mode
[  955.666304][T26440] bond_slave_0: entered promiscuous mode
[  955.672388][T26440] bond_slave_1: entered promiscuous mode
[  955.689857][T26440] gretap0: entered promiscuous mode
[  955.700488][T26440] gretap0: left promiscuous mode
[  955.705706][T26440] bond0: left promiscuous mode
[  955.727921][T26440] bond_slave_0: left promiscuous mode
[  955.733519][T26440] bond_slave_1: left promiscuous mode
[  955.760397][T26445] pim6reg: entered allmulticast mode
[  955.803216][T26438] pim6reg: left allmulticast mode
[  956.159345][T26454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  956.166815][T26454] syzkaller0: entered promiscuous mode
[  956.172576][T26454] syzkaller0: entered allmulticast mode
[  956.205859][T26454] tipc: Resetting bearer <eth:syzkaller0>
[  956.238032][T26454] tipc: Disabling bearer <eth:syzkaller0>
[  956.551125][T26474] FAULT_INJECTION: forcing a failure.
[  956.551125][T26474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  956.597807][T26474] CPU: 0 UID: 0 PID: 26474 Comm: syz.0.6703 Not tainted syzkaller #0 PREEMPT(full) 
[  956.597834][T26474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  956.597845][T26474] Call Trace:
[  956.597853][T26474]  <TASK>
[  956.597861][T26474]  dump_stack_lvl+0xe8/0x150
[  956.597891][T26474]  should_fail_ex+0x412/0x560
[  956.597917][T26474]  _copy_from_iter+0x1d3/0x1670
[  956.597945][T26474]  ? rcu_is_watching+0x15/0xb0
[  956.597973][T26474]  ? __pfx__copy_from_iter+0x10/0x10
[  956.598002][T26474]  ? netlink_sendmsg+0x650/0xb40
[  956.598025][T26474]  ? skb_put+0x11b/0x210
[  956.598053][T26474]  netlink_sendmsg+0x6c0/0xb40
[  956.598085][T26474]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.598109][T26474]  ? aa_sock_msg_perm+0xf1/0x1b0
[  956.598134][T26474]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.598158][T26474]  ____sys_sendmsg+0x972/0x9f0
[  956.598185][T26474]  ? __pfx_____sys_sendmsg+0x10/0x10
[  956.598211][T26474]  ? import_iovec+0x73/0xa0
[  956.598239][T26474]  ___sys_sendmsg+0x2a5/0x360
[  956.598262][T26474]  ? __pfx____sys_sendmsg+0x10/0x10
[  956.598306][T26474]  ? __fget_files+0x2a/0x420
[  956.598331][T26474]  ? __fget_files+0x3a0/0x420
[  956.598361][T26474]  __x64_sys_sendmsg+0x1bd/0x2a0
[  956.598382][T26474]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  956.598407][T26474]  ? __pfx_ksys_write+0x10/0x10
[  956.598435][T26474]  do_syscall_64+0x14d/0xf80
[  956.598459][T26474]  ? trace_irq_disable+0x3b/0x150
[  956.598483][T26474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.598501][T26474]  ? clear_bhb_loop+0x40/0x90
[  956.598522][T26474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.598540][T26474] RIP: 0033:0x7fb39fd9c799
[  956.598558][T26474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  956.598574][T26474] RSP: 002b:00007fb3a0c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  956.598593][T26474] RAX: ffffffffffffffda RBX: 00007fb3a0015fa0 RCX: 00007fb39fd9c799
[  956.598606][T26474] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  956.598617][T26474] RBP: 00007fb3a0c92090 R08: 0000000000000000 R09: 0000000000000000
[  956.598627][T26474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  956.598637][T26474] R13: 00007fb3a0016038 R14: 00007fb3a0015fa0 R15: 00007ffe9cb1f728
[  956.598665][T26474]  </TASK>
[  956.632689][T26478] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6705'.
[  957.050520][T26489] netlink: 'syz.3.6709': attribute type 1 has an invalid length.
[  957.198775][T26493] pimreg: entered allmulticast mode
[  957.403980][T26499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  957.417294][T26501] netlink: 'syz.2.6713': attribute type 8 has an invalid length.
[  957.425056][T26501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6713'.
[  957.438305][T26501] bond0: entered promiscuous mode
[  957.443343][T26501] bond_slave_0: entered promiscuous mode
[  957.449623][T26501] bond_slave_1: entered promiscuous mode
[  957.456812][T26501] gretap0: entered promiscuous mode
[  957.464126][T26501] gretap0: left promiscuous mode
[  957.469900][T26501] bond0: left promiscuous mode
[  957.474698][T26501] bond_slave_0: left promiscuous mode
[  957.480575][T26501] bond_slave_1: left promiscuous mode
[  957.494121][T26503] pim6reg: entered allmulticast mode
[  957.521329][T26500] pim6reg: left allmulticast mode
[  957.807480][T26514] netlink: 'syz.2.6717': attribute type 2 has an invalid length.
[  957.818218][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6717'.
[  958.283394][T26537] netlink: 'syz.1.6725': attribute type 18 has an invalid length.
[  958.350508][T26539] xt_TCPMSS: Only works on TCP SYN packets
[  959.051185][T26568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6736'.
[  959.062498][T26570] netlink: 'syz.0.6737': attribute type 9 has an invalid length.
[  959.071150][T26570] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6737'.
[  959.088082][T26568] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6736'.
[  959.101142][T26568] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6736'.
[  959.214742][T26579] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6740'.
[  959.859716][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6748'.
[  959.869159][T26603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6748'.
[  960.070504][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'.
[  960.107858][T26619] validate_nla: 1 callbacks suppressed
[  960.107885][T26619] netlink: 'syz.3.6755': attribute type 3 has an invalid length.
[  960.124417][T26613] netlink: zone id is out of range
[  960.129976][T26613] netlink: zone id is out of range
[  960.148164][T26613] netlink: zone id is out of range
[  960.153439][T26613] netlink: zone id is out of range
[  960.160184][T26613] netlink: zone id is out of range
[  960.172645][T26613] netlink: zone id is out of range
[  960.191243][T26613] netlink: zone id is out of range
[  960.196428][T26613] netlink: zone id is out of range
[  960.205032][T26613] netlink: zone id is out of range
[  960.210400][T26613] netlink: zone id is out of range
[  960.247285][T26625] FAULT_INJECTION: forcing a failure.
