last executing test programs:

6.980269124s ago: executing program 4 (id=1228):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0x3}}}, @common=@hl={{0x28}, {0x2, 0x42}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x330c7c84, 0xa33, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0x228, 0x268, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x0, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x7, "3eaeb16fde34d269280a46a6e13730aedb51f8c70d73c7a747adfcbf77f1"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x80}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
unshare(0x6a040000)

5.927959323s ago: executing program 2 (id=1233):
unshare(0x2a020400) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r5, &(0x7f00000005c0), 0x10) (async)
recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) (async)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=r4], 0x48}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000009c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d8a5, r7, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
r8 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40041)
unshare(0x18020200)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x228, r11, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xbe1c, 0x74}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xa4, 0x5b, "0cb3f60b570ab56ee97318fdaf8bc5f76639d2489a2673ae814cd8b01d707c7d0e2c5a221bdcbe2a8ae9472d3278e2d251deed2ca7b092bf6ba8e47393757a134261b4c584bc1c406b4e0e451c52898f9dc2a17c32ed38079f256b482bdc81ac0aab73686d5e400b3945e9261c6b9e146804ef901daf574010a438f135f2e203391a9a39de5ffc90fc8ea15622908dc42778681886e4a375f27cdaac89a1dd1c"}, @NL80211_ATTR_FRAME_MATCH={0x65, 0x5b, "ee33231f940f5aef077dd1c9e1471f88bde914a9a01d78051050340d592fef2249e33693b946f013fe8468026ca2ec4246dd5e5b0bb44d87fb7c81a2de191f4ff85776a36ed6943e6157c439fcdb9dde891037e0faf4fe3f07c75374197c888197"}, @NL80211_ATTR_FRAME_MATCH={0xe3, 0x5b, "d9879448cf7e30c7962464137451b9552cf0923dd833715ded2f3add6596655cc3ddf781e3a7aa805632cc7599e06627446e78d40fc47f1d0f5a0615e015e9429979f569e8a6f9fe952280c867c676baa994553263cb238d52d7ee0de3b5a5e67d7cc7939233df2cc8452a8f1beac2f4c13f881566b4a1d4e33ad41542be91bf501026180c0d79557570616fff4cd827a62ad9a9f43c7fcb136929450a8b22e8c8a92aea94f138a34e2ecfdeedeaa6449fa7811b101c7fb1601a208d86ee7be179ca4c20eae74adc33b305a62c169d833f89883858cef463cd5d4eb16ed2bb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf7}]}, 0x228}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r9, @ANYBLOB="0100000002"], 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000300000018110000", @ANYRES32=r13, @ANYBLOB="0700000000000000b7081551cd8bb36af88cf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f3ffffff85000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000180)=0x1ff)

5.742354646s ago: executing program 4 (id=1234):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003001500000000000100000000000080b40000000000000005"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)

5.363653987s ago: executing program 4 (id=1237):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000010900001d000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x50)

5.084695637s ago: executing program 0 (id=1239):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4000000, @private1, 0xb396}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000da0015b1000000910008000000000095000000000000001eb24d80e91c010bec370be4d5c15bff36e98c58a91caef82bd84417f9de667d32196bf07f2c73b26672635f190b81d6f04683feca7fd1d98ee5c5235b5de0867a8aba504acd6dc018dc20eb01f386147ea559d7b6bba5e163659241d5fd2d5db4e115f97101436c0ccdfba30e2f05972a7189351ef315f5f9449c18349dac66b12ae8597b83475a3ebb4d8bee6da0815d08f2d901d8cd2e7563d7c77bbff86a498a9be50e25252fecbc9f3514217615602feb4117345e0cfe341364df2907"], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x77}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x47f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x841}, 0x4000011)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xa4}, 0x8000000, 0x0, 0xff, 0x1}, 0x23)

5.014104943s ago: executing program 4 (id=1240):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0x4}, 0x68)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@mcast1, 0x28})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x1, 0x1, 0x9, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800d24f0100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8d69}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6}, @alu={0x7, 0x0, 0x5, 0xb, 0x7, 0x100}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xef, &(0x7f0000000340)=""/239, 0x1e00, 0x4, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000480)={0x6, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r9, r10, r11, r12], &(0x7f0000000580)=[{0x5, 0x2, 0xe, 0xc}, {0x1, 0x3, 0x9, 0x4}, {0x2, 0x5, 0x3, 0x8}, {0x5, 0x2, 0x0, 0x9}]}, 0x94)
syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYRES64=r7], 0x0)

4.891649876s ago: executing program 0 (id=1241):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)='\b', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x4d, 0x1, 0x1}}], 0x20, 0x4048800}, 0x20000051)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b00200001900010000000000fcdbdf250a010101000000000000000000000000ac1e00010000000000000000000000004e2100004e24fffc020000005c000000", @ANYRES32, @ANYRES32=0x0, @ANYRESDEC], 0x2b0}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x2000c810)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x20000600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}})

4.819442642s ago: executing program 2 (id=1242):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)="c8e9d4d0258eefb850d6b2a01f4bd14c95067a8e416fcc4374ccefbc54da19a8194ba590ad9a21e6fc8dd737045ba920968e0ac2063c65c21123be9fc7615610d2081c330cc3291860cd7c23826281db8b4c47c3e1aae684b12a15f1ee3051448ad470a622ee25838c6f6ec496996ffc34", 0x71}, {&(0x7f0000001300)="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", 0x1000}], 0x2, &(0x7f0000002340)=[{0x100, 0xc, 0x6, "d1e18cf5ebb233c093149a7ad9b4bbbfc2799a03e5390c665359cf025ac73e0edae90834caa39c6a83c730665f26b409f8b2349b961ea67f791ba93adfd939ee1f1f3b1bd271e34d57f1ec15e3386b6f367837b2cf9820fa38380017665e698335b4726fc93c6d94845eeabe6b5d407ebe65a8d60f52c9689369cb52cd222701138edd9ab18420f753451a7e7a5c659e82a51170fc03a7fa0de7ee10fea8d4fac38343c6674945d71dd4337563c6316afca48bea304b464e4b960e484f141d282bc7e51a0cdea33e3a93343e1e055df413a1381335c5bb5310a87b5e3863c06e0a4d1d1aa9ae9756e2d0e8"}, {0xc0, 0x84, 0x341, "0f75f682e96895b8ea5b151f202613e6018fdcd416051cf5e3b2ffe3b0bb6630796d09c6549cab54a2e1c19448affa6a013e5ef2286a3f64a208d4da584084703f17f0a77b1daf04288d7f993db88693ca97d087e7168881a73316ffcf74c6bd297b0150bec80cb57e74dee341ed02cf7887690c14f3bab6b84087ca642cf0668fbcba65a3793aea219a3f25021fa5eb3406b20c12593b3b54b11850f74d723317eedf8686d5bb14a4306a"}, {0xb8, 0x112, 0x4, "bedfd6de50b5a3d2777e33bf63724e1837fde212e012e161331191a4216bf2bfb16b6c8ba019cfa8d36b083397afe1e77c84a65b2ef32125ef98671006a1fa357a5a48b555721e28b5b95f65b2675de53fdb870341b45b51ea9eb6dbf01b47286f96a85868ee3e9a2dd4ece7971283f9e20acf2d237278fb88da4dd5e8f4fe67a315624ccac476a9ef850f852a2d7bbfa9cae28aca6b358517764de400cba059ebf89e5a"}], 0x278}}, {{&(0x7f00000025c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @local}, 0x3, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000002640)="742ec023198b5883329d5536d543a99e1f07de4091e54b485a5b8fcdebc2db9bca240304c3bef145f18ddce23ab4fe6e17b134fef7660e42148a50bf7ee0400b0291aa21deab58b6bb48bab622332b9ba4fa70733914e7b27efb683acb53c8cbbe4e4d162a3e4c1a074c6c9eef24cde9a54ffe179fa30a751ecbf81cda676d8dd7339828cb2417aad72c8f2ce5a69839ea4de9386b5b46", 0x97}, {&(0x7f0000002700)="3e82fb1c3d6b0e801cd5308956d61d716536a83eb6dbeaf550462d6228111fb069e46d25414667df6e09151666f833d7310a055713c286c2db83b409efa4e2fa6f86e2580b21fe3f367959193d0be50b6216d8be1833aec7da8a4a77afce29b0f0adc07218b85493873ab22d13b7a49d", 0x70}, {&(0x7f0000002780)="92f271d68b1e679e373b5cabc01def738ec93c68b6d76527a86dcdef8e718f9c5f8898c4452553c28bcaa6c3666bc02428b6cee69f1b4112ea21c4fb55121b23abd1a69bbf4c0fc558e643d85687dfb941d917cfaaad7c86925023073013b93219c6fbe2ad2ed49cfff961bf38b6877c6403461d8cdf06bc5e83e0546e819cef51e5a14c3aa5e7400322f9bcb73f708e18b729de0cb9dbf81cc7b32362890e2ace87469ea630fdbdac0dfd314b64875b98d61decf0974b7ca8bc70c67523870c23dfa1ab1a47ccef54f1eefb74", 0xcd}, {&(0x7f0000002880)="f0f5ca9d76de22ac249f97fd4ae8ae200f2cf8099551b9733b230c38097eda116098650996bcd9f1ed8c121bf4746757aff8273e7fc103f95bf8f6416f08a821e4094055d757bec18a2fd9b612814fe7af8b79960df9eb863da9c72f22b673409e94e26a883a00583c1299d5dcde2fdd727c0bf72f29df1565ecb663bdc96488244245d45be3669a1ddb19e12e8c5d2362e0f91eaeeb3e62d2daab7e96fdff7b0db49020e6b1f1928d44eaee9c1af13b7bd21bf7528bd76dcaa1986ba42d007c2f5de832f65c849399b9de42776e61a4b9b45c244f7ff2f0dfcf46ae8b9d5461f39a4695ecbc5a3c09c715499dea54ac28827c6dea0837ef861ddb3cbf92fdef7ab0b6d4444212f006ffc91b8aa07233f429df1786ae497ef2bc60073bcce3ca5d7b3b78266b8142c911417d9e3f2719c73c825a5adde93c19ffacc384d8e28d98f56006ac89d6195f532bcd73790eff35a68f02305a0bc7b02e12d4269863a7f2d08ab8cc875205c3488fd392388f3158d243aa45138578080b3c4ac6899fa2f52ad19f7f69db0d291d9154d75997f67a9519d1f2c2829dd57987d9fe1d00ebed9f49aff61312e7d09fc939ef26995f04a679d64639747d5c3308515a5c3f1af149b9ba13939dc28e8e9ced7dbf51ab4ed6f8a77f0521dc79dc9234ca5727a37dd08406d1cb06854003d677c245cf6e28ef7cf3c3c15859356b874d002566b9b06f9f094df1c49573677149be5b814fd41bfdf17a2b83161300bc815afb2e8aea1e08ebd062a76646a6dfc39149f7b252a31ae1a923282e50c7438de2259bbfefe52872f1a65a91f98ac622e60ce5066c39a17a4d79782b0b4e4f9f5a00d6fff5ff4405e153063066482b5dbcd4b873d3ebda200986fa8d29cf8199516c49f0c9bedbda661f0472051b2631bf2de04e9a1d685060826336051f5e005d807b7b00baebf028b1840ccdaf30995b4d05af77663557a8e19a509098cfecef626638f3e61102114692b090f609e42f8a3ab196fd40e8e3f2a803ae45f259b6e24875ee94ab538be5a03fb792bdc0c1277b8a8476ef32f2102ed860ec816d74c1c0dd22b90f63a4b553e59e20592368f161e18ccb67f194245e8f360bd21677bed8b1acbc4ef34efebe1cd0f14234efbc9fe83f4642576bc35387368c546b60e6abea4d9939079d036032f56610e17736d1c4416b52137a2895e1afd4c785b5e4fb5fb6230ee6bd606a7f2bd469da40cc33ca29d516cbb42bd2f9edc74f672aa09f15ef0f64008c8bc8c49f6a4c20d87886112c4b1835b84f5b1e71b1deab09a2bb7944fa2315d9379cc38a30edd17a6c7fb0228fbd1c4b3478343be0835731bff5f780021e02defae75d99206b61247f93bf0b3790571596be9abbcd41cf6dce2d2fdc679cbf52bfffd220409acab34ed9c30b07659e160d8276b93e6cbcdec1136829cd26e54605f7ff782a2570930e20c5839b8f559d1833b019a671b47fa80b532b45867a8531e6ed1dd3f850d6c86a2687a464cdf96fda38f862260c8c17601db8c44d14237248948a0d0317b02f54d4d9c98cfcc8f55d959d7cb41007ddef8234e175a0043fbe0948201d85e13633d07bb315891240767d7fe855c3d66f571ee831c1e72e5c92189fcc8ae1b12153f2b90af00d24b5ba198be3f82f46743875f755be0adc12e055a938d4c5b7efa827b3e675718e5262a711dad047d2506b75b067959f6f5164de7c673d402ce932c9e35a222888d988102c1bb9bdce6e6f5d7de611f6761a09c3b5e2fe00fd4e1dc74d45b8fd42b6f605f17f41f84a2ec9d97ef7f78d4f9a1a5026e9d7c70ae4708ace5f24cfc7e0558897481615d3fa4714ab959da19c2fc9c3a7238ba13fba59a2506b2e6a6c2d359533102daf331e3e58bb32f8efb29aaf92cbb623e73407a2e494a7f64024524aa8800b7a78d9710d768ee92c31b21bdbfbb5f7a01c0268bf7c4d9bd209c463cef5141b379444b9e8e08dc9a76387d05c466fc21c4580765796652b892dab81e3c8a4f438eac75d0ba08bf3118d1184e7af7f9cc46f65183979e14a68393372f38f2971bd89a9b34e5f4ac1cc32d2f8d18e7c7ab51113051b944ac73249ca424b51a5cccf67e0cbff22d8475aafb4519e277b793b923654809ca8961cc946d2387b75948d08a2b8c762c2715a9234de798035df50bb64c9dfec683b1342c2c7cf5530aa410886ffdbf08ded6203caae3defa902a93a9566b9524b3cecb3375bca8590e8f2f9706cea3609ed2b81296cff55d5cddae0fd0ce24a6020d00ffc351168d0377302a8476fcbb1bb8d3d451c51c3d2a67c0e87fa3690121d3ec94ae5ccf5a227ac20c50ebbebc2d415573baa50ecc80c6c0d5daee06f85f197a1d3620955a995cea85de093105ab33fac9ff3156ed5a80ce81a1c31e56a18f0da836e19852c33adcb4d559a6d5a56ea6c78f27b3cb047f69ec0dd83c9125f4bde7349765076d23e8b816a2304c60cae60a65d5aeb1e2fad808833bdb92cc8547f646e6b2a0a73a881076eca77f166a1f8dc2727e2b34a5944f74ae07b4838e2e9e497868b5b0626220ccf3f8f54fddb839426a64cbd6dea6df2b9c8be4bb016eadc53bf6a0a62c078a904c337395d3362cd401e80678fe8f0478d33377bc1ea6d371f71f1d416c5240fc7e5604158ae20aa16863752a8ff7de619d23e2bd68b541d9aa4e80be8bc4f08ce0ee126b0bfdaf914a973182dc8ebda1eb00c57f03e8285704083fcf6bc9f2c9b079ba27ee1493b82f5d40bcc7c02afffc428b851f364ffea9c967a5020e5592792bfcf974aa2f65e6acf7dcd50af330dd2e7082d60afcf46e78f58e8dc3b58a8bd1093bac3d3afcf90e5129217be01d901882f4f3959e28926ffdf561a75de94d449ac3e5665034c1eebc6cfe30e9940e7abc159a0d46ad0b6515370d303f845a92b3d146bb5e2b525020510173a28276489568647a6c5e0784b188cd5cb38f2dca106a65fcb3c7b7a3ae446f5f6cc29a06cce5527793505bb9414f4978ba90ff0f6a8d6541e4cb1a0a7d125d22aeeefb44e9c549b70e77a6cb7e293b1867dc20a5f2b8dd956035b8a4debb52351b6c2215a1e1263f635c3993a5b0a263857c455b9f9827268ee85c61551d7d6b9ab0fe568bc738edd7f4deac50c7fcf25491fcb76e4458e388050ae6e3cf75ea8df8fb8a5dd0d619488c2540cf629ed15bdeff994bc1e859b5a2033b09cc4f639ea381842022a5b9636b824397ae13a759f95e95b3b6ffcd84df7f8fca7eb3e34910f7a3e619c18d9d41dd24b1f739a316433ae4202acc618c7e50c67984a0e94e17c0fbc8a88f3defe58069bd5449c98a44c2c2a9505e7ed0320cb967bc60c5dfff6ab08695a25c33aa7a585ae8dc7fc6497a191d36f4e03a05ce86edf6e398ed5898a382e8bbf38b5d23cfcadf848defa2d7e084c77d830978dc62924cd00a33f4681550f4277b6a9c2c694b0ac2dcd557afa5ab751753037544300c943fb6ec68bfbd07be3f0a98860779b2c17fce681916f26c06a9338f406853c6d0cfcb53f1c5df64c6f99acd32539b957f8466776ee71de559ce85aa831356c3abe15c7346efc5085fba00b0c9aa430a7586323d4f2d4bac0e37497182b8d3006f7e4ea7464bea2ad2fd4fbc3e98d734cc8d1985c24cf49d5ac3f0e383eec4f196f23ce3f361bb66f635b965faf75644f7485663c9e8da3774e5ba2ad8e3e192ded039e71a6d45c79cf5fca77291fabed963ceaf2d3405847bfc0281059926b54929c613d4c4363eb7344b9d357ae3bdfb27232d47fb4c74d9a40a2eedbd5420cc53270065eb7d58f931d9e1010d9dfb5f99839961be787fc6f0db43123fdaadaa6a2faf7f6e6c8afdfcaab36f2e958f561cea47db682a3a6d0023c5a290849c1fe41ebd536df0b7b5bdb7ab361bd67d01f927a784a7b898326c59d075d73256f7b4afd2997488ff1b9931e1e426c917761f76d8c8927f5d2f7638f90d2aff5077d120f32ba5a902d4ec1f4e403f19aafd51d2e0940daa2e73b67554b7158ca6aab70b02814caad573640c7d18c4be3790685e1be38cad8d5f5feb5b6925f112845ad6f9f55e18fcdd3e4915bd1c7b8fb6862a2345b0110cb75a8adc17025c7972ccacefa6c11a2f55f999446e2a5b2dfefc30195eb8e450fb28b0b9fdfbe4685ee4753aee43c3f4f40783efbf576aa86a95ed7bc33894ddb778120bedba754a6c2579830412451e22133485cd7a9ab38a2a207919887b937fee26b081e61c8c72fefa42d07efb12e6608b80f9725b54109dc3b19543e2b83548b72087a8ae234d1c2d1c0f9a08bcbfbdc6e5fcdf224d19d49a07724f100e167e9ca73614336d472cfbef9875aa3d9c3a1ecf0086edb0c046494a0a1e11afac187b6fa69405fa6ac8b5c4a6636261281e73a7a852bafc3b113e79f99f2204a3f90e9f907f985a28fceba4fba884fd376000a4f5ac2066a8c688261730fa173426afdbce902ceb0df53d706f2fdae409f716b964fe3729068c426f3cab5e74e346ed2d23332be2102be0338b0a2fea96b48ebba14440ebb0b5583f23b87b48dabe325cd390fa3978947cf7d918f031d3a41f84ade8794ebe2ad496b709a6b10a24a43a1ef42fe3dd503df54d5fb732c7bb7b5c2b659407b3961c424e2ce3c4b6f08f793e5d9317b747ae39ad029cebfa0f29c83e15940dccd0b58eda8809cfad9af0e925c78cdca749840965deca1dfac121fbc5cba3997a3164c747b2b0173dc00fb15f8512fda4eef39ca7fad5d76d63b3a17b7d1107e382603a6c6f0b94dd81eef98eeaa9a2b0dae3d7fe729e4d9dd5daf2c659870e799fc5a4477b05b47370591ddff50ca847d9b9a3dbb033df035364f00ad83b1a3cd0d5c17e195e5eaa7f5bcdcee1a4d1e0119ed3bbd770c1d8ffc405f1d16acc4a7e47c3b038877f3a720ff7d1a266d54697af4d9d3ca5487723c3ff795f20a0cfa2c7c2b7fa25b78c5e7036970a51ec0b5b1a7b57d138fcbaa36902646a122ed01d698cae31b0b25b886569581fddf2ec28d0fa861211e7dc3ae04ec09905fdbd94b3716231e054540c1b0782a36ff0233653c9a12f962bd2d210ce53c08b16f6d7b2ad81e1723a0c2171a3d1e25816887484454632d5a677c940f923aae9239b68a088e09ab30b1024844b5a29905e1400ae7fd4652bbb529477ebc8a137b3774ae256170e80a4bc2a8d1116f9c6de2b657f6e29f1b8a1fe823f6994bdb5ccee8113b3c1ed6fefe78eb30b8400c2a5d2f2958c34d08a866d2e26f42079eddfe31e8b8862eddc24cae79f54758a3b83b93623337c4525cedf3b2705a3f2190f9bdecdc68e8753e96f26ff928f963a2ea5fd1326f292ee2fbe9307e534ce3368785dca4726b6461c33a7d08c35904c325ab040e496de1c4766ea3416bd98fb8ea83467f4b2f15aec960e97b3dfbad28e823a8c9c9a5263b3f87390c8effbe21e2af7cd1ad357e0a050771c3fb283a4586734ccfffd491439f5777d9d0975ea1bbca4b6d2623a078c9707328f56b6c2906b49a24d9b8d76ad1a39ecc250ee275d3ed99f78f7ee24c956538d9da3557ddefcfb444834d12c8b65de2642dcba83311f903cc710da08f661fe438eeeb7bb5abbe22dbbbea7c4cd43ab303e88a518b628333d01eb407558084c17a5eeca2caebad6e67a0b012b6a0aa5da55bdfc88a5238eea7aae7209a93f3858f70aa09a50e955829986c266673cd416fa7acaa0770f7bce914040e198af0a60d6d6d9a0137a0721762ea7882f0bf7adc26da05c96b09283f11d2e4d5", 0x1000}], 0x4, &(0x7f00000038c0)=[{0x68, 0x0, 0x4, "16839d20069fe0113006ba22149fd4496b009f00278aa27c341d7fd79457324fc0c44ab43b9898099c4a27475d0c17b21adfb7fc26ae0d5bcd778c6349daf3cf47421d3c7874603285cb470252ebb148f8bd1d"}, {0x40, 0x1, 0xfffffffc, "340a88e1a07ab7711d16e2e6c74a6bf98d629a70b38ace782082534d11ba593d58309f68070bfb2e77"}, {0x1010, 0x10d, 0x3, "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"}, {0x80, 0x84, 0x4, "57f261d297057cc096aee617a9ec0861ed18cc0148931d9d9d81d5384a0eb4d82e872c13b26452b30fc38eb6355e32bfdd7e1d8d5f4e7a104908647a09a1701812906becdac6989ee42fe2d2b341affce694e725c44848ecdc412b47d3ba3a9dd66d4cd48ddca85a7c6a"}, {0xa0, 0x88, 0x3, "25fceedef221344907c56bcbd7f31fe29fda273c0c81d5e8202b1b6dfad1045ea418277438620d8669910fc65d7f1609f6406bfdc6f535a770d0123c52f36e8f8b4d870863a07e3033facda0712a4a060c01846680eda2db7d5ee0e0b1d59776e5029b9ccb3b6d72572991f8e52b31882467299aac018bffd9a7605dc90845a1cce75da51cdd6db3f4c9255d74"}, {0xa8, 0x117, 0x8, "dd059b1c0aea8ef2bd08e8fba6847913006a6d05bbd7735dba4e4a5ab960f7dcf6849fc309312d56debe19aa0c25da5bb93d5d1719a77a6fbe81168c0adb3b0bf375cbaadbe2cff324b15bdefb97c6c046c72265ab1ea090b19b8cabe033d3c3d43c12491eab6a54109550eef0924eb3afa84a3ce1c510703c1a0ef38896002b87540f891cb2991b43f10848421afd4720"}, {0x50, 0xff, 0x2, "fc602ea6672f017ca31d1fa48ab3ff79fbc587a07963e371c4eebc9336a26d195a165c4054569b78115e50833081173cea6b0daad90f0f1e081908"}, {0x38, 0x102, 0x1, "0cf8805f190bb18b22e5c045ac723d629d4a585f62df4cc731eb17bcea3cc6a9048c3787e7a8e1"}], 0x1308}}], 0x2, 0x24008001)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r4 = socket$inet6(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xfd, 0x80000001, 0x2e, @mcast1, @empty, 0x1, 0x0, 0x2, 0x1}})
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000)

