last executing test programs:

3.100794291s ago: executing program 3 (id=8526):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x0, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x80000003, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7, 0x4, 0x7, 0x7, 0x10, 0x57df5d62, 0xdb, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x2, 0x4, 0x0, 0x401, 0x752, 0x3, 0x1, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdfffffd, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x253, 0x81, 0xb, 0x5, 0x20006, 0x4005, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x1, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x7, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_open_procfs$namespace(0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000540)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000580)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000005c0)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
close(0x3)
write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYBLOB="09cdaaaaebce3b07bd8160c8a7df4983010510839b03e84336d3c5f4eb7545f01055d882194409562c3be0792c9fbd6e39b6096cbdbabe1525542ff3687a4601058f6c3d4463215c436be108af7035f558", @ANYRESDEC=r1, @ANYBLOB="7a711e9dbf556d1fd4a29dd5ef6ea9e7dffd9450bf2069369876ef501af32d5c13ac0ab648c26c0fe78bb7041df09f6309821f9bdafb206ca0dd9546dad7f66a2fd555017e451805036a9c77424739c4575c53df832215f6bb32036b123aecec7d314b31701a7bad3524bc1744a0fa7a503918e809e7c8", @ANYRESOCT=r2, @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRESOCT], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
r7 = gettid()
syz_open_procfs$namespace(r7, &(0x7f0000000080)='ns/time_for_children\x00')
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000000c0)=r7)
syz_open_procfs$namespace(r7, &(0x7f0000000100)='ns/pid_for_children\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

2.984019673s ago: executing program 0 (id=8527):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94)

2.826349317s ago: executing program 3 (id=8528):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000140)=0xffffffff, 0x4) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket(0x28, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x6, &(0x7f0000001880)=ANY=[@ANYBLOB="18020000b3b2000000000000706142608510000001000000950000000000000085200000f6c9020095"], &(0x7f00000018c0)='GPL\x00', 0x2, 0x9c, &(0x7f0000001900)=""/156, 0x40f00, 0x40}, 0x94) (async)
bind$vsock_stream(r2, 0x0, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="2800000014005f2a6b2c816bb83838ed1100fa004a411e0900000000000000b9f2ffffff0000000000000000000000000000005fa05c68a32002b985630f420bb60d859f59346aed2b26f949f8bab2253911eb6e8d25c2e8c96908dc58775a00d0dd2c4ac281475a66605c08"], 0x28}}, 0x0) (async)
syz_emit_ethernet(0x2e, &(0x7f0000001780)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f4ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300ffe1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000014c0), 0x8, 0x10, &(0x7f0000001500), 0x10}, 0x4a)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000019c0), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001a00)) (async, rerun: 32)
pwritev(r4, &(0x7f0000001a40)=[{&(0x7f0000001a80)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) (async, rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {0xff}, 0x11}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@hl={{0x28}, {0x0, 0x15}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xd, 0x2c, "e016c3e591de7472ff050d72c9c2d406b39b1b6d463aaa174fdfac6da101"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r2)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfff}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) (async, rerun: 64)
shutdown(r5, 0x0) (async, rerun: 64)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000001b40)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
r8 = accept4(r7, 0x0, 0x0, 0x0) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x10, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={<r9=>0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @local}]}, &(0x7f00000002c0)=0x10)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, 0x0, 0x1f) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={r9, 0x8}, &(0x7f0000000340)=0x8)

2.75652069s ago: executing program 0 (id=8531):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100000000000007b200000400000085000000c2000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000d40)='GPL\x00', 0xa, 0x1000, &(0x7f0000000d80)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.586644732s ago: executing program 1 (id=8532):
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000008"], 0x4)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000", @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x1404, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000940)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c)
sendmsg(r6, &(0x7f0000000980)={0x0, 0x952b, &(0x7f00000009c0)=[{&(0x7f0000000a00)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
sendmsg$nl_route(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, 0x0, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000240)="b7f2c1ee3aaea2bc0000def1260a0000000000870000000000000000000000e9cc623e4e76d354b0405479c3ab492d7dec3804b36d191392996c3d7942493da7ed4eb24469a98571c0009befe97a646bdb7e60201a5da5f89d7b6f6497cd1b7b85e7a9ec73d4aa8ef0cf93e2d111d4e637be2fb777e28006f975f6831313940f177dbba9bd6cb9", 0x30)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000500)={'wlan0\x00'})

2.557399137s ago: executing program 0 (id=8533):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000979e75f1503cdac1000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32, @ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8f9ab91aba00d6c, 0x4000000}, [@RTA_DST={0x8, 0x1, {0x18, 0x0, 0x1}}]}, 0x24}}, 0x0)
r1 = epoll_create1(0x80000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180), 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f00000002c0)=""/93, &(0x7f0000000340)=0x5d)
r3 = socket(0x1, 0x3, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x8000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001})
close(r3)

2.334681505s ago: executing program 0 (id=8535):
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x1d, 0x2, 0x6)
getpeername$packet(r3, 0x0, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) (async)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r0, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10)

2.296407751s ago: executing program 3 (id=8536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x108, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xac, 0x7, 0x1, 0x0, "e68c6c9297b4a19fc9d4406ccebfe7ce35eeb9789050392d6cc3d076caf7a6cdd593cab5434b8c3e89c8bb8f46e25a0358be475941446e29a39ad4d519bcb438720e4c495a20a7cddf59c2df7c6bf110fe3e0bb8e8e5713a8b507ab3a3f2027ca03f8b00cf775756398569138c71721701ba0972ae5632ae3a68e0668e33dd37dfafa9888b42b22bae81c20d48d1d1c63bbfda2b74b2ebf0fab584b7cfe0df206e156cf328e61568"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x130}, 0x1, 0x0, 0x0, 0x6044850}, 0x20040040)

2.261385742s ago: executing program 1 (id=8537):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@flushpolicy={0x54, 0x12, 0x105, 0x6, 0x25dfdbfb, "", [@address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0xa, 0xd}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e23, @in6=@empty}}]}, 0x54}, 0x1, 0xff80}, 0x20040840)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x6, 0x4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xc027, &(0x7f00000001c0)=[{&(0x7f0000000200)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000))
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4)
write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[], 0xfe33)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000600))
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000640)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000680))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl(r6, 0x40047438, &(0x7f0000000700))
ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000740))
read(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x7}]}}, 0x0, 0x26, 0x0, 0x0, 0x7}, 0x28)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket(0x10, 0xa, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r7)
getsockname$packet(r7, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x44)

2.18968384s ago: executing program 2 (id=8539):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x39, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
unshare(0x20000400)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000300)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000440)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000480)={@multicast2, @loopback, @empty}, 0xc)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000640), 0x806000)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000680)={0x0, 0x0, 0x4000, 0x9ffffc})
sendfile(r7, r6, 0x0, 0x7d1d7457)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r0)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x220001, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r2)

2.062508261s ago: executing program 3 (id=8540):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
unshare(0x20000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800024000000002050003"], 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840)
mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x20000400)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40800, 0x10}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4004)
syz_emit_ethernet(0x4a, 0x0, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004)
sendmmsg(r6, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r9, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8800000000000000000000000000012000000000000000840000000200000010b90000b604000006000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000001"], 0x58, 0x8045}], 0x1, 0x0)
socket(0xa, 0x3, 0xff)

1.981751612s ago: executing program 4 (id=8541):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002}, 0x94)

1.932801038s ago: executing program 1 (id=8542):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf254200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006005050505050500000"], 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2f00000000000000a689bb38f33fa40455491330cd62013f58dc4cba5ae95d1d9ac4c3d3183e73049c2337f59addfc6b79254be405170a09645701e1f1921eca7a7812e875c360bf4ce8d44022b44a2ad3b5bafd39d70601960726f4e061781e11aba83b084e48ed15990231ac623cd5ad48a6b761e6c8094454166f4e26341fc8ddd81682074a1acf8d323d3d774f3cda9b36b9e3a9c084f54c6160cc127a089e105d2cb73776e4", @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="440100001000010000000000ffdbdf25000000000000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000200000000000000000000000200000000000000000000004c0012006d6f7275733634302d67656e6572690000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000800180005"], 0x144}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x48)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r6 = socket$kcm(0x23, 0x5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000880)=0x9, 0x4)
listen(r6, 0x800)
accept4(r6, 0x0, 0x0, 0x80000)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000940)={0xfffc, 0xc}, 0x8)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000980)={0x2, 0x4e20, @loopback}, 0x10)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f00000009c0)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r10, &(0x7f0000000a00)={&(0x7f0000000a40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000b40)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x40800}, 0x0)
close(r10)

1.818589185s ago: executing program 0 (id=8543):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r0, @ANYBLOB="140003000000010000000000000000000000003414000200fe88", @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24008010)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000040)="8172e46b26a8ad3e4e3c308f34c96fdc4207fcf88409afb48014b0b551ec99984dfddc46bb71d6516fba3f5a008c73fd614e1aec35ba299602a87bd35f7446dc9334a3251ee2823340abfa19456fd8c0c6d159d98fe6ab6fdcd255b366974a14e957cf42b14b8e495bd360a766692d279be7076f0154649ff33f15f1439e661fa04a0fdb9eed6f83e5d80c21820c9d8e822a2199e5b2bd0a7c8b50cf4bc3efff8db5594d7dfe4711591aaee6ada9b978f86a91c336865d19474f0a2dd3b8c2c589aba22ccfb0c85a6dde17f36c5959112c603e13c650ff17a03a38f06e3a2282547f028eaf191554a081a9adfb5513", 0xef) (async)
setsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000040)="8172e46b26a8ad3e4e3c308f34c96fdc4207fcf88409afb48014b0b551ec99984dfddc46bb71d6516fba3f5a008c73fd614e1aec35ba299602a87bd35f7446dc9334a3251ee2823340abfa19456fd8c0c6d159d98fe6ab6fdcd255b366974a14e957cf42b14b8e495bd360a766692d279be7076f0154649ff33f15f1439e661fa04a0fdb9eed6f83e5d80c21820c9d8e822a2199e5b2bd0a7c8b50cf4bc3efff8db5594d7dfe4711591aaee6ada9b978f86a91c336865d19474f0a2dd3b8c2c589aba22ccfb0c85a6dde17f36c5959112c603e13c650ff17a03a38f06e3a2282547f028eaf191554a081a9adfb5513", 0xef)

1.807255876s ago: executing program 4 (id=8544):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001f40)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001f80)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001fc0)=0x2, 0x4)
connect$inet(r0, &(0x7f0000002000)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002040)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000020c0)}}], 0x1, 0x24040014)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380), 0x4)
sendto$inet(r0, &(0x7f00000023c0)='<', 0x381, 0x805, 0x0, 0x0)

1.578049999s ago: executing program 4 (id=8545):
r0 = socket$kcm(0x2d, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x11d, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x6, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x10}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a1f0100000000000000000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b80140001800c000100636f756e74657200040002802c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008140000001100010000"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.466432856s ago: executing program 0 (id=8546):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x5813}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e008d2a00000100000000000a000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r2, &(0x7f00000002c0)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0x2}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)='.', 0x1a000}}, 0xfe)
write(r2, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
sendto$inet(r0, &(0x7f0000000140)="3293", 0xffffffffffffffe2, 0x84, 0x0, 0x0)
shutdown(r0, 0x1)

1.412013957s ago: executing program 4 (id=8547):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x34}}, 0x400c804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000440)={<r9=>0x0, @in6={{0xa, 0x4e24, 0x6e7, @local, 0x6}}, 0x4}, &(0x7f0000000500)=0x90)
getsockopt$inet_sctp_SCTP_EVENT(r8, 0x84, 0x7f, &(0x7f0000000540)={r9, 0x800a, 0x1}, &(0x7f0000000580)=0x8)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r10}, 0xc)

1.187837013s ago: executing program 4 (id=8548):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000004c0)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x81}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'dvmrp1\x00', {0x1ff}, 0x101}) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'dvmrp1\x00', {0x1ff}, 0x101})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.13928647s ago: executing program 2 (id=8549):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket(0x10, 0x3, 0xb)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async)
ioctl(r2, 0x8b33, &(0x7f0000000640)) (async)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r1], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20)
r4 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x453, 0x1f, 0xffffffff, 0x0, {0x5}}, [], {0x14, 0x3f9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (async)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000580)="97452a300c000000010000000000000000", 0x11}, {&(0x7f00000005c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000240)=0x79, 0x4) (async)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) (async)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000380)={0x2, 0x4e23, @loopback}, 0x10) (async)
getsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f00000003c0)) (async)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x4}, 0x6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)

734.414404ms ago: executing program 4 (id=8550):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$inet(0x2, 0x3, 0x2) (rerun: 64)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000003c0)={@multicast2, @local, @remote}, 0xc) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) (async, rerun: 32)
syz_emit_ethernet(0x36, &(0x7f0000000400)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0x20}}}}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x17}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
r2 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32)
r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0x4) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) (async)
connect$inet(r3, &(0x7f0000000500)={0x2, 0x3, @loopback}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x800, 0x0, 0x103, 0xb}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000240)) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r5) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x800001, 0x4) (async)
bind$inet6(r7, &(0x7f0000000640)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000680)=0x2, 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000006c0)=0x800001, 0x4)
bind$inet6(r8, &(0x7f0000000700)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000740)={0x2, 0x4e22, @multicast1}, 0x10)
sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)

606.218824ms ago: executing program 2 (id=8551):
mmap(&(0x7f00008aa000/0x2000)=nil, 0x2000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x0, 0x10, &(0x7f0000000940)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="3a173357f297c605804ab3828443", 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000f40), 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1b, 0x0, 0x0, 0x8000, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0x15, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000f00)="f59a4cc3bce2a377edec679a3ca2", 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r8)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="4100000004676b3b67ccb937c90000000001000603000014000304090300f006e8ffff00000001080000000000"], 0x44}, 0x1, 0x1000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="030000000000000000002300000008000387f11c29e8e21188e1c61e8d628af392b19b3a775c9ec451acda0dd1400ec9c23e17f456fbc198a7e93d3520974548d14b740be3e65d6d5a655cd0019384ad586ed4caafc8c9", @ANYRES32=r9, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00'})
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000000))

506.785285ms ago: executing program 1 (id=8552):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x35, 0xf3, &(0x7f0000000000)="ef64b94779f1fd35187464eabc7e69788c93c100481b2e5501701301f3ebb79db8cd1dc65653a705c5d48a1da53135902232848088", &(0x7f0000000040)=""/243, 0x3, 0x0, 0x16, 0xd0, &(0x7f0000000180)="2582484ce782fa6125e00e2212e5dae5fed7712c6e62", &(0x7f0000000280)="e978efdb38548f5a71cf8f525193c90f5415b4c4f84ad661e5babcd31613d15014e2de701087dc5bb4427133c59803c6abf1a5733b73dcb5e7f32e8a6b5caeb1e5fff10fb24de012cb094b09d3ad5ee49eb7921958358d1109dff1c641123a5e4eddf7ba0f87dc488aa1bfe5e13ee9e39bd152039aaff8de401dfb28fc28627c0c2dbf299cf047160fb131449f067bbfbc30fa7432c3eadee2ed5eba87b80b27755069523a5b2cd981931bd98e9305faf4d3bb982af4cd8b584730fd3ac83654d0be77327c5cee2147a7a935940a35ea", 0x2, 0x0, 0x5}, 0x50)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)

434.055304ms ago: executing program 3 (id=8553):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x24004801}, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00'})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))