[  960.247285][T26625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  960.261065][T26625] CPU: 1 UID: 0 PID: 26625 Comm: syz.0.6757 Not tainted syzkaller #0 PREEMPT(full) 
[  960.261086][T26625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  960.261096][T26625] Call Trace:
[  960.261102][T26625]  <TASK>
[  960.261109][T26625]  dump_stack_lvl+0xe8/0x150
[  960.261134][T26625]  should_fail_ex+0x412/0x560
[  960.261158][T26625]  _copy_from_user+0x2d/0xb0
[  960.261183][T26625]  __sys_bpf+0x229/0x950
[  960.261207][T26625]  ? __pfx___sys_bpf+0x10/0x10
[  960.261244][T26625]  ? ksys_write+0x242/0x270
[  960.261266][T26625]  ? __pfx_ksys_write+0x10/0x10
[  960.261285][T26625]  __x64_sys_bpf+0x7c/0x90
[  960.261307][T26625]  do_syscall_64+0x14d/0xf80
[  960.261332][T26625]  ? trace_irq_disable+0x3b/0x150
[  960.261355][T26625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.261371][T26625]  ? clear_bhb_loop+0x40/0x90
[  960.261392][T26625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.261410][T26625] RIP: 0033:0x7fb39fd9c799
[  960.261436][T26625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.261450][T26625] RSP: 002b:00007fb3a0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  960.261468][T26625] RAX: ffffffffffffffda RBX: 00007fb3a0015fa0 RCX: 00007fb39fd9c799
[  960.261480][T26625] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  960.261491][T26625] RBP: 00007fb3a0c92090 R08: 0000000000000000 R09: 0000000000000000
[  960.261501][T26625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  960.261512][T26625] R13: 00007fb3a0016038 R14: 00007fb3a0015fa0 R15: 00007ffe9cb1f728
[  960.261541][T26625]  </TASK>
[  960.660430][T26643] FAULT_INJECTION: forcing a failure.
[  960.660430][T26643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  960.694667][T26643] CPU: 0 UID: 0 PID: 26643 Comm: syz.0.6764 Not tainted syzkaller #0 PREEMPT(full) 
[  960.694692][T26643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  960.694703][T26643] Call Trace:
[  960.694710][T26643]  <TASK>
[  960.694718][T26643]  dump_stack_lvl+0xe8/0x150
[  960.694749][T26643]  should_fail_ex+0x412/0x560
[  960.694775][T26643]  _copy_to_user+0x31/0xb0
[  960.694804][T26643]  bpf_test_finish+0x53c/0x6b0
[  960.694838][T26643]  ? __pfx_bpf_test_finish+0x10/0x10
[  960.694867][T26643]  ? _copy_from_user+0x94/0xb0
[  960.694900][T26643]  ? bpf_test_init+0x113/0x150
[  960.694924][T26643]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  960.694964][T26643]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  960.694993][T26643]  ? __fget_files+0x2a/0x420
[  960.695024][T26643]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  960.695049][T26643]  bpf_prog_test_run+0x2c7/0x340
[  960.695071][T26643]  __sys_bpf+0x643/0x950
[  960.695099][T26643]  ? __pfx___sys_bpf+0x10/0x10
[  960.695140][T26643]  ? ksys_write+0x242/0x270
[  960.695161][T26643]  ? __pfx_ksys_write+0x10/0x10
[  960.695187][T26643]  __x64_sys_bpf+0x7c/0x90
[  960.695213][T26643]  do_syscall_64+0x14d/0xf80
[  960.695238][T26643]  ? trace_irq_disable+0x3b/0x150
[  960.695262][T26643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.695280][T26643]  ? clear_bhb_loop+0x40/0x90
[  960.695302][T26643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.695320][T26643] RIP: 0033:0x7fb39fd9c799
[  960.695338][T26643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.695354][T26643] RSP: 002b:00007fb3a0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  960.695372][T26643] RAX: ffffffffffffffda RBX: 00007fb3a0015fa0 RCX: 00007fb39fd9c799
[  960.695385][T26643] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[  960.695397][T26643] RBP: 00007fb3a0c92090 R08: 0000000000000000 R09: 0000000000000000
[  960.695408][T26643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  960.695419][T26643] R13: 00007fb3a0016038 R14: 00007fb3a0015fa0 R15: 00007ffe9cb1f728
[  960.695449][T26643]  </TASK>
[  960.974792][T26649] netlink: 'syz.0.6766': attribute type 3 has an invalid length.
[  961.442725][T26667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  961.529576][T26673] FAULT_INJECTION: forcing a failure.
[  961.529576][T26673] name failslab, interval 1, probability 0, space 0, times 0
[  961.542506][T26673] CPU: 0 UID: 0 PID: 26673 Comm: syz.0.6776 Not tainted syzkaller #0 PREEMPT(full) 
[  961.542531][T26673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  961.542542][T26673] Call Trace:
[  961.542551][T26673]  <TASK>
[  961.542561][T26673]  dump_stack_lvl+0xe8/0x150
[  961.542591][T26673]  should_fail_ex+0x412/0x560
[  961.542621][T26673]  should_failslab+0xa8/0x100
[  961.542644][T26673]  ? radix_tree_node_alloc+0x7e/0x3a0
[  961.542669][T26673]  kmem_cache_alloc_noprof+0x87/0x650
[  961.542695][T26673]  radix_tree_node_alloc+0x7e/0x3a0
[  961.542720][T26673]  idr_get_free+0x2b3/0xa70
[  961.542751][T26673]  idr_alloc_u32+0x18d/0x320
[  961.542867][T26673]  ? __pfx_idr_alloc_u32+0x10/0x10
[  961.542892][T26673]  ? do_raw_spin_lock+0x12b/0x2f0
[  961.542914][T26673]  idr_alloc_cyclic+0x9b/0x1b0
[  961.542940][T26673]  bpf_link_prime+0x6b/0x220
[  961.542962][T26673]  bpf_uprobe_multi_link_attach+0xe59/0x1020
[  961.542998][T26673]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  961.543020][T26673]  ? __fget_files+0x2a/0x420
[  961.543043][T26673]  ? __fget_files+0x2a/0x420
[  961.543065][T26673]  ? __fget_files+0x2a/0x420
[  961.543088][T26673]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  961.543109][T26673]  link_create+0x673/0x850
[  961.543130][T26673]  __sys_bpf+0x468/0x950
[  961.543154][T26673]  ? __pfx___sys_bpf+0x10/0x10
[  961.543192][T26673]  ? ksys_write+0x242/0x270
[  961.543212][T26673]  ? __pfx_ksys_write+0x10/0x10
[  961.543236][T26673]  __x64_sys_bpf+0x7c/0x90
[  961.543259][T26673]  do_syscall_64+0x14d/0xf80
[  961.543281][T26673]  ? trace_irq_disable+0x3b/0x150
[  961.543302][T26673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.543319][T26673]  ? clear_bhb_loop+0x40/0x90
[  961.543340][T26673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.543356][T26673] RIP: 0033:0x7fb39fd9c799
[  961.543374][T26673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  961.543388][T26673] RSP: 002b:00007fb3a0c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  961.543407][T26673] RAX: ffffffffffffffda RBX: 00007fb3a0015fa0 RCX: 00007fb39fd9c799
[  961.543421][T26673] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 000000000000001c
[  961.543441][T26673] RBP: 00007fb3a0c92090 R08: 0000000000000000 R09: 0000000000000000
[  961.543453][T26673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  961.543464][T26673] R13: 00007fb3a0016038 R14: 00007fb3a0015fa0 R15: 00007ffe9cb1f728
[  961.543494][T26673]  </TASK>
[  962.541621][T26706] FAULT_INJECTION: forcing a failure.