4.390074951s ago: executing program 2 (id=1246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f300850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.104218321s ago: executing program 2 (id=1249):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
ioctl$FS_IOC_GETFSLABEL(r0, 0x40305839, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
pipe(&(0x7f0000003340)={<r3=>0xffffffffffffffff})
splice(r3, &(0x7f0000004280)=0x1, r2, 0x0, 0x6, 0x4)
bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0xffffff3e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
sendto$unix(r4, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x200}, 0x8}, 0x94)

4.081534059s ago: executing program 3 (id=1250):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0)="16c6ffa807626d523c706d3de7ace8095a0072f17b843c08744a39049662e8e05a0ce5c3450d00b96395f61887d38a3bd86a5b8b208ab43ca920945cdacf51bade4c32bcd38cd0fad4747e1c2d1e341baf23ae24c2c698bf33f2a90b10", &(0x7f0000000240)=""/148}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800)
getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)

3.890869496s ago: executing program 2 (id=1251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000c00)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)="17", 0x1}], 0x1, &(0x7f00000001c0)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x1000}}], 0x18}], 0x1, 0x40)
r2 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x9, 0x8001}, {0xffe0, 0x8001}, {0x0, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @local}, 0x14)

2.931982222s ago: executing program 3 (id=1253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xf3f, 0x20bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {0x0, 0x1}, {0x4, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x12, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c)
recvfrom(r4, 0x0, 0x0, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x38, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xb}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

2.720146005s ago: executing program 1 (id=1254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff3556b3b598b353011a5b90650042e2dacdc165ecece4e6be1862e2bdacd2737d00ad6f9f030000005e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f8049f260c603dbc317f54b901ee80eae132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x24008000)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400d3ff"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

2.573813077s ago: executing program 2 (id=1255):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0xf, 0x803, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000002c0)=""/37, &(0x7f0000000000)=0x25)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x5})
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @private=0xa010101}}, 0x3, 0x0, 0x3a, 0x0, "5ec800000000000001fabcaff4b8d5eb8c461442bc42b8e0662749302c1ffcd1d1190000000000000002000000000000000000000000000300070000000000ebfff800"}, 0xd8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2d706964732010637075e48322a5736574202b637075202d64657669"], 0x1c)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES64, @ANYRESDEC=r1], 0x3c}}, 0x90)
socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x0, 0xf2, &(0x7f00000004c0), &(0x7f0000000500)=""/242, 0x7, 0x0, 0x8b, 0xee, &(0x7f0000000680)="356934f69e4b36abba9d2c596c86946071968dd04f11eaac61ee28fdb3071beaac1ac17037f6f8490c3bbdae9a1b3159ddc2cd280abcb87db8c0e97a288e62c24524c0ab6710c7c44436a2f37c423302cddff2d050473a8bae32509a7af2da7445d77a8ca96f793336b371226927b8f917f0b5ec08464befa23ca54b0f2c60d97f05c296bdd23fa216f698", &(0x7f0000000740)="011dbea7d58b89d8ad52fa811aa51e9484e1fe432ccb7953ed7a567b8f53f52df88774593916a5ac184a06adfd891d1efa3140cf1fa568a9e1ee0d560b855af61e5c928f1df1a9b55891451de3fea79d3db17ea9a1076f9f633e76526a508fc21721753d092c4b7cc4c245933fae2b73ea1cb20241b9f94ac91ee203a11e422899af9d2704b513ec58bb9a719466948beb384490ec04028788c6cf015015d065703f4b9a0516bdc120eb8859c42857d3fedfd53d363dbbae62dedf8c45c4043a53a876c58e07fad6c876d68a179c11e3244749601c79f8baae0a2b6fcc1571d672cc5ee2cef460a54d36a6b1445b", 0x4, 0x0, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000008000000090000000a00000000100000", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000020400000300f9546d000400"/32], 0x50)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5800000010001fff0000000080000000000000006b5e8b18da44e05d229e7d2f04a039cad52e124000000000000000f4a8adad", @ANYRES32=0x0, @ANYBLOB="00000000003f0000300012800b000100697036746e6c00002000028008000100", @ANYRES32=r4, @ANYBLOB="14000200fc02000000000000000000000000000108000a00", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

2.536555451s ago: executing program 3 (id=1256):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7d, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x1005, 0x402}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7d, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x1005, 0x402}, 0x90)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101001, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet(0x2, 0x2, 0x1)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x7)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xeec}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)

2.503971893s ago: executing program 4 (id=1257):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR-', 0x4}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

2.418308989s ago: executing program 1 (id=1258):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x110, r2, 0x5f75d000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000027c0), r3)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4d}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4d}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) (async)
getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), 0x4)

2.321367229s ago: executing program 0 (id=1259):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x3, 0x2003, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000201850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.1276609s ago: executing program 1 (id=1260):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3a801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000200)=""/160, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x5, 0x4}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff00c}]})
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)

2.084115823s ago: executing program 0 (id=1261):
unshare(0x22020600)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061194c00000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.881553836s ago: executing program 0 (id=1262):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0) (async, rerun: 64)
syz_emit_ethernet(0x6e, &(0x7f0000001c40)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x1, 0x6, "42b2f4", 0x5, 0x32, 0x0, @private2, @private1, [], "a6c8658b15e0f1bb"}}}}}}}, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0})
getpid() (async)
unshare(0x26000400)
socket(0x1e, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4dfdffffff0000000031000000080001001f00000008000300", @ANYRES32=r7, @ANYBLOB="0800db00"], 0x2c}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080)

1.742927696s ago: executing program 1 (id=1263):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x2, 0xa, 0x7fffffffffffffff, 0x2, 0x1, 0x20, 0x9}) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x12, 0x300, 0x70bd2c, 0x25dfdbfe, {0x3, 0x6, 0x6f, 0xc, {0x4e23, 0x4e23, [0x8000, 0x8, 0x1, 0x9], [0x0, 0xf, 0x7, 0x7], 0x0, [0xae, 0x9]}, 0x8, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "ad6e1a98f6f1b8b396758ed7243290b010877a43ad7d979c542a903d6dd78e1d757901d20b66597252002eb0ed327f42edf4351d18de9d7f4cc492c1b461a71e2147b3aaf73c81dcecf6c612f2c7735136ba21de76d95d143e21a4bf33cc748cf7ce479e93b5b0d6a13e4624ca5a852cebd36c9aca955284acc5"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa4000, 0x0)
write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x2a18}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@canfd={0xd, {{0x3, 0x1}, 0x1c, 0x0, 0x0, 0x0, "3d5be2ce115e64f5c0bee1603b96a550a28389dc68a15b2f3cc1f8a051d11d0ca9fe21cc4d029c4eb0c271d60366359654ac26cd0c9c79dbf904b811c6c7e72d"}}}}}, 0x5a) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000300)={@empty, @empty, 0x0, "d37213384c6539b69a04a553d40d64c954033026e6dbe5cfc4c0385d50b15610", 0x3, 0x200, 0x81f0, 0x80}, 0x3c)
r3 = accept4$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, r4, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f00000005c0)=0xda10, 0x4) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000600)={<r6=>0x0, 0xe, 0x9, 0x6}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000680)={r6, 0xd574, 0x95, "c2c3057711959a7e085ce9918d3deb67bb6c9ffd31d7b7b1b47ec6e59d4d1c6fc5821f4d174ecdb295b03b2b52cc2fe7b63a266e31e43316a66a8b011343cf231f4238844b9ee15acd8d958baf5c667685e58c2f74db505a869779782de39b725bad580bc34620ab3ee3c97173741d557b27e185be4f6e72b24ff10b5f4b2ba8d15709b4a278d1bf0a4730633958b2dbdfeeb1d50f"}, 0x9d)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x1412, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000940)={<r9=>r2, &(0x7f0000000840)='\xff\xff\xff\xff\xff\xff', 0x8402, &(0x7f0000000880)={@_ha_fsid={[0x3, 0xc0]}, {0xffbd, 0x10, 0x1, 0x2}}, 0x9, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x80}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40000) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000bc0)={r2, r3, 0x1, 0xeb, &(0x7f0000000ac0)="e259a70d1c4dd538cffc6ffff7ec939ccab821b81b49b1e9e29f40b2214e23be4d1cefc30de170f90d514647a15984b12361a09758cc42d1324487c9927b93eb6abe7716ccfc57763bf5dfe10a4aaf35abb4996913889a2d0eb121cf7e3b2e77b564679a132cff26d124549394d241d8140ce90bbb44d08ea5bb31a1fb7373c549d65770ae08d4bbd7b68d4304b50b8143ad7bb5734a2543a7838e298c10ab1747de6f97d7ca47536a759d3fe368acc5aa84c883e0ed799c12d0ddb5436574f1f187749b3fc4958b8caee5ac80233301785c8504bffbdaf0fb731645827b5d40f663b7bc632cc532c2691c", 0x10, 0x4, 0x6, 0x86, 0x8001, 0x1, 0x2, 'syz1\x00'}) (async)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000c80)={0x0, 0x2}, 0x8) (async)
r11 = socket(0x2a, 0x4, 0x593d)
sendmsg$NL80211_CMD_TESTMODE(r11, &(0x7f00000013c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000d00)={0x650, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TESTDATA={0xbc, 0x45, "8ba9dda976699f775d6e48da3e2915c4d4a94eff90a391ffc44296c8ee9cc0a209fb466e044b796ae007fc7f930ebd6c7d329455c14c0fb80f359cbddfb608ce2e030c99e9c828141f2ea149059bdca460ce881aafa557be9eecf6ecfdf3f323ebe42076a3fa7709efe2235cc9ac3b769e281f3f588dd674d48c22868f7ecd3e71083be74ab5e454c10f699b4b2c07af64b45c8fc46d3cddb82c1aad44975b1a57aa0e4e2db17873eb5aa87c5f445aecd2d0cbcd5fa38f85"}, @NL80211_ATTR_TESTDATA={0xdc, 0x45, "e02e94dc2f74a85e7c9f438ac2e402e39a3a7909bcfb1b5a488aef692aba7805e346e8c9bf9056de6d7b71aef593e1f1ea0172271d34512acf0f7381b4bcd66af09075f7a50c9c8791108db831308e128efe811d247194e128168d296aa051791ff5a5def3fe343b582a68d7cb30f6fd4de271883774e5b9afe105f433fba6653311001104d52ed558f8c3ca796c4b8571396f29767f5e339f8085ce367504dc5269e86584939bf252d27311371c2fa576814d77f5cb8eebd8e6a1c6ad6ab03422d9b58291cc0403129ff7b47a9c22a14eabf4b56eb0d83c"}, @NL80211_ATTR_TESTDATA={0x102, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x80, 0x45, "ae004f587801505d87904ad99a037d3cbce4ff8735e9fb69afd76526e89163f6568051c966062e041253ab501aea984d9fe4025c483ff4df97a198ec49ab69a56fcde5dcc022c2651efe9ad44fd6259e53dded9563cf57caf553ccaa354d7292082fec0017d435f46ed8f6b65d5d45dfb15d4fa4eb8939922f9b92c2"}, @NL80211_ATTR_TESTDATA={0x2f, 0x45, "b9006f5eb855f2e1f3ad851a9123b57e766af7a901b3de1c2ee2a56b6e4abb8832efe62009669bcbdcb1cb"}, @NL80211_ATTR_TESTDATA={0xba, 0x45, "6d40f715dea5680da6fa8a800980029599f097af5a708fe3166c44c2bf1a08be67ce11143826596efaefbd1046060735995190575aefe03bd12306d2b908b408cbb3c7e95bae2198eda5ac7fa1b110200628710d7fec4e00bedfc464dfa6257fae8b1781d52bbe064fb5ed6d65a140789b7a88bb6f7be6f495cc5f12b16e4b4cdfb43eedcfcbc0be5b853dc34ecf31b0075f5adeeb94113dbb8e97565d5ade7dbe18fe7bb166f1fdc1ac2ac482842b6e7fd22d923842"}, @NL80211_ATTR_TESTDATA={0xc3, 0x45, "d26c2e9b7b242d046643f546a5d80bd40aa2b418b724f694b8a48c6671edc134e2b3af36f66d136d4d547a04c223c0b91280867309e409723ad243ba1f3adfc990e88dee8db1ef3339e0f1e3de0ad7484bb2c016b02004cb2cfc401ef9c91ccc7c4ed81377b202ffce691c31626d16f0833a68a51ede928706ac90f9f62251afd9e89f0fe827467c2da3bfbab788e15a843b23c92fd11deb9dac7eb233dd3935dd29ae7826a5f52a6a3274a7b6811cc1472c781268ac361470a3d533a56957"}, @NL80211_ATTR_TESTDATA={0xb3, 0x45, "c86c9fd079560cad8613df8f44544564e70af8db6c110037c926ddcf98a884c91b1b7cb37e066c90e5fe14055daa36f5c0695c0242b0ca98c52966806683b3a368ce974110a84531fb4e371652bdf80181523216b9ef46618f705974efa41060f618d62b5a3d79af1d5666a3af998cf7192f788b4cef4e5499495f0def6d1cd7d93bd4688d9feef06cac71d2bfd48d0661e6e4a112d6a8403b4fb7f9a80165013a5996fbc78f02abc61ad2eba707d8"}, @NL80211_ATTR_TESTDATA={0xb4, 0x45, "5cc9b77cfe39a502b1d29dc8e0456523da729f61909b6a621b8ef50830ac17f98070851e4111d552f2900a26e7fc9106b925adbd5e43b5e0bf4868be54509bf9158a14fb43dbdc4feae0e17ac06f3ac912cf22637a9d1b88d1a0a74020c68fb1b42730b458cde7444c20f82bd066a6fd04fea6e449c78edfb8aead3a289a68017fc44b544addba2add58c10d423f88c149ff8085328e08c0df1e2d2c243d1327053d11910effa6629f9dac406e21fdd6"}]}, 0x650}, 0x1, 0x0, 0x0, 0x1}, 0x4048804)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async)
write$cgroup_int(r9, &(0x7f0000001400)=0xc3b, 0x12) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000001a80)={{<r12=>r9, &(0x7f0000001440)='/dev/net/tun\x00', 0x40, &(0x7f0000001480)={@_ha_fsid={[0x2, 0x3ff]}, {0x1, 0x0, 0x1, 0x7a51}}, 0x80000001, &(0x7f00000014c0)={@_ha_fsid}, &(0x7f0000001500)=0x7}, 0x5, &(0x7f00000019c0)=[{0x1, 0x1, &(0x7f0000001540)='[\x00', &(0x7f0000001580)="b72b78f72aebc71645f509bf7301c71bcbc308f173125386ba97b9c8edbc4e6a4e6b6bb0110fdc090b0e7cf116176e1225af37dce01a26f13d58df53a26593cddca935456815920a333c4604f721b2e25df4ee69d89ab32a0f168fe799ccf4b66934b2c325709d44faa70384b6384a8d0fd7af14f17b2257d12969c78b37888370a928dd055b79116bb822180d5297248f47e27625e5dd3266ec0154bd9cad84bfcc0805276942d19cf95dd104667c0617ddba0bf1a68449fdbe", 0xba, 0x20}, {0x1, 0xfffffffd, &(0x7f0000001640)='/:\t\xd6\x00', &(0x7f0000001680)="4d95f27aa2a8b797ce6659f1fee05885570b26c9de7c64b21e9bca146035c6fb6bdd0aa4edda87d4d079099c75829866770b66c3b0d31681e3f5f66391c9c81792d19fb967eaf53d", 0x48, 0x62}, {0x3, 0x7, &(0x7f0000001700)='nl80211\x00', &(0x7f0000001740)="4a5cf53a24cf06b085c19da8f3008de266bd318844f1e2f4131ec1c4675b7cf52c1751e375b53bfbafbecf07605ba66a9165671cf257e2911ba02f551cdf47920e7e945eb90a02107fd6a4f026a08a0235f47c28e315a3efc47a2f5a4cda596d8fc868a9b4ee9e1285192e78faafd589fcdd99132710a57039a69e402563537e62a8585fb0cf29eaa92fdd85a739370470082491f99520d878cbcaac57ef4a504eb7881502b97d5e143752016691297ec0700092d7cfff3ba8378b7172f175d5e0326aab256d0ef77f8564ac", 0xcc, 0x2}, {0x2, 0xffffffff, &(0x7f0000001840)='^&}\x00', &(0x7f0000001880)="bad110c8efeae295a29474", 0xb, 0x8}, {0x1, 0xfffffff9, &(0x7f00000018c0)='[\x00', &(0x7f0000001900)="5b5ee81c4f5a37d7fdd392c28b82263ffe1d8b6337fc70d3b578ac8c55caaa11d6417676f9fb63f00e0db646c32f04f6caea5eae84aa475aefd3790983f37c33387a5c92baed48e035c872500c2f374d5cf9a0035ddffdb5a16cb3fa6db1190a3cc00209b06c0b4d73be5dd78ab3722b2e7799d48108a0535371ba150e2aaae02c4e0e7f0a0b00d9fb90d81c447c7f9232c4dd6ef33520696069f4efaeeb50f686c59869d5a96cf999793bf1ee7908528fec24112f6f6bcd19", 0xb9, 0xa}]})
setsockopt$MRT_PIM(r12, 0x0, 0xcf, &(0x7f0000001b00), 0x4) (async)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001b40)={0x0, 0x1})