412.756585ms ago: executing program 2 (id=8554):
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000))
accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x19, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @ringbuf_query, @exit, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x3a, &(0x7f00000003c0)=""/58, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x6, 0x401, 0x81}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x1, 0x4, 0x1, 0xb}, {0x5, 0x1, 0x8, 0xa}], 0x10, 0x7}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x0, 0x3, 0x6, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0xffffff00, 0x8f, &(0x7f0000000140)=""/143, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x372f}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f00000006c0)=[r3, r4], &(0x7f0000000700)=[{0x1, 0x4, 0x9, 0xc}, {0x4, 0x3, 0xf, 0x1}, {0x5, 0x1, 0xf, 0x4}, {0x0, 0x4, 0x3, 0x3}, {0x0, 0x2, 0x7, 0xc}], 0x10, 0x7}, 0x94)
sendmsg$inet(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000840)="1c5a32980643c74766510126d303e50cd9bc8d76074549f44ea58937c08a8715a0e0087ef9b7610a1890ff4b637e02546a9d303020bd1e4b3ca3dc3ef9a124b7fd90827f7e1adb4842efeacefc7df4504aeb11ab675479a079a59a69994ab66a06641fddbb29d04481bd845fff677165848647eac7806f4ffe6477c32f2668b15aeb361c3d36bdc3b8dca83267eb78c697a781594d29b49ebc16da37e39e6b70c746f75b", 0xa4}, {&(0x7f0000000900)="25f89db3d9578fc583096f32626e01de0ff70fe48085785baf491b46342fb16b1c6da59c47846bbad0fc557171df7051c7ddeafb9b5062c0733dcad22d8962e4672c10020fd9c28236d9812812504057e9dcce602a962e96d9cedf36fd5f8f4d311b14c2cca778e366c567f32a25b391f55e90c7745c50cfd5fbbad0c629cde2c374aad1bd4b2f480d4b72178c48c42cb2cb6795164781263628a59bf6c44d534cfabec1b63f6bb114a37c226ad9423ce82aa32146749bf8e8fe31452b9f44a8604a2022eff32fd62b150302b57ca75cc0167333b8616c0d6ac91f63249d42e55d6e61f7a9aa98af4df4bdfedd959acb2c1cee3de53629b37a317b51ff219fd272ca56044b25f455e543c605f39e6b7977c9cb46e600d2951099a6bb9bf507e41c5467674205ac0ce8a3b9225185169150b6c721589c623f42ccb8d70cfb153903527db4fcd0e8aac613b71b5353a01cc46c3d40999d22e49e930a94f92d67ac05dc1dbdeed576bdb69d450f9879ddcd53ce237e2b375e50b535577bc39766c24fd9be72eb158b933285ea6ab7d1eb05c47ca8724d55f1e228d12a3cab251a7c1e9c242954d05732cbce964ae4255cdccfb7f9e6ce458710ce6fd51428ada18aa33a2cc9f44a59a7d1a48ba84d70e938f605d358e2797a45770c1d82fc6dddb1745016bf973764c17708fa4f84e2bb8d22014b9ff14ace50adde763c7cf871e30e1b06bd3a622b79fe654227b9549a404b1865c09d95dc5f5c4962a4c11c6faffb354d2b464e72371a96e191831b6556e280cc2b97686e5d67d3d9d6608742d94a2c5ef989441429d6ea4e122535b0b3f6192db4979a3c58720d0a12f7d89cc514621f17972863a5ed0ec66d03fb0b77a415c09e4266302507d1e47a3f49e4fa3af86b6a0397f12f4d0aa6c95a34e92e9f39d45ac24dd5fed0fc5817f31ab65232d47fb84b10d827bba9fa3c8ceb7c0359ecfc4fc083663101ab0593a973738ef7e479c58d4628edd53563ff3adb3f96e83302a026441a2fa38c7552d11b53adada0d690a412c28891e923a9cac19a8f7ddce62d07195e9ae91da3f114d2350788e1c301df5dfce3f32a00e116bf345a0db13d4d32d55a13772fab6ec7fdfcfa8a6c3a54b3cd6c07745f4c182168782fc66f68068db25bdc0139fa052ec501c2c5437875d52f18bc5224d2b76bfa526ef6386a4330b3f78e5a523b4e33c508227e4c1e78da8bef219b3912feb16252138fdfa806186abe733f94c962630adf28cb0b7c03a4ef7319c8c0f4350055db35b0011ac40765d734fb06e2b3c56f6eec801cedd12babf79c118818ab6b94367bbf701518556ef476bbc63df36af49882e076aaea2436401cce47ba9d0d8740c65d1b63a5fdec97dd222cb12697a19e8e6fa6a6edb5b1d84db58df62c23bd201729551224e695f5ea59bb25cecee53db92ca1053bfd5e4b29698067881771ae05bf81c79146666dcb52c93f298fb749d894397b31988c7d2cb803d8f8deb036f2005dc51dce2e12e31492e24886fe1aed80dd2eff3ef173d3e4fc897fe7e95323c310e369c0a37fc69ac9614fb0dddd608afdf6a4a65c2cf6f49d7af5a2cd05543ae30dbb0db6eb4c6afeded41a20114d48dd0bee548aa2d90a20254d7dc860c2a99736136c134ddbeda29754bc432f25620efba4081c8fae1e491807e975236406add1856c67046aa91c9a0f84075a4addde87ac41b913e285813440ee766b3c97a115ed51545c48eeb2c1f9e6f1817bbec986663dee1be4e8c9f60b5b80cf3dc84401693a8bb0a84a0da5ea46da0f53eca80d5e34bebdb19454f7b2ba4be896a528f0c6be63904cd56e1411fc8affa6e9384755d76f544201b5c97905ce4d310b96daa176b2bb20b82e56aa13325de392d6ee692f90b7a3cc373bac0a208e97ca660a35199c8c5df088ee9d511cf1db048711c3c6bc8673f09baa770ee537eb11c74a287a0170a4269f0b41f29ec890c17537c1897abe5fabb717ff3d9350d8bcb1e398a1b066a412052554127f8b2506210d0b4385cf9f00bf59034f0fb1255ecc522b5700abe9015a974bccf298a1b12425ab115c88a0a3bc1a4c72d61be92a86e59f17002c52764fe4974bce9e364714a4badcc56e2409e2e8c14fc127327cd98d8dcc152216eaca7dbb7bc96c4f5ab6152c143227c23062b9117e7c55cec301c163cc28357978d24762a652cdc80d501315fcff805e938f0c21993c515dc14cde44416e4c776fb2dc601aa35dbcd8b28390534eff70aeae5a7a67344a8739a5fad5ff257b115ef2060a9148d9ba39d0a1079464c6f6de5711050eff22b05dcc18572a3488d93c2fc53a2e58bdcc248df9e2b4f82d29a8fe98eaf12991c8ee869206f09b5dd2f18dff9dfd5781d0b5ebb1228a15834ba09b840d3d65a24e36ea8bcdafc34b6a69610f0ae02d703c225471f98884f69f867b4f3a19d146d384bfe03361fca8f39e8190346c842464c635753a29b9d937739c9c625fac9047ce7e2811cd29a05bc7a037a4057ee78941787d96aa5bc3416003d167319e2e73fd2b3b8194189cd0decb723d18d8c732ad4bae031ce00abafbac1336d8118e6569233d646a58476e115589f3131ab70f2647b31c335c52354165bd37e0eae12600da1bbe1b04f7497e5498a1547787363047042f93bcd7106556a5c0567ade7fe22a96606b24b09b64f2690d900ea60ce9a421efc77e76898e06a9ca087b89c963fe2e6f956f19e657fea8ac1c4f0d249fdcefc297a73f2a092d3a09be8bef4b37c021cabe177273d48f39d6292f41a7d647ad528a35363b0514d91def181882046d7cecfaf8281c3f91bc42d9e1620748bc8069ad205c53aab580cdc8bd5ce115aace16ea905deb3c98f0aee1ead29768dc896b969dc9a01a21a387b4b6a4455693a3d4965544c49bf84e9e59ca3fdf9723d74cdd1db8408df817e41434c2f1b992eac6034933810adf435e057648d6790edd192ad87d5051f917d8b43a4d34e9b4d5803156733dffbf2139014d393bdc160730f042c627ac3765171ea9454b38f2abd157c8354fe2adb84b132342ecd0f53f935feb83442b7114024ae16c6858c8e9625e14f6e53b6b66c46e6638627be78f82be94e0c795b1780fe066d747ca9ab1efe712b89e1d1038cc519846281bd9c8b52f840d50cbe59548d64cdf9e73ee9fd786120f736bcb4e0775ace43d0ffd5031e42821d11ad77bae6b6aa9508edac270050bf24ee1aa527e25498d12ccc7cc592c6edcfe87c0a52e1484390881f3a9382ee1073302292b83b524f3c699c78d2c598df5cb3fea326770a09ec49f77563949851057c21e2d8469389889272ecd147fdd80a61ea641a30a96bd1754a11faa43ca3345f0899e1c579cc48eac664a7fdbf497d340d12653d72fc0376718979b488d13a4f31e757df0e5dbf396e7f5c8b1628330fbf5e4915da288ac100d5aa9eba75a9599b464281d01f193af0ce41dbfb149384bf9a347ae4f8c393c97a5aa86b5dd5e1b2e53cc86689d078fcec945abbe231df5c2d18e4630172852b13933dae020724334f225577c58c94395de6656fc9b9d7914965783ff75473c3d6de5a0fd0f78cfc38398fd798f492c7e9d59174536fc7b1cb4100a1494c5d3ee918b709ee1b08ec196cf5e562b104f2e46346e651d0d47db471a9bcda6f73416b4872481a9345dfc2c0c48d2a8e6801fe10459a5d9bb0c42ecf541c519ae34f645b7a5ddc9bd3f0f55228edc2d26f3de0db6480d6b4e66931152d3fbe11a22503be0d420b933cc8e6f7f1d170f585a3e6575b801cda19d0b0389b1b2d7958681adf912e5e48e103f54e907a67902bbed27848269f7ac8eb08d18636a36da47858c167432ee49f76c32a495e88b694f43c796ed4cdd8a9681457175ccb3d5fa3a9f210ee10e05caae0ee4b2891de71e9245991f5e244be358373c07c3e4b1912df73c7a4de2d709e0d805bebb62f12ecbc02b7981c5a42a48d264fed5c059e3de6d856ccfe3530cb4e806a8503db09e9ba3c0107eefad9623096c1b3ef59ffeee06cc467dd988d896e3bdc6800bb5f5844798b04652c40cd8aa9877f22236c1438fe6104bf3bb665fc1113fcfd8e675014f712581dc507ee53d6aa6c8e4ae1a9d173b984f406e789117c677c6c27be2af7c946dcaecf91efff6df20bbdbaed0b177aefbc9588fbfca8f6cc14a3cffc353962dd6938c023451e35e7fc5bdcda3db986a4fb5aee8362ccde5b527f8e3409105680b0c062f1b1dbf09d4551ff282e7df102300f1d0a80bfe355651c04abdf0035183911209fbaf3f6c873a362df5793c31407af3be004780543ef85794bd764ab7edc3852dd0ac2887554bf59e88d47546e057e0e0d27d1459cc9cdd4f27ac2419448fedd916dd432e37c0798f61d7ce7ea030f033e2894961e974073834dc545dc9e21b529d6fed66bd3cc747f36269e895bfbe22879071a812063b4fb45e9ca62c46476fd71a70cc26d394abd4068dc01007326a1215b49cc1d2d834dd60d286a1b55c8849bfacb3931dbef6919637a11617ff49f54b0b3fb2c8a25cceb1b5d153d58565d2acc0d132dbf871f5090b3b0a9f50cc118a73713bacecb1abb091e077bb04157c477fa0e096421a347c72da89c43fd2be8b9ddd20e4ae7931e75c9711f1a18edcac94b0e82de746cb6ae91537682022494f984712003cf11b1cfebe9a3726816f8e60e3be75d39e1a4a8cbee9dc0d7c9a0250bd6fe0b444e2506a6293bde1766118ee8a268072d78ac7cd32fa5295b88724c2f5b754a89822a770eedcc57cd48b19c55024ce2599662c19cfaaabb924337674ac221f2ef612b38ee3695b63e96a5af56f7dd25f1f2e22e409760f995423bf20191c6383324678c79d3effb5c88d1b82d0dab671d722e32d19037a3e351e2d7d73339ed3b47ad82ee7e769db0c229fe38231d4ff649f5d98c61c4690ebc594bd00a00ac26d72457a30bde7f0ceb14ff51a3a205b064ec3ec2930b8297ca7930df667a21124cab010e0a475bd5dd2b46bbd99fc927e2ba9965761698161596b1956fb252caa9a6197c0a8c36b54732cae170cd0cee0ccb4874e74491f5cae3c73150bb75814301fb297cbef0b28995a0c25138fd3372bc1608e63848e8a82604d45dce6ca2fc78d1951c40d5c9067c6904a30ee829e115ed8b068d0837c1c0c6d04497b62e30fb1e306932fd98ad15bfdc9f717beb6ca88fa6e3b493b36667fb3c20c5a2287cb523b289863e9af3266ee57da96f3e50a15f768ce2f339751d67c6b44e1efa6b37740f6fb1fcddca40c943aaffae6c617e4c0c4a7a68b639d9347f6896d24b4c33b04c40c64b668063560e4d335b69774ff058a38ef5102e465ebb6ec1354386721498edf8d40733c5346a1132598a3ba015226f7a3beb3a8ddf31d863c58602fe07ae92de7cf540d1a3d4b31f39622b3a59da260f88f7ddfe79deac4f9817a915d94fe09795e9ba32ddc53ac4dd28c90a2f93b5c0ac2cab337372d09c108041e8859718005136a3717113672c32d969ab1a250b9e430a5e0ff0ea24a6cdf9dba101d72e88e51f20a7cef2c7a1c1a7c2d9b70cde3a0ac738d22186da9ac5ca00735eb8d2c1cc09d4e550ada427e31ac4e9984367a2d1c70d4f45ca6ac832e158c7b03d42d4b04beb11727a1396a7a55d2cd46eaa1b544005218b8b65adef1f879a5c82a1f0a8ff6bd9203c4c8e88d52d6a7457bd4a6b9d928264f7d475767fd103c9d448aedb7df1e6636c66c5eea761b943a4c081ec25ea1bac67a3fe6da13", 0x1000}, {&(0x7f0000001900)="3a8fd3afe0528c6025f186a0f7bec7a79630bdd294e9cb1ade56f36009672ed65a8951c740cdd401d80a1f00d03d7e87c4b733f5052fb12443f6be719c3da0839db11a68947f1ef5d1299c3f33adb4e0bbdb02666cd6506d0c5c9f6ec7f832714a142539a3d18f171b72194dab51415e92bc08eb002e7e92fbe4d3304a9ce0333bbcefc846cd99472bfc7ce3886267c44e12baa743fe9c9ae6c00dadf93a67eb4843d6be8337643e8c942e214074642c6ba4b1c720ca1f1b701d9c4d8a06b6d4d91a7a40155c50e2afce1894bc81741403745b41f67571540f1feb6f58a411cfdddebd56eb40167e", 0xe8}], 0x3, &(0x7f0000001a40)}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001c00)={'ip_vti0\x00', &(0x7f0000001b40)={'ip_vti0\x00', <r7=>0x0, 0x7800, 0x10, 0xfffffeff, 0x0, {{0x1d, 0x4, 0x3, 0x10, 0x74, 0x66, 0x0, 0x5, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop, @end, @generic={0x7, 0x8, "25de5a0fd30d"}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0xc, [{@empty, 0x1}, {@local, 0x10001}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0x6e, 0x3, 0x9, [{@broadcast, 0x4}, {@loopback, 0x8}, {@loopback, 0x7ff}, {@rand_addr=0x64010100}, {@rand_addr=0x64010101, 0xfffffff9}]}, @generic={0x88, 0xa, "0be522b0d76b3547"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', &(0x7f0000001c40)={'ip6_vti0\x00', <r8=>0x0, 0x4, 0x6, 0x2, 0x80000001, 0x60, @mcast1, @loopback, 0x7, 0x7, 0xa, 0x10000}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000001dc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x58, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e40), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002080)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001e80)={0x1b0, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "b31c03b5bb14fbc778f72be6660ca53b4ad226dd718b20ca7e658f1f285259ce82c42f19827f837f9947553b4d5aa833acb78e3f0f61a72bc6329e62d2ba"}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "c3db28db67876733867e3742790d21da561d1eb0a001657e43db3183ed1ca2b51127028009700ee45926535173c4cf876140eb807cc07ee19665b7cb359b1ac117aa71863dc3ba20bd2c433b12ac7ec36fbab5f14e098aef8f04ff1e3604960a52393978b78c28787b32e4537bb55769f7fdef44337a4a928ab9565ee5f12d29ec753c78be86acd5eee472ea9b4e5755fe195e9e2f190ecb661c226d3b23314eee6b706c7ea3bca877756e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4041)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x7c, r10, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x71}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002240)={<r11=>0x0}, &(0x7f0000002280)=0xc)
syz_open_procfs$namespace(r11, &(0x7f00000022c0)='ns/user\x00')
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'wpan3\x00', <r15=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x44, r14, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040090)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002500)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000002640)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0x94, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x9, 0x5}, {0x9, 0x6}, {0x1, 0x7}, {0x9, 0x7}, {0x1, 0x1}, {0x9, 0x7}, {0x6, 0x6}, {0x10, 0x7}, {0x70, 0x6}, {0x9, 0x6}, {0x2}, {0x0, 0x5}, {0xa, 0x6}, {0xff, 0x2}, {0x40, 0x3}, {0x81, 0x6}, {0x2, 0x2}], "7d710f4ed328f4c8"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0xb, 0x2}, {0x1c, 0x3}, {0x74, 0x3}, {0x1, 0x7}, {0x5}, {0x8, 0x7}, {0x9, 0x6}, {0x7, 0x4}, {0x6, 0x5}], "0df4d32d50928f88"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x28, 0x5}, {0x1, 0x3}, {0x6}, {0x9, 0x5}, {0x10, 0x4}, {0x9, 0x7}, {0x7d, 0x6}, {0x8, 0x2}, {0x4, 0x2}, {0xf8, 0x3}, {0x10, 0x2}, {0x1, 0x7}, {0x6c, 0x1}], "c475a27f5f7fa85c"}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000026c0)={'pim6reg1\x00', <r17=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000002d80)={&(0x7f0000002680), 0xc, &(0x7f0000002d40)={&(0x7f0000002700)={0x624, r9, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x528, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\\.(\xc9$.,(\xdb\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\')-/()\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}+@[^&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$(]}@#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ns/user\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, 'blkio.bfq.io_serviced_recursive\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff2c}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "8359ecd09b2fd247f8f82e2400c5111675da8a1b57b7401f2fda2e"}, @ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "d5a06ee409700ea304ddfe51dbb138f6b3250d22bffdd95f3e3965b50466a5dd151ce0fd25ad364de838cebc54276bea59cd3c12b536d4985e5a0a92808f5c00b8a3906ea9fb0f4f96be003720220d689bc2483c9b48b79da0aee4405d1eed1b77fafe6eb2b0e9ed3149b55216acfb964bf14d28cee8dca63333203ecfca06500a6cb2b0a3fec996508e187e60f83746fbb9f6280b8e207070460e361781a1be3196f70f1fc19baf3c9a1b73ebacb8e3c481e1b3fbb7594d20085723b41ad11a85d7cc88f1223b20819ab008a8123d746009b456e352ffe630286727bd95f0fc370cfddb3b"}, @ETHTOOL_A_BITSET_BITS={0x218, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(*\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^/-(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.^%\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[[&(+,!(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x9b@:@.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ba}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'\x99\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "7f26f0bdca424077ac3dce8fca3cc8fd5b1b9914b5d128628afdd9aed22bdc80d54bf30d898188e9df9e47d5a8f854316e1b4d3eb49ba36eb67f91db55b18d4e3b895b8b2511dc81a28593dd11f94a4a05250025aa25fea20c0a256f752d8e55043c1c6fda96efdba0177cab50562d637277f05689473b8f65f3e9c1976a892b9e819f6c3d2ed87868b1f9fa8c8794f86f47ac61c025dcf1e0e4e20472ad213ad05fa2140293e0ff9000"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}]}, 0x624}, 0x1, 0x0, 0x0, 0x20004800}, 0x40845)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r12, 0x40309410, &(0x7f0000002dc0)={0x8001, 0x4, 0x3, 0x8000, 0x0, [0x1, 0x1, 0x1, 0x8]})

389.585773ms ago: executing program 1 (id=8555):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001f40)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000001f80)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001fc0)=0x2, 0x4)
connect$inet(r0, &(0x7f0000002000)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002040)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002100)="3df974a52f545d6600ffff00000000065a87aa92ad82dfd62ed1b7a13725fea22328aa6b73b862d25d942d0525516f060000000000000029a7f69982fee7dfcf4a2e18a4d9d5293e8fe49262c449c335352361a5ca8135852ea93a295ef200000412f5a52d9e99a524021011e31c8c0da2bafd74dbda9a4e032bce983d725780f677a3e3fa1e6a849e88843c04daa04e231c8887ef7e3e01953e782acf5e8d845e9921c0cca36aec9678659e53273c3b2ef23cde855c1c44bc304792b9330cba7f38d1a369885f3e317fe8011ba0fd6d35197da3572017d3987b10493a3b13531ab13a5762d8211b74f782", 0xeb}, {&(0x7f0000002200)="ce40149fb6af4a46b4f1b918749bbb0db824c476e390ed0ab217ae4c467a3e7e28742a6636", 0x25}, {&(0x7f0000002240)="8757491dd8d82fb05b108d88a9adefd9bbe0b9ff5d9afe5c0f8ca3244dad8856c12b935fe929bf7cf892addff7c13aed0605af4b9b9f1d5e547f3efd1db73aff42a9584d6df1086a14cccac3ae05944cc9649a6a30ce863a51f2738881e55e33e0b2439c44f6c314c2186c809866e0a336dce3f7a2da5d64926543cbb2af0d1e8798e7cb8d20816ca23573f73126d4687409ece3d811cc2ef04a9350be2ad309eaa1c6db9d8acef74e5d59e2c08a967e", 0xb0}], 0x3}}], 0x1, 0x24040014)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002380), 0x4)
sendto$inet(r0, &(0x7f00000023c0)='<', 0x381, 0x805, 0x0, 0x0)