[  962.541621][T26706] name failslab, interval 1, probability 0, space 0, times 0
[  962.555186][T26706] CPU: 1 UID: 0 PID: 26706 Comm: syz.3.6787 Not tainted syzkaller #0 PREEMPT(full) 
[  962.555213][T26706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  962.555224][T26706] Call Trace:
[  962.555232][T26706]  <TASK>
[  962.555240][T26706]  dump_stack_lvl+0xe8/0x150
[  962.555270][T26706]  should_fail_ex+0x412/0x560
[  962.555298][T26706]  should_failslab+0xa8/0x100
[  962.555322][T26706]  __kmalloc_noprof+0xe8/0x760
[  962.555343][T26706]  ? tomoyo_encode+0x28b/0x550
[  962.555372][T26706]  tomoyo_encode+0x28b/0x550
[  962.555402][T26706]  tomoyo_realpath_from_path+0x58d/0x5d0
[  962.555438][T26706]  ? tomoyo_path_number_perm+0x219/0x630
[  962.555459][T26706]  tomoyo_path_number_perm+0x246/0x630
[  962.555482][T26706]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  962.555506][T26706]  ? __lock_acquire+0x6b5/0x2cf0
[  962.555540][T26706]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  962.555591][T26706]  ? __fget_files+0x2a/0x420
[  962.555619][T26706]  ? __fget_files+0x2a/0x420
[  962.555642][T26706]  ? __fget_files+0x3a0/0x420
[  962.555665][T26706]  ? __fget_files+0x2a/0x420
[  962.555694][T26706]  security_file_ioctl+0xc3/0x2a0
[  962.555717][T26706]  __se_sys_ioctl+0x47/0x170
[  962.555741][T26706]  do_syscall_64+0x14d/0xf80
[  962.555766][T26706]  ? trace_irq_disable+0x3b/0x150
[  962.555791][T26706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.555809][T26706]  ? clear_bhb_loop+0x40/0x90
[  962.555831][T26706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.555849][T26706] RIP: 0033:0x7f40f7f9c799
[  962.555867][T26706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  962.555883][T26706] RSP: 002b:00007f40f8edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  962.555902][T26706] RAX: ffffffffffffffda RBX: 00007f40f8215fa0 RCX: 00007f40f7f9c799
[  962.555915][T26706] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004
[  962.555927][T26706] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  962.555939][T26706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  962.555949][T26706] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  962.555980][T26706]  </TASK>
[  962.556089][T26706] ERROR: Out of memory at tomoyo_realpath_from_path.
[  962.693074][T26709] lo speed is unknown, defaulting to 1000
[  962.969253][T26714] __nla_validate_parse: 10 callbacks suppressed
[  962.969272][T26714] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6789'.
[  963.038430][T26714] tipc: Enabled bearer <eth:gre0>, priority 10
[  963.050688][T26714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6789'.
[  963.158761][T26719] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6791'.
[  963.541717][T26728] lo speed is unknown, defaulting to 1000
[  963.752815][T26739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6795'.
[  963.984944][T26709] lo speed is unknown, defaulting to 1000
[  964.054444][T26748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6797'.
[  964.065388][T26709] lo speed is unknown, defaulting to 1000
[  964.504637][T26767] FAULT_INJECTION: forcing a failure.
[  964.504637][T26767] name failslab, interval 1, probability 0, space 0, times 0
[  964.534588][T26767] CPU: 1 UID: 0 PID: 26767 Comm: syz.3.6800 Not tainted syzkaller #0 PREEMPT(full) 
[  964.534614][T26767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  964.534626][T26767] Call Trace:
[  964.534634][T26767]  <TASK>
[  964.534642][T26767]  dump_stack_lvl+0xe8/0x150
[  964.534671][T26767]  should_fail_ex+0x412/0x560
[  964.534700][T26767]  should_failslab+0xa8/0x100
[  964.534724][T26767]  __kmalloc_noprof+0xe8/0x760
[  964.534742][T26767]  ? __lock_acquire+0x6b5/0x2cf0
[  964.534765][T26767]  ? sock_kmalloc+0xd6/0x160
[  964.534790][T26767]  sock_kmalloc+0xd6/0x160
[  964.534812][T26767]  ____sys_sendmsg+0x1c2/0x9f0
[  964.534829][T26767]  ? __lock_acquire+0x6b5/0x2cf0
[  964.534859][T26767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  964.534886][T26767]  ? import_iovec+0x73/0xa0
[  964.534915][T26767]  ___sys_sendmsg+0x2a5/0x360
[  964.534940][T26767]  ? __pfx____sys_sendmsg+0x10/0x10
[  964.534963][T26767]  ? kstrtouint+0x6e/0xe0
[  964.535014][T26767]  ? __fget_files+0x2a/0x420
[  964.535038][T26767]  ? __fget_files+0x3a0/0x420
[  964.535071][T26767]  __sys_sendmmsg+0x27c/0x4e0
[  964.535095][T26767]  ? __pfx___sys_sendmmsg+0x10/0x10
[  964.535111][T26767]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  964.535161][T26767]  ? ksys_write+0x242/0x270
[  964.535183][T26767]  ? __pfx_ksys_write+0x10/0x10
[  964.535208][T26767]  __x64_sys_sendmmsg+0xa0/0xc0
[  964.535229][T26767]  do_syscall_64+0x14d/0xf80
[  964.535253][T26767]  ? trace_irq_disable+0x3b/0x150
[  964.535278][T26767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.535297][T26767]  ? clear_bhb_loop+0x40/0x90
[  964.535319][T26767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.535338][T26767] RIP: 0033:0x7f40f7f9c799
[  964.535355][T26767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.535371][T26767] RSP: 002b:00007f40f8eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  964.535391][T26767] RAX: ffffffffffffffda RBX: 00007f40f8216090 RCX: 00007f40f7f9c799
[  964.535404][T26767] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  964.535417][T26767] RBP: 00007f40f8eba090 R08: 0000000000000000 R09: 0000000000000000
[  964.535428][T26767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  964.535439][T26767] R13: 00007f40f8216128 R14: 00007f40f8216090 R15: 00007ffc8e44e4a8
[  964.535469][T26767]  </TASK>
[  964.805238][T26770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6802'.
[  964.958189][T26728] lo speed is unknown, defaulting to 1000
[  964.978567][T26728] lo speed is unknown, defaulting to 1000
[  965.349680][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6804'.
[  965.658660][T26798] net_ratelimit: 45 callbacks suppressed
[  965.658680][T26798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  966.057296][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'.
[  966.252192][T26815] netlink: 'syz.3.6811': attribute type 2 has an invalid length.