1.447678414s ago: executing program 3 (id=1264):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000600)=@ethtool_gstrings={0x1b, 0x3}})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
close(r3)

1.305145464s ago: executing program 4 (id=1265):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
close(0x3) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000640)=0x10) (async)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async)
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0) (async)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xd) (async)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/51, 0x33}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x4c}}], 0x90}, 0x0)
close(r3) (async)
unshare(0x8040480) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004ff0000050001000000a5ae0000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x16, &(0x7f0000001640)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffe6ad, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xf4}}, 0x40814)

1.177969909s ago: executing program 1 (id=1266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xf3f, 0x20bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {0x0, 0x1}, {0x4, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x12, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c)
recvfrom(r4, 0x0, 0x0, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x38, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xb}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

860.880669ms ago: executing program 3 (id=1267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_channels={0x25, 0x2b6, 0x9, 0x72, 0x5, 0x2, 0xe680, 0x401, 0x4}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x10000005}, @fwd={0x1000000}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x35, 0xffffffffffffff6a, 0x1, 0x1}, 0x28)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd}, 0x1c)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r3, 0x0, 0x50, 0x0, &(0x7f0000000040))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1)

588.350739ms ago: executing program 1 (id=1268):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x2}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r3=>0x0})
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8044000)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x80000000, @mcast2, 0xf4d}}}, 0x80, &(0x7f0000000840)}, 0x40840)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r6, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r7)

2.060775ms ago: executing program 3 (id=1269):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)='\b', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x4d, 0x1, 0x1}}], 0x20, 0x4048800}, 0x20000051)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c)
sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x8)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b00200001900010000000000fcdbdf250a010101000000000000000000000000ac1e00010000000000000000000000004e2100004e24fffc020000005c000000", @ANYRES32, @ANYRES32=0x0, @ANYRESDEC], 0x2b0}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c}, 0x2000c810)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x20000600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}})

0s ago: executing program 0 (id=1270):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000000095000000c3ff0000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)

kernel console output (not intermixed with test programs):

me fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.679277][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) 
[   88.679298][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.679309][ T5871] Call Trace:
[   88.679325][ T5871]  <TASK>
[   88.679333][ T5871]  dump_stack_lvl+0xe8/0x150
[   88.679368][ T5871]  should_fail_ex+0x410/0x560
[   88.679397][ T5871]  _copy_to_user+0x31/0xb0
[   88.679423][ T5871]  bpf_verifier_vlog+0x496/0x900
[   88.679456][ T5871]  verbose+0x11d/0x1a0
[   88.679482][ T5871]  ? __pfx_verbose+0x10/0x10
[   88.679508][ T5871]  ? lock_acquire+0x115/0x350
[   88.679539][ T5871]  print_bpf_insn+0x14f7/0x2930
[   88.679566][ T5871]  ? __pfx_verbose+0x10/0x10
[   88.679587][ T5871]  ? __pfx_print_bpf_insn+0x10/0x10
[   88.679612][ T5871]  ? _copy_to_user+0x8a/0xb0
[   88.679638][ T5871]  ? bpf_verifier_vlog+0x58d/0x900
[   88.679671][ T5871]  ? bpf_verifier_log_write+0x11d/0x1a0
[   88.679695][ T5871]  bpf_verbose_insn+0xcb/0x130
[   88.679716][ T5871]  ? __pfx_bpf_verbose_insn+0x10/0x10
[   88.679734][ T5871]  ? __kvmalloc_node_noprof+0x52f/0x820
[   88.679755][ T5871]  ? __pfx_verbose+0x10/0x10
[   88.679772][ T5871]  ? __pfx_bpf_disasm_kfunc_name+0x10/0x10
[   88.679796][ T5871]  ? arg_track_eq+0x503/0x7a0
[   88.679823][ T5871]  analyze_subprog+0x2cb5/0x9e00
[   88.679846][ T5871]  ? print_uprobe_event+0x7f/0x3f0
[   88.679924][ T5871]  ? __pfx_analyze_subprog+0x10/0x10
[   88.679945][ T5871]  ? __x64_sys_bpf+0xba/0xd0
[   88.679963][ T5871]  ? do_syscall_64+0x166/0x520
[   88.679988][ T5871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.680050][ T5871]  ? call_instance+0x263/0x560
[   88.680072][ T5871]  ? rcu_is_watching+0x16/0xb0
[   88.680097][ T5871]  ? call_instance+0x263/0x560
[   88.680116][ T5871]  ? trace_kmalloc+0x2a/0xf0
[   88.680138][ T5871]  ? call_instance+0x263/0x560
[   88.680159][ T5871]  ? __kvmalloc_node_noprof+0x52f/0x820
[   88.680182][ T5871]  ? __kvmalloc_node_noprof+0x345/0x820
[   88.680203][ T5871]  ? call_instance+0x263/0x560
[   88.680223][ T5871]  ? call_instance+0x263/0x560
[   88.680263][ T5871]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[   88.680288][ T5871]  ? __pfx_lwt_seg6local_func_proto+0x10/0x10
[   88.680321][ T5871]  ? bpf_get_trace_printk_proto+0x48/0x60
[   88.680375][ T5871]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[   88.680405][ T5871]  ? __kvmalloc_node_noprof+0x345/0x820
[   88.680426][ T5871]  ? bpf_compute_live_registers+0x14f/0x1ff0
[   88.680448][ T5871]  ? bpf_compute_live_registers+0x14f/0x1ff0
[   88.680480][ T5871]  bpf_compute_live_registers+0x8d3/0x1ff0
[   88.680524][ T5871]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[   88.680560][ T5871]  bpf_check+0x25ed/0x2e10
[   88.680595][ T5871]  ? ktime_get_with_offset+0x93/0x2d0
[   88.680621][ T5871]  ? __pfx_bpf_check+0x10/0x10
[   88.680646][ T5871]  ? bpf_obj_name_cpy+0x194/0x1e0
[   88.680676][ T5871]  bpf_prog_load+0x14d6/0x1c20
[   88.680710][ T5871]  ? __pfx_bpf_prog_load+0x10/0x10
[   88.680758][ T5871]  __sys_bpf+0xd0d/0xd90
[   88.680790][ T5871]  ? __pfx___sys_bpf+0x10/0x10
[   88.680823][ T5871]  ? __fget_files+0x2a/0x420
[   88.680868][ T5871]  ? ksys_write+0x242/0x270
[   88.680898][ T5871]  ? __pfx_ksys_write+0x10/0x10
[   88.680930][ T5871]  __x64_sys_bpf+0xba/0xd0
[   88.680954][ T5871]  do_syscall_64+0x166/0x520
[   88.680976][ T5871]  ? trace_irq_disable+0x3b/0x140
[   88.680995][ T5871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.681015][ T5871]  ? clear_bhb_loop+0x70/0xc0
[   88.681038][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.681057][ T5871] RIP: 0033:0x7f44f919e159
[   88.681076][ T5871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.681092][ T5871] RSP: 002b:00007f44fa14b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   88.681114][ T5871] RAX: ffffffffffffffda RBX: 00007f44f9425fa0 RCX: 00007f44f919e159
[   88.681129][ T5871] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005
[   88.681139][ T5871] RBP: 00007f44fa14b090 R08: 0000000000000000 R09: 0000000000000000
[   88.681149][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   88.681159][ T5871] R13: 00007f44f9426038 R14: 00007f44f9425fa0 R15: 00007ffc2c9b7318
[   88.681190][ T5871]  </TASK>
[   89.208787][ T5873] Bluetooth: MGMT ver 1.23
[   89.208833][ T5873] Bluetooth: hci0: unsupported parameter 5135
[   89.208848][ T5873] Bluetooth: hci0: unsupported parameter 8192
[   89.208859][ T5873] Bluetooth: hci0: unsupported parameter 5135
[   89.208871][ T5873] Bluetooth: hci0: unsupported parameter 8192
[   89.431003][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'.
[   89.492602][ T5879] syzkaller0: entered promiscuous mode
[   89.492629][ T5879] syzkaller0: entered allmulticast mode
[   89.590869][ T5901] netlink: 104 bytes leftover after parsing attributes in process `syz.2.30'.
[   89.593178][ T5902] netlink: 104 bytes leftover after parsing attributes in process `syz.2.30'.
[   89.594784][ T5895] syzkaller0: entered promiscuous mode
[   89.594805][ T5895] syzkaller0: entered allmulticast mode
[   89.757448][ T5906] ieee802154 phy0 wpan0: encryption failed: -22
[   89.758949][ T5906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.32'.
[   89.783613][ T5910] netlink: 76 bytes leftover after parsing attributes in process `syz.2.32'.
[   89.817566][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'.
[   89.832017][ T5911] sctp: [Deprecated]: syz.3.31 (pid 5911) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.832017][ T5911] Use struct sctp_sack_info instead
[   90.022020][ T5918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.35'.
[   90.962256][ T5943] netlink: 'syz.4.44': attribute type 1 has an invalid length.
[   91.135277][ T5948] Zero length message leads to an empty skb
[   91.577357][ T5961] netlink: 'syz.3.51': attribute type 21 has an invalid length.
[   91.781328][ T5971] FAULT_INJECTION: forcing a failure.
[   91.781328][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   91.781362][ T5971] CPU: 1 UID: 0 PID: 5971 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(full) 
[   91.781383][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.781394][ T5971] Call Trace:
[   91.781402][ T5971]  <TASK>
[   91.781410][ T5971]  dump_stack_lvl+0xe8/0x150
[   91.781445][ T5971]  should_fail_ex+0x410/0x560
[   91.781472][ T5971]  _copy_to_user+0x31/0xb0
[   91.781500][ T5971]  bpf_verifier_vlog+0x496/0x900
[   91.781534][ T5971]  bpf_verifier_log_write+0x11d/0x1a0
[   91.781561][ T5971]  ? __pfx_bpf_verifier_log_write+0x10/0x10
[   91.781579][ T5971]  ? __kvmalloc_node_noprof+0x52f/0x820
[   91.781608][ T5971]  ? verbose_arg_track+0x6f/0x610
[   91.781636][ T5971]  analyze_subprog+0x2cd2/0x9e00
[   91.781658][ T5971]  ? print_uprobe_event+0x7f/0x3f0
[   91.781736][ T5971]  ? __pfx_analyze_subprog+0x10/0x10
[   91.781758][ T5971]  ? __x64_sys_bpf+0xba/0xd0
[   91.781775][ T5971]  ? do_syscall_64+0x166/0x520
[   91.781798][ T5971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.781858][ T5971]  ? call_instance+0x263/0x560
[   91.781879][ T5971]  ? rcu_is_watching+0x16/0xb0
[   91.781902][ T5971]  ? call_instance+0x263/0x560
[   91.781930][ T5971]  ? trace_kmalloc+0x2a/0xf0
[   91.781950][ T5971]  ? call_instance+0x263/0x560
[   91.781978][ T5971]  ? __kvmalloc_node_noprof+0x52f/0x820
[   91.782001][ T5971]  ? __kvmalloc_node_noprof+0x345/0x820
[   91.782021][ T5971]  ? call_instance+0x263/0x560
[   91.782040][ T5971]  ? call_instance+0x263/0x560
[   91.782080][ T5971]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[   91.782104][ T5971]  ? __pfx_lwt_seg6local_func_proto+0x10/0x10
[   91.782130][ T5971]  ? bpf_get_trace_printk_proto+0x48/0x60
[   91.782182][ T5971]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[   91.782210][ T5971]  ? __kvmalloc_node_noprof+0x345/0x820
[   91.782229][ T5971]  ? bpf_compute_live_registers+0x14f/0x1ff0
[   91.782250][ T5971]  ? bpf_compute_live_registers+0x14f/0x1ff0
[   91.782281][ T5971]  bpf_compute_live_registers+0x8d3/0x1ff0
[   91.782323][ T5971]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[   91.782359][ T5971]  bpf_check+0x25ed/0x2e10
[   91.782392][ T5971]  ? ktime_get_with_offset+0x93/0x2d0
[   91.782416][ T5971]  ? __pfx_bpf_check+0x10/0x10
[   91.782436][ T5971]  ? bpf_obj_name_cpy+0x194/0x1e0
[   91.782465][ T5971]  bpf_prog_load+0x14d6/0x1c20
[   91.782499][ T5971]  ? __pfx_bpf_prog_load+0x10/0x10
[   91.782548][ T5971]  __sys_bpf+0xd0d/0xd90
[   91.782579][ T5971]  ? __pfx___sys_bpf+0x10/0x10
[   91.782612][ T5971]  ? __fget_files+0x2a/0x420
[   91.782658][ T5971]  ? ksys_write+0x242/0x270
[   91.782689][ T5971]  ? __pfx_ksys_write+0x10/0x10
[   91.782721][ T5971]  __x64_sys_bpf+0xba/0xd0
[   91.782742][ T5971]  do_syscall_64+0x166/0x520
[   91.782764][ T5971]  ? trace_irq_disable+0x3b/0x140
[   91.782783][ T5971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.782802][ T5971]  ? clear_bhb_loop+0x70/0xc0
[   91.782826][ T5971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.782845][ T5971] RIP: 0033:0x7f5e9439e159
[   91.782865][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.782879][ T5971] RSP: 002b:00007f5e95192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   91.782901][ T5971] RAX: ffffffffffffffda RBX: 00007f5e94625fa0 RCX: 00007f5e9439e159
[   91.782928][ T5971] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005
[   91.782941][ T5971] RBP: 00007f5e95192090 R08: 0000000000000000 R09: 0000000000000000
[   91.782953][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   91.782964][ T5971] R13: 00007f5e94626038 R14: 00007f5e94625fa0 R15: 00007ffe5f766288
[   91.782994][ T5971]  </TASK>
[   92.567083][ T5992] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   93.055893][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.057236][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.277201][ T6020] __nla_validate_parse: 9 callbacks suppressed
[   93.277223][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'.
[   93.307479][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.347805][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.673340][   T33] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.673392][   T33] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.673428][   T33] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.673461][   T33] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.041735][ T6054] sctp: [Deprecated]: syz.4.75 (pid 6054) Use of int in max_burst socket option.
[   94.041735][ T6054] Use struct sctp_assoc_value instead
[   94.197723][ T6061] FAULT_INJECTION: forcing a failure.
[   94.197723][ T6061] name failslab, interval 1, probability 0, space 0, times 1
[   94.197759][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: syz.2.78 Not tainted syzkaller #0 PREEMPT(full) 
[   94.197781][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.197793][ T6061] Call Trace:
[   94.197801][ T6061]  <TASK>
[   94.197811][ T6061]  dump_stack_lvl+0xe8/0x150
[   94.197847][ T6061]  should_fail_ex+0x410/0x560
[   94.197876][ T6061]  should_failslab+0xa8/0x100
[   94.197903][ T6061]  __kvmalloc_node_noprof+0x176/0x820
[   94.197925][ T6061]  ? rcu_is_watching+0x16/0xb0
[   94.197950][ T6061]  ? bpf_compute_subprog_arg_access+0x187/0x14d0
[   94.197973][ T6061]  ? trace_kmalloc+0x2a/0xf0
[   94.197991][ T6061]  ? call_instance+0x263/0x560
[   94.198010][ T6061]  ? call_instance+0x263/0x560
[   94.198040][ T6061]  call_instance+0x263/0x560
[   94.198070][ T6061]  bpf_compute_subprog_arg_access+0x2a3/0x14d0
[   94.198097][ T6061]  ? tc_cls_act_func_proto+0x416/0x720
[   94.198147][ T6061]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[   94.198177][ T6061]  ? __kvmalloc_node_noprof+0x345/0x820
[   94.198198][ T6061]  ? bpf_compute_live_registers+0x14f/0x1ff0
[   94.198220][ T6061]  ? bpf_compute_live_registers+0x14f/0x1ff0
[   94.198251][ T6061]  bpf_compute_live_registers+0x8d3/0x1ff0
[   94.198296][ T6061]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[   94.198331][ T6061]  bpf_check+0x25ed/0x2e10
[   94.198366][ T6061]  ? ktime_get_with_offset+0x93/0x2d0
[   94.198392][ T6061]  ? __pfx_bpf_check+0x10/0x10
[   94.198425][ T6061]  ? bpf_obj_name_cpy+0x194/0x1e0
[   94.198458][ T6061]  bpf_prog_load+0x14d6/0x1c20
[   94.198495][ T6061]  ? __pfx_bpf_prog_load+0x10/0x10
[   94.198550][ T6061]  __sys_bpf+0xd0d/0xd90
[   94.198583][ T6061]  ? __pfx___sys_bpf+0x10/0x10
[   94.198617][ T6061]  ? __fget_files+0x2a/0x420
[   94.198663][ T6061]  ? ksys_write+0x242/0x270
[   94.198693][ T6061]  ? __pfx_ksys_write+0x10/0x10
[   94.198720][ T6061]  __x64_sys_bpf+0xba/0xd0
[   94.198742][ T6061]  do_syscall_64+0x166/0x520
[   94.198763][ T6061]  ? trace_irq_disable+0x3b/0x140
[   94.198781][ T6061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.198799][ T6061]  ? clear_bhb_loop+0x70/0xc0
[   94.198822][ T6061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.198842][ T6061] RIP: 0033:0x7f44fad9e159
[   94.198860][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.198874][ T6061] RSP: 002b:00007f44f8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   94.198896][ T6061] RAX: ffffffffffffffda RBX: 00007f44fb025fa0 RCX: 00007f44fad9e159
[   94.198909][ T6061] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005
[   94.198921][ T6061] RBP: 00007f44f8ff6090 R08: 0000000000000000 R09: 0000000000000000
[   94.198932][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   94.198943][ T6061] R13: 00007f44fb026038 R14: 00007f44fb025fa0 R15: 00007fff814f8168
[   94.198973][ T6061]  </TASK>
[   94.421648][ T6059] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.641699][ T6071] ieee802154 phy0 wpan0: encryption failed: -22
[   94.661910][ T6058] syzkaller0: entered promiscuous mode
[   94.661936][ T6058] syzkaller0: entered allmulticast mode
[   95.011373][ T6087] netlink: NAT attribute has 4 unknown bytes
[   95.011425][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.126370][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.257435][ T6085] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   95.257475][ T6085] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   95.257512][ T6085] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   95.265641][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'.
[   95.301024][ T6085] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   95.342120][ T6085] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   95.644466][   T33] IPVS: starting estimator thread 0...
[   95.732609][ T6115] IPVS: using max 23 ests per chain, 55200 per kthread
[   95.753325][ T6118] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[   95.907626][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   95.926633][ T6123] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   95.927298][ T6107] IPVS: Error connecting to the multicast addr
[   95.966818][ T6123] hsr_slave_0: entered allmulticast mode
[   95.980333][ T6123] netlink: 56 bytes leftover after parsing attributes in process `syz.1.94'.
[   96.190487][ T6129] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   96.190515][ T6129] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   96.311011][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.0.95'.
[   96.318183][ T6129] netlink: 116 bytes leftover after parsing attributes in process `syz.0.95'.
[   96.318208][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'.
[   96.522802][ T6147] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   96.522826][ T6147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.96'.
[   96.853421][ T6161] netlink: 'syz.3.103': attribute type 1 has an invalid length.
[   97.218517][ T6170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.105'.
[   97.709741][ T6184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.108'.
[   97.755234][ T6184] ip6tnl1: entered allmulticast mode
[   98.600089][ T6211] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[   98.600116][ T6211] netlink: 'syz.1.113': attribute type 4 has an invalid length.
[   98.600129][ T6211] __nla_validate_parse: 2 callbacks suppressed
[   98.600140][ T6211] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.113'.
[   98.645830][ T6211] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[   98.645855][ T6211] netlink: 'syz.1.113': attribute type 4 has an invalid length.
[   98.645868][ T6211] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.113'.
[   98.954121][ T6191] syz.3.109 (6191) used greatest stack depth: 17344 bytes left
[   99.086236][ T6218] ipvlan2: entered promiscuous mode
[   99.102791][ T6218] team0: Device ipvlan2 failed to register rx_handler
[   99.219268][ T6220] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   99.450344][ T6227] openvswitch: netlink: Message has 8 unknown bytes.
[   99.688403][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'.
[   99.943719][ T6265] netlink: 'syz.3.133': attribute type 1 has an invalid length.
[   99.979238][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.979954][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.085388][ T6274] netlink: 72 bytes leftover after parsing attributes in process `syz.4.132'.
[  100.159325][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'.
[  100.176269][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.180355][ T6260] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.325147][ T6267] bond1: entered promiscuous mode
[  100.325180][ T6267] bond1: entered allmulticast mode
[  100.325511][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.378806][ T6273] bridge1: entered promiscuous mode
[  100.378930][ T6273] bridge1: entered allmulticast mode
[  100.379543][ T6273] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  100.382897][   T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.382952][   T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.382983][   T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.383014][   T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.437342][  T180] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  100.444622][ T6277] bridge2: entered promiscuous mode
[  100.444796][ T6277] bridge2: entered allmulticast mode
[  100.445539][ T6277] bond1: (slave bridge2): Enslaving as a backup interface with a down link
[  100.463856][ T6277] bridge3: entered promiscuous mode
[  100.464032][ T6277] bridge3: entered allmulticast mode
[  100.464667][ T6277] bond1: (slave bridge3): Enslaving as a backup interface with a down link
[  100.491878][ T6283] macsec1: entered promiscuous mode
[  100.541497][  T180] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  101.259003][ T6310] warning: `syz.1.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  101.354276][ T6318] netlink: 'syz.4.143': attribute type 16 has an invalid length.
[  101.597438][ T6328] netlink: 'syz.3.145': attribute type 1 has an invalid length.
[  101.849236][ T6332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.973675][ T6338] netlink: 72 bytes leftover after parsing attributes in process `syz.1.151'.
[  102.012274][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[  102.102357][ T6332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.240456][ T6332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.419133][ T6332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.966668][ T6366] netlink: 'syz.3.160': attribute type 1 has an invalid length.
[  102.966692][ T6366] netlink: 232 bytes leftover after parsing attributes in process `syz.3.160'.
[  102.966707][ T6366] netlink: 'syz.3.160': attribute type 1 has an invalid length.
[  103.295429][ T6368] dvmrp0: entered allmulticast mode
[  103.411305][  T147] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.735829][ T1320] IPVS: starting estimator thread 0...
[  103.750839][ T1320] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.771430][ T6383] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  103.830927][ T6384] IPVS: using max 25 ests per chain, 60000 per kthread
[  103.971622][   T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.982229][ T1320] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.307901][ T6398] netlink: 6060 bytes leftover after parsing attributes in process `syz.3.168'.
[  104.328421][ T6403] netlink: 72 bytes leftover after parsing attributes in process `syz.0.169'.
[  104.340461][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'.
[  104.529751][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[  104.833085][ T6420] bridge0: port 3(erspan0) entered blocking state
[  104.833285][ T6420] bridge0: port 3(erspan0) entered disabled state
[  104.833462][ T6420] erspan0: entered allmulticast mode
[  104.838047][ T6420] erspan0: entered promiscuous mode
[  105.025452][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'.
[  105.086666][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'.
[  105.217393][ T6430] FAULT_INJECTION: forcing a failure.
[  105.217393][ T6430] name failslab, interval 1, probability 0, space 0, times 0
[  105.217452][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(full) 
[  105.217476][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.217487][ T6430] Call Trace:
[  105.217496][ T6430]  <TASK>
[  105.217504][ T6430]  dump_stack_lvl+0xe8/0x150
[  105.217538][ T6430]  should_fail_ex+0x410/0x560
[  105.217566][ T6430]  should_failslab+0xa8/0x100
[  105.217594][ T6430]  __kmalloc_cache_noprof+0xa3/0x600
[  105.217614][ T6430]  ? __kmalloc_cache_noprof+0x14d/0x600
[  105.217632][ T6430]  ? do_check_common+0x352/0x5d30
[  105.217653][ T6430]  ? do_check_common+0x352/0x5d30
[  105.217683][ T6430]  do_check_common+0x352/0x5d30
[  105.217715][ T6430]  ? kfree+0x1c5/0x650
[  105.217741][ T6430]  ? bpf_compute_live_registers+0x1f40/0x1ff0
[  105.217778][ T6430]  ? mark_fastcall_patterns+0xf32/0xf90
[  105.217811][ T6430]  ? __pfx_do_check_common+0x10/0x10
[  105.217850][ T6430]  bpf_check+0x2639/0x2e10
[  105.217883][ T6430]  ? ktime_get_with_offset+0x93/0x2d0
[  105.217908][ T6430]  ? __pfx_bpf_check+0x10/0x10
[  105.217932][ T6430]  ? bpf_obj_name_cpy+0x194/0x1e0
[  105.217963][ T6430]  bpf_prog_load+0x14d6/0x1c20
[  105.217998][ T6430]  ? __pfx_bpf_prog_load+0x10/0x10
[  105.218048][ T6430]  __sys_bpf+0xd0d/0xd90
[  105.218082][ T6430]  ? __pfx___sys_bpf+0x10/0x10
[  105.218116][ T6430]  ? __fget_files+0x2a/0x420
[  105.218163][ T6430]  ? rcu_is_watching+0x16/0xb0
[  105.218191][ T6430]  __x64_sys_bpf+0xba/0xd0
[  105.218213][ T6430]  do_syscall_64+0x166/0x520
[  105.218236][ T6430]  ? trace_irq_disable+0x3b/0x140
[  105.218255][ T6430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.218273][ T6430]  ? clear_bhb_loop+0x70/0xc0
[  105.218297][ T6430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.218316][ T6430] RIP: 0033:0x7f185c99e159
[  105.218336][ T6430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.218351][ T6430] RSP: 002b:00007f185d88e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  105.218373][ T6430] RAX: ffffffffffffffda RBX: 00007f185cc25fa0 RCX: 00007f185c99e159
[  105.218387][ T6430] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005
[  105.218399][ T6430] RBP: 00007f185d88e090 R08: 0000000000000000 R09: 0000000000000000
[  105.218420][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  105.218431][ T6430] R13: 00007f185cc26038 R14: 00007f185cc25fa0 R15: 00007ffedb7947c8
[  105.218464][ T6430]  </TASK>
[  105.234009][ T6428] syz_tun: entered promiscuous mode
[  105.525304][ T6427] syz_tun: left promiscuous mode
[  105.616591][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.181'.
[  106.231109][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[  106.236424][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'.
[  106.365955][ T6471] netlink: 72 bytes leftover after parsing attributes in process `syz.0.190'.
[  106.527320][ T6476] macsec1: entered promiscuous mode
[  106.580554][ T6480] gretap0: entered promiscuous mode
[  106.602239][ T6480] siw: device registration error -23
[  106.646408][ T6483] bond2: entered allmulticast mode
[  106.648710][ T6480] 0ªî{X¹¦: renamed from gretap0
[  106.672126][ T6480] 0ªî{X¹¦: left promiscuous mode
[  106.672150][ T6480] 0ªî{X¹¦: entered allmulticast mode
[  106.677938][ T6480] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  106.719009][ T6483] macvlan2: entered promiscuous mode
[  106.719034][ T6483] macvlan2: entered allmulticast mode
[  106.720123][ T6483] bond2: entered promiscuous mode
[  106.739808][ T6483] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  106.758834][ T6483] bond2: left promiscuous mode
[  106.855511][ T6491] veth1_macvtap: mtu less than device minimum
[  107.984009][ T6541] sctp: [Deprecated]: syz.0.217 (pid 6541) Use of int in max_burst socket option.
[  107.984009][ T6541] Use struct sctp_assoc_value instead