249.941638ms ago: executing program 1 (id=8556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x203, 0x70bd28, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x6, 0x0, 0x100, 0xa, 0x10, 0x96f23147092a967e}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x2}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
epoll_create1(0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x60074}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a0001ff7f000000000000000400fd80080003"], 0x1c}], 0x1}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r8)
getsockname$packet(r8, &(0x7f0000000400)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r9, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r8], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800)
sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040051}, 0x20000801)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000054)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xaf0, 0x3a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004800)

67.337796ms ago: executing program 2 (id=8557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x8c, 0x10, 0x8, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x84, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x2, 0x1, {0x9, 0x2}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x0, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x8c}}, 0x0)

66.656819ms ago: executing program 3 (id=8558):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070118000400000085000000c2000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000d40)='GPL\x00', 0xa, 0x1000, &(0x7f0000000d80)=""/4096, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 2 (id=8559):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x10)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
close(0xffffffffffffffff)
ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000380))
socket(0x1d, 0x2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000440), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000007c0), 0x4)
write$cgroup_type(r5, &(0x7f0000000480), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000500), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r8, &(0x7f0000000580)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r8, 0xf5f)
accept(r8, 0x0, 0x0)
r9 = openat$cgroup_ro(r7, &(0x7f0000000600)='cgroup.freeze\x00', 0x275a, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000540)={0x40000000, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0)
write$cgroup_int(r9, &(0x7f0000000640)=0x1, 0x12)
setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000240)={0x9b, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @loopback}}}, 0x108)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0xfffffffffffffcac, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x512a1, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

kernel console output (not intermixed with test programs):