[  966.262331][T26815] netlink: 'syz.3.6811': attribute type 2 has an invalid length.
[  966.301188][T26815] netlink: 'syz.3.6811': attribute type 2 has an invalid length.
[  966.590471][T26822] FAULT_INJECTION: forcing a failure.
[  966.590471][T26822] name failslab, interval 1, probability 0, space 0, times 0
[  966.647803][T26822] CPU: 1 UID: 0 PID: 26822 Comm: syz.2.6813 Not tainted syzkaller #0 PREEMPT(full) 
[  966.647828][T26822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  966.647838][T26822] Call Trace:
[  966.647845][T26822]  <TASK>
[  966.647853][T26822]  dump_stack_lvl+0xe8/0x150
[  966.647883][T26822]  should_fail_ex+0x412/0x560
[  966.647913][T26822]  should_failslab+0xa8/0x100
[  966.647935][T26822]  ? __kernfs_new_node+0xe9/0x8e0
[  966.647961][T26822]  kmem_cache_alloc_noprof+0x87/0x650
[  966.647989][T26822]  __kernfs_new_node+0xe9/0x8e0
[  966.648021][T26822]  ? __pfx___kernfs_new_node+0x10/0x10
[  966.648047][T26822]  ? kernfs_root+0x1c/0x230
[  966.648078][T26822]  ? kernfs_root+0x1c/0x230
[  966.648100][T26822]  ? kernfs_root+0x1c/0x230
[  966.648121][T26822]  ? kernfs_root+0x1c/0x230
[  966.648150][T26822]  kernfs_new_node+0x102/0x210
[  966.648180][T26822]  __kernfs_create_file+0x4b/0x2e0
[  966.648204][T26822]  sysfs_add_file_mode_ns+0x238/0x300
[  966.648235][T26822]  internal_create_group+0x673/0x1180
[  966.648276][T26822]  ? __pfx_internal_create_group+0x10/0x10
[  966.648305][T26822]  ? up_write+0x1ab/0x410
[  966.648328][T26822]  sysfs_create_groups+0x59/0x120
[  966.648356][T26822]  device_add_attrs+0x1bf/0x5b0
[  966.648381][T26822]  ? __pfx_device_add_attrs+0x10/0x10
[  966.648405][T26822]  ? device_add_class_symlinks+0x21f/0x240
[  966.648435][T26822]  device_add+0x496/0xb70
[  966.648453][T26822]  ? device_initialize+0x24b/0x440
[  966.648474][T26822]  netdev_register_kobject+0x178/0x310
[  966.648501][T26822]  register_netdevice+0x12c0/0x1cf0
[  966.648521][T26822]  ? net_generic+0x1e/0x240
[  966.648559][T26822]  ? __pfx_register_netdevice+0x10/0x10
[  966.648582][T26822]  ? __asan_memset+0x22/0x50
[  966.648600][T26822]  ? dev_addr_mod+0x354/0x520
[  966.648618][T26822]  ? ipip6_tunnel_create+0x79/0x2c0
[  966.648647][T26822]  ipip6_tunnel_create+0x112/0x2c0
[  966.648674][T26822]  ipip6_newlink+0x326/0x5d0
[  966.648702][T26822]  ? __pfx_ipip6_newlink+0x10/0x10
[  966.648737][T26822]  ? __pfx_ipip6_newlink+0x10/0x10
[  966.648760][T26822]  rtnl_newlink_create+0x329/0xb70
[  966.648787][T26822]  ? __pfx___nla_validate_parse+0x10/0x10
[  966.648823][T26822]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  966.648853][T26822]  ? __pfx___mutex_lock+0x10/0x10
[  966.648889][T26822]  ? ns_capable+0x89/0xe0
[  966.648917][T26822]  rtnl_newlink+0x1666/0x1be0
[  966.648957][T26822]  ? __pfx_rtnl_newlink+0x10/0x10
[  966.648991][T26822]  ? __lock_acquire+0x6b5/0x2cf0
[  966.649021][T26822]  ? __lock_acquire+0x6b5/0x2cf0
[  966.649046][T26822]  ? __lock_acquire+0x6b5/0x2cf0
[  966.649080][T26822]  ? unwind_next_frame+0xa5/0x23c0
[  966.649128][T26822]  ? __lock_acquire+0x6b5/0x2cf0
[  966.649154][T26822]  ? is_bpf_text_address+0x26/0x2b0
[  966.649177][T26822]  ? kernel_text_address+0xa5/0xe0
[  966.649224][T26822]  ? __pfx_rtnl_newlink+0x10/0x10
[  966.649247][T26822]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  966.649276][T26822]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  966.649299][T26822]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  966.649327][T26822]  ? __lock_acquire+0x6b5/0x2cf0
[  966.649360][T26822]  netlink_rcv_skb+0x232/0x4b0
[  966.649386][T26822]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  966.649412][T26822]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  966.649453][T26822]  ? netlink_deliver_tap+0x2e/0x1b0
[  966.649485][T26822]  netlink_unicast+0x80f/0x9b0
[  966.649516][T26822]  ? __pfx_netlink_unicast+0x10/0x10
[  966.649541][T26822]  ? netlink_sendmsg+0x650/0xb40
[  966.649563][T26822]  ? skb_put+0x11b/0x210
[  966.649592][T26822]  netlink_sendmsg+0x813/0xb40
[  966.649627][T26822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  966.649654][T26822]  ? aa_sock_msg_perm+0xf1/0x1b0
[  966.649680][T26822]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  966.649703][T26822]  ____sys_sendmsg+0x972/0x9f0
[  966.649732][T26822]  ? __pfx_____sys_sendmsg+0x10/0x10
[  966.649759][T26822]  ? import_iovec+0x73/0xa0
[  966.649790][T26822]  ___sys_sendmsg+0x2a5/0x360
[  966.649815][T26822]  ? __pfx____sys_sendmsg+0x10/0x10
[  966.649870][T26822]  ? __fget_files+0x2a/0x420
[  966.649894][T26822]  ? __fget_files+0x3a0/0x420
[  966.649930][T26822]  __x64_sys_sendmsg+0x1bd/0x2a0
[  966.649952][T26822]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  966.649980][T26822]  ? __pfx_ksys_write+0x10/0x10
[  966.650012][T26822]  do_syscall_64+0x14d/0xf80
[  966.650037][T26822]  ? trace_irq_disable+0x3b/0x150
[  966.650061][T26822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.650079][T26822]  ? clear_bhb_loop+0x40/0x90
[  966.650102][T26822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.650120][T26822] RIP: 0033:0x7eff6919c799
[  966.650138][T26822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.650152][T26822] RSP: 002b:00007eff69fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  966.650172][T26822] RAX: ffffffffffffffda RBX: 00007eff69415fa0 RCX: 00007eff6919c799
[  966.650186][T26822] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  966.650198][T26822] RBP: 00007eff69fe6090 R08: 0000000000000000 R09: 0000000000000000
[  966.650210][T26822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  966.650222][T26822] R13: 00007eff69416038 R14: 00007eff69415fa0 R15: 00007ffce9ad80e8
[  966.650253][T26822]  </TASK>
[  967.271309][T26824] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  967.372281][T26829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6816'.