[  107.988053][ T6541] xt_hashlimit: size too large, truncated to 1048576
[  108.066360][ T6540] netlink: 'syz.2.216': attribute type 11 has an invalid length.
[  108.093993][ T6549] netlink: 'syz.3.218': attribute type 13 has an invalid length.
[  108.651794][ T6564] syz.0.221: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  108.651952][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT(full) 
[  108.651975][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.651986][ T6564] Call Trace:
[  108.651995][ T6564]  <TASK>
[  108.652003][ T6564]  dump_stack_lvl+0xe8/0x150
[  108.652037][ T6564]  warn_alloc+0x24d/0x270
[  108.652059][ T6564]  ? kasan_save_track+0x4f/0x80
[  108.652080][ T6564]  ? kasan_save_track+0x3e/0x80
[  108.652131][ T6564]  ? __pfx_warn_alloc+0x10/0x10
[  108.652153][ T6564]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  108.652177][ T6564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.652218][ T6564]  __vmalloc_node_range_noprof+0x127/0x1540
[  108.652272][ T6564]  ? rcu_is_watching+0x16/0xb0
[  108.652303][ T6564]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  108.652332][ T6564]  ? __kmalloc_cache_noprof+0x321/0x600
[  108.652352][ T6564]  ? __kmalloc_cache_noprof+0x14d/0x600
[  108.652371][ T6564]  ? xskq_create+0x56/0x220
[  108.652399][ T6564]  xskq_create+0x148/0x220
[  108.652421][ T6564]  ? xsk_init_queue+0x8a/0xe0
[  108.652447][ T6564]  xsk_init_queue+0x8a/0xe0
[  108.652483][ T6564]  xsk_setsockopt+0x5e0/0x960
[  108.652506][ T6564]  ? __pfx_xsk_setsockopt+0x10/0x10
[  108.652527][ T6564]  ? __pfx_aa_sk_perm+0x10/0x10
[  108.652557][ T6564]  ? aa_sock_opt_perm+0x142/0x1e0
[  108.652589][ T6564]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  108.652615][ T6564]  ? __pfx_xsk_setsockopt+0x10/0x10
[  108.652639][ T6564]  do_sock_setsockopt+0x17c/0x1b0
[  108.652671][ T6564]  __x64_sys_setsockopt+0x13d/0x1b0
[  108.652702][ T6564]  do_syscall_64+0x166/0x520
[  108.652728][ T6564]  ? trace_irq_disable+0x3b/0x140
[  108.652748][ T6564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.652769][ T6564]  ? clear_bhb_loop+0x70/0xc0
[  108.652795][ T6564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.652816][ T6564] RIP: 0033:0x7f44f919e159
[  108.652838][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.652855][ T6564] RSP: 002b:00007f44fa12a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  108.652876][ T6564] RAX: ffffffffffffffda RBX: 00007f44f9426090 RCX: 00007f44f919e159
[  108.652891][ T6564] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  108.652903][ T6564] RBP: 00007f44f923506b R08: 0000000000000004 R09: 0000000000000000
[  108.652916][ T6564] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.652928][ T6564] R13: 00007f44f9426128 R14: 00007f44f9426090 R15: 00007ffc2c9b7318
[  108.652964][ T6564]  </TASK>
[  108.658188][ T6564] Mem-Info:
[  108.658206][ T6564] active_anon:5684 inactive_anon:0 isolated_anon:0
[  108.658206][ T6564]  active_file:0 inactive_file:43177 isolated_file:0
[  108.658206][ T6564]  unevictable:0 dirty:287 writeback:0
[  108.658206][ T6564]  slab_reclaimable:10279 slab_unreclaimable:93746
[  108.658206][ T6564]  mapped:29409 shmem:520 pagetables:1177
[  108.658206][ T6564]  sec_pagetables:0 bounce:0
[  108.658206][ T6564]  kernel_misc_reclaimable:0
[  108.658206][ T6564]  free:1338259 free_pcp:10844 free_cma:0
[  108.658261][ T6564] Node 0 active_anon:22736kB inactive_anon:0kB active_file:0kB inactive_file:172496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117636kB dirty:1148kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  108.658317][ T6564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  108.658368][ T6564] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  108.658430][ T6564] lowmem_reserve[]: 0 2487 2487 2487 2487
[  108.658485][ T6564] Node 0 DMA32 free:1398196kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22736kB inactive_anon:0kB active_file:0kB inactive_file:172496kB unevictable:0kB writepending:1148kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:43376kB local_pcp:22076kB free_cma:0kB
[  108.658546][ T6564] lowmem_reserve[]: 0 0 0 0 0
[  108.658585][ T6564] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  108.658640][ T6564] lowmem_reserve[]: 0 0 0 0 0
[  108.658698][ T6564] Node 1 Normal free:3939480kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  108.658754][ T6564] lowmem_reserve[]: 0 0 0 0 0
[  108.658793][ T6564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  108.658942][ T6564] Node 0 DMA32: 1*4kB (M) 2*8kB (UM) 3*16kB (UME) 162*32kB (UME) 108*64kB (UM) 43*128kB (UME) 13*256kB (UM) 2*512kB (M) 0*1024kB 6*2048kB (UME) 333*4096kB (UM) = 1398276kB
[  108.664815][ T6564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  108.664911][ T6564] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 6*16kB (UM) 3*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939480kB
[  108.665148][ T6564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  108.665164][ T6564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  108.665178][ T6564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  108.665191][ T6564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  108.665205][ T6564] 43693 total pagecache pages
[  108.665213][ T6564] 0 pages in swap cache
[  108.665219][ T6564] Free swap  = 124996kB
[  108.665226][ T6564] Total swap = 124996kB
[  108.665234][ T6564] 2097051 pages RAM
[  108.665240][ T6564] 0 pages HighMem/MovableOnly
[  108.665247][ T6564] 428705 pages reserved
[  108.665253][ T6564] 0 pages cma reserved
[  109.600420][ T6591] __nla_validate_parse: 11 callbacks suppressed
[  109.600451][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'.
[  110.034510][ T6620] netlink: 72 bytes leftover after parsing attributes in process `syz.1.236'.
[  110.066556][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[  110.080714][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'.
[  110.080737][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.080753][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.090217][ T6623] netlink: 44 bytes leftover after parsing attributes in process `syz.4.238'.
[  110.097218][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.097241][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.514234][ T6643] netlink: 84 bytes leftover after parsing attributes in process `syz.0.241'.
[  111.096311][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'.
[  111.226037][   T84] IPVS: starting estimator thread 0...
[  111.311472][ T6660] IPVS: using max 23 ests per chain, 55200 per kthread
[  112.275477][ T6695] netlink: 72 bytes leftover after parsing attributes in process `syz.4.256'.
[  112.398181][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'.
[  112.442803][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'.
[  112.606442][ T6710] Bluetooth: MGMT ver 1.23
[  112.702729][ T6704] bridge2: port 1(veth3) entered blocking state
[  112.702870][ T6704] bridge2: port 1(veth3) entered disabled state
[  112.707403][ T6704] veth3: entered allmulticast mode
[  112.714275][ T6704] veth3: entered promiscuous mode
[  112.847932][ T6699] bridge2: port 2(veth5) entered blocking state
[  112.848075][ T6699] bridge2: port 2(veth5) entered disabled state
[  112.848232][ T6699] veth5: entered allmulticast mode
[  112.882737][ T6699] veth5: entered promiscuous mode
[  113.544357][ T6745] veth0_to_bridge: entered promiscuous mode
[  113.545010][ T6745] macvtap1: entered allmulticast mode
[  113.545028][ T6745] veth0_to_bridge: entered allmulticast mode
[  113.584324][ T6748] netlink: 'syz.3.269': attribute type 1 has an invalid length.
[  113.585195][ T6745] veth0_to_bridge: left allmulticast mode
[  113.585224][ T6745] veth0_to_bridge: left promiscuous mode
[  113.932249][ T6761] netlink: 'syz.4.270': attribute type 6 has an invalid length.
[  113.932272][ T6761] netlink: 'syz.4.270': attribute type 7 has an invalid length.
[  113.932284][ T6761] netlink: 'syz.4.270': attribute type 8 has an invalid length.
[  114.131556][ T6778] lo: entered promiscuous mode
[  114.131580][ T6778] lo: entered allmulticast mode
[  114.155303][ T6778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.672231][   T52] Bluetooth: hci2: command 0x0401 tx timeout
[  114.672368][ T4934] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  114.714707][ T6802] __nla_validate_parse: 6 callbacks suppressed
[  114.735766][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'.
[  115.425467][ T6820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.279'.
[  115.626801][ T6833] openvswitch: netlink: IP tunnel dst address not specified
[  116.053263][ T6840] netlink: 'syz.4.281': attribute type 1 has an invalid length.
[  116.133081][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'.
[  116.218628][ T6848] netlink: 'syz.3.282': attribute type 2 has an invalid length.
[  116.391622][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'.
[  116.521355][ T6848] 
: entered promiscuous mode
[  116.686716][ T6860] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  117.122850][ T6886] netlink: 72 bytes leftover after parsing attributes in process `syz.2.289'.
[  117.196552][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'.
[  117.307295][ T6892] netlink: 92 bytes leftover after parsing attributes in process `syz.1.291'.
[  117.604660][ T6905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.295'.
[  117.621479][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.294'.
[  117.696803][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[  118.022678][ T6927] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[  118.238973][ T6931] bond1: (slave veth0_to_bond): making interface the new active one
[  118.254268][ T6931] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  118.307398][ T6927] macvlan2: entered promiscuous mode
[  118.307425][ T6927] macvlan2: entered allmulticast mode
[  118.313641][ T6927] bond1: entered promiscuous mode
[  118.313662][ T6927] veth0_to_bond: entered promiscuous mode
[  118.341253][ T6896] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  118.343956][ T6927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  118.360516][ T6927] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  118.439926][ T6927] bond1: left promiscuous mode
[  118.439951][ T6927] veth0_to_bond: left promiscuous mode
[  119.573604][ T6983] netlink: 'syz.4.310': attribute type 32 has an invalid length.
[  119.763892][ T6996] __nla_validate_parse: 13 callbacks suppressed
[  119.763915][ T6996] netlink: 72 bytes leftover after parsing attributes in process `syz.1.308'.
[  119.913740][ T6994] syzkaller0: entered promiscuous mode
[  119.913767][ T6994] syzkaller0: entered allmulticast mode
[  119.916458][ T6998] bond0: mtu less than device minimum
[  119.918010][ T6994] netlink: 52 bytes leftover after parsing attributes in process `syz.3.311'.
[  119.918242][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.311'.
[  119.969657][ T7003] bond0: mtu less than device minimum
[  120.958249][ T7032] netlink: 1200 bytes leftover after parsing attributes in process `syz.0.318'.
[  120.958363][ T7032] netlink: 1200 bytes leftover after parsing attributes in process `syz.0.318'.
[  121.166549][   T13] IPVS: starting estimator thread 0...
[  121.250897][ T7037] IPVS: using max 25 ests per chain, 60000 per kthread
[  121.870335][ T7054] netlink: 'syz.1.324': attribute type 2 has an invalid length.
[  121.870362][ T7054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.324'.
[  122.124398][ T7058] netlink: 72 bytes leftover after parsing attributes in process `syz.1.325'.
[  122.815338][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'.
[  123.068064][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.330'.
[  123.426965][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'.
[  123.497109][ T7067] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  123.575157][ T7096] syzkaller1: entered promiscuous mode
[  123.575181][ T7096] syzkaller1: entered allmulticast mode
[  124.091806][ T7111] FAULT_INJECTION: forcing a failure.
[  124.091806][ T7111] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.091841][ T7111] CPU: 1 UID: 0 PID: 7111 Comm: syz.2.342 Not tainted syzkaller #0 PREEMPT(full) 
[  124.091861][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.091873][ T7111] Call Trace:
[  124.091881][ T7111]  <TASK>
[  124.091890][ T7111]  dump_stack_lvl+0xe8/0x150
[  124.091924][ T7111]  should_fail_ex+0x410/0x560
[  124.091952][ T7111]  strncpy_from_user+0x36/0x2c0
[  124.091988][ T7111]  bpf_prog_load+0xdef/0x1c20
[  124.092025][ T7111]  ? __pfx_bpf_prog_load+0x10/0x10
[  124.092074][ T7111]  __sys_bpf+0xd0d/0xd90
[  124.092106][ T7111]  ? __pfx___sys_bpf+0x10/0x10
[  124.092161][ T7111]  ? __fget_files+0x2a/0x420
[  124.092208][ T7111]  ? ksys_write+0x242/0x270
[  124.092240][ T7111]  ? __pfx_ksys_write+0x10/0x10
[  124.092276][ T7111]  __x64_sys_bpf+0xba/0xd0
[  124.092300][ T7111]  do_syscall_64+0x166/0x520
[  124.092324][ T7111]  ? trace_irq_disable+0x3b/0x140
[  124.092344][ T7111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.092364][ T7111]  ? clear_bhb_loop+0x70/0xc0
[  124.092390][ T7111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.092410][ T7111] RIP: 0033:0x7f44fad9e159
[  124.092431][ T7111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.092447][ T7111] RSP: 002b:00007f44f8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  124.092470][ T7111] RAX: ffffffffffffffda RBX: 00007f44fb025fa0 RCX: 00007f44fad9e159
[  124.092483][ T7111] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  124.092496][ T7111] RBP: 00007f44f8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  124.092508][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.092520][ T7111] R13: 00007f44fb026038 R14: 00007f44fb025fa0 R15: 00007fff814f8168
[  124.092552][ T7111]  </TASK>
[  124.486703][ T7127] xt_LOG: level 125 >= 8
[  124.582482][   T30] audit: type=1107 audit(1790164534.728:2): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>†@õ½üîÿùŠ×`w0¨Y±'
[  124.609086][   T12] tipc: Subscription rejected, illegal request
[  124.903866][ T7141] netlink: 'syz.4.351': attribute type 1 has an invalid length.
[  124.965709][ T7141] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.325012][ T7146] netlink: 'syz.4.354': attribute type 40 has an invalid length.
[  125.618778][ T7154] __nla_validate_parse: 2 callbacks suppressed
[  125.618800][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'.
[  125.618827][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'.
[  125.686047][ T7161] netlink: 112 bytes leftover after parsing attributes in process `syz.4.360'.
[  125.694273][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.694316][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.694345][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.694373][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.703157][ T7159] lo: left promiscuous mode
[  125.703177][ T7159] lo: left allmulticast mode
[  125.760375][ T7160] netlink: zone id is out of range
[  125.760392][ T7160] netlink: zone id is out of range
[  125.760400][ T7160] netlink: zone id is out of range
[  125.760407][ T7160] netlink: zone id is out of range
[  125.760415][ T7160] netlink: zone id is out of range
[  125.760422][ T7160] netlink: zone id is out of range
[  125.760626][ T7160] netlink: zone id is out of range
[  125.760636][ T7160] netlink: zone id is out of range
[  125.760801][ T7160] netlink: zone id is out of range
[  125.760809][ T7160] netlink: zone id is out of range
[  125.837454][ T7159] bond1: left promiscuous mode
[  125.837480][ T7159] bridge1: left promiscuous mode
[  125.847468][ T7159] bridge2: left promiscuous mode
[  125.847673][ T7159] bridge3: left promiscuous mode
[  125.847866][ T7159] bond1: left allmulticast mode
[  125.847879][ T7159] bridge1: left allmulticast mode
[  125.847891][ T7159] bridge2: left allmulticast mode
[  125.847911][ T7159] bridge3: left allmulticast mode
[  126.022515][ T7173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.361'.
[  126.022542][ T7173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.361'.
[  126.220370][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.365'.
[  126.408484][ T7194] FAULT_INJECTION: forcing a failure.
[  126.408484][ T7194] name failslab, interval 1, probability 0, space 0, times 0
[  126.408516][ T7194] CPU: 1 UID: 0 PID: 7194 Comm: syz.3.370 Not tainted syzkaller #0 PREEMPT(full) 
[  126.408536][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  126.408546][ T7194] Call Trace:
[  126.408553][ T7194]  <TASK>
[  126.408561][ T7194]  dump_stack_lvl+0xe8/0x150
[  126.408591][ T7194]  should_fail_ex+0x410/0x560
[  126.408615][ T7194]  should_failslab+0xa8/0x100
[  126.408639][ T7194]  __kmalloc_cache_noprof+0xa3/0x600
[  126.408660][ T7194]  ? bpf_diag_init+0x87/0x140
[  126.408676][ T7194]  ? bpf_diag_init+0x87/0x140
[  126.408697][ T7194]  bpf_diag_init+0x87/0x140
[  126.408718][ T7194]  bpf_check+0x5df/0x2e10
[  126.408747][ T7194]  ? ktime_get_with_offset+0x93/0x2d0
[  126.408768][ T7194]  ? __pfx_bpf_check+0x10/0x10
[  126.408788][ T7194]  ? bpf_obj_name_cpy+0x194/0x1e0
[  126.408816][ T7194]  bpf_prog_load+0x14d6/0x1c20
[  126.408846][ T7194]  ? __pfx_bpf_prog_load+0x10/0x10
[  126.408890][ T7194]  __sys_bpf+0xd0d/0xd90
[  126.408917][ T7194]  ? __pfx___sys_bpf+0x10/0x10
[  126.408947][ T7194]  ? __fget_files+0x2a/0x420
[  126.408997][ T7194]  ? ksys_write+0x242/0x270
[  126.409027][ T7194]  ? __pfx_ksys_write+0x10/0x10
[  126.409055][ T7194]  __x64_sys_bpf+0xba/0xd0
[  126.409076][ T7194]  do_syscall_64+0x166/0x520
[  126.409097][ T7194]  ? trace_irq_disable+0x3b/0x140
[  126.409114][ T7194]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.409132][ T7194]  ? clear_bhb_loop+0x70/0xc0
[  126.409155][ T7194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.409171][ T7194] RIP: 0033:0x7f5e9439e159
[  126.409191][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.409206][ T7194] RSP: 002b:00007f5e95192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  126.409228][ T7194] RAX: ffffffffffffffda RBX: 00007f5e94625fa0 RCX: 00007f5e9439e159
[  126.409241][ T7194] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  126.409254][ T7194] RBP: 00007f5e95192090 R08: 0000000000000000 R09: 0000000000000000
[  126.409266][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  126.409277][ T7194] R13: 00007f5e94626038 R14: 00007f5e94625fa0 R15: 00007ffe5f766288
[  126.409308][ T7194]  </TASK>
[  127.193145][   T49] IPVS: starting estimator thread 0...
[  127.291203][ T7216] IPVS: using max 23 ests per chain, 55200 per kthread
[  127.372846][ T7222] netlink: 'syz.0.380': attribute type 1 has an invalid length.
[  127.372870][ T7222] netlink: 232 bytes leftover after parsing attributes in process `syz.0.380'.
[  127.372885][ T7222] netlink: 'syz.0.380': attribute type 1 has an invalid length.
[  127.588319][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.381'.
[  128.114640][ T7262] netlink: 120 bytes leftover after parsing attributes in process `syz.2.389'.
[  128.114844][ T7262] netlink: 120 bytes leftover after parsing attributes in process `syz.2.389'.
[  130.773542][ T7387] tipc: Started in network mode
[  130.773567][ T7387] tipc: Node identity 4, cluster identity 4711
[  130.773580][ T7387] tipc: Node number set to 4
[  130.968007][ T7390] netlink: 'syz.3.412': attribute type 1 has an invalid length.
[  130.968031][ T7390] netlink: 'syz.3.412': attribute type 4 has an invalid length.
[  130.968042][ T7390] __nla_validate_parse: 3 callbacks suppressed
[  130.968053][ T7390] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.412'.
[  130.976569][ T7390] netlink: 'syz.3.412': attribute type 1 has an invalid length.
[  130.976589][ T7390] netlink: 'syz.3.412': attribute type 4 has an invalid length.
[  130.976600][ T7390] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.412'.
[  131.008320][ T7390] netlink: 5 bytes leftover after parsing attributes in process `syz.3.412'.
[  131.010569][ T7394] set match dimension is over the limit!
[  131.073212][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'.
[  131.405831][ T7400] netlink: 51 bytes leftover after parsing attributes in process `syz.0.415'.
[  131.636800][ T7408] macvtap1: entered allmulticast mode
[  131.636825][ T7408] veth0_to_bridge: entered allmulticast mode
[  131.680430][ T7408] veth0_to_bridge: left allmulticast mode
[  131.974205][ T7421] FAULT_INJECTION: forcing a failure.
[  131.974205][ T7421] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  131.974241][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) 
[  131.974262][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  131.974277][ T7421] Call Trace:
[  131.974285][ T7421]  <TASK>
[  131.974294][ T7421]  dump_stack_lvl+0xe8/0x150
[  131.974327][ T7421]  should_fail_ex+0x410/0x560
[  131.974365][ T7421]  prepare_alloc_pages+0x223/0x600
[  131.974392][ T7421]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  131.974418][ T7421]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  131.974445][ T7421]  ? __pfx_policy_nodemask+0x10/0x10
[  131.974481][ T7421]  alloc_pages_mpol+0x21e/0x390
[  131.974511][ T7421]  alloc_pages_noprof+0xb1/0x2b0
[  131.974536][ T7421]  get_free_pages_noprof+0xf/0x80
[  131.974558][ T7421]  __kasan_populate_vmalloc+0x38/0x1c0
[  131.974578][ T7421]  ? do_raw_spin_unlock+0xf5/0x200
[  131.974609][ T7421]  alloc_vmap_area+0xd1a/0x1420
[  131.974648][ T7421]  ? __pfx_alloc_vmap_area+0x10/0x10
[  131.974671][ T7421]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  131.974692][ T7421]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  131.974710][ T7421]  ? __get_vm_area_node+0x155/0x2f0
[  131.974742][ T7421]  __get_vm_area_node+0x200/0x2f0
[  131.974776][ T7421]  __vmalloc_node_range_noprof+0x343/0x1540
[  131.974804][ T7421]  ? bpf_check+0x10ee/0x2e10
[  131.974854][ T7421]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  131.974882][ T7421]  ? __kasan_kmalloc+0x93/0xb0
[  131.974906][ T7421]  ? __kmalloc_cache_noprof+0x321/0x600
[  131.974926][ T7421]  ? __kmalloc_cache_noprof+0x14d/0x600
[  131.974943][ T7421]  ? bpf_diag_init+0x87/0x140
[  131.974962][ T7421]  ? bpf_diag_init+0x87/0x140
[  131.974994][ T7421]  ? bpf_check+0x10ee/0x2e10
[  131.975012][ T7421]  __vmalloc_noprof+0xd2/0x120
[  131.975038][ T7421]  ? bpf_check+0x10ee/0x2e10
[  131.975061][ T7421]  bpf_check+0x10ee/0x2e10
[  131.975092][ T7421]  ? ktime_get_with_offset+0x93/0x2d0
[  131.975117][ T7421]  ? __pfx_bpf_check+0x10/0x10
[  131.975141][ T7421]  ? bpf_obj_name_cpy+0x194/0x1e0
[  131.975172][ T7421]  bpf_prog_load+0x14d6/0x1c20
[  131.975209][ T7421]  ? __pfx_bpf_prog_load+0x10/0x10
[  131.975258][ T7421]  __sys_bpf+0xd0d/0xd90
[  131.975288][ T7421]  ? __pfx___sys_bpf+0x10/0x10
[  131.975321][ T7421]  ? __fget_files+0x2a/0x420
[  131.975365][ T7421]  ? ksys_write+0x242/0x270
[  131.975396][ T7421]  ? __pfx_ksys_write+0x10/0x10
[  131.975429][ T7421]  __x64_sys_bpf+0xba/0xd0
[  131.975453][ T7421]  do_syscall_64+0x166/0x520
[  131.975475][ T7421]  ? trace_irq_disable+0x3b/0x140
[  131.975494][ T7421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.975514][ T7421]  ? clear_bhb_loop+0x70/0xc0
[  131.975538][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.975556][ T7421] RIP: 0033:0x7f44f919e159
[  131.975576][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.975592][ T7421] RSP: 002b:00007f44fa14b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  131.975615][ T7421] RAX: ffffffffffffffda RBX: 00007f44f9425fa0 RCX: 00007f44f919e159
[  131.975629][ T7421] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  131.975641][ T7421] RBP: 00007f44fa14b090 R08: 0000000000000000 R09: 0000000000000000
[  131.975653][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.975664][ T7421] R13: 00007f44f9426038 R14: 00007f44f9425fa0 R15: 00007ffc2c9b7318
[  131.975695][ T7421]  </TASK>
[  131.978056][ T7421] syz.0.419: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  131.978129][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.0.419 Not tainted syzkaller #0 PREEMPT(full) 
[  131.978150][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  131.978162][ T7421] Call Trace:
[  131.978170][ T7421]  <TASK>
[  131.978179][ T7421]  dump_stack_lvl+0xe8/0x150
[  131.978211][ T7421]  warn_alloc+0x24d/0x270
[  131.978234][ T7421]  ? lockdep_hardirqs_on+0x7b/0x110
[  131.978261][ T7421]  ? __pfx_warn_alloc+0x10/0x10
[  131.978281][ T7421]  ? kfree+0x1c5/0x650
[  131.978316][ T7421]  ? __get_vm_area_node+0x219/0x2f0
[  131.978353][ T7421]  __vmalloc_node_range_noprof+0x36b/0x1540
[  131.978414][ T7421]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  131.978443][ T7421]  ? __kasan_kmalloc+0x93/0xb0