ibute type 1 has an invalid length.
[ 1327.731210][ T4865] gretap2: entered allmulticast mode
[ 1327.773549][ T4865] bond16: (slave gretap2): making interface the new active one
[ 1327.789795][ T4865] bond16: (slave gretap2): Enslaving as an active interface with an up link
[ 1328.243311][ T4900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7486'.
[ 1328.243343][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7486'.
[ 1328.284133][    C0] net_ratelimit: 1 callbacks suppressed
[ 1328.284153][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1328.361018][ T4907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7489'.
[ 1328.365328][T20037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1328.635554][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7491'.
[ 1328.657893][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7491'.
[ 1328.773608][ T4920] syzkaller0: entered promiscuous mode
[ 1328.775983][ T4920] syzkaller0: entered allmulticast mode
[ 1328.840579][ T4920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7493'.
[ 1328.933859][T22742] Bluetooth: hci0: command 0x0406 tx timeout
[ 1329.102981][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7497'.
[ 1329.118137][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7497'.
[ 1329.208725][ T4941] netlink: 'syz.4.7498': attribute type 19 has an invalid length.
[ 1329.409535][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1329.957656][ T4976] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1330.302653][T20356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1330.456210][T20037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1330.998289][ T4999] IPVS: rr: UDP [fe80::aa]:8080 - no destination available
[ 1331.300009][ T5000] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1331.311552][ T5019] netlink: 'syz.0.7519': attribute type 1 has an invalid length.
[ 1331.504295][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1331.577791][ T5029] bridge0: entered allmulticast mode
[ 1331.673256][   T30] audit: type=1107 audit(1792277762.147:32): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='²©øcǽ�ʵ8Ëî‘gÐ2	üàó…ü·í\®ñ~fÓBX�ò÷ðœÛ”î¶ß•ªc3Üßëª=Àa—¯ze5?ÁðÛ¹‘òHq8ˆÛ	Š#Yod°:Ž+"²-ð@µ¯çëdÜv39d¤Q_“®BUƒä̳¦ÚnØ~ŽR™A¶³ãsT†JŒ2uøcöTbaTÚ‹¶9ƒ|Øû?¡÷K�/²qá�vmæ9-
õE’ýj_“Gc: �?ÃÉÿ	ì#X'
[ 1331.818300][ T5041] __nla_validate_parse: 35 callbacks suppressed
[ 1331.818318][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7523'.
[ 1332.043858][ T5614] Bluetooth: hci2: command 0x0406 tx timeout
[ 1332.136326][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1332.166557][ T5057] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1332.167469][ T5057] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7528'.
[ 1332.213257][ T5051] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1332.221474][ T5051] tipc: Resetting bearer <eth:team0>
[ 1332.226296][ T5051] 8021q: adding VLAN 0 to HW filter on device team0
[ 1332.260156][ T5051] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1332.340705][ T5051] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1332.372540][ T5056] ip6erspan0: entered allmulticast mode
[ 1332.636249][ T5065] syzkaller0: entered promiscuous mode
[ 1332.636271][ T5065] syzkaller0: entered allmulticast mode
[ 1333.326242][T20359] net_ratelimit: 1 callbacks suppressed
[ 1333.326263][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1333.567668][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1333.940955][ T5093] syzkaller0: entered promiscuous mode
[ 1333.940979][ T5093] syzkaller0: entered allmulticast mode
[ 1333.949369][    C1] vcan0: j1939_tp_rxtimer: 0xffff888040d3f000: rx timeout, send abort
[ 1333.952505][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888040d3f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1334.182222][ T5017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1334.423021][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7542'.
[ 1334.490452][ T5109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1334.490726][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1334.605493][T20037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1334.660081][ T5122] bond_slave_0: entered promiscuous mode
[ 1334.661140][ T5122] batadv0: entered promiscuous mode
[ 1334.661920][ T5122] debugfs: 'hsr1' already exists in 'hsr'
[ 1334.661939][ T5122] Cannot create hsr debugfs directory
[ 1334.661995][ T5122] hsr1: Slave A (bond_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1334.662012][ T5122] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1334.712498][ T5122] bond_slave_0: left promiscuous mode
[ 1334.721405][ T5122] batadv0: left promiscuous mode
[ 1334.888069][T31871] block nbd0: Receive control failed (result -104)
[ 1334.888645][ T5614] block nbd0: Receive control failed (result -32)
[ 1335.039592][ T5134] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7550'.
[ 1335.052990][ T5129] mac80211_hwsim hwsim51 wlan0: left allmulticast mode
[ 1335.055797][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7547'.
[ 1335.159470][ T5133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7550'.
[ 1335.189432][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7550'.
[ 1335.339276][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7552'.
[ 1335.397471][ T5151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7552'.
[ 1335.657366][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1335.789355][ T5161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1335.789524][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1335.811165][ T5164] block nbd2: NBD_DISCONNECT
[ 1335.811190][ T5164] block nbd2: Send disconnect failed -32
[ 1335.811208][ T5164] block nbd2: shutting down sockets
[ 1335.857202][ T5164] netlink: 'syz.2.7560': attribute type 1 has an invalid length.
[ 1336.056610][ T5172] openvswitch: netlink: Message has -2 unknown bytes.
[ 1336.056644][ T5172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1336.149498][ T5174] netlink: 'syz.0.7562': attribute type 1 has an invalid length.
[ 1336.261410][ T5179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7562'.
[ 1336.573042][ T5178] bond6: (slave geneve3): making interface the new active one
[ 1336.599275][ T5178] bond6: (slave geneve3): Enslaving as an active interface with an up link
[ 1336.600373][ T5179] bond6: entered promiscuous mode
[ 1336.600389][ T5179] geneve3: entered promiscuous mode
[ 1336.627750][ T5179] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1336.647631][ T5180] tipc: Resetting bearer <eth:team0>
[ 1336.725819][T24121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1336.725865][T24121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1336.725896][T24121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1336.725928][T24121] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1337.267878][ T5230] __nla_validate_parse: 1 callbacks suppressed
[ 1337.267899][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7575'.
[ 1337.561802][ T5234] netlink: 'syz.3.7577': attribute type 6 has an invalid length.
[ 1337.987867][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7581'.
[ 1337.987891][ T5242] netlink: 'syz.4.7581': attribute type 1 has an invalid length.
[ 1338.017987][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7582'.
[ 1338.069666][ T5254] netlink: 'syz.0.7583': attribute type 1 has an invalid length.
[ 1338.069691][ T5254] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7583'.
[ 1338.157053][ T5254] wg2: Caught tx_queue_len zero misconfig
[ 1338.250800][ T5256] syzkaller0: entered promiscuous mode
[ 1338.250825][ T5256] syzkaller0: entered allmulticast mode
[ 1338.448663][ T5262] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1338.449006][ T5262] bridge0: port 1(bond18) entered blocking state
[ 1338.449191][ T5262] bridge0: port 1(bond18) entered disabled state
[ 1338.449826][ T5262] bond18: entered allmulticast mode
[ 1338.453168][ T5262] bond18: entered promiscuous mode
[ 1339.397208][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7590'.
[ 1343.455095][ T5299] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.7591'.
[ 1343.455119][ T5299] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.7591'.
[ 1343.464081][T24101] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.464142][T24101] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.464185][T24101] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.482713][T24097] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.561946][ T5302] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.7593'.
[ 1343.578345][ T5302] sctp: [Deprecated]: syz.2.7593 (pid 5302) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1343.578345][ T5302] Use struct sctp_sack_info instead
[ 1343.699549][ T5309] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[ 1343.786960][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7595'.
[ 1343.880910][ T5318] netlink: 'syz.3.7596': attribute type 30 has an invalid length.
[ 1343.931481][ T5309] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1343.989294][ T5318] geneve1: entered promiscuous mode
[ 1344.004672][ T5318] siw: device registration error -23
[ 1344.297278][ T5334] net_ratelimit: 3 callbacks suppressed
[ 1344.297297][ T5334] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[ 1344.297323][ T5334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1344.672617][ T5362] Bluetooth: ISO socket layer initialized
[ 1345.240152][ T5376] bond6: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[ 1345.240181][ T5376] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1345.240446][ T5376] bond6: entered allmulticast mode
[ 1345.424847][ T5388] ip_tables: iptables: counters copy to user failed while replacing table
[ 1345.441672][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7610'.
[ 1346.080715][ T5404] netlink: 5408 bytes leftover after parsing attributes in process `syz.1.7614'.
[ 1346.080774][ T5404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1346.529910][ T5422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1346.710234][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7621'.
[ 1346.933252][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7621'.
[ 1347.153253][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7628'.
[ 1347.153281][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7628'.
[ 1347.394720][ T5468] netlink: 'syz.3.7632': attribute type 1 has an invalid length.
[ 1347.551859][ T5473] gretap1: entered allmulticast mode
[ 1347.559349][ T5473] bond4: (slave gretap1): making interface the new active one
[ 1347.567012][ T5473] bond4: (slave gretap1): Enslaving as an active interface with an up link
[ 1347.959199][ T5486] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.959236][ T5486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1348.098328][ T5497] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1348.112338][ T5486] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1348.112372][ T5486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1348.320140][ T5486] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1348.320179][ T5486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1348.450929][ T5486] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1348.450967][ T5486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1348.776389][T14179] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1348.776424][T14179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1348.929101][ T5519] __nla_validate_parse: 8 callbacks suppressed
[ 1348.929124][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.074732][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.074765][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.135403][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.135437][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.332681][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7651'.
[ 1349.420114][ T5532] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7651'.
[ 1349.550902][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.550934][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1349.700128][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7648'.
[ 1350.171282][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1350.172133][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1350.651660][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1350.689101][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1351.323977][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1351.330286][T22896] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1351.336251][T24098] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1351.336681][T24098] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1351.336717][T24098] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1351.336740][T24098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1351.336770][T24098] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1351.336807][T24098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1351.336839][T24098] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1351.336871][T24098] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1351.336892][T24098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1351.631251][ T5550] syzkaller0: create flow: hash 2553669502 index 0
[ 1352.300163][ T5550] dummy0: entered promiscuous mode
[ 1352.301719][T24118] syzkaller0: tun_net_xmit 76
[ 1352.301926][T24118] syzkaller0: tun_net_xmit 48
[ 1354.854972][    C0] syzkaller0 (unregistering): delete flow: hash 2553669502 index 0
[ 1359.209275][ T5577] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[ 1359.219263][ T5581] __nla_validate_parse: 158 callbacks suppressed
[ 1359.219285][ T5581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7662'.
[ 1359.219304][ T5581] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[ 1359.220636][ T5588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7662'.
[ 1359.220659][ T5588] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[ 1359.439288][ T5592] masquerade_tg_check: 23 callbacks suppressed
[ 1359.439310][ T5592] xt_MASQUERADE: bad rangesize 20224
[ 1359.443030][ T5592] hsr0: entered allmulticast mode
[ 1359.443059][ T5592] hsr_slave_0: entered allmulticast mode
[ 1359.443076][ T5592] hsr_slave_1: entered allmulticast mode
[ 1359.580941][ T5591] hsr0: left allmulticast mode
[ 1359.580964][ T5591] hsr_slave_0: left allmulticast mode
[ 1359.580980][ T5591] hsr_slave_1: left allmulticast mode
[ 1359.945364][ T5604] bond7: entered allmulticast mode
[ 1359.945927][ T5604] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1360.008594][ T5615] netlink: 'syz.1.7672': attribute type 11 has an invalid length.
[ 1360.011509][ T5610] syzkaller0: entered promiscuous mode
[ 1360.011529][ T5610] syzkaller0: entered allmulticast mode
[ 1360.075041][ T5617] IPVS: rr: UDP 127.0.0.1:20000 - no destination available
[ 1360.124738][ T5611] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[ 1360.128504][ T5610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1360.159894][ T5609] tipc: Resetting bearer <eth:syzkaller0>
[ 1360.311845][ T5609] tipc: Disabling bearer <eth:syzkaller0>
[ 1360.426440][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7676'.
[ 1360.934470][ T5645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7682'.
[ 1361.030109][ T5645] vlan2: entered promiscuous mode
[ 1361.030132][ T5645] dummy0: entered promiscuous mode
[ 1361.171116][ T5654] ip_tables: iptables: counters copy to user failed while replacing table
[ 1361.751724][ T5675] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7696'.
[ 1361.954141][   T30] audit: type=1800 audit(1792277792.437:33): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7700" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1725 res=0 errno=0
[ 1361.954522][   T30] audit: type=1800 audit(1792277792.437:34): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7700" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1725 res=0 errno=0
[ 1362.005034][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7698'.
[ 1362.058854][ T5701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7699'.
[ 1362.067641][ T5688] Bluetooth: hci0: unsupported parameter 5161
[ 1362.067662][ T5688] Bluetooth: hci0: unsupported parameter 8192
[ 1362.067678][ T5688] Bluetooth: hci0: unsupported parameter 5161
[ 1362.067688][ T5688] Bluetooth: hci0: unsupported parameter 8192
[ 1362.242848][ T5706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7702'.
[ 1362.933278][ T5778] ip_tables: iptables: counters copy to user failed while replacing table
[ 1363.332501][ T5788] Cannot find map_set index 2 as target
[ 1363.342318][ T5800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7718'.
[ 1363.626661][ T5794] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1363.628386][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1363.630748][ T5794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1363.792561][ T5808] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7720'.
[ 1364.203510][ T5816] gre2: entered promiscuous mode
[ 1364.203534][ T5816] gre2: entered allmulticast mode
[ 1364.492078][ T5835] __nla_validate_parse: 3 callbacks suppressed
[ 1364.492097][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7729'.
[ 1364.976015][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7735'.
[ 1365.877339][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7743'.
[ 1366.088639][ T5886] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1366.142580][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7747'.
[ 1366.488090][ T5893] syzkaller0: entered promiscuous mode
[ 1366.488110][ T5893] syzkaller0: entered allmulticast mode
[ 1366.517392][ T5893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1366.574225][ T5893] tipc: Resetting bearer <eth:syzkaller0>
[ 1366.937178][ T5903] vlan3: entered promiscuous mode
[ 1366.937203][ T5903] bridge0: entered promiscuous mode
[ 1367.051422][ T5905] batadv_slave_1: entered promiscuous mode
[ 1367.219472][ T5912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7753'.
[ 1367.313362][ T5924] Set syz0 is full, maxelem 0 reached
[ 1367.313582][ T5901] batadv_slave_1: left promiscuous mode
[ 1367.645461][ T5931] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1368.590755][ T5955] netlink: 'syz.2.7764': attribute type 10 has an invalid length.
[ 1368.590779][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7764'.
[ 1368.590970][ T5955] dummy0: entered promiscuous mode
[ 1368.660683][ T5957] Unsupported ieee802154 address type: 0
[ 1368.774031][ T5959] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7766'.
[ 1368.949422][ T5959] hsr_slave_0 (unregistering): left promiscuous mode
[ 1369.000309][ T5967] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7769'.
[ 1369.526886][ T5982] tc_dump_action: action bad kind
[ 1370.197562][ T6002] syzkaller0: entered promiscuous mode
[ 1370.197584][ T6002] syzkaller0: entered allmulticast mode
[ 1370.290371][ T6012] FAULT_INJECTION: forcing a failure.
[ 1370.290371][ T6012] name failslab, interval 1, probability 0, space 0, times 0
[ 1370.291263][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.3.7782 Not tainted syzkaller #0 PREEMPT(full) 
[ 1370.291286][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1370.291298][ T6012] Call Trace:
[ 1370.291306][ T6012]  <TASK>
[ 1370.291315][ T6012]  dump_stack_lvl+0xe8/0x150
[ 1370.291347][ T6012]  should_fail_ex+0x410/0x560
[ 1370.291380][ T6012]  should_failslab+0xa8/0x100
[ 1370.291408][ T6012]  __kmalloc_cache_noprof+0xa3/0x600
[ 1370.291431][ T6012]  ? nf_tables_newchain+0x1e10/0x28b0
[ 1370.291458][ T6012]  ? nf_tables_newchain+0x1e10/0x28b0
[ 1370.291496][ T6012]  nf_tables_newchain+0x1e10/0x28b0
[ 1370.291540][ T6012]  ? __pfx_nf_tables_newchain+0x10/0x10
[ 1370.291600][ T6012]  ? lock_acquire+0x115/0x350
[ 1370.291621][ T6012]  ? nfnl_pernet+0x23/0x240
[ 1370.291676][ T6012]  ? __nla_parse+0x40/0x60
[ 1370.291709][ T6012]  nfnetlink_rcv+0x1288/0x28c0
[ 1370.291773][ T6012]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1370.291847][ T6012]  ? skb_clone+0x246/0x3a0
[ 1370.291888][ T6012]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1370.291914][ T6012]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1370.291940][ T6012]  netlink_unicast+0x8ef/0xa80
[ 1370.291986][ T6012]  netlink_sendmsg+0x813/0xb40
[ 1370.292016][ T6012]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1370.292045][ T6012]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1370.292074][ T6012]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1370.292093][ T6012]  sock_sendmsg_nosec+0x14e/0x190
[ 1370.292117][ T6012]  ____sys_sendmsg+0x54e/0x850
[ 1370.292148][ T6012]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1370.292184][ T6012]  ? import_iovec+0x73/0xa0
[ 1370.292215][ T6012]  ___sys_sendmsg+0x2a5/0x360
[ 1370.292239][ T6012]  ? __lock_acquire+0x747/0x2de0
[ 1370.292264][ T6012]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1370.292327][ T6012]  ? __fget_files+0x2a/0x420
[ 1370.292353][ T6012]  ? __fget_files+0x3a2/0x420
[ 1370.292391][ T6012]  __x64_sys_sendmsg+0x1b1/0x290
[ 1370.292419][ T6012]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1370.292469][ T6012]  do_syscall_64+0x166/0x520
[ 1370.292492][ T6012]  ? trace_irq_disable+0x3b/0x140
[ 1370.292512][ T6012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.292531][ T6012]  ? clear_bhb_loop+0x70/0xc0
[ 1370.292555][ T6012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1370.292574][ T6012] RIP: 0033:0x7f6752b9e559
[ 1370.292593][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1370.292610][ T6012] RSP: 002b:00007f6750df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1370.292631][ T6012] RAX: ffffffffffffffda RBX: 00007f6752e25fa0 RCX: 00007f6752b9e559