[  967.413718][T26677] Set syz1 is full, maxelem 65536 reached
[  967.967207][T26866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  968.134865][T26874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6828'.
[  968.171996][T13932] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  968.180625][T26874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6828'.
[  968.195154][T13932] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  968.227295][T13932] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  968.255296][T13932] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  968.350181][T26887] IPVS: Unknown mcast interface: ipvlan0
[  968.542911][T26897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6833'.
[  968.955497][T26917] lo speed is unknown, defaulting to 1000
[  969.212932][T26942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6849'.
[  969.222438][T26942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6849'.
[  969.442769][T26917] lo speed is unknown, defaulting to 1000
[  969.459404][T26917] lo speed is unknown, defaulting to 1000
[  969.519140][T26950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6852'.
[  969.582810][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6850'.
[  969.647288][T26954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  970.023977][T26967] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6857'.
[  970.680940][T26998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6863'.
[  970.739158][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6864'.
[  970.749088][T26989] xt_l2tp: wrong L2TP version: 0
[  971.180563][T27015] netlink: 'syz.0.6868': attribute type 1 has an invalid length.
[  972.872071][T27001] veth7: entered promiscuous mode
[  972.888573][T27015] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  973.010283][T27044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  973.195693][T27058] batman_adv: batadv0: Adding interface: macvtap1
[  973.241553][T27058] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  973.272917][T27064] __nla_validate_parse: 5 callbacks suppressed
[  973.272937][T27064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6880'.
[  973.311393][T27058] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  973.338110][T27052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6876'.
[  973.360815][T27057] lo speed is unknown, defaulting to 1000
[  973.981804][T27097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6890'.
[  974.119591][T27104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6892'.
[  974.312108][T27115] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6896'.
[  974.457773][T27057] lo speed is unknown, defaulting to 1000
[  974.475510][T27125] FAULT_INJECTION: forcing a failure.
[  974.475510][T27125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  974.496657][T27057] lo speed is unknown, defaulting to 1000
[  974.513578][T27125] CPU: 1 UID: 0 PID: 27125 Comm: syz.0.6898 Not tainted syzkaller #0 PREEMPT(full) 
[  974.513602][T27125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  974.513612][T27125] Call Trace:
[  974.513620][T27125]  <TASK>
[  974.513628][T27125]  dump_stack_lvl+0xe8/0x150
[  974.513658][T27125]  should_fail_ex+0x412/0x560
[  974.513686][T27125]  _copy_from_user+0x2d/0xb0
[  974.513712][T27125]  sock_do_ioctl+0x195/0x320
[  974.513737][T27125]  ? __pfx_sock_do_ioctl+0x10/0x10
[  974.513757][T27125]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  974.513798][T27125]  sock_ioctl+0x5c6/0x7f0
[  974.513822][T27125]  ? __pfx_sock_ioctl+0x10/0x10
[  974.513842][T27125]  ? __fget_files+0x2a/0x420
[  974.513867][T27125]  ? __fget_files+0x3a0/0x420
[  974.513891][T27125]  ? __fget_files+0x2a/0x420
[  974.513918][T27125]  ? bpf_lsm_file_ioctl+0x9/0x20
[  974.513941][T27125]  ? __pfx_sock_ioctl+0x10/0x10
[  974.513961][T27125]  __se_sys_ioctl+0xfc/0x170
[  974.513985][T27125]  do_syscall_64+0x14d/0xf80
[  974.514009][T27125]  ? trace_irq_disable+0x3b/0x150
[  974.514034][T27125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.514052][T27125]  ? clear_bhb_loop+0x40/0x90
[  974.514075][T27125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.514093][T27125] RIP: 0033:0x7fb39fd9c799
[  974.514111][T27125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  974.514127][T27125] RSP: 002b:00007fb3a0c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  974.514148][T27125] RAX: ffffffffffffffda RBX: 00007fb3a0016090 RCX: 00007fb39fd9c799
[  974.514161][T27125] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000007
[  974.514180][T27125] RBP: 00007fb3a0c71090 R08: 0000000000000000 R09: 0000000000000000
[  974.514191][T27125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  974.514202][T27125] R13: 00007fb3a0016128 R14: 00007fb3a0016090 R15: 00007ffe9cb1f728
[  974.514232][T27125]  </TASK>
[  975.084377][T27158] FAULT_INJECTION: forcing a failure.
[  975.084377][T27158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  975.164863][T27158] CPU: 1 UID: 0 PID: 27158 Comm: syz.3.6906 Not tainted syzkaller #0 PREEMPT(full) 
[  975.164889][T27158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  975.164901][T27158] Call Trace:
[  975.164908][T27158]  <TASK>
[  975.164916][T27158]  dump_stack_lvl+0xe8/0x150
[  975.164946][T27158]  should_fail_ex+0x412/0x560
[  975.164974][T27158]  _copy_from_user+0x2d/0xb0
[  975.165002][T27158]  ____sys_sendmsg+0x308/0x9f0
[  975.165020][T27158]  ? __lock_acquire+0x6b5/0x2cf0
[  975.165072][T27158]  ? __pfx_____sys_sendmsg+0x10/0x10
[  975.165097][T27158]  ? import_iovec+0x73/0xa0
[  975.165128][T27158]  ___sys_sendmsg+0x2a5/0x360
[  975.165152][T27158]  ? __pfx____sys_sendmsg+0x10/0x10
[  975.165174][T27158]  ? kstrtouint+0x6e/0xe0
[  975.165217][T27158]  ? __fget_files+0x2a/0x420
[  975.165240][T27158]  ? __fget_files+0x3a0/0x420
[  975.165269][T27158]  __sys_sendmmsg+0x27c/0x4e0
[  975.165289][T27158]  ? __pfx___sys_sendmmsg+0x10/0x10
[  975.165304][T27158]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  975.165352][T27158]  ? ksys_write+0x242/0x270
[  975.165372][T27158]  ? __pfx_ksys_write+0x10/0x10
[  975.165397][T27158]  __x64_sys_sendmmsg+0xa0/0xc0
[  975.165417][T27158]  do_syscall_64+0x14d/0xf80
[  975.165441][T27158]  ? trace_irq_disable+0x3b/0x150
[  975.165465][T27158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.165484][T27158]  ? clear_bhb_loop+0x40/0x90
[  975.165506][T27158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.165524][T27158] RIP: 0033:0x7f40f7f9c799
[  975.165541][T27158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.165556][T27158] RSP: 002b:00007f40f8eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  975.165576][T27158] RAX: ffffffffffffffda RBX: 00007f40f8216090 RCX: 00007f40f7f9c799
[  975.165598][T27158] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  975.165610][T27158] RBP: 00007f40f8eba090 R08: 0000000000000000 R09: 0000000000000000
[  975.165622][T27158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.165632][T27158] R13: 00007f40f8216128 R14: 00007f40f8216090 R15: 00007ffc8e44e4a8
[  975.165662][T27158]  </TASK>
[  975.480329][T26723] udevd[26723]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  976.006063][T27187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6914'.