[  131.978467][ T7421]  ? __kmalloc_cache_noprof+0x321/0x600
[  131.978486][ T7421]  ? __kmalloc_cache_noprof+0x14d/0x600
[  131.978504][ T7421]  ? bpf_diag_init+0x87/0x140
[  131.978527][ T7421]  ? bpf_diag_init+0x87/0x140
[  131.978553][ T7421]  ? bpf_check+0x10ee/0x2e10
[  131.978572][ T7421]  __vmalloc_noprof+0xd2/0x120
[  131.978601][ T7421]  ? bpf_check+0x10ee/0x2e10
[  131.978625][ T7421]  bpf_check+0x10ee/0x2e10
[  131.978671][ T7421]  ? ktime_get_with_offset+0x93/0x2d0
[  131.978698][ T7421]  ? __pfx_bpf_check+0x10/0x10
[  131.978723][ T7421]  ? bpf_obj_name_cpy+0x194/0x1e0
[  131.978753][ T7421]  bpf_prog_load+0x14d6/0x1c20
[  131.978786][ T7421]  ? __pfx_bpf_prog_load+0x10/0x10
[  131.978831][ T7421]  __sys_bpf+0xd0d/0xd90
[  131.978862][ T7421]  ? __pfx___sys_bpf+0x10/0x10
[  131.978895][ T7421]  ? __fget_files+0x2a/0x420
[  131.978937][ T7421]  ? ksys_write+0x242/0x270
[  131.978968][ T7421]  ? __pfx_ksys_write+0x10/0x10
[  131.979011][ T7421]  __x64_sys_bpf+0xba/0xd0
[  131.979035][ T7421]  do_syscall_64+0x166/0x520
[  131.979062][ T7421]  ? trace_irq_disable+0x3b/0x140
[  131.979081][ T7421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.979101][ T7421]  ? clear_bhb_loop+0x70/0xc0
[  131.979124][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.979143][ T7421] RIP: 0033:0x7f44f919e159
[  131.979162][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  131.979177][ T7421] RSP: 002b:00007f44fa14b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  131.979196][ T7421] RAX: ffffffffffffffda RBX: 00007f44f9425fa0 RCX: 00007f44f919e159
[  131.979210][ T7421] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  131.979222][ T7421] RBP: 00007f44fa14b090 R08: 0000000000000000 R09: 0000000000000000
[  131.979234][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.979243][ T7421] R13: 00007f44f9426038 R14: 00007f44f9425fa0 R15: 00007ffc2c9b7318
[  131.979273][ T7421]  </TASK>
[  131.980296][ T7421] Mem-Info:
[  131.980307][ T7421] active_anon:9880 inactive_anon:0 isolated_anon:0
[  131.980307][ T7421]  active_file:0 inactive_file:43253 isolated_file:0
[  131.980307][ T7421]  unevictable:0 dirty:310 writeback:0
[  131.980307][ T7421]  slab_reclaimable:10434 slab_unreclaimable:96392
[  131.980307][ T7421]  mapped:29451 shmem:4610 pagetables:1191
[  131.980307][ T7421]  sec_pagetables:0 bounce:0
[  131.980307][ T7421]  kernel_misc_reclaimable:0
[  131.980307][ T7421]  free:1329775 free_pcp:6889 free_cma:0
[  131.980353][ T7421] Node 0 active_anon:39520kB inactive_anon:0kB active_file:0kB inactive_file:172800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117804kB dirty:1236kB writeback:0kB shmem:18440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12572kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  131.982046][ T7421] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  131.982092][ T7421] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  131.982140][ T7421] lowmem_reserve[]: 0 2487 2487 2487 2487
[  131.982173][ T7421] Node 0 DMA32 free:1364264kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39520kB inactive_anon:0kB active_file:0kB inactive_file:172800kB unevictable:0kB writepending:1236kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:27556kB local_pcp:20980kB free_cma:0kB
[  131.982223][ T7421] lowmem_reserve[]: 0 0 0 0 0
[  131.982254][ T7421] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  131.982299][ T7421] lowmem_reserve[]: 0 0 0 0 0
[  131.982330][ T7421] Node 1 Normal free:3939476kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  131.982377][ T7421] lowmem_reserve[]: 0 0 0 0 0
[  131.982408][ T7421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  131.982525][ T7421] Node 0 DMA32: 838*4kB (UM) 370*8kB (UME) 194*16kB (UM) 29*32kB (UME) 46*64kB (ME) 30*128kB (UME) 8*256kB (UM) 3*512kB (ME) 2*1024kB (UE) 3*2048kB (M) 326*4096kB (M) = 1364200kB
[  131.985123][ T7421] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  131.985211][ T7421] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 3*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939476kB
[  131.985351][ T7421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  131.985364][ T7421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.985378][ T7421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  131.985391][ T7421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.985404][ T7421] 47859 total pagecache pages
[  131.985411][ T7421] 0 pages in swap cache
[  131.985417][ T7421] Free swap  = 124996kB
[  131.985424][ T7421] Total swap = 124996kB
[  131.985431][ T7421] 2097051 pages RAM
[  131.985437][ T7421] 0 pages HighMem/MovableOnly
[  131.985443][ T7421] 428705 pages reserved
[  131.985449][ T7421] 0 pages cma reserved
[  132.367076][ T7426] netlink: 'syz.3.421': attribute type 23 has an invalid length.
[  133.074087][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  133.414766][ T7437] bond3: option min_links: invalid value (18446744073709551612)
[  133.414793][ T7437] bond3: option min_links: allowed values 0 - 2147483647
[  133.442379][ T7437] bond3 (unregistering): Released all slaves
[  133.614384][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.423'.
[  133.857829][ T7461] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  133.877325][ T7461] bond1 (unregistering): Released all slaves
[  134.120019][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'.
[  134.210941][ T7485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.437'.
[  134.756810][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.447'.
[  134.756854][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'.
[  135.982622][ T7567] __nla_validate_parse: 3 callbacks suppressed
[  135.982645][ T7567] netlink: 72 bytes leftover after parsing attributes in process `syz.4.466'.
[  136.046724][ T7569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'.
[  136.472542][ T7588] netlink: 'syz.1.477': attribute type 1 has an invalid length.
[  136.530351][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'.
[  136.547964][ T7588] veth7: entered promiscuous mode
[  136.914720][ T7601] netlink: 'syz.3.482': attribute type 1 has an invalid length.
[  137.136807][ T7611] veth3: entered allmulticast mode
[  137.144837][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[  137.146949][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'.
[  137.174129][ T7611] bond3: (slave veth3): Enslaving as an active interface with a down link
[  137.191703][ T7612] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  137.297286][ T7611] macvlan0: entered promiscuous mode
[  137.297311][ T7611] macvlan0: entered allmulticast mode
[  137.297766][ T7611] bond3: entered promiscuous mode
[  137.298777][ T7611] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  137.300565][ T7611] bond3: left promiscuous mode
[  137.378989][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.491'.
[  137.426544][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.491'.
[  137.891738][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.494'.
[  137.891761][ T7643] tipc: Invalid UDP bearer configuration
[  137.891810][ T7643] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  138.027949][ T7653] netlink: 72 bytes leftover after parsing attributes in process `syz.3.495'.
[  138.408656][ T7667] syzkaller0: entered promiscuous mode
[  138.408682][ T7667] syzkaller0: entered allmulticast mode
[  138.495042][ T7673] net_ratelimit: 495 callbacks suppressed
[  138.495068][ T7673] netlink: Invalid conntrack helper
[  138.495096][ T7673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.599378][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'.
[  140.487737][ T7678] kthread_run failed with err -4
[  140.768190][ T7705] block nbd0: shutting down sockets
[  140.802926][ T7703] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  141.082859][ T7721] netlink: 'syz.3.516': attribute type 1 has an invalid length.
[  141.082879][ T7721] __nla_validate_parse: 2 callbacks suppressed
[  141.082888][ T7721] netlink: 756 bytes leftover after parsing attributes in process `syz.3.516'.
[  141.334170][ T7735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.518'.
[  141.409539][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'.
[  141.841978][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'.
[  141.842017][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'.
[  142.007113][ T7756] FAULT_INJECTION: forcing a failure.
[  142.007113][ T7756] name failslab, interval 1, probability 0, space 0, times 0
[  142.007149][ T7756] CPU: 0 UID: 0 PID: 7756 Comm: syz.2.529 Not tainted syzkaller #0 PREEMPT(full) 
[  142.007171][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  142.007182][ T7756] Call Trace:
[  142.007190][ T7756]  <TASK>
[  142.007199][ T7756]  dump_stack_lvl+0xe8/0x150
[  142.007232][ T7756]  should_fail_ex+0x410/0x560
[  142.007260][ T7756]  should_failslab+0xa8/0x100
[  142.007285][ T7756]  __kvmalloc_node_noprof+0x176/0x820
[  142.007309][ T7756]  ? __kmalloc_cache_noprof+0x14d/0x600
[  142.007328][ T7756]  ? bpf_diag_init+0x87/0x140
[  142.007352][ T7756]  ? bpf_check+0x15a9/0x2e10
[  142.007372][ T7756]  ? bpf_check+0x15a9/0x2e10
[  142.007398][ T7756]  bpf_check+0x15a9/0x2e10
[  142.007431][ T7756]  ? ktime_get_with_offset+0x93/0x2d0
[  142.007457][ T7756]  ? __pfx_bpf_check+0x10/0x10
[  142.007482][ T7756]  ? bpf_obj_name_cpy+0x194/0x1e0
[  142.007512][ T7756]  bpf_prog_load+0x14d6/0x1c20
[  142.007549][ T7756]  ? __pfx_bpf_prog_load+0x10/0x10
[  142.007609][ T7756]  __sys_bpf+0xd0d/0xd90
[  142.007642][ T7756]  ? __pfx___sys_bpf+0x10/0x10
[  142.007677][ T7756]  ? __fget_files+0x2a/0x420
[  142.007722][ T7756]  ? ksys_write+0x242/0x270
[  142.007754][ T7756]  ? __pfx_ksys_write+0x10/0x10
[  142.007788][ T7756]  __x64_sys_bpf+0xba/0xd0
[  142.007813][ T7756]  do_syscall_64+0x166/0x520
[  142.007835][ T7756]  ? trace_irq_disable+0x3b/0x140
[  142.007854][ T7756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.007874][ T7756]  ? clear_bhb_loop+0x70/0xc0
[  142.007899][ T7756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.007917][ T7756] RIP: 0033:0x7f44fad9e159
[  142.007936][ T7756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.007950][ T7756] RSP: 002b:00007f44f8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  142.007972][ T7756] RAX: ffffffffffffffda RBX: 00007f44fb025fa0 RCX: 00007f44fad9e159
[  142.007986][ T7756] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  142.007999][ T7756] RBP: 00007f44f8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  142.008011][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  142.008023][ T7756] R13: 00007f44fb026038 R14: 00007f44fb025fa0 R15: 00007fff814f8168
[  142.008056][ T7756]  </TASK>
[  142.106508][ T4934] Bluetooth: hci1: Malformed HCI Event
[  142.419209][ T7773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.649297][ T7771] ip_tables: iptables: counters copy to user failed while replacing table
[  143.340135][ T7798] syzkaller0: entered promiscuous mode
[  143.340159][ T7798] syzkaller0: entered allmulticast mode
[  143.574183][ T7803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.539'.
[  143.600055][ T7805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'.
[  143.916587][ T7812] netlink: 'syz.4.541': attribute type 2 has an invalid length.
[  143.916611][ T7812] netlink: 132 bytes leftover after parsing attributes in process `syz.4.541'.
[  144.339067][ T7824] FAULT_INJECTION: forcing a failure.
[  144.339067][ T7824] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  144.339099][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.2.548 Not tainted syzkaller #0 PREEMPT(full) 
[  144.339121][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  144.339132][ T7824] Call Trace:
[  144.339140][ T7824]  <TASK>
[  144.339149][ T7824]  dump_stack_lvl+0xe8/0x150
[  144.339183][ T7824]  should_fail_ex+0x410/0x560
[  144.339211][ T7824]  prepare_alloc_pages+0x223/0x600
[  144.339240][ T7824]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  144.339266][ T7824]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  144.339286][ T7824]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  144.339310][ T7824]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  144.339337][ T7824]  ? __pfx_policy_nodemask+0x10/0x10
[  144.339360][ T7824]  ? __get_vm_area_node+0x155/0x2f0
[  144.339385][ T7824]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  144.339413][ T7824]  ? __vmalloc_noprof+0xd2/0x120
[  144.339444][ T7824]  __alloc_pages_noprof+0x10/0x100
[  144.339466][ T7824]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  144.339498][ T7824]  ? alloc_pages_noprof+0x140/0x2b0
[  144.339529][ T7824]  __kasan_populate_vmalloc+0xb7/0x1c0
[  144.339557][ T7824]  alloc_vmap_area+0xd1a/0x1420
[  144.339601][ T7824]  ? __pfx_alloc_vmap_area+0x10/0x10
[  144.339626][ T7824]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  144.339649][ T7824]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  144.339669][ T7824]  ? __get_vm_area_node+0x155/0x2f0
[  144.339702][ T7824]  __get_vm_area_node+0x200/0x2f0
[  144.339739][ T7824]  __vmalloc_node_range_noprof+0x343/0x1540
[  144.339769][ T7824]  ? bpf_prog_calc_tag+0x51/0x370
[  144.339793][ T7824]  ? format_decode+0xdc/0xda0
[  144.339820][ T7824]  ? vsnprintf+0xe42/0xef0
[  144.339854][ T7824]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.339882][ T7824]  ? bpf_verifier_vlog+0x3d1/0x900
[  144.339909][ T7824]  ? bpf_prog_calc_tag+0x51/0x370
[  144.339929][ T7824]  __vmalloc_noprof+0xd2/0x120
[  144.339966][ T7824]  ? bpf_prog_calc_tag+0x51/0x370
[  144.339993][ T7824]  bpf_prog_calc_tag+0x51/0x370
[  144.340022][ T7824]  check_and_resolve_insns+0xbb/0x21d0
[  144.340049][ T7824]  ? __pfx_bpf_check_btf_info+0x10/0x10
[  144.340072][ T7824]  ? add_subprog+0x2e2/0x3f0
[  144.340098][ T7824]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  144.340133][ T7824]  bpf_check+0x180a/0x2e10
[  144.340168][ T7824]  ? ktime_get_with_offset+0x93/0x2d0
[  144.340194][ T7824]  ? __pfx_bpf_check+0x10/0x10
[  144.340220][ T7824]  ? bpf_obj_name_cpy+0x194/0x1e0
[  144.340253][ T7824]  bpf_prog_load+0x14d6/0x1c20
[  144.340290][ T7824]  ? __pfx_bpf_prog_load+0x10/0x10
[  144.340342][ T7824]  __sys_bpf+0xd0d/0xd90
[  144.340375][ T7824]  ? __pfx___sys_bpf+0x10/0x10
[  144.340410][ T7824]  ? __fget_files+0x2a/0x420
[  144.340456][ T7824]  ? ksys_write+0x242/0x270
[  144.340489][ T7824]  ? __pfx_ksys_write+0x10/0x10
[  144.340523][ T7824]  __x64_sys_bpf+0xba/0xd0
[  144.340548][ T7824]  do_syscall_64+0x166/0x520
[  144.340572][ T7824]  ? trace_irq_disable+0x3b/0x140
[  144.340589][ T7824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.340610][ T7824]  ? clear_bhb_loop+0x70/0xc0
[  144.340639][ T7824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.340657][ T7824] RIP: 0033:0x7f44fad9e159
[  144.340676][ T7824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.340691][ T7824] RSP: 002b:00007f44f8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.340714][ T7824] RAX: ffffffffffffffda RBX: 00007f44fb025fa0 RCX: 00007f44fad9e159
[  144.340728][ T7824] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  144.340741][ T7824] RBP: 00007f44f8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  144.340754][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.340765][ T7824] R13: 00007f44fb026038 R14: 00007f44fb025fa0 R15: 00007fff814f8168
[  144.340799][ T7824]  </TASK>
[  144.341276][ T7824] syz.2.548: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  144.341332][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.2.548 Not tainted syzkaller #0 PREEMPT(full) 
[  144.341356][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  144.341365][ T7824] Call Trace:
[  144.341372][ T7824]  <TASK>
[  144.341379][ T7824]  dump_stack_lvl+0xe8/0x150
[  144.341405][ T7824]  warn_alloc+0x24d/0x270
[  144.341424][ T7824]  ? lockdep_hardirqs_on+0x7b/0x110
[  144.341447][ T7824]  ? __pfx_warn_alloc+0x10/0x10
[  144.341464][ T7824]  ? kfree+0x1c5/0x650
[  144.341493][ T7824]  ? __get_vm_area_node+0x219/0x2f0
[  144.341524][ T7824]  __vmalloc_node_range_noprof+0x36b/0x1540
[  144.341551][ T7824]  ? format_decode+0xdc/0xda0
[  144.341574][ T7824]  ? vsnprintf+0xe42/0xef0
[  144.341604][ T7824]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.341629][ T7824]  ? bpf_verifier_vlog+0x3d1/0x900
[  144.341653][ T7824]  ? bpf_prog_calc_tag+0x51/0x370
[  144.341671][ T7824]  __vmalloc_noprof+0xd2/0x120
[  144.341695][ T7824]  ? bpf_prog_calc_tag+0x51/0x370
[  144.341718][ T7824]  bpf_prog_calc_tag+0x51/0x370
[  144.341742][ T7824]  check_and_resolve_insns+0xbb/0x21d0
[  144.341765][ T7824]  ? __pfx_bpf_check_btf_info+0x10/0x10
[  144.341783][ T7824]  ? add_subprog+0x2e2/0x3f0
[  144.341805][ T7824]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  144.341835][ T7824]  bpf_check+0x180a/0x2e10
[  144.341865][ T7824]  ? ktime_get_with_offset+0x93/0x2d0
[  144.341891][ T7824]  ? __pfx_bpf_check+0x10/0x10
[  144.341913][ T7824]  ? bpf_obj_name_cpy+0x194/0x1e0
[  144.341940][ T7824]  bpf_prog_load+0x14d6/0x1c20
[  144.341980][ T7824]  ? __pfx_bpf_prog_load+0x10/0x10
[  144.342024][ T7824]  __sys_bpf+0xd0d/0xd90
[  144.342052][ T7824]  ? __pfx___sys_bpf+0x10/0x10
[  144.342082][ T7824]  ? __fget_files+0x2a/0x420
[  144.342122][ T7824]  ? ksys_write+0x242/0x270
[  144.342148][ T7824]  ? __pfx_ksys_write+0x10/0x10
[  144.342178][ T7824]  __x64_sys_bpf+0xba/0xd0
[  144.342199][ T7824]  do_syscall_64+0x166/0x520
[  144.342218][ T7824]  ? trace_irq_disable+0x3b/0x140
[  144.342235][ T7824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.342252][ T7824]  ? clear_bhb_loop+0x70/0xc0
[  144.342274][ T7824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.342290][ T7824] RIP: 0033:0x7f44fad9e159
[  144.342306][ T7824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.342319][ T7824] RSP: 002b:00007f44f8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.342336][ T7824] RAX: ffffffffffffffda RBX: 00007f44fb025fa0 RCX: 00007f44fad9e159
[  144.342348][ T7824] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  144.342359][ T7824] RBP: 00007f44f8ff6090 R08: 0000000000000000 R09: 0000000000000000
[  144.342369][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.342379][ T7824] R13: 00007f44fb026038 R14: 00007f44fb025fa0 R15: 00007fff814f8168
[  144.342408][ T7824]  </TASK>
[  144.342438][ T7824] Mem-Info:
[  144.342447][ T7824] active_anon:5871 inactive_anon:0 isolated_anon:0
[  144.342447][ T7824]  active_file:0 inactive_file:43324 isolated_file:0
[  144.342447][ T7824]  unevictable:0 dirty:147 writeback:0
[  144.342447][ T7824]  slab_reclaimable:10448 slab_unreclaimable:97115
[  144.342447][ T7824]  mapped:32751 shmem:679 pagetables:1185
[  144.342447][ T7824]  sec_pagetables:0 bounce:0
[  144.342447][ T7824]  kernel_misc_reclaimable:0
[  144.342447][ T7824]  free:1329630 free_pcp:10031 free_cma:0
[  144.342490][ T7824] Node 0 active_anon:23484kB inactive_anon:0kB active_file:0kB inactive_file:173084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131004kB dirty:588kB writeback:0kB shmem:2716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  144.342534][ T7824] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  144.342577][ T7824] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.342624][ T7824] lowmem_reserve[]: 0 2487 2487 2487 2487
[  144.342658][ T7824] Node 0 DMA32 free:1363684kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23484kB inactive_anon:0kB active_file:0kB inactive_file:173084kB unevictable:0kB writepending:588kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:40124kB local_pcp:19324kB free_cma:0kB
[  144.342707][ T7824] lowmem_reserve[]: 0 0 0 0 0
[  144.347313][ T7824] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.347359][ T7824] lowmem_reserve[]: 0 0 0 0 0
[  144.347392][ T7824] Node 1 Normal free:3939476kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.347454][ T7824] lowmem_reserve[]: 0 0 0 0 0
[  144.347485][ T7824] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  144.347590][ T7824] Node 0 DMA32: 1749*4kB (UM) 323*8kB (UME) 121*16kB (UM) 114*32kB (UME) 98*64kB (UME) 37*128kB (UME) 9*256kB (M) 4*512kB (UME) 2*1024kB (UE) 4*2048kB (UM) 323*4096kB (M) = 1363772kB
[  144.347731][ T7824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  144.347819][ T7824] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 3*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3939476kB
[  144.347965][ T7824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  144.347979][ T7824] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.347992][ T7824] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  144.348005][ T7824] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.348018][ T7824] 43999 total pagecache pages
[  144.348025][ T7824] 0 pages in swap cache
[  144.348031][ T7824] Free swap  = 124996kB
[  144.348038][ T7824] Total swap = 124996kB
[  144.348045][ T7824] 2097051 pages RAM
[  144.348051][ T7824] 0 pages HighMem/MovableOnly
[  144.348057][ T7824] 428705 pages reserved
[  144.348063][ T7824] 0 pages cma reserved
[  144.953126][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'.
[  144.953152][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'.
[  146.319096][ T7872] Bluetooth: hci0: unsupported parameter 5134
[  146.319121][ T7872] Bluetooth: hci0: unsupported parameter 8192
[  146.319134][ T7872] Bluetooth: hci0: unsupported parameter 5134
[  146.319146][ T7872] Bluetooth: hci0: unsupported parameter 8192
[  146.404999][ T7880] __nla_validate_parse: 1 callbacks suppressed
[  146.405014][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.562'.
[  146.852767][ T7903] netlink: 'syz.1.570': attribute type 10 has an invalid length.
[  147.171627][ T7921] veth1_to_bond: entered allmulticast mode
[  147.186807][ T7922] veth1_to_bond: entered promiscuous mode
[  147.187255][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.575'.
[  147.192815][ T7912] netlink: 'syz.0.573': attribute type 3 has an invalid length.
[  147.192833][ T7912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.573'.
[  147.283279][ T7921] veth1_to_bond (unregistering): left allmulticast mode
[  147.283311][ T7921] veth1_to_bond (unregistering): left promiscuous mode
[  147.327063][ T7921] bond0: (slave bond_slave_1): Releasing backup interface
[  147.327605][ T7927] xt_l2tp: invalid flags combination: 8
[  147.768963][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'.
[  147.768988][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'.
[  147.769010][ T7951] netlink: 'syz.3.584': attribute type 15 has an invalid length.
[  147.817244][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'.
[  147.817269][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'.
[  147.817291][ T7951] netlink: 'syz.3.584': attribute type 15 has an invalid length.
[  147.870893][  T147] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  147.870930][  T147] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 60387 - 0
[  147.870968][  T147] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  147.870993][  T147] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 60387 - 0
[  147.876046][  T147] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  147.876079][  T147] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 60387 - 0
[  147.876113][  T147] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  147.876137][  T147] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 60387 - 0
[  149.126329][ T7964] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  149.284817][ T7972] 8021q: VLANs not supported on tunl0
[  149.286991][ T7974] 8021q: VLANs not supported on tunl0
[  149.387706][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  149.418121][ T7978] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.418555][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  149.419104][ T7979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.593'.
[  149.459250][ T7979] bond1 (unregistering): Released all slaves
[  149.602352][ T7984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.079933][ T7915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.326566][ T7999] xt_hashlimit: size too large, truncated to 1048576
[  150.664427][ T8006] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  150.664536][    C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  150.664686][ T8006] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  150.664758][    C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available
[  151.479361][ T8036] __nla_validate_parse: 63 callbacks suppressed
[  151.479383][ T8036] netlink: 44 bytes leftover after parsing attributes in process `syz.2.610'.
[  151.942328][ T8061] FAULT_INJECTION: forcing a failure.