[ 1370.292645][ T6012] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1370.292657][ T6012] RBP: 00007f6750df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1370.292669][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1370.292681][ T6012] R13: 00007f6752e26038 R14: 00007f6752e25fa0 R15: 00007ffcb66d18b8
[ 1370.292714][ T6012]  </TASK>
[ 1370.907263][ T6017] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1371.399911][ T6042] 8021q: VLANs not supported on vxcan1
[ 1371.470459][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7789'.
[ 1372.492506][ T6069] rdma_rxe: rxe_newlink: failed to add bond0
[ 1372.947646][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7808'.
[ 1373.097427][ T6101] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1373.114623][ T6102] netlink: 'syz.1.7808': attribute type 3 has an invalid length.
[ 1373.114854][ T6102] netlink: 'syz.1.7808': attribute type 3 has an invalid length.
[ 1373.199216][ T6101] openvswitch: netlink: Multiple metadata blocks provided
[ 1373.208930][ T6101] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7808'.
[ 1373.382424][ T6107] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1373.436855][ T6107] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1373.582368][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7811'.
[ 1373.754231][ T6117] xt_socket: unknown flags 0x4
[ 1373.856009][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7811'.
[ 1373.864343][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7811'.
[ 1374.205299][ T6137] ip_tables: iptables: counters copy to user failed while replacing table
[ 1374.252347][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7819'.
[ 1374.622179][ T6150] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7824'.
[ 1374.655922][ T6152] syz_tun: entered allmulticast mode
[ 1374.670366][ T6155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7825'.
[ 1374.876929][ T6151] syz_tun: left allmulticast mode
[ 1375.041811][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7828'.
[ 1375.248841][ T6170] bond20: (slave ip6tnl3): The slave device specified does not support setting the MAC address
[ 1375.279806][ T6170] bond20: (slave ip6tnl3): Error -95 calling set_mac_address
[ 1375.300526][ T6175] tipc: Can't bind to reserved service type 1
[ 1375.452538][ T6181] hsr0: entered promiscuous mode
[ 1375.851234][ T6199] netlink: 'syz.4.7840': attribute type 1 has an invalid length.
[ 1375.984881][ T6199] netlink: 'syz.4.7840': attribute type 1 has an invalid length.
[ 1376.167960][ T6201] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1376.192494][ T6201] bond8: (slave bond9): making interface the new active one
[ 1376.193186][ T6201] bond8: (slave bond9): Enslaving as an active interface with an up link
[ 1376.389024][ T6216] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 1376.454231][ T6214] x_tables: duplicate underflow at hook 1
[ 1376.600588][ T6206] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[ 1377.031964][ T6234] netlink: 'syz.0.7846': attribute type 29 has an invalid length.
[ 1377.131012][ T6239] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1377.285797][ T6247] __nla_validate_parse: 2 callbacks suppressed
[ 1377.285817][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7851'.
[ 1377.594355][ T6253] netlink: 964 bytes leftover after parsing attributes in process `syz.3.7853'.
[ 1377.594382][ T6253] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1377.719669][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7858'.
[ 1377.743799][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7858'.
[ 1377.790647][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1377.801295][ T6268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1377.827830][ T6267] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7859'.
[ 1377.879510][ T6260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1378.005960][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7858'.
[ 1378.005981][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7858'.
[ 1378.006003][ T6260] netlink: 'syz.1.7858': attribute type 11 has an invalid length.
[ 1378.006015][ T6260] netlink: 'syz.1.7858': attribute type 14 has an invalid length.
[ 1378.008448][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7858'.
[ 1378.008467][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7858'.
[ 1378.008488][ T6264] netlink: 'syz.1.7858': attribute type 11 has an invalid length.
[ 1378.008500][ T6264] netlink: 'syz.1.7858': attribute type 14 has an invalid length.
[ 1378.122191][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1378.170332][ T6281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7863'.
[ 1378.221418][ T6281] ip6tnl4: entered allmulticast mode
[ 1378.230185][T24121] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1378.230421][T24121] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1378.254453][T23075] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1378.400067][ T6282] ovs-dp0: entered promiscuous mode
[ 1378.417763][T20037] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1378.958207][ T6317] netlink: 'syz.1.7869': attribute type 1 has an invalid length.
[ 1379.027739][ T6317] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1379.095407][T23075] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1379.157936][ T6320] bond6: (slave geneve4): making interface the new active one
[ 1379.186812][ T6320] bond6: (slave geneve4): Enslaving as an active interface with an up link
[ 1379.467254][ T6324] syzkaller0: entered promiscuous mode
[ 1379.467272][ T6324] syzkaller0: entered allmulticast mode
[ 1381.462481][ T6289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1381.796306][ T6337] netlink: 'syz.4.7875': attribute type 5 has an invalid length.
[ 1382.124312][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1386.173291][ T6395] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm
[ 1386.699660][ T6427] __nla_validate_parse: 12 callbacks suppressed
[ 1386.699680][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7894'.
[ 1386.811238][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7894'.
[ 1386.822613][ T6441] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1387.612191][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7897'.
[ 1387.922462][ T6462] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1388.401776][ T6479] nbd: must specify a size in bytes for the device
[ 1388.740500][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7909'.
[ 1389.508418][ T6512] ksmbd: Unknown IPC event: 8, ignore.
[ 1389.884099][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7915'.
[ 1389.910279][ T6515] veth0_macvtap: left promiscuous mode
[ 1389.961198][ T6530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7915'.
[ 1390.363795][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1390.722236][ T6549] syzkaller1: entered promiscuous mode
[ 1390.722259][ T6549] syzkaller1: entered allmulticast mode
[ 1390.798365][ T6549] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1390.896048][ T6553] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7923'.
[ 1390.897602][ T6551] syzkaller1: entered promiscuous mode
[ 1390.897622][ T6551] syzkaller1: entered allmulticast mode
[ 1390.898007][ T6553] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7923'.
[ 1391.186170][ T6559] netlink: 'syz.2.7925': attribute type 1 has an invalid length.
[ 1391.518494][ T6561] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[ 1391.611983][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7927'.
[ 1391.731071][ T6562] veth5: entered allmulticast mode
[ 1391.763873][ T6562] bond21: (slave veth5): Enslaving as an active interface with a down link
[ 1391.808348][ T6558] bond21: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1392.026705][ T6559] macvlan2: entered promiscuous mode
[ 1392.026728][ T6559] macvlan2: entered allmulticast mode
[ 1392.027366][ T6559] bond21: entered promiscuous mode
[ 1392.028005][ T6559] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1392.076732][ T6559] bond21: left promiscuous mode
[ 1392.258535][ T6579] ipvlan2: entered promiscuous mode
[ 1392.270905][ T6579] team0: Device ipvlan2 failed to register rx_handler
[ 1392.456179][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7929'.
[ 1392.485236][ T6589] ipvlan2: entered promiscuous mode
[ 1392.503504][ T6589] team0: Device ipvlan2 failed to register rx_handler
[ 1392.900958][ T6598] netlink: 'syz.0.7932': attribute type 1 has an invalid length.
[ 1392.900983][ T6598] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7932'.
[ 1392.901000][ T6598] nbd: must specify at least one socket
[ 1393.385496][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7935'.
[ 1393.978818][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7937'.
[ 1394.264361][ T6624] netlink: 'syz.2.7941': attribute type 8 has an invalid length.
[ 1394.272082][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7940'.
[ 1394.279421][ T6628] FAULT_INJECTION: forcing a failure.
[ 1394.279421][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1394.279450][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.4.7942 Not tainted syzkaller #0 PREEMPT(full) 
[ 1394.279471][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1394.279482][ T6628] Call Trace:
[ 1394.279492][ T6628]  <TASK>
[ 1394.279500][ T6628]  dump_stack_lvl+0xe8/0x150
[ 1394.279531][ T6628]  should_fail_ex+0x410/0x560
[ 1394.279567][ T6628]  _copy_from_user+0x2d/0xb0
[ 1394.279595][ T6628]  ___sys_sendmsg+0x1c6/0x360
[ 1394.279618][ T6628]  ? __lock_acquire+0x747/0x2de0
[ 1394.279643][ T6628]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1394.279701][ T6628]  ? __fget_files+0x2a/0x420
[ 1394.279726][ T6628]  ? __fget_files+0x3a2/0x420
[ 1394.279761][ T6628]  __x64_sys_sendmsg+0x1b1/0x290
[ 1394.279787][ T6628]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1394.279832][ T6628]  do_syscall_64+0x166/0x520
[ 1394.279855][ T6628]  ? trace_irq_disable+0x3b/0x140
[ 1394.279875][ T6628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.279893][ T6628]  ? clear_bhb_loop+0x70/0xc0
[ 1394.279915][ T6628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1394.279933][ T6628] RIP: 0033:0x7f03d1b9e559
[ 1394.279950][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1394.279965][ T6628] RSP: 002b:00007f03d29fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1394.279984][ T6628] RAX: ffffffffffffffda RBX: 00007f03d1e25fa0 RCX: 00007f03d1b9e559
[ 1394.279996][ T6628] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1394.280008][ T6628] RBP: 00007f03d29fd090 R08: 0000000000000000 R09: 0000000000000000
[ 1394.280019][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1394.280030][ T6628] R13: 00007f03d1e26038 R14: 00007f03d1e25fa0 R15: 00007ffcbc1448e8
[ 1394.280060][ T6628]  </TASK>
[ 1394.298868][ T6623] vlan2: entered allmulticast mode
[ 1394.298887][ T6623] bridge_slave_0: entered allmulticast mode
[ 1395.034588][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7946'.
[ 1395.056205][ T6657] netlink: 'syz.4.7947': attribute type 10 has an invalid length.
[ 1395.210220][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7946'.
[ 1396.237134][ T6657] bond0: (slave bridge0): Enslaving as an active interface with a down link
[ 1397.477454][ T6678] bridge3: entered promiscuous mode
[ 1397.477549][ T6678] bridge3: entered allmulticast mode
[ 1397.491457][ T6678] team0: Port device bridge3 added
[ 1397.493947][ T6679] bridge0: port 3(team0) entered blocking state
[ 1397.494039][ T6679] bridge0: port 3(team0) entered disabled state
[ 1397.494176][ T6679] team0: entered allmulticast mode
[ 1397.494190][ T6679] team_slave_0: entered allmulticast mode
[ 1397.494205][ T6679] team_slave_1: entered allmulticast mode
[ 1397.508021][ T6679] team0: entered promiscuous mode
[ 1397.508040][ T6679] team_slave_0: entered promiscuous mode
[ 1397.508202][ T6679] team_slave_1: entered promiscuous mode
[ 1397.705490][ T6691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7954'.
[ 1398.059140][ T6698] 8021q: VLANs not supported on vxcan0
[ 1398.769678][ T6724] FAULT_INJECTION: forcing a failure.
[ 1398.769678][ T6724] name failslab, interval 1, probability 0, space 0, times 0
[ 1398.769711][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.0.7962 Not tainted syzkaller #0 PREEMPT(full) 
[ 1398.769732][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1398.769744][ T6724] Call Trace:
[ 1398.769753][ T6724]  <TASK>
[ 1398.769761][ T6724]  dump_stack_lvl+0xe8/0x150
[ 1398.769793][ T6724]  should_fail_ex+0x410/0x560
[ 1398.769824][ T6724]  should_failslab+0xa8/0x100
[ 1398.769851][ T6724]  __kmalloc_cache_node_noprof+0xaa/0x620
[ 1398.769876][ T6724]  ? __css_rstat_updated+0x237/0x540
[ 1398.769897][ T6724]  ? __get_vm_area_node+0x155/0x2f0
[ 1398.769923][ T6724]  ? __get_vm_area_node+0x155/0x2f0
[ 1398.769958][ T6724]  __get_vm_area_node+0x155/0x2f0
[ 1398.769992][ T6724]  __vmalloc_node_range_noprof+0x343/0x1540
[ 1398.770013][ T6724]  ? bpf_check+0x115b/0x2ef0
[ 1398.770046][ T6724]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[ 1398.770075][ T6724]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[ 1398.770114][ T6724]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1398.770135][ T6724]  ? apparmor_capable+0x126/0x170
[ 1398.770159][ T6724]  ? bpf_lsm_capable+0x9/0x20
[ 1398.770177][ T6724]  ? security_capable+0x7e/0x2c0
[ 1398.770282][ T6724]  ? bpf_check+0x115b/0x2ef0
[ 1398.770301][ T6724]  __vmalloc_noprof+0xd2/0x120
[ 1398.770321][ T6724]  ? bpf_check+0x115b/0x2ef0
[ 1398.770345][ T6724]  bpf_check+0x115b/0x2ef0
[ 1398.770384][ T6724]  ? __pfx_bpf_check+0x10/0x10
[ 1398.770408][ T6724]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1398.770440][ T6724]  bpf_prog_load+0x14d6/0x1c20
[ 1398.770475][ T6724]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1398.770527][ T6724]  __sys_bpf+0xd0d/0xd90
[ 1398.770557][ T6724]  ? __pfx___sys_bpf+0x10/0x10
[ 1398.770591][ T6724]  ? __fget_files+0x2a/0x420
[ 1398.770642][ T6724]  ? ksys_write+0x242/0x270
[ 1398.770665][ T6724]  ? __pfx_ksys_write+0x10/0x10
[ 1398.770689][ T6724]  __x64_sys_bpf+0xba/0xd0
[ 1398.770712][ T6724]  do_syscall_64+0x166/0x520
[ 1398.770737][ T6724]  ? trace_irq_disable+0x3b/0x140
[ 1398.770757][ T6724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.770776][ T6724]  ? clear_bhb_loop+0x70/0xc0
[ 1398.770799][ T6724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.770818][ T6724] RIP: 0033:0x7faf41f9e559
[ 1398.770836][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1398.770851][ T6724] RSP: 002b:00007faf42e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1398.770872][ T6724] RAX: ffffffffffffffda RBX: 00007faf42225fa0 RCX: 00007faf41f9e559
[ 1398.770886][ T6724] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1398.770898][ T6724] RBP: 00007faf42e69090 R08: 0000000000000000 R09: 0000000000000000
[ 1398.770910][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1398.770921][ T6724] R13: 00007faf42226038 R14: 00007faf42225fa0 R15: 00007fff18ebb558
[ 1398.770953][ T6724]  </TASK>
[ 1398.877683][ T6724] syz.0.7962: vmalloc error: size 1496, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1398.877747][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.0.7962 Not tainted syzkaller #0 PREEMPT(full) 
[ 1398.877767][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1398.877779][ T6724] Call Trace:
[ 1398.877786][ T6724]  <TASK>
[ 1398.877795][ T6724]  dump_stack_lvl+0xe8/0x150
[ 1398.877825][ T6724]  warn_alloc+0x24d/0x270
[ 1398.877846][ T6724]  ? __kasan_kmalloc+0x22/0xb0
[ 1398.877872][ T6724]  ? __pfx_warn_alloc+0x10/0x10
[ 1398.877890][ T6724]  ? __css_rstat_updated+0x237/0x540
[ 1398.877911][ T6724]  ? __get_vm_area_node+0x155/0x2f0
[ 1398.877945][ T6724]  ? __get_vm_area_node+0x2a9/0x2f0
[ 1398.877978][ T6724]  __vmalloc_node_range_noprof+0x36b/0x1540
[ 1398.878010][ T6724]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[ 1398.878037][ T6724]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[ 1398.878074][ T6724]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1398.878094][ T6724]  ? apparmor_capable+0x126/0x170
[ 1398.878125][ T6724]  ? bpf_lsm_capable+0x9/0x20
[ 1398.878144][ T6724]  ? security_capable+0x7e/0x2c0
[ 1398.878171][ T6724]  ? bpf_check+0x115b/0x2ef0
[ 1398.878190][ T6724]  __vmalloc_noprof+0xd2/0x120
[ 1398.878209][ T6724]  ? bpf_check+0x115b/0x2ef0
[ 1398.878232][ T6724]  bpf_check+0x115b/0x2ef0
[ 1398.878270][ T6724]  ? __pfx_bpf_check+0x10/0x10
[ 1398.878293][ T6724]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1398.878323][ T6724]  bpf_prog_load+0x14d6/0x1c20
[ 1398.878357][ T6724]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1398.878403][ T6724]  __sys_bpf+0xd0d/0xd90
[ 1398.878436][ T6724]  ? __pfx___sys_bpf+0x10/0x10
[ 1398.878468][ T6724]  ? __fget_files+0x2a/0x420
[ 1398.878510][ T6724]  ? ksys_write+0x242/0x270
[ 1398.878532][ T6724]  ? __pfx_ksys_write+0x10/0x10
[ 1398.878555][ T6724]  __x64_sys_bpf+0xba/0xd0
[ 1398.878577][ T6724]  do_syscall_64+0x166/0x520
[ 1398.878600][ T6724]  ? trace_irq_disable+0x3b/0x140
[ 1398.878618][ T6724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.878637][ T6724]  ? clear_bhb_loop+0x70/0xc0
[ 1398.878660][ T6724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.878678][ T6724] RIP: 0033:0x7faf41f9e559
[ 1398.878695][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1398.878710][ T6724] RSP: 002b:00007faf42e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1398.878728][ T6724] RAX: ffffffffffffffda RBX: 00007faf42225fa0 RCX: 00007faf41f9e559
[ 1398.878741][ T6724] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1398.878753][ T6724] RBP: 00007faf42e69090 R08: 0000000000000000 R09: 0000000000000000
[ 1398.878765][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1398.878776][ T6724] R13: 00007faf42226038 R14: 00007faf42225fa0 R15: 00007fff18ebb558
[ 1398.878806][ T6724]  </TASK>
[ 1398.884483][ T6724] Mem-Info:
[ 1398.884496][ T6724] active_anon:20436 inactive_anon:51 isolated_anon:0
[ 1398.884496][ T6724]  active_file:16 inactive_file:44126 isolated_file:0
[ 1398.884496][ T6724]  unevictable:0 dirty:178 writeback:0
[ 1398.884496][ T6724]  slab_reclaimable:14462 slab_unreclaimable:161068
[ 1398.884496][ T6724]  mapped:32116 shmem:2978 pagetables:3596
[ 1398.884496][ T6724]  sec_pagetables:0 bounce:0
[ 1398.884496][ T6724]  kernel_misc_reclaimable:0
[ 1398.884496][ T6724]  free:1173147 free_pcp:7727 free_cma:0
[ 1398.884543][ T6724] Node 0 active_anon:81744kB inactive_anon:204kB active_file:64kB inactive_file:176308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128464kB dirty:712kB writeback:0kB shmem:11912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18820kB pagetables:14232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1398.884593][ T6724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1398.884636][ T6724] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1398.884687][ T6724] lowmem_reserve[]: 0 2468 2468 2468 2468
[ 1398.884719][ T6724] Node 0 DMA32 free:737736kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:81744kB inactive_anon:204kB active_file:64kB inactive_file:176308kB unevictable:0kB writepending:712kB zspages:0kB present:3129332kB managed:2527420kB mlocked:0kB bounce:0kB free_pcp:29404kB local_pcp:11452kB free_cma:0kB
[ 1398.884772][ T6724] lowmem_reserve[]: 0 0 0 0 0
[ 1398.884801][ T6724] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1398.894808][ T6724] lowmem_reserve[]: 0 0 0 0 0
[ 1398.894854][ T6724] Node 1 Normal free:3939492kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1504kB local_pcp:0kB free_cma:0kB
[ 1398.894906][ T6724] lowmem_reserve[]: 0 0 0 0 0
[ 1398.894936][ T6724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1398.895037][ T6724] Node 0 DMA32: 1506*4kB (UME) 208*8kB (UME) 18*16kB (UME) 587*32kB (UME) 59*64kB (UME) 155*128kB (UME) 173*256kB (UME) 192*512kB (UME) 168*1024kB (UE) 24*2048kB (UM) 79*4096kB (UM) = 737736kB
[ 1398.895181][ T6724] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1398.901913][ T6724] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 3*2048kB (U) 959*4096kB (M) = 3939492kB
[ 1398.902052][ T6724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1398.902067][ T6724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1398.902082][ T6724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1398.902096][ T6724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1398.902111][ T6724] 47116 total pagecache pages
[ 1398.902131][ T6724] 0 pages in swap cache
[ 1398.902138][ T6724] Free swap  = 124996kB
[ 1398.902145][ T6724] Total swap = 124996kB
[ 1398.902154][ T6724] 2097051 pages RAM
[ 1398.902160][ T6724] 0 pages HighMem/MovableOnly
[ 1398.902166][ T6724] 433580 pages reserved
[ 1398.902173][ T6724] 0 pages cma reserved
[ 1399.879612][ T6730] vlan0: entered promiscuous mode
[ 1399.879635][ T6730] batadv0: entered promiscuous mode
[ 1400.687254][ T6768] syzkaller0: left promiscuous mode
[ 1400.687280][ T6768] syzkaller0: left allmulticast mode
[ 1400.900040][ T6779] FAULT_INJECTION: forcing a failure.
[ 1400.900040][ T6779] name failslab, interval 1, probability 0, space 0, times 0
[ 1400.900073][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.1.7976 Not tainted syzkaller #0 PREEMPT(full) 
[ 1400.900094][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1400.900106][ T6779] Call Trace:
[ 1400.900114][ T6779]  <TASK>
[ 1400.900123][ T6779]  dump_stack_lvl+0xe8/0x150
[ 1400.900153][ T6779]  should_fail_ex+0x410/0x560
[ 1400.900183][ T6779]  should_failslab+0xa8/0x100
[ 1400.900210][ T6779]  __kmalloc_cache_node_noprof+0xaa/0x620
[ 1400.900233][ T6779]  ? __css_rstat_updated+0x237/0x540
[ 1400.900253][ T6779]  ? __get_vm_area_node+0x155/0x2f0
[ 1400.900278][ T6779]  ? __get_vm_area_node+0x155/0x2f0
[ 1400.900308][ T6779]  __get_vm_area_node+0x155/0x2f0
[ 1400.900339][ T6779]  __vmalloc_node_range_noprof+0x343/0x1540
[ 1400.900357][ T6779]  ? bpf_check+0x115b/0x2ef0