[  976.158527][T27199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6916'.
[  976.169801][T27199] netlink: 580 bytes leftover after parsing attributes in process `syz.4.6916'.
[  976.937621][T27213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6921'.
[  976.947119][T27213] openvswitch: netlink: Flow key attr not present in new flow.
[  977.153232][T27246] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6931'.
[  977.376890][T27263] FAULT_INJECTION: forcing a failure.
[  977.376890][T27263] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  977.400611][T27263] CPU: 0 UID: 0 PID: 27263 Comm: syz.3.6938 Not tainted syzkaller #0 PREEMPT(full) 
[  977.400638][T27263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  977.400648][T27263] Call Trace:
[  977.400656][T27263]  <TASK>
[  977.400665][T27263]  dump_stack_lvl+0xe8/0x150
[  977.400694][T27263]  should_fail_ex+0x412/0x560
[  977.400724][T27263]  _copy_to_user+0x31/0xb0
[  977.400753][T27263]  simple_read_from_buffer+0xe1/0x170
[  977.400784][T27263]  proc_fail_nth_read+0x1bb/0x230
[  977.400813][T27263]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  977.400840][T27263]  ? rw_verify_area+0x2a6/0x4d0
[  977.400860][T27263]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  977.400886][T27263]  vfs_read+0x20c/0xa70
[  977.400904][T27263]  ? fdget_pos+0x246/0x320
[  977.400934][T27263]  ? __pfx___mutex_lock+0x10/0x10
[  977.400961][T27263]  ? __pfx_vfs_read+0x10/0x10
[  977.400985][T27263]  ? __fget_files+0x2a/0x420
[  977.401014][T27263]  ? __fget_files+0x3a0/0x420
[  977.401037][T27263]  ? __fget_files+0x2a/0x420
[  977.401071][T27263]  ksys_read+0x150/0x270
[  977.401094][T27263]  ? __pfx_ksys_read+0x10/0x10
[  977.401126][T27263]  do_syscall_64+0x14d/0xf80
[  977.401149][T27263]  ? trace_irq_disable+0x3b/0x150
[  977.401174][T27263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.401191][T27263]  ? clear_bhb_loop+0x40/0x90
[  977.401213][T27263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.401232][T27263] RIP: 0033:0x7f40f7f5cfce
[  977.401249][T27263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  977.401264][T27263] RSP: 002b:00007f40f8edafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  977.401285][T27263] RAX: ffffffffffffffda RBX: 00007f40f8edb6c0 RCX: 00007f40f7f5cfce
[  977.401298][T27263] RDX: 000000000000000f RSI: 00007f40f8edb0a0 RDI: 0000000000000003
[  977.401310][T27263] RBP: 00007f40f8edb090 R08: 0000000000000000 R09: 0000000000000000
[  977.401322][T27263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  977.401333][T27263] R13: 00007f40f8216038 R14: 00007f40f8215fa0 R15: 00007ffc8e44e4a8
[  977.401363][T27263]  </TASK>
[  977.798800][T27275] gre0: entered promiscuous mode
[  977.803823][T27275] gre0: entered allmulticast mode
[  978.135108][T27292] vlan3: entered allmulticast mode
[  978.151998][T27292] bridge8: entered allmulticast mode
[  978.363615][T27313] lo speed is unknown, defaulting to 1000
[  978.413431][T27321] __nla_validate_parse: 8 callbacks suppressed
[  978.413452][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6956'.
[  978.435845][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6956'.
[  979.260755][T27349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6962'.
[  979.288579][T27349] netlink: 'syz.2.6962': attribute type 2 has an invalid length.
[  979.297390][T27313] lo speed is unknown, defaulting to 1000
[  979.306868][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6962'.
[  979.319774][T27313] lo speed is unknown, defaulting to 1000
[  979.461431][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6968'.
[  979.613588][T27361] syzkaller1: entered promiscuous mode
[  979.619236][T27361] syzkaller1: entered allmulticast mode
[  980.294806][T27393] IPVS: length: 4096 != 24
[  980.528910][T27398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6975'.
[  980.643475][T27407] netlink: 'syz.2.6976': attribute type 1 has an invalid length.
[  980.748471][T27412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6980'.
[  981.182376][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6984'.
[  981.565082][T27461] bridge0: left promiscuous mode
[  981.570749][T27461] vlan0: left promiscuous mode
[  981.575565][T27461] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591
[  981.584944][T27461] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27461, name: syz.1.6990
[  981.594124][T27461] preempt_count: 201, expected: 0
[  981.599215][T27461] RCU nest depth: 0, expected: 0
[  981.604190][T27461] 2 locks held by syz.1.6990/27461:
[  981.609455][T27461]  #0: ffffffff8fbc6f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  981.618614][T27461]  #1: ffff888068b0c370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0
[  981.629367][T27461] Preemption disabled at:
[  981.629381][T27461] [<ffffffff897e4064>] dev_set_rx_mode+0x54/0x2d0
[  981.640201][T27461] CPU: 0 UID: 0 PID: 27461 Comm: syz.1.6990 Not tainted syzkaller #0 PREEMPT(full) 
[  981.640231][T27461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  981.640245][T27461] Call Trace:
[  981.640254][T27461]  <TASK>
[  981.640263][T27461]  dump_stack_lvl+0xe8/0x150
[  981.640298][T27461]  __might_resched+0x378/0x4d0
[  981.640330][T27461]  ? dev_set_rx_mode+0x54/0x2d0
[  981.640366][T27461]  __mutex_lock+0x119/0x1300
[  981.640403][T27461]  ? __pfx__printk+0x10/0x10
[  981.640462][T27461]  ? dev_set_promiscuity+0x10e/0x260
[  981.640492][T27461]  ? __netdev_printk+0x36f/0x480
[  981.640517][T27461]  ? __pfx___mutex_lock+0x10/0x10
[  981.640547][T27461]  ? netdev_info+0x11e/0x180
[  981.640573][T27461]  ? __pfx_netdev_info+0x10/0x10
[  981.640602][T27461]  dev_set_promiscuity+0x10e/0x260
[  981.640637][T27461]  ? __pfx_vlan_dev_change_rx_flags+0x10/0x10
[  981.640746][T27461]  __dev_set_promiscuity+0x515/0x710
[  981.640786][T27461]  netif_set_promiscuity+0x50/0xe0
[  981.640822][T27461]  dev_set_promiscuity+0x126/0x260
[  981.640858][T27461]  br_manage_promisc+0x4db/0x560
[  981.640924][T27461]  ? __pfx_br_dev_change_rx_flags+0x10/0x10
[  981.640949][T27461]  __dev_set_promiscuity+0x515/0x710