[  151.942328][ T8061] name failslab, interval 1, probability 0, space 0, times 0
[  151.942363][ T8061] CPU: 1 UID: 0 PID: 8061 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(full) 
[  151.942386][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  151.942397][ T8061] Call Trace:
[  151.942404][ T8061]  <TASK>
[  151.942412][ T8061]  dump_stack_lvl+0xe8/0x150
[  151.942447][ T8061]  should_fail_ex+0x410/0x560
[  151.942483][ T8061]  ? __alloc_skb+0x1db/0x7a0
[  151.942505][ T8061]  should_failslab+0xa8/0x100
[  151.942532][ T8061]  ? __alloc_skb+0x1db/0x7a0
[  151.942552][ T8061]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  151.942580][ T8061]  ? __alloc_skb+0x18d/0x7a0
[  151.942603][ T8061]  ? __alloc_skb+0x1db/0x7a0
[  151.942633][ T8061]  __alloc_skb+0x1db/0x7a0
[  151.942661][ T8061]  netlink_sendmsg+0x5d4/0xb40
[  151.942695][ T8061]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.942724][ T8061]  ? apparmor_socket_sendmsg+0x98/0x360
[  151.942748][ T8061]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.942766][ T8061]  sock_sendmsg_nosec+0x13a/0x180
[  151.942791][ T8061]  sock_write_iter+0x2de/0x3e0
[  151.942823][ T8061]  ? __pfx_sock_write_iter+0x10/0x10
[  151.942874][ T8061]  do_iter_readv_writev+0x612/0x8c0
[  151.942897][ T8061]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  151.942923][ T8061]  ? bpf_lsm_file_permission+0x9/0x20
[  151.942948][ T8061]  ? security_file_permission+0x75/0x260
[  151.942970][ T8061]  ? rw_verify_area+0x203/0x4c0
[  151.943002][ T8061]  vfs_writev+0x343/0x990
[  151.943035][ T8061]  ? __pfx_vfs_writev+0x10/0x10
[  151.943073][ T8061]  ? __fget_files+0x2a/0x420
[  151.943104][ T8061]  ? __fget_files+0x3a2/0x420
[  151.943129][ T8061]  ? __fget_files+0x2a/0x420
[  151.943164][ T8061]  do_writev+0x154/0x2e0
[  151.943189][ T8061]  ? __pfx_do_writev+0x10/0x10
[  151.943224][ T8061]  do_syscall_64+0x166/0x520
[  151.943248][ T8061]  ? trace_irq_disable+0x3b/0x140
[  151.943267][ T8061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.943287][ T8061]  ? clear_bhb_loop+0x70/0xc0
[  151.943312][ T8061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.943331][ T8061] RIP: 0033:0x7f44fad9e159
[  151.943350][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.943366][ T8061] RSP: 002b:00007f44f8fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  151.943389][ T8061] RAX: ffffffffffffffda RBX: 00007f44fb026090 RCX: 00007f44fad9e159
[  151.943403][ T8061] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000006
[  151.943416][ T8061] RBP: 00007f44f8fd5090 R08: 0000000000000000 R09: 0000000000000000
[  151.943429][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.943440][ T8061] R13: 00007f44fb026128 R14: 00007f44fb026090 R15: 00007fff814f8168
[  151.943481][ T8061]  </TASK>
[  152.371651][ T8079] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  152.399570][ T8078] trusted_key: syz.1.623 sent an empty control message without MSG_MORE.
[  152.459739][   T30] audit: type=1800 audit(1790164562.608:3): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.624" name="blkio.bfq.time_recursive" dev="tmpfs" ino=683 res=0 errno=0
[  152.889002][ T8099] netlink: 56 bytes leftover after parsing attributes in process `syz.3.630'.
[  152.916500][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.630'.
[  153.079056][ T8115] openvswitch: netlink: EtherType 2 is less than min 600
[  153.226650][ T8124] netlink: zone id is out of range
[  153.226667][ T8124] netlink: zone id is out of range
[  153.226675][ T8124] netlink: zone id is out of range
[  153.226683][ T8124] netlink: zone id is out of range
[  153.281751][ T8118] 0ªî{X¹¦: left allmulticast mode
[  153.360279][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.362293][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.765393][ T8132] Unknown options in mask 6
[  153.765752][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.638'.
[  153.765780][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.638'.
[  153.831969][ T8118] ip6tnl1: left allmulticast mode
[  153.842358][ T6141] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.842399][ T6141] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.842429][ T6141] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.842457][ T6141] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.046922][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  154.085849][ T8143] bond1: entered allmulticast mode
[  154.092687][ T8149] netlink: 80 bytes leftover after parsing attributes in process `syz.2.641'.
[  154.103087][ T8153] netlink: 80 bytes leftover after parsing attributes in process `syz.2.641'.
[  154.167976][ T8155] tc_dump_action: action bad kind
[  154.337900][ T8161] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  154.353271][ T8166] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[  154.353309][ T8166] netlink: 244 bytes leftover after parsing attributes in process `syz.0.645'.
[  154.525035][ T8171] netlink: 'syz.0.646': attribute type 4 has an invalid length.
[  154.527936][ T8173] netlink: 'syz.0.646': attribute type 4 has an invalid length.
[  154.571990][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'.
[  154.895797][ T8187] net_ratelimit: 499 callbacks suppressed
[  154.895819][ T8187] netlink: zone id is out of range
[  154.895828][ T8187] netlink: zone id is out of range
[  154.895834][ T8187] netlink: zone id is out of range
[  154.895841][ T8187] netlink: zone id is out of range
[  154.895848][ T8187] netlink: zone id is out of range
[  154.895855][ T8187] netlink: zone id is out of range
[  154.895865][ T8187] netlink: zone id is out of range
[  154.895871][ T8187] netlink: zone id is out of range
[  154.895878][ T8187] netlink: zone id is out of range
[  154.895885][ T8187] netlink: zone id is out of range
[  155.040174][ T8194] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  155.582925][ T8216] netlink: 'syz.2.660': attribute type 29 has an invalid length.
[  156.365917][ T8236] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.763540][ T8246] netlink: 'syz.0.666': attribute type 8 has an invalid length.
[  156.763565][ T8246] __nla_validate_parse: 2 callbacks suppressed
[  156.763577][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'.
[  157.139603][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  157.287900][ T8270] FAULT_INJECTION: forcing a failure.
[  157.287900][ T8270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.287936][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.1.673 Not tainted syzkaller #0 PREEMPT(full) 
[  157.287959][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  157.287971][ T8270] Call Trace:
[  157.287987][ T8270]  <TASK>
[  157.287996][ T8270]  dump_stack_lvl+0xe8/0x150
[  157.288033][ T8270]  should_fail_ex+0x410/0x560
[  157.288063][ T8270]  _copy_from_user+0x2d/0xb0
[  157.288090][ T8270]  kstrtouint_from_user+0xd6/0x180
[  157.288116][ T8270]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  157.288149][ T8270]  ? lock_acquire+0x115/0x350
[  157.288176][ T8270]  proc_fail_nth_write+0x8e/0x210
[  157.288198][ T8270]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  157.288228][ T8270]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  157.288248][ T8270]  vfs_write+0x296/0xba0
[  157.288289][ T8270]  ? __pfx_vfs_write+0x10/0x10
[  157.288320][ T8270]  ? __fget_files+0x2a/0x420
[  157.288357][ T8270]  ? __fget_files+0x3a2/0x420
[  157.288381][ T8270]  ? __fget_files+0x2a/0x420
[  157.288419][ T8270]  ksys_write+0x150/0x270
[  157.288451][ T8270]  ? __pfx_ksys_write+0x10/0x10
[  157.288494][ T8270]  do_syscall_64+0x166/0x520
[  157.288518][ T8270]  ? trace_irq_disable+0x3b/0x140
[  157.288538][ T8270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.288559][ T8270]  ? clear_bhb_loop+0x70/0xc0
[  157.288585][ T8270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.288605][ T8270] RIP: 0033:0x7f185c95e98e
[  157.288625][ T8270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  157.288642][ T8270] RSP: 002b:00007f185d88dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  157.288665][ T8270] RAX: ffffffffffffffda RBX: 00007f185d88e6c0 RCX: 00007f185c95e98e
[  157.288679][ T8270] RDX: 0000000000000001 RSI: 00007f185d88e0a0 RDI: 0000000000000003
[  157.288692][ T8270] RBP: 00007f185d88e090 R08: 0000000000000000 R09: 0000000000000000
[  157.288704][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  157.288716][ T8270] R13: 00007f185cc26038 R14: 00007f185cc25fa0 R15: 00007ffedb7947c8
[  157.288751][ T8270]  </TASK>
[  158.404362][ T8289] netlink: 'syz.3.681': attribute type 8 has an invalid length.
[  158.563585][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'.
[  158.646413][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'.
[  158.721606][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'.
[  158.924851][ T8307] bond2: Invalid ad_actor_system MAC address.
[  158.924875][ T8307] bond2: option ad_actor_system: invalid value (7)
[  158.933012][ T8307] bond2 (unregistering): Released all slaves
[  159.077946][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.685'.
[  159.264888][ T8307] bond2: option ad_select: invalid value (255)
[  159.303820][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'.
[  159.341630][ T8307] bond2 (unregistering): Released all slaves
[  159.907046][ T8351] x_tables: duplicate entry at hook 3
[  160.399794][ T8373] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[  160.399826][ T8373] syz_tun: entered promiscuous mode
[  160.407508][ T8373] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  162.292388][ T8327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  162.293075][ T8352] netlink: 'syz.2.694': attribute type 1 has an invalid length.
[  162.699616][ T8399] gre1: entered promiscuous mode
[  163.512687][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'.
[  165.016610][ T8476] netlink: 156 bytes leftover after parsing attributes in process `syz.0.729'.
[  165.045398][ T8476] netlink: 108 bytes leftover after parsing attributes in process `syz.0.729'.
[  165.143051][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'.
[  165.255412][ T8474] veth5: entered allmulticast mode
[  165.275348][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'.
[  165.717957][ T8507] netlink: 'syz.3.739': attribute type 49 has an invalid length.
[  165.777383][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'.
[  166.474849][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.745'.
[  166.567152][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.747'.
[  166.626488][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'.
[  166.799966][ T8542] netlink: 6076 bytes leftover after parsing attributes in process `syz.2.752'.
[  168.094249][ T8578] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  168.923072][ T8601] __nla_validate_parse: 1 callbacks suppressed
[  168.923094][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'.
[  169.443752][ T8645] netlink: 72 bytes leftover after parsing attributes in process `syz.3.775'.
[  169.538337][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'.
[  169.565433][ T8649] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.585376][ T8649] netlink: 'syz.1.778': attribute type 83 has an invalid length.
[  169.586354][ T8649] netlink: 292 bytes leftover after parsing attributes in process `syz.1.778'.
[  169.698065][ T8649] vti0: entered promiscuous mode
[  169.698091][ T8649] vti0: entered allmulticast mode
[  169.699055][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.779'.
[  171.225826][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  171.839841][ T8726] netlink: 72 bytes leftover after parsing attributes in process `syz.0.796'.
[  172.268590][ T8736] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  172.282138][ T8736] bond3 (unregistering): Released all slaves
[  172.483961][ T8734] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  172.523377][ T8734] bond3 (unregistering): Released all slaves
[  172.726964][ T8735] bridge1: entered promiscuous mode
[  173.011834][ T8748] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.802'.
[  173.186872][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.804'.
[  173.601796][ T8777] netlink: 'syz.0.808': attribute type 3 has an invalid length.
[  175.246547][ T8795] net_ratelimit: 17 callbacks suppressed
[  175.246568][ T8795] IPVS: rr: UDP [::1]:8080 - no destination available
[  175.281784][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'.
[  175.587827][ T8806] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  176.463139][ T8826] tipc: Started in network mode
[  176.463174][ T8826] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  176.463682][ T8826] tipc: Enabled bearer <eth:macvtap0>, priority 7
[  176.905470][ T8834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.826'.
[  177.538993][    T9] tipc: Node number set to 9480874
[  179.038625][ T8826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.666637][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'.
[  179.699613][ T8872] Bluetooth: hci0: unsupported parameter 5135
[  179.699637][ T8872] Bluetooth: hci0: unsupported parameter 8192
[  179.699650][ T8872] Bluetooth: hci0: unsupported parameter 5135
[  179.699662][ T8872] Bluetooth: hci0: unsupported parameter 8192
[  179.797775][ T8866] vlan3: entered promiscuous mode
[  179.797799][ T8866] bond0: entered promiscuous mode
[  179.797812][ T8866] bond_slave_0: entered promiscuous mode
[  179.798031][ T8866] bond_slave_1: entered promiscuous mode
[  179.963552][ T8879] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  180.188016][ T8890] netlink: 72 bytes leftover after parsing attributes in process `syz.2.841'.
[  180.235676][ T8891] netlink: 'syz.0.842': attribute type 29 has an invalid length.
[  180.235701][ T8891] netlink: 'syz.0.842': attribute type 31 has an invalid length.
[  180.580136][ T8896] netlink: 128 bytes leftover after parsing attributes in process `syz.3.845'.
[  180.580167][ T8896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.635789][ T8896] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  180.637769][ T8896] xt_hashlimit: size too large, truncated to 1048576
[  180.858266][ T8908] x_tables: ip_tables: tcpmss match: only valid for protocol 6
[  182.150316][ T8944] tipc: Invalid UDP bearer configuration
[  182.150368][ T8944] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  182.296639][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'.
[  182.319724][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'.
[  182.838671][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.857'.
[  182.860083][ T8974] IPv6: Can't replace route, no match found
[  183.100836][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'.
[  183.274841][ T8983] 8021q: VLANs not supported on ip_vti0
[  183.518482][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'.
[  183.546317][ T8993] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  183.546363][ T8993] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  184.002364][ T8999] netlink: 76 bytes leftover after parsing attributes in process `syz.3.864'.
[  184.002394][ T8999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  184.503484][ T9004] ip6tnl1: entered allmulticast mode
[  184.518904][   T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  184.519181][   T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  184.538228][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'.
[  184.540994][ T5761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  184.573697][ T9004] vlan2: entered allmulticast mode
[  184.920073][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'.
[  184.920107][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'.
[  185.001274][ T5761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  185.072381][ T9019] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  185.146580][ T9023] netlink: 'syz.2.873': attribute type 7 has an invalid length.
[  185.311588][ T5761] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  186.390425][ T9055] __nla_validate_parse: 3 callbacks suppressed
[  186.390513][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'.
[  186.815476][ T9062] syz_tun: entered allmulticast mode
[  186.878193][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.884'.
[  187.004140][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'.
[  187.054722][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'.
[  187.427294][ T9074] team0: Device wg1 is of different type
[  187.451172][ T9074] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  187.554548][ T9078] netlink: 'syz.0.887': attribute type 1 has an invalid length.
[  187.771838][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  188.013241][ T9079] bond3: option arp_validate: invalid value (1048579)
[  188.016388][ T9079] bond3 (unregistering): Released all slaves
[  188.094867][ T9074] bond3: option arp_validate: invalid value (1048579)
[  188.110197][ T9074] bond3 (unregistering): Released all slaves
[  188.190858][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  188.226803][ T9084] bridge3: entered promiscuous mode
[  188.306222][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'.
[  189.047401][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  189.088993][ T9111] netlink: 564 bytes leftover after parsing attributes in process `syz.2.895'.
[  189.250129][ T9127] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  189.314964][ T9133] bridge0: port 3(vlan3) entered blocking state
[  189.315524][ T9133] bridge0: port 3(vlan3) entered disabled state
[  189.315891][ T9133] vlan3: entered allmulticast mode
[  189.315907][ T9133] geneve0: entered allmulticast mode
[  189.319057][ T9133] vlan3: entered promiscuous mode
[  189.319075][ T9133] geneve0: entered promiscuous mode
[  189.375729][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'.
[  189.395313][ T9118] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  190.684279][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.911'.
[  192.067593][ T9208] __nla_validate_parse: 2 callbacks suppressed
[  192.067616][ T9208] netlink: 148 bytes leftover after parsing attributes in process `syz.3.920'.
[  192.067631][ T9208] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  192.427297][ T9234] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:21
[  192.611781][ T9236] openvswitch: netlink: IP tunnel dst address not specified
[  192.611819][ T9236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.619126][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'.
[  193.620446][ T9284] erspan0: left allmulticast mode
[  193.620505][ T9284] erspan0: left promiscuous mode
[  193.650300][ T9284] bridge0: port 3(erspan0) entered disabled state
[  193.707321][ T9284] bridge_slave_1: left allmulticast mode
[  193.707812][ T9284] bridge_slave_1: left promiscuous mode
[  193.708914][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.748226][ T9284] bridge_slave_0: left allmulticast mode
[  193.754331][ T9284] bridge_slave_0: left promiscuous mode
[  193.755288][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.777573][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'.
[  194.047261][ T9295] ipip0: entered promiscuous mode
[  194.223341][ T9303] vlan2: entered promiscuous mode
[  194.223366][ T9303] macvlan0: entered promiscuous mode
[  194.357565][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'.
[  194.407214][ T9307] netlink: 96 bytes leftover after parsing attributes in process `syz.1.935'.
[  194.519251][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  194.523613][ T9307] vlan4: entered allmulticast mode
[  194.523633][ T9307] gretap0: entered allmulticast mode
[  194.643442][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'.
[  194.731903][ T9316] ip6erspan0: entered allmulticast mode
[  194.824637][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'.
[  195.075028][ T9336] Bluetooth: MGMT ver 1.23
[  195.290054][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'.
[  195.790897][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  195.945237][ T9350] netlink: 'syz.3.948': attribute type 1 has an invalid length.
[  196.112756][ T9364] netlink: 'syz.2.951': attribute type 19 has an invalid length.
[  196.597066][ T9378] ip_tables: iptables: counters copy to user failed while replacing table
[  196.607194][ T9385] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  196.607230][ T9385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.642814][ T9384] raw_sendmsg: syz.0.958 forgot to set AF_INET. Fix it!
[  197.113096][ T9401] IPVS: Error connecting to the multicast addr
[  197.115136][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'.
[  197.115169][ T9401] netlink: 'syz.0.962': attribute type 30 has an invalid length.
[  197.172312][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'.
[  197.172366][ T9408] netlink: 'syz.0.962': attribute type 30 has an invalid length.
[  197.206604][ T9401] vxlan0: entered promiscuous mode
[  197.206630][ T9401] vxlan0: entered allmulticast mode
[  197.241306][ T9256] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  197.241361][ T9256] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  197.241398][ T9256] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  197.241434][ T9256] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  197.302293][ T9408] vxlan1: entered promiscuous mode
[  197.302317][ T9408] vxlan1: entered allmulticast mode
[  197.551380][ T9405] xt_CT: No such helper "snmp"
[  198.057026][ T9428] x_tables: duplicate underflow at hook 2
[  198.082511][ T9432] netlink: 64 bytes leftover after parsing attributes in process `syz.4.969'.
[  198.588649][ T9451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  199.816522][ T9499] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.986'.
[  200.089734][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  200.513443][ T9525] tipc: Started in network mode
[  200.513476][ T9525] tipc: Node identity 080211000001, cluster identity 4711
[  200.513684][ T9525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.613518][ T9535] netlink: 'syz.3.997': attribute type 1 has an invalid length.
[  200.613942][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'.
[  200.615846][ T9535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.997'.
[  200.817618][ T9532] netlink: 'syz.1.996': attribute type 25 has an invalid length.
[  200.849346][ T9532] netlink: 'syz.1.996': attribute type 1 has an invalid length.
[  200.849374][ T9532] netlink: 244 bytes leftover after parsing attributes in process `syz.1.996'.
[  201.062200][ T9550] netlink: 'syz.3.1001': attribute type 4 has an invalid length.
[  201.631806][ T9225] tipc: Node number set to 134418688
[  201.713357][ T5617] Bluetooth: hci2: command 0x0401 tx timeout
[  201.713400][ T5617] Bluetooth: hci1: command 0x0406 tx timeout
[  201.713425][ T5617] Bluetooth: hci3: command 0x0406 tx timeout
[  201.783970][ T9568] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1006'.
[  201.784158][ T9568] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1006'.
[  201.784187][ T9568] netlink: 'syz.4.1006': attribute type 1 has an invalid length.
[  202.210806][ T9582] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  202.367810][ T9589] bridge0: port 4(macsec1) entered blocking state
[  202.367988][ T9589] bridge0: port 4(macsec1) entered disabled state
[  202.368128][ T9589] macsec1: entered allmulticast mode
[  202.368144][ T9589] bridge0: entered allmulticast mode
[  202.368182][ T9589] bridge0: entered promiscuous mode
[  202.509163][ T9594] netlink: 'syz.0.1013': attribute type 4 has an invalid length.
[  202.509208][ T9594] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1013'.
[  202.812750][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'.
[  202.846173][ T9589] macsec1: left allmulticast mode
[  202.846205][ T9589] bridge0: left allmulticast mode
[  202.940520][ T9225] bridge0: left promiscuous mode
[  202.964003][ T9594] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  203.594761][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'.
[  203.749781][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  203.749807][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  204.238151][ T9637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1025'.
[  204.484432][ T9645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.355782][ T9674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1031'.
[  206.071515][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'.
[  206.190482][ T9703] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1039'.
[  206.218840][ T9699] ip_tables: iptables: counters copy to user failed while replacing table