[ 1400.900388][ T6779]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[ 1400.900424][ T6779]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[ 1400.900459][ T6779]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1400.900477][ T6779]  ? apparmor_capable+0x126/0x170
[ 1400.900499][ T6779]  ? bpf_lsm_capable+0x9/0x20
[ 1400.900516][ T6779]  ? security_capable+0x7e/0x2c0
[ 1400.900542][ T6779]  ? bpf_check+0x115b/0x2ef0
[ 1400.900560][ T6779]  __vmalloc_noprof+0xd2/0x120
[ 1400.900578][ T6779]  ? bpf_check+0x115b/0x2ef0
[ 1400.900604][ T6779]  bpf_check+0x115b/0x2ef0
[ 1400.900641][ T6779]  ? __pfx_bpf_check+0x10/0x10
[ 1400.900665][ T6779]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1400.900696][ T6779]  bpf_prog_load+0x14d6/0x1c20
[ 1400.900732][ T6779]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1400.900781][ T6779]  __sys_bpf+0xd0d/0xd90
[ 1400.900809][ T6779]  ? __pfx___sys_bpf+0x10/0x10
[ 1400.900842][ T6779]  ? __fget_files+0x2a/0x420
[ 1400.900888][ T6779]  ? ksys_write+0x242/0x270
[ 1400.900909][ T6779]  ? __pfx_ksys_write+0x10/0x10
[ 1400.900933][ T6779]  __x64_sys_bpf+0xba/0xd0
[ 1400.900958][ T6779]  do_syscall_64+0x166/0x520
[ 1400.900978][ T6779]  ? trace_irq_disable+0x3b/0x140
[ 1400.900997][ T6779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1400.901016][ T6779]  ? clear_bhb_loop+0x70/0xc0
[ 1400.901037][ T6779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1400.901054][ T6779] RIP: 0033:0x7fce4a39e559
[ 1400.901071][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1400.901085][ T6779] RSP: 002b:00007fce4b202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1400.901103][ T6779] RAX: ffffffffffffffda RBX: 00007fce4a625fa0 RCX: 00007fce4a39e559
[ 1400.901115][ T6779] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1400.901127][ T6779] RBP: 00007fce4b202090 R08: 0000000000000000 R09: 0000000000000000
[ 1400.901138][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1400.901148][ T6779] R13: 00007fce4a626038 R14: 00007fce4a625fa0 R15: 00007ffc0375c838
[ 1400.901179][ T6779]  </TASK>
[ 1401.390591][ T6787] netlink: 'syz.1.7977': attribute type 1 has an invalid length.
[ 1402.463327][ T6798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7979'.
[ 1402.463356][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7979'.
[ 1402.463371][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7979'.
[ 1402.697178][ T5614] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1402.699894][ T5614] Bluetooth: hci0: command 0x0406 tx timeout
[ 1402.976952][ T6808] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1403.414770][ T6819] netlink: Invalid conntrack helper
[ 1403.414802][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1405.086083][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1406.412950][ T6822] FAULT_INJECTION: forcing a failure.
[ 1406.412950][ T6822] name failslab, interval 1, probability 0, space 0, times 0
[ 1406.412983][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.2.7986 Not tainted syzkaller #0 PREEMPT(full) 
[ 1406.413004][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1406.413015][ T6822] Call Trace:
[ 1406.413023][ T6822]  <TASK>
[ 1406.413031][ T6822]  dump_stack_lvl+0xe8/0x150
[ 1406.413063][ T6822]  should_fail_ex+0x410/0x560
[ 1406.413093][ T6822]  should_failslab+0xa8/0x100
[ 1406.413118][ T6822]  ? ovs_flow_alloc+0x24/0x1f0
[ 1406.413145][ T6822]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1406.413168][ T6822]  ? ovs_flow_alloc+0x24/0x1f0
[ 1406.413200][ T6822]  ovs_flow_alloc+0x24/0x1f0
[ 1406.413230][ T6822]  ovs_packet_cmd_execute+0x5b6/0xf10
[ 1406.413260][ T6822]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1406.413283][ T6822]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1406.413309][ T6822]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1406.413350][ T6822]  genl_family_rcv_msg_doit+0x233/0x340
[ 1406.413385][ T6822]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1406.413424][ T6822]  ? bpf_lsm_capable+0x9/0x20
[ 1406.413441][ T6822]  ? security_capable+0x7e/0x2c0
[ 1406.413475][ T6822]  genl_rcv_msg+0x614/0x7a0
[ 1406.413505][ T6822]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1406.413528][ T6822]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1406.413562][ T6822]  netlink_rcv_skb+0x226/0x4a0
[ 1406.413583][ T6822]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1406.413605][ T6822]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1406.413636][ T6822]  ? down_read+0x2be/0x330
[ 1406.413665][ T6822]  genl_rcv+0x28/0x40
[ 1406.413683][ T6822]  netlink_unicast+0x8ef/0xa80
[ 1406.413726][ T6822]  netlink_sendmsg+0x813/0xb40
[ 1406.413754][ T6822]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1406.413780][ T6822]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1406.413805][ T6822]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1406.413822][ T6822]  sock_sendmsg_nosec+0x14e/0x190
[ 1406.413843][ T6822]  ____sys_sendmsg+0x54e/0x850
[ 1406.413871][ T6822]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1406.413902][ T6822]  ? import_iovec+0x73/0xa0
[ 1406.413927][ T6822]  ___sys_sendmsg+0x2a5/0x360
[ 1406.413949][ T6822]  ? __lock_acquire+0x747/0x2de0
[ 1406.413972][ T6822]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1406.414029][ T6822]  ? __fget_files+0x2a/0x420
[ 1406.414053][ T6822]  ? __fget_files+0x3a2/0x420
[ 1406.414088][ T6822]  __x64_sys_sendmsg+0x1b1/0x290
[ 1406.414115][ T6822]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1406.414162][ T6822]  do_syscall_64+0x166/0x520
[ 1406.414182][ T6822]  ? trace_irq_disable+0x3b/0x140
[ 1406.414198][ T6822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.414215][ T6822]  ? clear_bhb_loop+0x70/0xc0
[ 1406.414237][ T6822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.414255][ T6822] RIP: 0033:0x7f6ad0f9e559
[ 1406.414273][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1406.414288][ T6822] RSP: 002b:00007f6ad1e15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1406.414309][ T6822] RAX: ffffffffffffffda RBX: 00007f6ad1225fa0 RCX: 00007f6ad0f9e559
[ 1406.414323][ T6822] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1406.414335][ T6822] RBP: 00007f6ad1e15090 R08: 0000000000000000 R09: 0000000000000000
[ 1406.414355][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.414367][ T6822] R13: 00007f6ad1226038 R14: 00007f6ad1225fa0 R15: 00007ffc80d12ed8
[ 1406.414399][ T6822]  </TASK>
[ 1406.804616][ T6829] FAULT_INJECTION: forcing a failure.
[ 1406.804616][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1406.804648][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.3.7989 Not tainted syzkaller #0 PREEMPT(full) 
[ 1406.804668][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1406.804679][ T6829] Call Trace:
[ 1406.804687][ T6829]  <TASK>
[ 1406.804696][ T6829]  dump_stack_lvl+0xe8/0x150
[ 1406.804727][ T6829]  should_fail_ex+0x410/0x560
[ 1406.804757][ T6829]  _copy_from_user+0x2d/0xb0
[ 1406.804785][ T6829]  copy_from_bpfptr+0x5c/0x90
[ 1406.804807][ T6829]  bpf_prog_load+0xcdb/0x1c20
[ 1406.804842][ T6829]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1406.804898][ T6829]  __sys_bpf+0xd0d/0xd90
[ 1406.804928][ T6829]  ? __pfx___sys_bpf+0x10/0x10
[ 1406.804961][ T6829]  ? __fget_files+0x2a/0x420
[ 1406.805004][ T6829]  ? ksys_write+0x242/0x270
[ 1406.805026][ T6829]  ? __pfx_ksys_write+0x10/0x10
[ 1406.805051][ T6829]  __x64_sys_bpf+0xba/0xd0
[ 1406.805074][ T6829]  do_syscall_64+0x166/0x520
[ 1406.805097][ T6829]  ? trace_irq_disable+0x3b/0x140
[ 1406.805116][ T6829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.805135][ T6829]  ? clear_bhb_loop+0x70/0xc0
[ 1406.805157][ T6829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.805176][ T6829] RIP: 0033:0x7f6752b9e559
[ 1406.805194][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1406.805208][ T6829] RSP: 002b:00007f6750df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1406.805228][ T6829] RAX: ffffffffffffffda RBX: 00007f6752e25fa0 RCX: 00007f6752b9e559
[ 1406.805241][ T6829] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1406.805252][ T6829] RBP: 00007f6750df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1406.805264][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.805276][ T6829] R13: 00007f6752e26038 R14: 00007f6752e25fa0 R15: 00007ffcb66d18b8
[ 1406.805307][ T6829]  </TASK>
[ 1406.809878][ T6830] netlink: 'syz.4.7987': attribute type 21 has an invalid length.
[ 1406.964043][T20358] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1407.181460][ T6824] dummy0: left promiscuous mode
[ 1407.181942][ T6824] geneve1: left promiscuous mode
[ 1407.182145][ T6824] bond3: left promiscuous mode
[ 1407.182159][ T6824] veth3: left promiscuous mode
[ 1407.204616][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7993'.
[ 1407.204635][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7993'.
[ 1407.366268][T20356] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1407.401457][ T6846] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1407.429222][ T6846] bond8 (unregistering): Released all slaves
[ 1407.600637][ T6843] bridge0: entered allmulticast mode
[ 1408.021262][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7997'.
[ 1408.021286][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7997'.
[ 1408.085371][ T6882] x_tables: ip_tables: icmp match: only valid for protocol 1
[ 1408.234705][ T6885] FAULT_INJECTION: forcing a failure.
[ 1408.234705][ T6885] name failslab, interval 1, probability 0, space 0, times 0
[ 1408.234737][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.0.8000 Not tainted syzkaller #0 PREEMPT(full) 
[ 1408.234758][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1408.234769][ T6885] Call Trace:
[ 1408.234776][ T6885]  <TASK>
[ 1408.234784][ T6885]  dump_stack_lvl+0xe8/0x150
[ 1408.234815][ T6885]  should_fail_ex+0x410/0x560
[ 1408.234845][ T6885]  should_failslab+0xa8/0x100
[ 1408.234869][ T6885]  ? ovs_flow_alloc+0x24/0x1f0
[ 1408.234894][ T6885]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1408.234915][ T6885]  ? ovs_flow_alloc+0x24/0x1f0
[ 1408.234945][ T6885]  ovs_flow_alloc+0x24/0x1f0
[ 1408.234974][ T6885]  ovs_packet_cmd_execute+0x5b6/0xf10
[ 1408.235003][ T6885]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1408.235027][ T6885]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1408.235051][ T6885]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1408.235082][ T6885]  genl_family_rcv_msg_doit+0x233/0x340
[ 1408.235110][ T6885]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1408.235145][ T6885]  ? bpf_lsm_capable+0x9/0x20
[ 1408.235162][ T6885]  ? security_capable+0x7e/0x2c0
[ 1408.235203][ T6885]  genl_rcv_msg+0x614/0x7a0
[ 1408.235235][ T6885]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1408.235259][ T6885]  ? __pfx_ovs_packet_cmd_execute+0x10/0x10
[ 1408.235295][ T6885]  netlink_rcv_skb+0x226/0x4a0
[ 1408.235317][ T6885]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1408.235343][ T6885]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1408.235379][ T6885]  ? down_read+0x2be/0x330
[ 1408.235410][ T6885]  genl_rcv+0x28/0x40
[ 1408.235432][ T6885]  netlink_unicast+0x8ef/0xa80
[ 1408.235479][ T6885]  netlink_sendmsg+0x813/0xb40
[ 1408.235509][ T6885]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1408.235539][ T6885]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1408.235569][ T6885]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1408.235589][ T6885]  sock_sendmsg_nosec+0x14e/0x190
[ 1408.235611][ T6885]  ____sys_sendmsg+0x54e/0x850
[ 1408.235643][ T6885]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1408.235678][ T6885]  ? import_iovec+0x73/0xa0
[ 1408.235710][ T6885]  ___sys_sendmsg+0x2a5/0x360
[ 1408.235733][ T6885]  ? __lock_acquire+0x747/0x2de0
[ 1408.235759][ T6885]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1408.235823][ T6885]  ? __fget_files+0x2a/0x420
[ 1408.235850][ T6885]  ? __fget_files+0x3a2/0x420
[ 1408.235888][ T6885]  __x64_sys_sendmsg+0x1b1/0x290
[ 1408.235917][ T6885]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1408.235966][ T6885]  do_syscall_64+0x166/0x520
[ 1408.235990][ T6885]  ? trace_irq_disable+0x3b/0x140
[ 1408.236009][ T6885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.236030][ T6885]  ? clear_bhb_loop+0x70/0xc0
[ 1408.236054][ T6885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.236073][ T6885] RIP: 0033:0x7faf41f9e559
[ 1408.236091][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1408.236108][ T6885] RSP: 002b:00007faf42e69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1408.236128][ T6885] RAX: ffffffffffffffda RBX: 00007faf42225fa0 RCX: 00007faf41f9e559
[ 1408.236143][ T6885] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1408.236155][ T6885] RBP: 00007faf42e69090 R08: 0000000000000000 R09: 0000000000000000
[ 1408.236168][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1408.236186][ T6885] R13: 00007faf42226038 R14: 00007faf42225fa0 R15: 00007fff18ebb558
[ 1408.236219][ T6885]  </TASK>
[ 1408.246436][ T6880] tc action pedit offset must be on 32 bit boundaries
[ 1408.746557][ T6893] syzkaller0: entered promiscuous mode
[ 1408.746581][ T6893] syzkaller0: entered allmulticast mode
[ 1408.786321][   T30] audit: type=1804 audit(1792277839.257:35): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8002" name="/newroot/447/cgroup.controllers" dev="tmpfs" ino=2292 res=1 errno=0
[ 1408.789958][   T30] audit: type=1800 audit(1792277839.267:36): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8002" name="cgroup.controllers" dev="tmpfs" ino=2292 res=0 errno=0
[ 1408.802336][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8001'.
[ 1409.053787][ T6904] syzkaller0: entered promiscuous mode
[ 1409.053810][ T6904] syzkaller0: entered allmulticast mode
[ 1409.054858][ T6904] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[ 1410.302234][ T6856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1410.547360][ T6961] bridge0: Caught tx_queue_len zero misconfig
[ 1410.551657][ T6962] sctp: [Deprecated]: syz.4.8012 (pid 6962) Use of int in max_burst socket option.
[ 1410.551657][ T6962] Use struct sctp_assoc_value instead
[ 1410.591073][ T6954] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1410.903938][ T6979] sctp: [Deprecated]: syz.0.8018 (pid 6979) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1410.903938][ T6979] Use struct sctp_sack_info instead
[ 1411.279245][ T6995] sctp: [Deprecated]: syz.4.8024 (pid 6995) Use of int in maxseg socket option.
[ 1411.279245][ T6995] Use struct sctp_assoc_value instead
[ 1411.312542][ T6992] batadv0: entered promiscuous mode
[ 1411.343211][ T6992] macvlan2: entered promiscuous mode
[ 1411.343343][ T6992] macvlan2: entered allmulticast mode
[ 1411.343351][ T6992] batadv0: entered allmulticast mode
[ 1411.347331][ T6992] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1411.348956][ T6992] batadv0: left allmulticast mode
[ 1411.349132][ T6992] batadv0: left promiscuous mode
[ 1411.447798][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8026'.
[ 1411.520467][ T7001] ip6tnl2: entered allmulticast mode
[ 1411.528758][ T6921] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1411.528970][ T6921] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1411.556979][T20358] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1412.035209][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8029'.
[ 1412.047837][ T4774] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1412.150912][ T7029] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[ 1412.164137][ T7032] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8030'.
[ 1412.524349][T20358] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1413.116245][ T7063] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1413.206884][ T7063] netlink: 'syz.0.8037': attribute type 1 has an invalid length.
[ 1413.206906][ T7063] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.8037'.
[ 1413.235546][ T7063] netlink: 'syz.0.8037': attribute type 1 has an invalid length.
[ 1413.235567][ T7063] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.8037'.
[ 1413.605589][ T7075] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1413.801685][ T7073] rxe_eth0 speed is unknown, defaulting to 1000
[ 1413.841237][ T7078] netlink: 'syz.3.8043': attribute type 1 has an invalid length.
[ 1413.875866][ T7078] netlink: 'syz.3.8043': attribute type 2 has an invalid length.
[ 1413.912791][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8043'.
[ 1414.348956][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8048'.
[ 1414.538692][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1414.744746][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1414.744962][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1414.785477][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1414.785716][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1414.785917][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1415.064185][ T7112] tun0: tun_chr_ioctl cmd 1074025675
[ 1415.064211][ T7112] tun0: persist disabled
[ 1415.141365][ T7073] wg2 speed is unknown, defaulting to 1000
[ 1415.163401][ T7080] rxe_eth0 speed is unknown, defaulting to 1000
[ 1415.614522][ T7125] netlink: 'syz.4.8055': attribute type 1 has an invalid length.
[ 1415.677215][ T7126] netlink: 'syz.4.8055': attribute type 1 has an invalid length.
[ 1415.749323][ T7080] wg2 speed is unknown, defaulting to 1000
[ 1415.883800][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1415.905782][ T7073] virt_wifi0 speed is unknown, defaulting to 1000
[ 1416.250042][ T7139] ip6tnl3: entered allmulticast mode
[ 1416.406889][ T7080] virt_wifi0 speed is unknown, defaulting to 1000
[ 1416.568984][ T7149] netlink: 'syz.4.8061': attribute type 2 has an invalid length.
[ 1418.440622][ T7198] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[ 1418.528389][ T7202] IPVS: set_ctl: invalid protocol: 43 172.20.20.17:20004
[ 1419.333258][ T7226] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1419.333388][ T7226] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1419.711909][ T7239] FAULT_INJECTION: forcing a failure.
[ 1419.711909][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1419.711940][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.2.8087 Not tainted syzkaller #0 PREEMPT(full) 
[ 1419.711961][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1419.711972][ T7239] Call Trace:
[ 1419.711980][ T7239]  <TASK>
[ 1419.711989][ T7239]  dump_stack_lvl+0xe8/0x150
[ 1419.712020][ T7239]  should_fail_ex+0x410/0x560
[ 1419.712060][ T7239]  _copy_to_user+0x31/0xb0
[ 1419.712090][ T7239]  simple_read_from_buffer+0xe1/0x170
[ 1419.712124][ T7239]  proc_fail_nth_read+0x1bb/0x230
[ 1419.712145][ T7239]  ? common_file_perm+0x20e/0x2b0
[ 1419.712175][ T7239]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1419.712201][ T7239]  ? rw_verify_area+0x24a/0x4c0
[ 1419.712222][ T7239]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1419.712242][ T7239]  vfs_read+0x213/0xa80
[ 1419.712267][ T7239]  ? __pfx___mutex_lock+0x10/0x10
[ 1419.712293][ T7239]  ? __pfx_vfs_read+0x10/0x10
[ 1419.712314][ T7239]  ? __fget_files+0x2a/0x420
[ 1419.712346][ T7239]  ? __fget_files+0x3a2/0x420
[ 1419.712372][ T7239]  ? __fget_files+0x2a/0x420
[ 1419.712408][ T7239]  ksys_read+0x150/0x270
[ 1419.712431][ T7239]  ? __pfx_ksys_read+0x10/0x10
[ 1419.712462][ T7239]  do_syscall_64+0x166/0x520
[ 1419.712486][ T7239]  ? trace_irq_disable+0x3b/0x140
[ 1419.712505][ T7239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1419.712525][ T7239]  ? clear_bhb_loop+0x70/0xc0
[ 1419.712549][ T7239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1419.712568][ T7239] RIP: 0033:0x7f6ad0f5ed8e
[ 1419.712585][ T7239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1419.712603][ T7239] RSP: 002b:00007f6ad1e14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1419.712624][ T7239] RAX: ffffffffffffffda RBX: 00007f6ad1e156c0 RCX: 00007f6ad0f5ed8e
[ 1419.712639][ T7239] RDX: 000000000000000f RSI: 00007f6ad1e150a0 RDI: 0000000000000004
[ 1419.712651][ T7239] RBP: 00007f6ad1e15090 R08: 0000000000000000 R09: 0000000000000000
[ 1419.712663][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1419.712675][ T7239] R13: 00007f6ad1226038 R14: 00007f6ad1225fa0 R15: 00007ffc80d12ed8
[ 1419.712708][ T7239]  </TASK>
[ 1420.143083][ T7251] SET target dimension over the limit!
[ 1420.990153][ T7294] netlink: 'syz.4.8104': attribute type 1 has an invalid length.
[ 1421.043905][ T7295] wg2: Caught tx_queue_len zero misconfig
[ 1421.046045][ T7297] netlink: Conntrack attr has 8 unknown bytes
[ 1421.046078][ T7297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1421.063487][ T7294] __nla_validate_parse: 63 callbacks suppressed
[ 1421.063505][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8104'.
[ 1421.128935][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8107'.
[ 1421.128976][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8107'.
[ 1421.162426][ T7299] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8107'.
[ 1421.330152][ T7303] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[ 1421.352744][ T7303] bond8 (unregistering): Released all slaves
[ 1421.845514][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8117'.
[ 1421.845539][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8117'.
[ 1422.202972][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8120'.
[ 1422.450431][ T7346] bond10: option active_slave: mode dependency failed, not supported in mode broadcast(3)
[ 1422.486914][ T7346] bond10 (unregistering): Released all slaves
[ 1422.499331][ T7369] FAULT_INJECTION: forcing a failure.
[ 1422.499331][ T7369] name failslab, interval 1, probability 0, space 0, times 0
[ 1422.499361][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.3.8127 Not tainted syzkaller #0 PREEMPT(full) 
[ 1422.499381][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1422.499393][ T7369] Call Trace:
[ 1422.499401][ T7369]  <TASK>
[ 1422.499408][ T7369]  dump_stack_lvl+0xe8/0x150
[ 1422.499440][ T7369]  should_fail_ex+0x410/0x560