[  981.640989][T27461]  dev_set_rx_mode+0x1c9/0x2d0
[  981.641024][T27461]  __dev_open+0x672/0x830
[  981.641067][T27461]  ? __pfx___dev_open+0x10/0x10
[  981.641091][T27461]  ? __dev_change_flags+0x1b0/0x690
[  981.641125][T27461]  ? __local_bh_enable_ip+0xd0/0x130
[  981.641157][T27461]  __dev_change_flags+0x1f7/0x690
[  981.641195][T27461]  ? __pfx___dev_change_flags+0x10/0x10
[  981.641225][T27461]  ? netif_state_change+0x297/0x3a0
[  981.641255][T27461]  ? __pfx_netif_state_change+0x10/0x10
[  981.641287][T27461]  netif_change_flags+0x88/0x1a0
[  981.641325][T27461]  do_setlink+0xf82/0x4590
[  981.641360][T27461]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  981.641393][T27461]  ? __pfx_do_setlink+0x10/0x10
[  981.641424][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  981.641472][T27461]  ? __mutex_trylock_common+0x158/0x260
[  981.641507][T27461]  ? __pfx___mutex_trylock_common+0x10/0x10
[  981.641540][T27461]  ? rcu_is_watching+0x15/0xb0
[  981.641567][T27461]  ? trace_contention_end+0x3d/0x150
[  981.641600][T27461]  ? __mutex_lock+0x319/0x1300
[  981.641630][T27461]  ? __pfx___nla_validate_parse+0x10/0x10
[  981.641669][T27461]  ? rtnl_newlink+0x8a1/0x1be0
[  981.641701][T27461]  ? __pfx___mutex_lock+0x10/0x10
[  981.641742][T27461]  ? ns_capable+0x89/0xe0
[  981.641775][T27461]  rtnl_newlink+0x147a/0x1be0
[  981.641817][T27461]  ? __pfx_rtnl_newlink+0x10/0x10
[  981.641856][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  981.641889][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  981.641918][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  981.641955][T27461]  ? unwind_next_frame+0xa5/0x23c0
[  981.642008][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  981.642046][T27461]  ? is_bpf_text_address+0x26/0x2b0
[  981.642072][T27461]  ? kernel_text_address+0xa5/0xe0
[  981.642123][T27461]  ? __pfx_rtnl_newlink+0x10/0x10
[  981.642151][T27461]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  981.642185][T27461]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  981.642213][T27461]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  981.642245][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  981.642281][T27461]  netlink_rcv_skb+0x232/0x4b0
[  981.642312][T27461]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  981.642343][T27461]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  981.642382][T27461]  ? netlink_deliver_tap+0x2e/0x1b0
[  981.642419][T27461]  netlink_unicast+0x80f/0x9b0
[  981.642455][T27461]  ? __pfx_netlink_unicast+0x10/0x10
[  981.642483][T27461]  ? netlink_sendmsg+0x650/0xb40
[  981.642510][T27461]  ? skb_put+0x11b/0x210
[  981.642543][T27461]  netlink_sendmsg+0x813/0xb40
[  981.642582][T27461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  981.642615][T27461]  ? aa_sock_msg_perm+0xf1/0x1b0
[  981.642644][T27461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  981.642671][T27461]  ____sys_sendmsg+0x972/0x9f0
[  981.642690][T27461]  ? futex_unqueue+0x211/0x240
[  981.642722][T27461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  981.642750][T27461]  ? import_iovec+0x73/0xa0
[  981.642787][T27461]  ___sys_sendmsg+0x2a5/0x360
[  981.642813][T27461]  ? __pfx____sys_sendmsg+0x10/0x10
[  981.642840][T27461]  ? futex_wait+0x29a/0x380
[  981.642895][T27461]  ? __fget_files+0x2a/0x420
[  981.642925][T27461]  ? __fget_files+0x3a0/0x420
[  981.642966][T27461]  __x64_sys_sendmsg+0x1bd/0x2a0
[  981.642990][T27461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  981.643019][T27461]  ? rcu_is_watching+0x15/0xb0
[  981.643068][T27461]  do_syscall_64+0x14d/0xf80
[  981.643097][T27461]  ? trace_irq_disable+0x3b/0x150
[  981.643128][T27461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.643150][T27461]  ? clear_bhb_loop+0x40/0x90
[  981.643173][T27461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.643192][T27461] RIP: 0033:0x7fa8a9f9c799
[  981.643213][T27461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  981.643230][T27461] RSP: 002b:00007fa8aae05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  981.643250][T27461] RAX: ffffffffffffffda RBX: 00007fa8aa216180 RCX: 00007fa8a9f9c799
[  981.643264][T27461] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005
[  981.643278][T27461] RBP: 00007fa8aa032c99 R08: 0000000000000000 R09: 0000000000000000
[  981.643291][T27461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  981.643305][T27461] R13: 00007fa8aa216218 R14: 00007fa8aa216180 R15: 00007fff84e74678
[  981.643337][T27461]  </TASK>
[  981.643347][T27461] 
[  982.166992][T27461] =============================
[  982.171832][T27461] [ BUG: Invalid wait context ]
[  982.176669][T27461] syzkaller #0 Tainted: G        W          
[  982.182631][T27461] -----------------------------
[  982.187458][T27461] syz.1.6990/27461 is trying to lock:
[  982.192811][T27461] ffff88807e5fad40 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260
[  982.203185][T27461] other info that might help us debug this:
[  982.209070][T27461] context-{5:5}
[  982.212517][T27461] 2 locks held by syz.1.6990/27461:
[  982.217699][T27461]  #0: ffffffff8fbc6f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  982.226758][T27461]  #1: ffff888068b0c370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0
[  982.237407][T27461] stack backtrace:
[  982.241126][T27461] CPU: 0 UID: 0 PID: 27461 Comm: syz.1.6990 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  982.241150][T27461] Tainted: [W]=WARN
[  982.241157][T27461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  982.241168][T27461] Call Trace:
[  982.241177][T27461]  <TASK>
[  982.241186][T27461]  dump_stack_lvl+0xe8/0x150
[  982.241211][T27461]  __lock_acquire+0xec1/0x2cf0
[  982.241234][T27461]  ? __show_trace_log_lvl+0x478/0x550
[  982.241266][T27461]  lock_acquire+0xf0/0x2e0
[  982.241286][T27461]  ? dev_set_promiscuity+0x10e/0x260
[  982.241313][T27461]  ? __might_resched+0x378/0x4d0
[  982.241338][T27461]  __mutex_lock+0x19f/0x1300
[  982.241362][T27461]  ? dev_set_promiscuity+0x10e/0x260
[  982.241389][T27461]  ? __pfx__printk+0x10/0x10
[  982.241405][T27461]  ? dev_set_promiscuity+0x10e/0x260