[  206.359287][ T9710] ip_tables: iptables: counters copy to user failed while replacing table
[  206.707282][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'.
[  206.945275][ T9717] veth1_to_bond: entered allmulticast mode
[  206.945361][ T9725] veth1_to_bond: entered promiscuous mode
[  206.972940][ T9715] veth1_to_bond: left promiscuous mode
[  206.992933][ T9715] veth1_to_bond: left allmulticast mode
[  207.719341][ T9747] ip_tables: iptables: counters copy to user failed while replacing table
[  207.889849][ T9754] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20004
[  207.909810][ T9743] netlink: 'syz.1.1050': attribute type 3 has an invalid length.
[  208.137560][ T9743] netlink: Failed to add %pK     helper -22
[  208.137625][ T9743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.270209][ T9745] netlink: 'syz.1.1050': attribute type 1 has an invalid length.
[  208.438694][ T9764] __nla_validate_parse: 1 callbacks suppressed
[  208.438718][ T9764] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1054'.
[  208.645746][ T9770] netlink: 'syz.3.1055': attribute type 1 has an invalid length.
[  208.645771][ T9770] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1055'.
[  208.645788][ T9770] netlink: 'syz.3.1055': attribute type 1 has an invalid length.
[  208.645801][ T9770] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1055'.
[  208.852238][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'.
[  208.925728][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'.
[  209.055802][ T9774] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.080340][ T9774] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.867896][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'.
[  209.943239][ T9814] netlink: NAT attribute type 5 has unexpected length (0 != 2)
[  209.943278][ T9814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.696286][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1071'.
[  210.720943][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'.
[  210.873177][ T9830] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1070'.
[  211.348000][ T9849] x_tables: duplicate underflow at hook 1
[  211.486772][ T9853] netlink: 'syz.4.1076': attribute type 9 has an invalid length.
[  211.489909][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'.
[  211.661134][ T9853] ip6tnl2: entered allmulticast mode
[  211.790895][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.007838][ T9863] sctp: [Deprecated]: syz.1.1080 (pid 9863) Use of int in max_burst socket option deprecated.
[  212.007838][ T9863] Use struct sctp_assoc_value instead
[  213.178842][ T9901] bridge0: entered allmulticast mode
[  213.219454][ T9896] can: request_module (can-proto-3) failed.
[  213.524562][ T4934] Bluetooth: hci4: link tx timeout
[  213.524741][ T4934] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  213.526009][ T4934] Bluetooth: hci4: link tx timeout
[  213.526027][ T4934] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  213.551044][ T9907] gretap0: entered allmulticast mode
[  213.953539][ T9921] __nla_validate_parse: 5 callbacks suppressed
[  213.953561][ T9921] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1101'.
[  214.554544][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.554568][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.554593][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.615255][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.615278][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.615302][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.617164][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.617182][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.617202][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.620244][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.620262][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.620282][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.643529][ T9943] netlink: 'syz.4.1105': attribute type 1 has an invalid length.
[  214.643550][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  214.643553][ T9943] netlink: 'syz.4.1105': attribute type 4 has an invalid length.
[  214.643582][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.644187][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.711532][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  214.718347][ T9942] netlink: 'syz.3.1104': attribute type 14 has an invalid length.
[  215.093132][ T9953] : entered promiscuous mode
[  215.553799][ T5634] Bluetooth: hci4: command 0x0406 tx timeout
[  217.523468][T10012] smbdirect: ib_dev[syz1] removed
[  217.630743][ T5634] Bluetooth: hci4: command 0x0406 tx timeout
[  217.958092][T10027] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  218.324509][T10040] syzkaller0: entered promiscuous mode
[  218.324549][T10040] syzkaller0: entered allmulticast mode
[  218.777401][T10056] Bluetooth: hci0: unsupported parameter 5135
[  218.777428][T10056] Bluetooth: hci0: unsupported parameter 8192
[  218.777441][T10056] Bluetooth: hci0: unsupported parameter 5135
[  218.777453][T10056] Bluetooth: hci0: unsupported parameter 8192
[  218.983587][T10063] pim6reg: entered allmulticast mode
[  219.165832][T10063] pim6reg: left allmulticast mode
[  219.355760][T10075] syzkaller0: left promiscuous mode
[  219.355785][T10075] syzkaller0: left allmulticast mode
[  219.667702][T10090] __nla_validate_parse: 125 callbacks suppressed
[  219.667727][T10090] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1150'.
[  219.933629][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'.
[  220.061491][T10099] tap0: tun_chr_ioctl cmd 2147767520
[  220.465970][T10112] validate_nla: 59 callbacks suppressed
[  220.465995][T10112] netlink: 'syz.1.1156': attribute type 4 has an invalid length.
[  220.529133][T10112] netlink: 'syz.1.1156': attribute type 4 has an invalid length.
[  220.915607][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'.
[  221.134346][T10130] bond3: entered allmulticast mode
[  221.192598][T10141] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  221.197113][T10141] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  241.870825][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  244.374331][T10167] netlink: 'syz.0.1174': attribute type 10 has an invalid length.
[  245.163031][T10202] netlink: 'syz.3.1184': attribute type 1 has an invalid length.
[  245.163055][T10202] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1184'.
[  245.935383][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'.
[  246.290957][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  246.290984][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'.
[  246.295938][T10234] netlink: 'syz.2.1191': attribute type 19 has an invalid length.
[  246.295961][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'.
[  246.424346][T10234] netlink: 'syz.2.1191': attribute type 19 has an invalid length.
[  246.424372][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'.
[  246.497643][T10227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1189'.
[  246.787680][ T9256] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.787729][ T9256] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.787762][ T9256] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.787793][ T9256] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.121826][T10250] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004
[  247.781243][T10266] netlink: 'syz.1.1199': attribute type 2 has an invalid length.
[  247.862075][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862102][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862116][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862129][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862142][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862155][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862168][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862181][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862194][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862208][T10260] tc action pedit unable to extract header offset for header type (0x5)
[  247.862234][T10260] 0: reclassify loop, rule prio 0, protocol 800
[  247.964619][T10266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'.
[  247.965586][T10266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'.
[  247.966527][T10266] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'.
[  249.829528][T10316] netlink: 'syz.2.1212': attribute type 3 has an invalid length.
[  250.079530][T10327] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  250.103242][T10324] FAULT_INJECTION: forcing a failure.
[  250.103242][T10324] name failslab, interval 1, probability 0, space 0, times 0
[  250.103277][T10324] CPU: 0 UID: 0 PID: 10324 Comm: syz.4.1214 Not tainted syzkaller #0 PREEMPT(full) 
[  250.103300][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  250.103313][T10324] Call Trace:
[  250.103321][T10324]  <TASK>
[  250.103331][T10324]  dump_stack_lvl+0xe8/0x150
[  250.103366][T10324]  should_fail_ex+0x410/0x560
[  250.103395][T10324]  should_failslab+0xa8/0x100
[  250.103421][T10324]  __kmalloc_noprof+0xfe/0x720
[  250.103441][T10324]  ? __kmalloc_cache_noprof+0x14d/0x600
[  250.103459][T10324]  ? ipv6_flowlabel_opt+0x104d/0x2b10
[  250.103483][T10324]  ? ipv6_flowlabel_opt+0x104d/0x2b10
[  250.103515][T10324]  ipv6_flowlabel_opt+0x104d/0x2b10
[  250.103553][T10324]  ? __pfx_ipv6_flowlabel_opt+0x10/0x10
[  250.103603][T10324]  ? do_raw_spin_lock+0x12b/0x2f0
[  250.103631][T10324]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  250.103659][T10324]  ? do_ipv6_setsockopt+0x956/0x2960
[  250.103687][T10324]  ? __local_bh_enable_ip+0xd6/0x140
[  250.103727][T10324]  do_ipv6_setsockopt+0x9cb/0x2960
[  250.103761][T10324]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  250.103786][T10324]  ? aa_inet_opt_perm+0xae4/0xcf0
[  250.103810][T10324]  ? get_pid_task+0x20/0x1f0
[  250.103839][T10324]  ? __pfx_aa_inet_opt_perm+0x10/0x10
[  250.103883][T10324]  ? ksys_write+0x1e6/0x270
[  250.103924][T10324]  ? lock_acquire+0x115/0x350
[  250.103956][T10324]  ? aa_sock_opt_perm+0xe1/0x1e0
[  250.103986][T10324]  ipv6_setsockopt+0x59/0x170
[  250.104011][T10324]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  250.104035][T10324]  do_sock_setsockopt+0x17c/0x1b0
[  250.104066][T10324]  __x64_sys_setsockopt+0x13d/0x1b0
[  250.104098][T10324]  do_syscall_64+0x166/0x520
[  250.104122][T10324]  ? trace_irq_disable+0x3b/0x140
[  250.104142][T10324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.104163][T10324]  ? clear_bhb_loop+0x70/0xc0
[  250.104188][T10324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.104208][T10324] RIP: 0033:0x7f95ef39e159
[  250.104227][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.104244][T10324] RSP: 002b:00007f95f01b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  250.104266][T10324] RAX: ffffffffffffffda RBX: 00007f95ef625fa0 RCX: 00007f95ef39e159
[  250.104281][T10324] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  250.104293][T10324] RBP: 00007f95f01b9090 R08: 0000000000000023 R09: 0000000000000000
[  250.104306][T10324] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  250.104318][T10324] R13: 00007f95ef626038 R14: 00007f95ef625fa0 R15: 00007ffc474a2408
[  250.104352][T10324]  </TASK>
[  250.454692][T10334] xt_limit: Overflow, try lower: 6/2147483648
[  250.458329][T10334] xt_limit: Overflow, try lower: 6/2147483648
[  251.256801][T10350] syz_tun: entered allmulticast mode
[  251.630403][T10361] netlink: 'syz.0.1224': attribute type 5 has an invalid length.
[  251.649592][T10358] SET target dimension over the limit!
[  251.862022][T10362] openvswitch: netlink: IPv6 tunnel dst address is zero
[  251.938162][T10370] __nla_validate_parse: 15 callbacks suppressed
[  251.938186][T10370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'.
[  252.103036][T10354] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1221'.
[  252.194510][T10373] netlink: 'syz.4.1228': attribute type 10 has an invalid length.
[  252.194539][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1228'.
[  252.195345][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1228'.
[  252.539423][T10368] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1226'.
[  253.902985][T10409] openvswitch: netlink: IPv6 tunnel dst address is zero
[  254.271348][T10419] block nbd4: NBD_DISCONNECT
[  254.483134][T10425] openvswitch: netlink: IPv4 tun info is not correct
[  255.008480][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'.
[  255.306708][T10420] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1241'.
[  255.887532][T10451] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1252'.
[  255.887619][T10451] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1252'.
[  255.957062][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  255.963328][T10452] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1252'.
[  256.292190][T10455] openvswitch: netlink: IPv6 tunnel dst address is zero
[  258.234713][T10531] openvswitch: netlink: IPv6 tunnel dst address is zero
[  259.171615][T10550] ------------[ cut here ]------------
[  259.171632][T10550] len > ((int)(~0U >> 1))
[  259.171642][T10550] WARNING: ./include/linux/skbuff.h:2864 at ip6gre_tunnel_xmit+0xc98/0xf70, CPU#1: syz.1.1268/10550
[  259.193627][T10550] Modules linked in:
[  259.197566][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.1.1268 Not tainted syzkaller #0 PREEMPT(full) 
[  259.207019][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.217155][T10550] RIP: 0010:ip6gre_tunnel_xmit+0xc98/0xf70
[  259.223056][T10550] Code: 8c 24 b0 01 00 00 4c 89 ef be 02 00 00 00 31 d2 e8 fd 66 01 00 e9 4d fe ff ff e8 43 d5 1b f7 e9 43 fe ff ff e8 39 d5 1b f7 90 <0f> 0b 90 e9 35 f5 ff ff 44 89 e7 44 89 fe e8 35 d7 1b f7 45 39 fc
[  259.242754][T10550] RSP: 0018:ffffc90004e3f020 EFLAGS: 00010283
[  259.248878][T10550] RAX: ffffffff8aabfd47 RBX: 1ffff920009c7e14 RCX: 0000000000080000
[  259.256957][T10550] RDX: ffffc90003fc1000 RSI: 0000000000000bad RDI: 0000000000000bae
[  259.265010][T10550] RBP: ffffc90004e3f2d0 R08: ffff8880518f0000 R09: 0000000000000002
[  259.273073][T10550] R10: 0000000000004888 R11: ffffffff8aabf0b0 R12: 00000000ffffff40
[  259.281140][T10550] R13: ffff8880207e3dc0 R14: ffff8880207e3e98 R15: 0000000000000000
[  259.289150][T10550] FS:  00007f185d88e6c0(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000
[  259.298194][T10550] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.304859][T10550] CR2: 000000110c2a62a1 CR3: 000000002b412000 CR4: 00000000003526f0
[  259.312935][T10550] Call Trace:
[  259.316247][T10550]  <TASK>
[  259.319208][T10550]  ? __alloc_skb+0x27a/0x7a0
[  259.323876][T10550]  ? trace_kmem_cache_alloc+0x29/0xe0
[  259.329296][T10550]  ? __pfx_ip6gre_tunnel_xmit+0x10/0x10
[  259.334958][T10550]  ? skb_network_protocol+0x234/0x400
[  259.340372][T10550]  ? netif_skb_features+0xb7a/0x1410
[  259.345761][T10550]  ? netif_skb_features+0xc83/0x1410
[  259.351151][T10550]  ? __alloc_skb+0x4d0/0x7a0
[  259.355790][T10550]  ? __pfx_netif_skb_features+0x10/0x10
[  259.361462][T10550]  ? validate_xmit_skb+0xcac/0x14d0
[  259.366701][T10550]  ? validate_xmit_xfrm+0x5d/0x1120
[  259.372000][T10550]  ? __dev_direct_xmit+0x33c/0x730
[  259.377162][T10550]  __dev_direct_xmit+0x4b6/0x730
[  259.382207][T10550]  ? __pfx___dev_direct_xmit+0x10/0x10
[  259.387707][T10550]  ? do_raw_spin_unlock+0xf5/0x200
[  259.392924][T10550]  ? skb_put+0x112/0x210
[  259.397206][T10550]  xsk_generic_xmit+0x272b/0x4730
[  259.402326][T10550]  ? __lock_acquire+0x747/0x2de0
[  259.407324][T10550]  ? xsk_generic_xmit+0x107/0x4730
[  259.412534][T10550]  ? __pfx_xsk_generic_xmit+0x10/0x10
[  259.417944][T10550]  ? xsk_poll+0xa6/0x670
[  259.422289][T10550]  ? xsk_poll+0xa6/0x670
[  259.426567][T10550]  xsk_poll+0x326/0x670
[  259.430821][T10550]  ? xsk_poll+0xa6/0x670
[  259.435110][T10550]  sock_poll+0x338/0x3f0
[  259.439397][T10550]  ? __pfx_sock_poll+0x10/0x10
[  259.444259][T10550]  do_select+0x1067/0x17f0
[  259.448725][T10550]  ? do_select+0xc61/0x17f0
[  259.453358][T10550]  ? __pfx_do_select+0x10/0x10
[  259.458163][T10550]  ? trace_sched_exit_tp+0x3a/0x130
[  259.463452][T10550]  ? __lock_acquire+0x747/0x2de0
[  259.468442][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.473227][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.477941][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.482712][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.487464][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.492249][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.496960][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.501720][T10550]  ? __pfx_pollwake+0x10/0x10
[  259.506464][T10550]  core_sys_select+0x86d/0xb40
[  259.511325][T10550]  ? __pfx_core_sys_select+0x10/0x10
[  259.516665][T10550]  ? __pfx_set_user_sigmask+0x10/0x10
[  259.522120][T10550]  ? vm_mmap_pgoff+0x35a/0x4e0
[  259.526919][T10550]  ? lock_acquire+0x115/0x350
[  259.531707][T10550]  __se_sys_pselect6+0x267/0x320
[  259.536694][T10550]  ? __pfx___se_sys_pselect6+0x10/0x10
[  259.542254][T10550]  ? __x64_sys_pselect6+0x21/0xf0
[  259.547315][T10550]  do_syscall_64+0x166/0x520
[  259.551997][T10550]  ? trace_irq_disable+0x3b/0x140
[  259.557055][T10550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.563207][T10550]  ? clear_bhb_loop+0x70/0xc0
[  259.567927][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.573907][T10550] RIP: 0033:0x7f185c99e159
[  259.578353][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.598062][T10550] RSP: 002b:00007f185d88e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  259.606562][T10550] RAX: ffffffffffffffda RBX: 00007f185cc25fa0 RCX: 00007f185c99e159
[  259.614632][T10550] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  259.622673][T10550] RBP: 00007f185ca3506b R08: 0000000000000000 R09: 0000000000000000
[  259.630720][T10550] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  259.638724][T10550] R13: 00007f185cc26038 R14: 00007f185cc25fa0 R15: 00007ffedb7947c8
[  259.646808][T10550]  </TASK>
[  259.649853][T10550] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  259.657151][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.1.1268 Not tainted syzkaller #0 PREEMPT(full) 
[  259.666547][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  259.676639][T10550] Call Trace:
[  259.679953][T10550]  <TASK>
[  259.682907][T10550]  vpanic+0x56d/0xa60
[  259.686930][T10550]  ? __pfx__printk+0x10/0x10
[  259.691559][T10550]  ? __pfx_vpanic+0x10/0x10
[  259.696111][T10550]  ? is_bpf_text_address+0x292/0x2b0
[  259.701434][T10550]  ? is_bpf_text_address+0x26/0x2b0
[  259.706675][T10550]  panic+0xc5/0xd0
[  259.710444][T10550]  ? __pfx_panic+0x10/0x10
[  259.714907][T10550]  __warn+0x315/0x4c0
[  259.718901][T10550]  ? ip6gre_tunnel_xmit+0xc98/0xf70
[  259.724110][T10550]  ? ip6gre_tunnel_xmit+0xc98/0xf70
[  259.729316][T10550]  __report_bug+0x276/0x570
[  259.733826][T10550]  ? __pfx_stack_trace_save+0x10/0x10
[  259.739203][T10550]  ? ip6gre_tunnel_xmit+0xc98/0xf70
[  259.744409][T10550]  ? __pfx___report_bug+0x10/0x10
[  259.749443][T10550]  ? kasan_save_track+0x4f/0x80
[  259.754293][T10550]  ? kasan_save_track+0x3e/0x80
[  259.759145][T10550]  ? __kasan_slab_alloc+0x6c/0x80
[  259.764168][T10550]  ? kmem_cache_alloc_node_noprof+0x354/0x610
[  259.770241][T10550]  ? __alloc_skb+0x27a/0x7a0
[  259.774835][T10550]  ? alloc_skb_with_frags+0xc6/0x760
[  259.780124][T10550]  ? sock_alloc_send_pskb+0x878/0x990
[  259.785504][T10550]  ? xsk_generic_xmit+0x972/0x4730
[  259.790621][T10550]  ? xsk_poll+0x326/0x670
[  259.794954][T10550]  ? sock_poll+0x338/0x3f0
[  259.799375][T10550]  ? do_select+0x1067/0x17f0
[  259.803967][T10550]  ? __se_sys_pselect6+0x267/0x320
[  259.809081][T10550]  ? do_syscall_64+0x166/0x520
[  259.813845][T10550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.819917][T10550]  ? ip6gre_tunnel_xmit+0xc98/0xf70
[  259.825116][T10550]  report_bug+0x16b/0x220
[  259.829453][T10550]  ? ip6gre_tunnel_xmit+0xc98/0xf70
[  259.834651][T10550]  ? ip6gre_tunnel_xmit+0xc9a/0xf70
[  259.839853][T10550]  handle_bug+0x9c/0x200
[  259.844103][T10550]  exc_invalid_op+0x1a/0x50
[  259.848611][T10550]  asm_exc_invalid_op+0x1a/0x20
[  259.853461][T10550] RIP: 0010:ip6gre_tunnel_xmit+0xc98/0xf70
[  259.859272][T10550] Code: 8c 24 b0 01 00 00 4c 89 ef be 02 00 00 00 31 d2 e8 fd 66 01 00 e9 4d fe ff ff e8 43 d5 1b f7 e9 43 fe ff ff e8 39 d5 1b f7 90 <0f> 0b 90 e9 35 f5 ff ff 44 89 e7 44 89 fe e8 35 d7 1b f7 45 39 fc
[  259.878883][T10550] RSP: 0018:ffffc90004e3f020 EFLAGS: 00010283
[  259.884956][T10550] RAX: ffffffff8aabfd47 RBX: 1ffff920009c7e14 RCX: 0000000000080000
[  259.892930][T10550] RDX: ffffc90003fc1000 RSI: 0000000000000bad RDI: 0000000000000bae
[  259.900904][T10550] RBP: ffffc90004e3f2d0 R08: ffff8880518f0000 R09: 0000000000000002
[  259.908878][T10550] R10: 0000000000004888 R11: ffffffff8aabf0b0 R12: 00000000ffffff40
[  259.916846][T10550] R13: ffff8880207e3dc0 R14: ffff8880207e3e98 R15: 0000000000000000
[  259.924825][T10550]  ? __pfx_ip6gre_tunnel_xmit+0x10/0x10
[  259.930374][T10550]  ? ip6gre_tunnel_xmit+0xc97/0xf70
[  259.935585][T10550]  ? __alloc_skb+0x27a/0x7a0
[  259.940176][T10550]  ? trace_kmem_cache_alloc+0x29/0xe0
[  259.945556][T10550]  ? __pfx_ip6gre_tunnel_xmit+0x10/0x10
[  259.951102][T10550]  ? skb_network_protocol+0x234/0x400
[  259.956481][T10550]  ? netif_skb_features+0xb7a/0x1410
[  259.961773][T10550]  ? netif_skb_features+0xc83/0x1410
[  259.967072][T10550]  ? __alloc_skb+0x4d0/0x7a0
[  259.971670][T10550]  ? __pfx_netif_skb_features+0x10/0x10
[  259.977233][T10550]  ? validate_xmit_skb+0xcac/0x14d0
[  259.982437][T10550]  ? validate_xmit_xfrm+0x5d/0x1120
[  259.987645][T10550]  ? __dev_direct_xmit+0x33c/0x730
[  259.992763][T10550]  __dev_direct_xmit+0x4b6/0x730
[  259.997717][T10550]  ? __pfx___dev_direct_xmit+0x10/0x10
[  260.003185][T10550]  ? do_raw_spin_unlock+0xf5/0x200
[  260.008302][T10550]  ? skb_put+0x112/0x210
[  260.012550][T10550]  xsk_generic_xmit+0x272b/0x4730
[  260.017578][T10550]  ? __lock_acquire+0x747/0x2de0
[  260.022539][T10550]  ? xsk_generic_xmit+0x107/0x4730
[  260.027657][T10550]  ? __pfx_xsk_generic_xmit+0x10/0x10
[  260.033033][T10550]  ? xsk_poll+0xa6/0x670
[  260.037275][T10550]  ? xsk_poll+0xa6/0x670
[  260.041521][T10550]  xsk_poll+0x326/0x670
[  260.045679][T10550]  ? xsk_poll+0xa6/0x670
[  260.049922][T10550]  sock_poll+0x338/0x3f0
[  260.054174][T10550]  ? __pfx_sock_poll+0x10/0x10
[  260.058946][T10550]  do_select+0x1067/0x17f0
[  260.063372][T10550]  ? do_select+0xc61/0x17f0
[  260.067898][T10550]  ? __pfx_do_select+0x10/0x10
[  260.072664][T10550]  ? trace_sched_exit_tp+0x3a/0x130
[  260.077874][T10550]  ? __lock_acquire+0x747/0x2de0
[  260.082821][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.087504][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.092186][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.096873][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.101558][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.106241][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.110923][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.115606][T10550]  ? __pfx_pollwake+0x10/0x10
[  260.120313][T10550]  core_sys_select+0x86d/0xb40
[  260.125093][T10550]  ? __pfx_core_sys_select+0x10/0x10
[  260.130401][T10550]  ? __pfx_set_user_sigmask+0x10/0x10
[  260.135779][T10550]  ? vm_mmap_pgoff+0x35a/0x4e0
[  260.140550][T10550]  ? lock_acquire+0x115/0x350
[  260.145240][T10550]  __se_sys_pselect6+0x267/0x320
[  260.150185][T10550]  ? __pfx___se_sys_pselect6+0x10/0x10
[  260.155655][T10550]  ? __x64_sys_pselect6+0x21/0xf0
[  260.160692][T10550]  do_syscall_64+0x166/0x520
[  260.165286][T10550]  ? trace_irq_disable+0x3b/0x140
[  260.170310][T10550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.176376][T10550]  ? clear_bhb_loop+0x70/0xc0
[  260.181057][T10550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.186951][T10550] RIP: 0033:0x7f185c99e159
[  260.191367][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.210977][T10550] RSP: 002b:00007f185d88e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  260.219395][T10550] RAX: ffffffffffffffda RBX: 00007f185cc25fa0 RCX: 00007f185c99e159
[  260.227365][T10550] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  260.235336][T10550] RBP: 00007f185ca3506b R08: 0000000000000000 R09: 0000000000000000
[  260.243307][T10550] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  260.251279][T10550] R13: 00007f185cc26038 R14: 00007f185cc25fa0 R15: 00007ffedb7947c8
[  260.259267][T10550]  </TASK>
[  260.262549][T10550] Kernel Offset: disabled
[  260.266873][T10550] Rebooting in 86400 seconds..