[ 1422.499469][ T7369]  should_failslab+0xa8/0x100
[ 1422.499496][ T7369]  __kvmalloc_node_noprof+0x176/0x820
[ 1422.499522][ T7369]  ? bpf_check_cfg+0x13f/0x3840
[ 1422.499540][ T7369]  ? bpf_check_cfg+0x13f/0x3840
[ 1422.499564][ T7369]  bpf_check_cfg+0x13f/0x3840
[ 1422.499606][ T7369]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1422.499626][ T7369]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1422.499656][ T7369]  ? __pfx_bpf_check_cfg+0x10/0x10
[ 1422.499674][ T7369]  ? bpf_prog_calc_tag+0x310/0x370
[ 1422.499694][ T7369]  ? vfree+0x42b/0x490
[ 1422.499725][ T7369]  ? bpf_prog_calc_tag+0x310/0x370
[ 1422.499750][ T7369]  ? check_and_resolve_insns+0x1d54/0x21d0
[ 1422.499788][ T7369]  ? __pfx_check_and_resolve_insns+0x10/0x10
[ 1422.499812][ T7369]  ? add_kfuncs+0x251/0x2e0
[ 1422.499838][ T7369]  bpf_check+0x25fb/0x2ef0
[ 1422.499876][ T7369]  ? __pfx_bpf_check+0x10/0x10
[ 1422.499898][ T7369]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1422.499928][ T7369]  bpf_prog_load+0x14d6/0x1c20
[ 1422.499962][ T7369]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1422.500008][ T7369]  __sys_bpf+0xd0d/0xd90
[ 1422.500036][ T7369]  ? __pfx___sys_bpf+0x10/0x10
[ 1422.500068][ T7369]  ? __fget_files+0x2a/0x420
[ 1422.500111][ T7369]  ? ksys_write+0x242/0x270
[ 1422.500132][ T7369]  ? __pfx_ksys_write+0x10/0x10
[ 1422.500155][ T7369]  __x64_sys_bpf+0xba/0xd0
[ 1422.500177][ T7369]  do_syscall_64+0x166/0x520
[ 1422.500199][ T7369]  ? trace_irq_disable+0x3b/0x140
[ 1422.500217][ T7369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.500235][ T7369]  ? clear_bhb_loop+0x70/0xc0
[ 1422.500258][ T7369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1422.500275][ T7369] RIP: 0033:0x7f6752b9e559
[ 1422.500293][ T7369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1422.500308][ T7369] RSP: 002b:00007f6750df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1422.500326][ T7369] RAX: ffffffffffffffda RBX: 00007f6752e25fa0 RCX: 00007f6752b9e559
[ 1422.500339][ T7369] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1422.500351][ T7369] RBP: 00007f6750df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1422.500363][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1422.500374][ T7369] R13: 00007f6752e26038 R14: 00007f6752e25fa0 R15: 00007ffcb66d18b8
[ 1422.500403][ T7369]  </TASK>
[ 1423.003802][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1423.054090][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8131'.
[ 1423.362125][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8136'.
[ 1423.362159][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8136'.
[ 1423.454163][ T7398] openvswitch: netlink: IP tunnel TTL not specified.
[ 1423.454195][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1423.970647][ T7412] syzkaller1: entered allmulticast mode
[ 1424.199040][ T7416] syzkaller1: entered promiscuous mode
[ 1424.199062][ T7416] syzkaller1: entered allmulticast mode
[ 1424.923782][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1425.599212][ T7452] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1425.926337][ T7467] bond0: Caught tx_queue_len zero misconfig
[ 1426.011624][ T7475] netlink: 'syz.0.8162': attribute type 2 has an invalid length.
[ 1426.217989][ T7475] ´: entered promiscuous mode
[ 1426.864596][ T7514] __nla_validate_parse: 1 callbacks suppressed
[ 1426.864618][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8170'.
[ 1427.272787][ T7532] openvswitch: netlink: Message has -2 unknown bytes.
[ 1427.272824][ T7532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1428.791735][ T7574] netlink: 34 bytes leftover after parsing attributes in process `syz.2.8184'.
[ 1430.058162][ T7534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1430.238945][ T7581] tipc: Enabled bearer <eth:hsr0>, priority 20
[ 1430.360274][ T7586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8188'.
[ 1430.404510][ T7586] netlink: 'syz.0.8188': attribute type 4 has an invalid length.
[ 1430.600951][ T7605] xt_hashlimit: size too large, truncated to 1048576
[ 1430.649450][ T7600] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1430.671344][ T7600] bond7 (unregistering): Released all slaves
[ 1430.691304][ T7610] xt_hashlimit: size too large, truncated to 1048576
[ 1430.710003][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8194'.
[ 1430.710037][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8194'.
[ 1431.290161][ T7617] bond12: option lacp_rate: invalid value (128)
[ 1431.313436][ T7617] bond12 (unregistering): Released all slaves
[ 1432.069405][ T7666] netlink: 'syz.3.8209': attribute type 1 has an invalid length.
[ 1432.069426][ T7666] netlink: 'syz.3.8209': attribute type 2 has an invalid length.
[ 1432.161759][ T7675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1432.162209][ T7675] syzkaller0: entered promiscuous mode
[ 1432.162227][ T7675] syzkaller0: entered allmulticast mode
[ 1432.549707][ T7679] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1432.814811][ T7661] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1432.902038][ T7692] syzkaller0: entered promiscuous mode
[ 1432.902060][ T7692] syzkaller0: entered allmulticast mode
[ 1433.008267][ T7692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1433.026383][ T7684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1433.037918][ T7692] tipc: Resetting bearer <eth:syzkaller0>
[ 1433.067014][ T7692] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1433.087152][ T7691] tipc: Resetting bearer <eth:syzkaller0>
[ 1433.106970][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1433.167526][ T7691] tipc: Disabling bearer <eth:syzkaller0>
[ 1433.192160][ T7684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1433.442236][ T7715] veth1_macvtap: entered promiscuous mode
[ 1433.442360][ T7715] macsec0: entered promiscuous mode
[ 1433.666030][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8222'.
[ 1434.317146][ T7740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1435.164177][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1435.474279][ T7789] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8238'.
[ 1436.145805][ T7812] netlink: 'syz.0.8247': attribute type 4 has an invalid length.
[ 1436.150162][ T7813] netlink: 'syz.0.8247': attribute type 4 has an invalid length.
[ 1436.210818][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8247'.
[ 1436.218440][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8247'.
[ 1436.246075][ T7815] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[ 1436.407416][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8251'.
[ 1436.407438][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8251'.
[ 1436.707306][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8255'.
[ 1436.707351][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8255'.
[ 1436.731212][ T7840] netlink: 'syz.4.8255': attribute type 1 has an invalid length.
[ 1436.796250][ T7840] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1437.663915][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8269'.
[ 1437.665739][T31871] Bluetooth: hci2: Malformed Event: 0x02
[ 1437.742377][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8267'.
[ 1437.781660][ T7882] netlink: 'syz.4.8271': attribute type 1 has an invalid length.
[ 1437.782212][ T7883] netlink: 'syz.4.8271': attribute type 1 has an invalid length.
[ 1437.812726][ T7880] sctp: [Deprecated]: syz.1.8270 (pid 7880) Use of int in max_burst socket option.
[ 1437.812726][ T7880] Use struct sctp_assoc_value instead
[ 1437.938241][ T7882] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1438.075138][ T7893] ip_tables: iptables: counters copy to user failed while replacing table
[ 1438.078429][ T7886] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1438.082762][ T7886] bond13: (slave gre0): The slave device specified does not support setting the MAC address
[ 1438.083430][ T7886] bond13: (slave gre0): Error -95 calling set_mac_address
[ 1438.308192][ T7888] bond14 (unregistering): Released all slaves
[ 1438.478898][ T7904] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1438.772019][ T7915] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1438.811642][ T7915] __nla_validate_parse: 5 callbacks suppressed
[ 1438.811662][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8277'.
[ 1438.948508][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8279'.
[ 1439.014418][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8279'.
[ 1439.030670][ T7921] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8279'.
[ 1439.089996][ T7919] hsr0: left promiscuous mode
[ 1439.090932][ T7919] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1439.425785][ T7945] FAULT_INJECTION: forcing a failure.
[ 1439.425785][ T7945] name failslab, interval 1, probability 0, space 0, times 0
[ 1439.425818][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.2.8287 Not tainted syzkaller #0 PREEMPT(full) 
[ 1439.425839][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1439.425850][ T7945] Call Trace:
[ 1439.425858][ T7945]  <TASK>
[ 1439.425866][ T7945]  dump_stack_lvl+0xe8/0x150
[ 1439.425897][ T7945]  should_fail_ex+0x410/0x560
[ 1439.425927][ T7945]  should_failslab+0xa8/0x100
[ 1439.425953][ T7945]  __kvmalloc_node_noprof+0x176/0x820
[ 1439.425977][ T7945]  ? __kvmalloc_node_noprof+0x345/0x820
[ 1439.425996][ T7945]  ? bpf_compute_scc+0xa26/0xb10
[ 1439.426014][ T7945]  ? bpf_compute_scc+0xa26/0xb10
[ 1439.426038][ T7945]  bpf_compute_scc+0xa26/0xb10
[ 1439.426074][ T7945]  bpf_check+0x271e/0x2ef0
[ 1439.426111][ T7945]  ? __pfx_bpf_check+0x10/0x10
[ 1439.426132][ T7945]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1439.426162][ T7945]  bpf_prog_load+0x14d6/0x1c20
[ 1439.426197][ T7945]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1439.426236][ T7945]  __sys_bpf+0xd0d/0xd90
[ 1439.426261][ T7945]  ? __pfx___sys_bpf+0x10/0x10
[ 1439.426287][ T7945]  ? __fget_files+0x2a/0x420
[ 1439.426322][ T7945]  ? ksys_write+0x242/0x270
[ 1439.426342][ T7945]  ? __pfx_ksys_write+0x10/0x10
[ 1439.426363][ T7945]  __x64_sys_bpf+0xba/0xd0
[ 1439.426384][ T7945]  do_syscall_64+0x166/0x520
[ 1439.426406][ T7945]  ? trace_irq_disable+0x3b/0x140
[ 1439.426426][ T7945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.426443][ T7945]  ? clear_bhb_loop+0x70/0xc0
[ 1439.426464][ T7945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.426481][ T7945] RIP: 0033:0x7f6ad0f9e559
[ 1439.426498][ T7945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1439.426513][ T7945] RSP: 002b:00007f6ad1e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1439.426532][ T7945] RAX: ffffffffffffffda RBX: 00007f6ad1225fa0 RCX: 00007f6ad0f9e559
[ 1439.426544][ T7945] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1439.426555][ T7945] RBP: 00007f6ad1e15090 R08: 0000000000000000 R09: 0000000000000000
[ 1439.426566][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1439.426575][ T7945] R13: 00007f6ad1226038 R14: 00007f6ad1225fa0 R15: 00007ffc80d12ed8
[ 1439.426604][ T7945]  </TASK>
[ 1439.721621][ T7951] FAULT_INJECTION: forcing a failure.
[ 1439.721621][ T7951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1439.721667][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.2.8289 Not tainted syzkaller #0 PREEMPT(full) 
[ 1439.721691][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1439.721703][ T7951] Call Trace:
[ 1439.721711][ T7951]  <TASK>
[ 1439.721720][ T7951]  dump_stack_lvl+0xe8/0x150
[ 1439.721751][ T7951]  should_fail_ex+0x410/0x560
[ 1439.721782][ T7951]  _copy_from_user+0x2d/0xb0
[ 1439.721811][ T7951]  __sys_bpf+0x2e7/0xd90
[ 1439.721840][ T7951]  ? __pfx___sys_bpf+0x10/0x10
[ 1439.721879][ T7951]  ? __fget_files+0x2a/0x420
[ 1439.721921][ T7951]  ? ksys_write+0x242/0x270
[ 1439.721941][ T7951]  ? __pfx_ksys_write+0x10/0x10
[ 1439.721964][ T7951]  __x64_sys_bpf+0xba/0xd0
[ 1439.721987][ T7951]  do_syscall_64+0x166/0x520
[ 1439.722011][ T7951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.722029][ T7951]  ? clear_bhb_loop+0x70/0xc0
[ 1439.722051][ T7951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.722069][ T7951] RIP: 0033:0x7f6ad0f9e559
[ 1439.722086][ T7951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1439.722100][ T7951] RSP: 002b:00007f6ad1e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1439.722120][ T7951] RAX: ffffffffffffffda RBX: 00007f6ad1225fa0 RCX: 00007f6ad0f9e559
[ 1439.722133][ T7951] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005
[ 1439.722144][ T7951] RBP: 00007f6ad1e15090 R08: 0000000000000000 R09: 0000000000000000
[ 1439.722155][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1439.722165][ T7951] R13: 00007f6ad1226038 R14: 00007f6ad1225fa0 R15: 00007ffc80d12ed8
[ 1439.722195][ T7951]  </TASK>
[ 1440.088222][ T7956] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1440.193477][ T7962] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1440.644291][ T7982] FAULT_INJECTION: forcing a failure.
[ 1440.644291][ T7982] name failslab, interval 1, probability 0, space 0, times 0
[ 1440.644321][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.4.8300 Not tainted syzkaller #0 PREEMPT(full) 
[ 1440.644345][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1440.644357][ T7982] Call Trace:
[ 1440.644365][ T7982]  <TASK>
[ 1440.644374][ T7982]  dump_stack_lvl+0xe8/0x150
[ 1440.644406][ T7982]  should_fail_ex+0x410/0x560
[ 1440.644436][ T7982]  should_failslab+0xa8/0x100
[ 1440.644464][ T7982]  __kmalloc_cache_node_noprof+0xaa/0x620
[ 1440.644488][ T7982]  ? __get_vm_area_node+0x155/0x2f0
[ 1440.644515][ T7982]  ? __get_vm_area_node+0x155/0x2f0
[ 1440.644549][ T7982]  __get_vm_area_node+0x155/0x2f0
[ 1440.644582][ T7982]  __vmalloc_node_range_noprof+0x343/0x1540
[ 1440.644609][ T7982]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.644633][ T7982]  ? __lock_acquire+0x747/0x2de0
[ 1440.644680][ T7982]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1440.644725][ T7982]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.644747][ T7982]  __vmalloc_noprof+0xd2/0x120
[ 1440.644766][ T7982]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.644792][ T7982]  bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.644813][ T7982]  ? bpf_prog_alloc+0x2a/0x1a0
[ 1440.644838][ T7982]  bpf_prog_alloc+0x3c/0x1a0
[ 1440.644863][ T7982]  bpf_prog_load+0x7f8/0x1c20
[ 1440.644899][ T7982]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1440.644948][ T7982]  __sys_bpf+0xd0d/0xd90
[ 1440.644979][ T7982]  ? __pfx___sys_bpf+0x10/0x10
[ 1440.645013][ T7982]  ? __fget_files+0x2a/0x420
[ 1440.645058][ T7982]  ? ksys_write+0x242/0x270
[ 1440.645080][ T7982]  ? __pfx_ksys_write+0x10/0x10
[ 1440.645104][ T7982]  __x64_sys_bpf+0xba/0xd0
[ 1440.645128][ T7982]  do_syscall_64+0x166/0x520
[ 1440.645153][ T7982]  ? trace_irq_disable+0x3b/0x140
[ 1440.645172][ T7982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.645192][ T7982]  ? clear_bhb_loop+0x70/0xc0
[ 1440.645215][ T7982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.645234][ T7982] RIP: 0033:0x7f03d1b9e559
[ 1440.645252][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1440.645266][ T7982] RSP: 002b:00007f03d29fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1440.645286][ T7982] RAX: ffffffffffffffda RBX: 00007f03d1e25fa0 RCX: 00007f03d1b9e559
[ 1440.645299][ T7982] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005
[ 1440.645310][ T7982] RBP: 00007f03d29fd090 R08: 0000000000000000 R09: 0000000000000000
[ 1440.645321][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1440.645332][ T7982] R13: 00007f03d1e26038 R14: 00007f03d1e25fa0 R15: 00007ffcbc1448e8
[ 1440.645359][ T7982]  </TASK>
[ 1440.648117][ T7982] warn_alloc: 1 callbacks suppressed
[ 1440.648133][ T7982] syz.4.8300: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1440.648192][ T7982] CPU: 0 UID: 0 PID: 7982 Comm: syz.4.8300 Not tainted syzkaller #0 PREEMPT(full) 
[ 1440.648213][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1440.648224][ T7982] Call Trace:
[ 1440.648232][ T7982]  <TASK>
[ 1440.648241][ T7982]  dump_stack_lvl+0xe8/0x150
[ 1440.648271][ T7982]  warn_alloc+0x24d/0x270
[ 1440.648292][ T7982]  ? __kasan_kmalloc+0x22/0xb0
[ 1440.648318][ T7982]  ? __pfx_warn_alloc+0x10/0x10
[ 1440.648337][ T7982]  ? __get_vm_area_node+0x155/0x2f0
[ 1440.648370][ T7982]  ? __get_vm_area_node+0x2a9/0x2f0
[ 1440.648403][ T7982]  __vmalloc_node_range_noprof+0x36b/0x1540
[ 1440.648424][ T7982]  ? __lock_acquire+0x747/0x2de0
[ 1440.648468][ T7982]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1440.648493][ T7982]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.648515][ T7982]  __vmalloc_noprof+0xd2/0x120
[ 1440.648533][ T7982]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.648561][ T7982]  bpf_prog_alloc_no_stats+0x47/0x560
[ 1440.648581][ T7982]  ? bpf_prog_alloc+0x2a/0x1a0
[ 1440.648613][ T7982]  bpf_prog_alloc+0x3c/0x1a0
[ 1440.648637][ T7982]  bpf_prog_load+0x7f8/0x1c20
[ 1440.648670][ T7982]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1440.648720][ T7982]  __sys_bpf+0xd0d/0xd90
[ 1440.648750][ T7982]  ? __pfx___sys_bpf+0x10/0x10
[ 1440.648783][ T7982]  ? __fget_files+0x2a/0x420
[ 1440.648826][ T7982]  ? ksys_write+0x242/0x270
[ 1440.648848][ T7982]  ? __pfx_ksys_write+0x10/0x10
[ 1440.648871][ T7982]  __x64_sys_bpf+0xba/0xd0
[ 1440.648894][ T7982]  do_syscall_64+0x166/0x520
[ 1440.648917][ T7982]  ? trace_irq_disable+0x3b/0x140
[ 1440.648935][ T7982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.648955][ T7982]  ? clear_bhb_loop+0x70/0xc0
[ 1440.648977][ T7982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.648995][ T7982] RIP: 0033:0x7f03d1b9e559
[ 1440.649012][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1440.649026][ T7982] RSP: 002b:00007f03d29fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1440.649044][ T7982] RAX: ffffffffffffffda RBX: 00007f03d1e25fa0 RCX: 00007f03d1b9e559
[ 1440.649058][ T7982] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005
[ 1440.649070][ T7982] RBP: 00007f03d29fd090 R08: 0000000000000000 R09: 0000000000000000
[ 1440.649080][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1440.649089][ T7982] R13: 00007f03d1e26038 R14: 00007f03d1e25fa0 R15: 00007ffcbc1448e8
[ 1440.649116][ T7982]  </TASK>
[ 1440.649150][ T7982] Mem-Info:
[ 1440.649159][ T7982] active_anon:17981 inactive_anon:51 isolated_anon:0
[ 1440.649159][ T7982]  active_file:16 inactive_file:44142 isolated_file:0
[ 1440.649159][ T7982]  unevictable:0 dirty:224 writeback:0
[ 1440.649159][ T7982]  slab_reclaimable:14659 slab_unreclaimable:159745
[ 1440.649159][ T7982]  mapped:29754 shmem:596 pagetables:3505
[ 1440.649159][ T7982]  sec_pagetables:0 bounce:0
[ 1440.649159][ T7982]  kernel_misc_reclaimable:0
[ 1440.649159][ T7982]  free:1167516 free_pcp:16109 free_cma:0
[ 1440.649206][ T7982] Node 0 active_anon:71924kB inactive_anon:204kB active_file:64kB inactive_file:176372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119016kB dirty:896kB writeback:0kB shmem:2384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19856kB pagetables:13868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1440.649252][ T7982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1440.649298][ T7982] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1440.649349][ T7982] lowmem_reserve[]: 0 2468 2468 2468 2468
[ 1440.649380][ T7982] Node 0 DMA32 free:713708kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:71924kB inactive_anon:204kB active_file:64kB inactive_file:176372kB unevictable:0kB writepending:896kB zspages:0kB present:3129332kB managed:2527420kB mlocked:0kB bounce:0kB free_pcp:64428kB local_pcp:50952kB free_cma:0kB
[ 1440.649435][ T7982] lowmem_reserve[]: 0 0 0 0 0
[ 1440.649467][ T7982] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1440.649517][ T7982] lowmem_reserve[]: 0 0 0 0 0
[ 1440.649550][ T7982] Node 1 Normal free:3940996kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1440.649608][ T7982] lowmem_reserve[]: 0 0 0 0 0
[ 1440.651667][ T7982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1440.651801][ T7982] Node 0 DMA32: 789*4kB (UME) 365*8kB (UM) 126*16kB (UM) 804*32kB (UM) 140*64kB (UME) 171*128kB (UM) 71*256kB (UME) 160*512kB (UM) 168*1024kB (UE) 26*2048kB (UM) 79*4096kB (UM) = 713628kB
[ 1440.651948][ T7982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1440.652040][ T7982] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 7*16kB (UM) 2*32kB (UM) 3*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 959*4096kB (M) = 3940996kB
[ 1440.652172][ T7982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1440.652187][ T7982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1440.652201][ T7982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1440.652217][ T7982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1440.652232][ T7982] 44750 total pagecache pages
[ 1440.652239][ T7982] 0 pages in swap cache
[ 1440.652245][ T7982] Free swap  = 124996kB
[ 1440.652253][ T7982] Total swap = 124996kB
[ 1440.652260][ T7982] 2097051 pages RAM
[ 1440.652268][ T7982] 0 pages HighMem/MovableOnly
[ 1440.652275][ T7982] 433580 pages reserved
[ 1440.652282][ T7982] 0 pages cma reserved
[ 1440.752501][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8301'.
[ 1440.752539][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8301'.
[ 1441.265786][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8302'.
[ 1441.575963][ T7999] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 1442.043224][ T8020] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1442.294644][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8310'.
[ 1442.533515][ T8044] FAULT_INJECTION: forcing a failure.
[ 1442.533515][ T8044] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1442.533548][ T8044] CPU: 1 UID: 0 PID: 8044 Comm: syz.2.8313 Not tainted syzkaller #0 PREEMPT(full) 
[ 1442.533570][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1442.533581][ T8044] Call Trace:
[ 1442.533588][ T8044]  <TASK>
[ 1442.533597][ T8044]  dump_stack_lvl+0xe8/0x150