[  982.241430][T27461]  ? __netdev_printk+0x36f/0x480
[  982.241449][T27461]  ? __pfx___mutex_lock+0x10/0x10
[  982.241473][T27461]  ? netdev_info+0x11e/0x180
[  982.241490][T27461]  ? __pfx_netdev_info+0x10/0x10
[  982.241509][T27461]  dev_set_promiscuity+0x10e/0x260
[  982.241536][T27461]  ? __pfx_vlan_dev_change_rx_flags+0x10/0x10
[  982.241559][T27461]  __dev_set_promiscuity+0x515/0x710
[  982.241587][T27461]  netif_set_promiscuity+0x50/0xe0
[  982.241613][T27461]  dev_set_promiscuity+0x126/0x260
[  982.241639][T27461]  br_manage_promisc+0x4db/0x560
[  982.241667][T27461]  ? __pfx_br_dev_change_rx_flags+0x10/0x10
[  982.241686][T27461]  __dev_set_promiscuity+0x515/0x710
[  982.241714][T27461]  dev_set_rx_mode+0x1c9/0x2d0
[  982.241739][T27461]  __dev_open+0x672/0x830
[  982.241763][T27461]  ? __pfx___dev_open+0x10/0x10
[  982.241783][T27461]  ? __dev_change_flags+0x1b0/0x690
[  982.241809][T27461]  ? __local_bh_enable_ip+0xd0/0x130
[  982.241831][T27461]  __dev_change_flags+0x1f7/0x690
[  982.241859][T27461]  ? __pfx___dev_change_flags+0x10/0x10
[  982.241883][T27461]  ? netif_state_change+0x297/0x3a0
[  982.241905][T27461]  ? __pfx_netif_state_change+0x10/0x10
[  982.241929][T27461]  netif_change_flags+0x88/0x1a0
[  982.241956][T27461]  do_setlink+0xf82/0x4590
[  982.241982][T27461]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  982.242004][T27461]  ? __pfx_do_setlink+0x10/0x10
[  982.242033][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  982.242061][T27461]  ? __mutex_trylock_common+0x158/0x260
[  982.242087][T27461]  ? __pfx___mutex_trylock_common+0x10/0x10
[  982.242113][T27461]  ? rcu_is_watching+0x15/0xb0
[  982.242136][T27461]  ? trace_contention_end+0x3d/0x150
[  982.242161][T27461]  ? __mutex_lock+0x319/0x1300
[  982.242185][T27461]  ? __pfx___nla_validate_parse+0x10/0x10
[  982.242213][T27461]  ? rtnl_newlink+0x8a1/0x1be0
[  982.242237][T27461]  ? __pfx___mutex_lock+0x10/0x10
[  982.242265][T27461]  ? ns_capable+0x89/0xe0
[  982.242288][T27461]  rtnl_newlink+0x147a/0x1be0
[  982.242315][T27461]  ? __pfx_rtnl_newlink+0x10/0x10
[  982.242341][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  982.242363][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  982.242385][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  982.242409][T27461]  ? unwind_next_frame+0xa5/0x23c0
[  982.242441][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  982.242462][T27461]  ? is_bpf_text_address+0x26/0x2b0
[  982.242481][T27461]  ? kernel_text_address+0xa5/0xe0
[  982.242509][T27461]  ? __pfx_rtnl_newlink+0x10/0x10
[  982.242532][T27461]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  982.242557][T27461]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  982.242579][T27461]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  982.242602][T27461]  ? __lock_acquire+0x6b5/0x2cf0
[  982.242626][T27461]  netlink_rcv_skb+0x232/0x4b0
[  982.242649][T27461]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  982.242673][T27461]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  982.242699][T27461]  ? netlink_deliver_tap+0x2e/0x1b0
[  982.242724][T27461]  netlink_unicast+0x80f/0x9b0
[  982.242747][T27461]  ? __pfx_netlink_unicast+0x10/0x10
[  982.242768][T27461]  ? netlink_sendmsg+0x650/0xb40
[  982.242790][T27461]  ? skb_put+0x11b/0x210
[  982.242816][T27461]  netlink_sendmsg+0x813/0xb40
[  982.242842][T27461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  982.242866][T27461]  ? aa_sock_msg_perm+0xf1/0x1b0
[  982.242889][T27461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  982.242908][T27461]  ____sys_sendmsg+0x972/0x9f0
[  982.242924][T27461]  ? futex_unqueue+0x211/0x240
[  982.242946][T27461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  982.242965][T27461]  ? import_iovec+0x73/0xa0
[  982.242992][T27461]  ___sys_sendmsg+0x2a5/0x360
[  982.243010][T27461]  ? __pfx____sys_sendmsg+0x10/0x10
[  982.243033][T27461]  ? futex_wait+0x29a/0x380
[  982.243067][T27461]  ? __fget_files+0x2a/0x420
[  982.243092][T27461]  ? __fget_files+0x3a0/0x420
[  982.243119][T27461]  __x64_sys_sendmsg+0x1bd/0x2a0
[  982.243136][T27461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  982.243156][T27461]  ? rcu_is_watching+0x15/0xb0
[  982.243183][T27461]  do_syscall_64+0x14d/0xf80
[  982.243206][T27461]  ? trace_irq_disable+0x3b/0x150
[  982.243230][T27461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.243247][T27461]  ? clear_bhb_loop+0x40/0x90
[  982.243266][T27461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.243283][T27461] RIP: 0033:0x7fa8a9f9c799
[  982.243300][T27461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.243317][T27461] RSP: 002b:00007fa8aae05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  982.243335][T27461] RAX: ffffffffffffffda RBX: 00007fa8aa216180 RCX: 00007fa8a9f9c799
[  982.243348][T27461] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005
[  982.243360][T27461] RBP: 00007fa8aa032c99 R08: 0000000000000000 R09: 0000000000000000
[  982.243372][T27461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  982.243382][T27461] R13: 00007fa8aa216218 R14: 00007fa8aa216180 R15: 00007fff84e74678
[  982.243401][T27461]  </TASK>
[  982.790289][T27461] dummy0: left promiscuous mode
[  982.836084][T27461] 8021q: adding VLAN 0 to HW filter on device bond0
[  982.846200][T27461] 8021q: adding VLAN 0 to HW filter on device team0
[  982.853991][T27461] dummy0: entered promiscuous mode
[  982.860056][T27461] bridge0: port 1(vlan0) entered blocking state
[  982.866334][T27461] bridge0: port 1(vlan0) entered forwarding state
[  982.873997][T27461] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  982.882803][T27461] caif:caif_disconnect_client(): nothing to disconnect
[  982.889974][T27461] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  982.898781][T27461] chnl_net:chnl_net_open(): state disconnected
[  982.905401][T27461] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  982.939994][T27446] lo speed is unknown, defaulting to 1000
[  983.049711][T27446] lo speed is unknown, defaulting to 1000
[  983.055942][T27446] lo speed is unknown, defaulting to 1000