[ 1442.533628][ T8044]  should_fail_ex+0x410/0x560
[ 1442.533659][ T8044]  prepare_alloc_pages+0x223/0x600
[ 1442.533688][ T8044]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1442.533717][ T8044]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1442.533745][ T8044]  ? __pfx_policy_nodemask+0x10/0x10
[ 1442.533769][ T8044]  ? __get_vm_area_node+0x155/0x2f0
[ 1442.533796][ T8044]  ? __vmalloc_node_range_noprof+0x343/0x1540
[ 1442.533815][ T8044]  ? __vmalloc_noprof+0xd2/0x120
[ 1442.533831][ T8044]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1442.533854][ T8044]  ? bpf_prog_alloc+0x3c/0x1a0
[ 1442.533873][ T8044]  ? __sys_bpf+0xd0d/0xd90
[ 1442.533893][ T8044]  ? __x64_sys_bpf+0xba/0xd0
[ 1442.533910][ T8044]  ? do_syscall_64+0x166/0x520
[ 1442.533934][ T8044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1442.533958][ T8044]  alloc_pages_mpol+0x21e/0x390
[ 1442.533990][ T8044]  alloc_pages_noprof+0xb1/0x2b0
[ 1442.534019][ T8044]  get_free_pages_noprof+0xf/0x80
[ 1442.534042][ T8044]  __kasan_populate_vmalloc+0x38/0x1c0
[ 1442.534063][ T8044]  ? do_raw_spin_unlock+0xf5/0x200
[ 1442.534095][ T8044]  alloc_vmap_area+0xd1a/0x1420
[ 1442.534138][ T8044]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1442.534164][ T8044]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[ 1442.534187][ T8044]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[ 1442.534208][ T8044]  ? __get_vm_area_node+0x155/0x2f0
[ 1442.534241][ T8044]  __get_vm_area_node+0x200/0x2f0
[ 1442.534277][ T8044]  __vmalloc_node_range_noprof+0x343/0x1540
[ 1442.534297][ T8044]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1442.534321][ T8044]  ? __lock_acquire+0x747/0x2de0
[ 1442.534375][ T8044]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1442.534405][ T8044]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1442.534426][ T8044]  __vmalloc_noprof+0xd2/0x120
[ 1442.534445][ T8044]  ? bpf_prog_alloc_no_stats+0x47/0x560
[ 1442.534471][ T8044]  bpf_prog_alloc_no_stats+0x47/0x560
[ 1442.534492][ T8044]  ? bpf_prog_alloc+0x2a/0x1a0
[ 1442.534517][ T8044]  bpf_prog_alloc+0x3c/0x1a0
[ 1442.534542][ T8044]  bpf_prog_load+0x7f8/0x1c20
[ 1442.534577][ T8044]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1442.534626][ T8044]  __sys_bpf+0xd0d/0xd90
[ 1442.534657][ T8044]  ? __pfx___sys_bpf+0x10/0x10
[ 1442.534691][ T8044]  ? __fget_files+0x2a/0x420
[ 1442.534737][ T8044]  ? ksys_write+0x242/0x270
[ 1442.534758][ T8044]  ? __pfx_ksys_write+0x10/0x10
[ 1442.534782][ T8044]  __x64_sys_bpf+0xba/0xd0
[ 1442.534806][ T8044]  do_syscall_64+0x166/0x520
[ 1442.534829][ T8044]  ? trace_irq_disable+0x3b/0x140
[ 1442.534849][ T8044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1442.534867][ T8044]  ? clear_bhb_loop+0x70/0xc0
[ 1442.534889][ T8044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1442.534907][ T8044] RIP: 0033:0x7f6ad0f9e559
[ 1442.534924][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1442.534938][ T8044] RSP: 002b:00007f6ad1e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1442.534959][ T8044] RAX: ffffffffffffffda RBX: 00007f6ad1225fa0 RCX: 00007f6ad0f9e559
[ 1442.534972][ T8044] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005
[ 1442.534984][ T8044] RBP: 00007f6ad1e15090 R08: 0000000000000000 R09: 0000000000000000
[ 1442.534996][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1442.535006][ T8044] R13: 00007f6ad1226038 R14: 00007f6ad1225fa0 R15: 00007ffc80d12ed8
[ 1442.535038][ T8044]  </TASK>
[ 1442.596112][ T8045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8315'.
[ 1442.986584][ T8052] syzkaller1: entered promiscuous mode
[ 1442.986607][ T8052] syzkaller1: entered allmulticast mode
[ 1443.005460][ T8048] syzkaller0: entered promiscuous mode
[ 1443.005480][ T8048] syzkaller0: entered allmulticast mode
[ 1443.106102][ T8054] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8316'.
[ 1443.151110][ T8054] tunl0: Caught tx_queue_len zero misconfig
[ 1443.190389][ T8058] syzkaller1: entered promiscuous mode
[ 1443.190411][ T8058] syzkaller1: entered allmulticast mode
[ 1443.202485][ T8054] netlink: 'syz.4.8316': attribute type 10 has an invalid length.
[ 1443.368025][ T8054] geneve3: entered promiscuous mode
[ 1443.368049][ T8054] geneve3: entered allmulticast mode
[ 1443.485180][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1443.707860][ T8075] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1443.859263][ T8080] __nla_validate_parse: 4 callbacks suppressed
[ 1443.859285][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8323'.
[ 1443.969154][ T8086] netlink: 'syz.4.8323': attribute type 10 has an invalid length.
[ 1443.969177][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8323'.
[ 1444.023491][ T8089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8326'.
[ 1444.050369][ T8080] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1444.067285][ T8083] bond14: (slave dummy0): Enslaving as an active interface with an up link
[ 1444.076003][ T8086] dummy0: entered promiscuous mode
[ 1444.099149][ T8086] bond14: (slave dummy0): Releasing backup interface
[ 1444.143066][ T8080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8323'.
[ 1444.397816][ T8109] TC_ACT_REPEAT abuse ?
[ 1444.416626][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8330'.
[ 1444.561421][ T8116] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1444.700138][ T8121] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1445.008365][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8339'.
[ 1445.008401][ T8135] netlink: 'syz.0.8339': attribute type 7 has an invalid length.
[ 1445.008413][ T8135] netlink: 'syz.0.8339': attribute type 8 has an invalid length.
[ 1445.008425][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8339'.
[ 1445.149385][ T8145] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8343'.
[ 1445.149414][ T8145] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8343'.
[ 1445.274302][T31871] block nbd2: Receive control failed (result -107)
[ 1446.228203][ T8184] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8351'.
[ 1446.261150][ T8184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1446.291470][ T8184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1446.308944][ T8184] bond0 (unregistering): Released all slaves
[ 1446.457284][ T8196] xt_hl: Unknown Hop Limit match mode: 4
[ 1446.736504][ T8207] FAULT_INJECTION: forcing a failure.
[ 1446.736504][ T8207] name failslab, interval 1, probability 0, space 0, times 0
[ 1446.736539][ T8207] CPU: 1 UID: 0 PID: 8207 Comm: syz.1.8359 Not tainted syzkaller #0 PREEMPT(full) 
[ 1446.736560][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1446.736574][ T8207] Call Trace:
[ 1446.736582][ T8207]  <TASK>
[ 1446.736591][ T8207]  dump_stack_lvl+0xe8/0x150
[ 1446.736622][ T8207]  should_fail_ex+0x410/0x560
[ 1446.736654][ T8207]  should_failslab+0xa8/0x100
[ 1446.736681][ T8207]  __kvmalloc_node_noprof+0x176/0x820
[ 1446.736706][ T8207]  ? rcu_is_watching+0x16/0xb0
[ 1446.736730][ T8207]  ? analyze_subprog+0x846/0x9e00
[ 1446.736751][ T8207]  ? analyze_subprog+0x846/0x9e00
[ 1446.736781][ T8207]  analyze_subprog+0x846/0x9e00
[ 1446.736802][ T8207]  ? is_bpf_text_address+0x292/0x2b0
[ 1446.736831][ T8207]  ? kernel_text_address+0xa5/0xe0
[ 1446.736858][ T8207]  ? arch_stack_walk+0xfb/0x150
[ 1446.736900][ T8207]  ? __pfx_stack_trace_save+0x10/0x10
[ 1446.736935][ T8207]  ? call_instance+0x263/0x560
[ 1446.736955][ T8207]  ? bpf_compute_subprog_arg_access+0x2a3/0x14d0
[ 1446.736977][ T8207]  ? bpf_compute_live_registers+0x8d3/0x1ff0
[ 1446.737001][ T8207]  ? __pfx_analyze_subprog+0x10/0x10
[ 1446.737021][ T8207]  ? __x64_sys_bpf+0xba/0xd0
[ 1446.737039][ T8207]  ? do_syscall_64+0x166/0x520
[ 1446.737062][ T8207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.737121][ T8207]  ? call_instance+0x263/0x560
[ 1446.737142][ T8207]  ? rcu_is_watching+0x16/0xb0
[ 1446.737164][ T8207]  ? call_instance+0x263/0x560
[ 1446.737184][ T8207]  ? trace_kmalloc+0x2a/0xf0
[ 1446.737205][ T8207]  ? call_instance+0x263/0x560
[ 1446.737239][ T8207]  ? __kvmalloc_node_noprof+0x52f/0x820
[ 1446.737263][ T8207]  ? __kvmalloc_node_noprof+0x345/0x820
[ 1446.737284][ T8207]  ? call_instance+0x263/0x560
[ 1446.737304][ T8207]  ? call_instance+0x263/0x560
[ 1446.737332][ T8207]  ? call_instance+0x42e/0x560
[ 1446.737361][ T8207]  bpf_compute_subprog_arg_access+0x2c9/0x14d0
[ 1446.737386][ T8207]  ? __pfx_xdp_func_proto+0x10/0x10
[ 1446.737409][ T8207]  ? bpf_get_trace_printk_proto+0x48/0x60
[ 1446.737459][ T8207]  ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10
[ 1446.737489][ T8207]  ? __kvmalloc_node_noprof+0x345/0x820
[ 1446.737511][ T8207]  ? bpf_compute_live_registers+0x14f/0x1ff0
[ 1446.737533][ T8207]  ? bpf_compute_live_registers+0x14f/0x1ff0
[ 1446.737564][ T8207]  bpf_compute_live_registers+0x8d3/0x1ff0
[ 1446.737606][ T8207]  ? __pfx_bpf_compute_live_registers+0x10/0x10
[ 1446.737641][ T8207]  bpf_check+0x2744/0x2ef0
[ 1446.737682][ T8207]  ? __pfx_bpf_check+0x10/0x10
[ 1446.737707][ T8207]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1446.737738][ T8207]  bpf_prog_load+0x14d6/0x1c20
[ 1446.737773][ T8207]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1446.737822][ T8207]  __sys_bpf+0xd0d/0xd90
[ 1446.737853][ T8207]  ? __pfx___sys_bpf+0x10/0x10
[ 1446.737892][ T8207]  ? __fget_files+0x2a/0x420
[ 1446.737938][ T8207]  ? ksys_write+0x242/0x270
[ 1446.737959][ T8207]  ? __pfx_ksys_write+0x10/0x10
[ 1446.737984][ T8207]  __x64_sys_bpf+0xba/0xd0
[ 1446.738007][ T8207]  do_syscall_64+0x166/0x520
[ 1446.738028][ T8207]  ? trace_irq_disable+0x3b/0x140
[ 1446.738046][ T8207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.738064][ T8207]  ? clear_bhb_loop+0x70/0xc0
[ 1446.738088][ T8207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.738107][ T8207] RIP: 0033:0x7fce4a39e559
[ 1446.738124][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1446.738140][ T8207] RSP: 002b:00007fce4b202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1446.738161][ T8207] RAX: ffffffffffffffda RBX: 00007fce4a625fa0 RCX: 00007fce4a39e559
[ 1446.738175][ T8207] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1446.738187][ T8207] RBP: 00007fce4b202090 R08: 0000000000000000 R09: 0000000000000000
[ 1446.738199][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1446.738211][ T8207] R13: 00007fce4a626038 R14: 00007fce4a625fa0 R15: 00007ffc0375c838
[ 1446.738243][ T8207]  </TASK>
[ 1447.903300][ T8237] syzkaller1: entered promiscuous mode
[ 1447.903323][ T8237] syzkaller1: entered allmulticast mode
[ 1448.136721][ T8249] netlink: 'syz.3.8367': attribute type 11 has an invalid length.
[ 1448.218910][ T8256] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1448.241795][ T8256] syzkaller1: entered promiscuous mode
[ 1448.241819][ T8256] syzkaller1: entered allmulticast mode
[ 1448.258025][ T8257] netlink: 'syz.0.8368': attribute type 1 has an invalid length.
[ 1448.267525][ T8257] netlink: 'syz.0.8368': attribute type 1 has an invalid length.
[ 1449.244756][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[ 1450.165663][ T8216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1450.171838][ T8255] netlink: 'syz.0.8368': attribute type 2 has an invalid length.
[ 1450.171870][ T8255] __nla_validate_parse: 5 callbacks suppressed
[ 1450.171881][ T8255] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8368'.
[ 1450.172595][ T8258] netlink: 'syz.0.8368': attribute type 2 has an invalid length.
[ 1450.172612][ T8258] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8368'.
[ 1450.380450][ T8263] netlink: 'syz.0.8369': attribute type 1 has an invalid length.
[ 1450.421321][ T8263] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1450.479784][ T8263] bond10: (slave veth3): Enslaving as an active interface with a down link
[ 1450.482673][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'.
[ 1450.573349][ T8279] ebt_among: wrong size: 2184 against expected 2220, rounded to 2224
[ 1450.588985][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8372'.
[ 1450.627895][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8372'.
[ 1450.627930][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8372'.
[ 1450.665760][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8375'.
[ 1450.665782][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8375'.
[ 1450.665794][ T8281] tc_dump_action: action bad kind
[ 1450.868482][ T8287] vlan1: Caught tx_queue_len zero misconfig
[ 1451.393227][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1451.648366][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8388'.
[ 1451.896786][ T8334] ip_tables: iptables: counters copy to user failed while replacing table
[ 1452.010785][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8392'.
[ 1452.012942][ T8334] vcan0: entered promiscuous mode
[ 1452.012962][ T8334] vcan0: entered allmulticast mode
[ 1452.073408][ T8342] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1452.190580][ T8344] netlink: 'syz.4.8392': attribute type 39 has an invalid length.
[ 1454.756734][ T8430] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1457.743295][ T8425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1458.090009][ T8459] bridge4: entered promiscuous mode
[ 1458.090072][ T8459] bridge4: entered allmulticast mode
[ 1458.119342][ T8468] FAULT_INJECTION: forcing a failure.
[ 1458.119342][ T8468] name failslab, interval 1, probability 0, space 0, times 0
[ 1458.119374][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.4.8429 Not tainted syzkaller #0 PREEMPT(full) 
[ 1458.119395][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1458.119406][ T8468] Call Trace:
[ 1458.119414][ T8468]  <TASK>
[ 1458.119423][ T8468]  dump_stack_lvl+0xe8/0x150
[ 1458.119454][ T8468]  should_fail_ex+0x410/0x560
[ 1458.119486][ T8468]  should_failslab+0xa8/0x100
[ 1458.119513][ T8468]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1458.119544][ T8468]  ? check_stack_access_within_bounds+0x7fe/0xb80
[ 1458.119566][ T8468]  ? bpf_push_jmp_history+0x26c/0x6d0
[ 1458.119585][ T8468]  ? bpf_push_jmp_history+0x26c/0x6d0
[ 1458.119610][ T8468]  ? bpf_push_jmp_history+0x26c/0x6d0
[ 1458.119633][ T8468]  krealloc_node_align_noprof+0x19a/0x390
[ 1458.119662][ T8468]  bpf_push_jmp_history+0x26c/0x6d0
[ 1458.119694][ T8468]  check_mem_access+0xf82/0x2700
[ 1458.119735][ T8468]  ? __pfx_check_mem_access+0x10/0x10
[ 1458.119764][ T8468]  ? is_bpf_text_address+0x292/0x2b0
[ 1458.119787][ T8468]  ? is_bpf_text_address+0x26/0x2b0
[ 1458.119814][ T8468]  ? kernel_text_address+0xa5/0xe0
[ 1458.119836][ T8468]  ? __kernel_text_address+0xd/0x30
[ 1458.119860][ T8468]  check_store_reg+0x664/0xe20
[ 1458.119900][ T8468]  do_check_insn+0x919/0x17d00
[ 1458.119928][ T8468]  ? stack_depot_save_flags+0x33/0x7f0
[ 1458.119961][ T8468]  ? kasan_save_track+0x3e/0x80
[ 1458.119981][ T8468]  ? __kasan_kmalloc+0x93/0xb0
[ 1458.120003][ T8468]  ? __kmalloc_cache_noprof+0x321/0x600
[ 1458.120022][ T8468]  ? do_check_common+0x348/0x5610
[ 1458.120045][ T8468]  ? do_check_main+0xa2/0x1f0
[ 1458.120065][ T8468]  ? bpf_check+0x2775/0x2ef0
[ 1458.120084][ T8468]  ? bpf_prog_load+0x14d6/0x1c20
[ 1458.120104][ T8468]  ? __sys_bpf+0xd0d/0xd90
[ 1458.120124][ T8468]  ? __x64_sys_bpf+0xba/0xd0
[ 1458.120142][ T8468]  ? do_syscall_64+0x166/0x520
[ 1458.120165][ T8468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1458.120191][ T8468]  ? __pfx_do_check_insn+0x10/0x10
[ 1458.120248][ T8468]  ? rcu_is_watching+0x16/0xb0
[ 1458.120283][ T8468]  ? __asan_memset+0x22/0x50
[ 1458.120304][ T8468]  ? cnum32_from_urange+0xf/0x30
[ 1458.120335][ T8468]  ? cnum32_from_urange+0xf/0x30
[ 1458.120361][ T8468]  ? __mark_reg_known+0x125/0x1a0
[ 1458.120387][ T8468]  do_check_common+0x364c/0x5610
[ 1458.120450][ T8468]  ? __pfx_do_check_common+0x10/0x10
[ 1458.120488][ T8468]  do_check_main+0xa2/0x1f0
[ 1458.120514][ T8468]  bpf_check+0x2775/0x2ef0
[ 1458.120554][ T8468]  ? __pfx_bpf_check+0x10/0x10
[ 1458.120578][ T8468]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1458.120609][ T8468]  bpf_prog_load+0x14d6/0x1c20
[ 1458.120645][ T8468]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1458.120694][ T8468]  __sys_bpf+0xd0d/0xd90
[ 1458.120725][ T8468]  ? __pfx___sys_bpf+0x10/0x10
[ 1458.120758][ T8468]  ? __fget_files+0x2a/0x420
[ 1458.120803][ T8468]  ? ksys_write+0x242/0x270
[ 1458.120826][ T8468]  ? __pfx_ksys_write+0x10/0x10
[ 1458.120851][ T8468]  __x64_sys_bpf+0xba/0xd0
[ 1458.120874][ T8468]  do_syscall_64+0x166/0x520
[ 1458.120897][ T8468]  ? trace_irq_disable+0x3b/0x140
[ 1458.120917][ T8468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1458.120936][ T8468]  ? clear_bhb_loop+0x70/0xc0
[ 1458.120959][ T8468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1458.120978][ T8468] RIP: 0033:0x7f03d1b9e559
[ 1458.120996][ T8468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1458.121012][ T8468] RSP: 002b:00007f03d29fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1458.121033][ T8468] RAX: ffffffffffffffda RBX: 00007f03d1e25fa0 RCX: 00007f03d1b9e559
[ 1458.121047][ T8468] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[ 1458.121059][ T8468] RBP: 00007f03d29fd090 R08: 0000000000000000 R09: 0000000000000000
[ 1458.121071][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1458.121083][ T8468] R13: 00007f03d1e26038 R14: 00007f03d1e25fa0 R15: 00007ffcbc1448e8
[ 1458.121114][ T8468]  </TASK>
[ 1458.734960][ T8488] xt_ipcomp: unknown flags 1D
[ 1458.735134][ T8489] xt_ipcomp: unknown flags 1D
[ 1458.767995][ T8470] syzkaller1: entered promiscuous mode
[ 1458.768018][ T8470] syzkaller1: entered allmulticast mode
[ 1458.885145][ T8488] veth1_to_bond: entered allmulticast mode
[ 1458.970514][ T8491] IPVS: Error connecting to the multicast addr
[ 1458.996373][ T8482] geneve3: entered promiscuous mode
[ 1459.000977][ T8496] 8021q: VLANs not supported on nlmon0
[ 1459.023220][ T6917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.023274][ T6917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.023307][ T6917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.023339][ T6917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1459.182621][ T8499] __nla_validate_parse: 2 callbacks suppressed
[ 1459.182642][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8436'.
[ 1459.235812][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8437'.
[ 1459.235946][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8437'.
[ 1459.563350][ T8486] veth1_to_bond: left allmulticast mode
[ 1460.201420][ T8524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8443'.
[ 1460.387375][ T8525] bridge_slave_0: left allmulticast mode
[ 1460.387400][ T8525] bridge_slave_0: left promiscuous mode
[ 1460.387639][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1460.459536][ T8525] bridge_slave_1: left allmulticast mode
[ 1460.459560][ T8525] bridge_slave_1: left promiscuous mode
[ 1460.459768][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1460.559361][ T8525] team0: Port device team_slave_0 removed
[ 1460.630401][ T8525] team0: Port device team_slave_1 removed
[ 1460.644971][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1460.644995][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1460.688923][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1460.688948][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1460.713515][ T8525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1460.942691][ T8547] netlink: 'syz.1.8448': attribute type 1 has an invalid length.
[ 1461.095235][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8448'.
[ 1461.714556][ T8569] netlink: 'syz.2.8452': attribute type 9 has an invalid length.
[ 1461.720780][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8451'.
[ 1461.720820][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8451'.
[ 1462.048732][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8453'.
[ 1462.071309][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1462.076439][ T8561] bridge0: port 1(bond0) entered blocking state
[ 1462.076610][ T8561] bridge0: port 1(bond0) entered disabled state
[ 1462.076765][ T8561] bond0: entered allmulticast mode
[ 1462.084269][ T8561] bond0: entered promiscuous mode
[ 1462.088042][ T8561] bridge0: port 1(bond0) entered blocking state
[ 1462.088150][ T8561] bridge0: port 1(bond0) entered forwarding state
[ 1462.103180][ T6940] bridge0: port 1(bond0) entered disabled state
[ 1462.454513][ T8579] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8455'.
[ 1462.502892][ T8582] FAULT_INJECTION: forcing a failure.
[ 1462.502892][ T8582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1462.502933][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.1.8456 Not tainted syzkaller #0 PREEMPT(full) 
[ 1462.502954][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1462.502966][ T8582] Call Trace:
[ 1462.502974][ T8582]  <TASK>
[ 1462.502983][ T8582]  dump_stack_lvl+0xe8/0x150
[ 1462.503015][ T8582]  should_fail_ex+0x410/0x560
[ 1462.503047][ T8582]  _copy_from_user+0x2d/0xb0
[ 1462.503077][ T8582]  kstrtouint_from_user+0xd6/0x180
[ 1462.503105][ T8582]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1462.503139][ T8582]  ? lock_acquire+0x115/0x350
[ 1462.503166][ T8582]  proc_fail_nth_write+0x8e/0x210
[ 1462.503188][ T8582]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1462.503219][ T8582]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1462.503241][ T8582]  vfs_write+0x296/0xba0
[ 1462.503271][ T8582]  ? __pfx_vfs_write+0x10/0x10
[ 1462.503292][ T8582]  ? __fget_files+0x2a/0x420
[ 1462.503324][ T8582]  ? __fget_files+0x3a2/0x420
[ 1462.503350][ T8582]  ? __fget_files+0x2a/0x420
[ 1462.503387][ T8582]  ksys_write+0x150/0x270
[ 1462.503409][ T8582]  ? __pfx_ksys_write+0x10/0x10
[ 1462.503441][ T8582]  do_syscall_64+0x166/0x520
[ 1462.503466][ T8582]  ? trace_irq_disable+0x3b/0x140
[ 1462.503486][ T8582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.503506][ T8582]  ? clear_bhb_loop+0x70/0xc0
[ 1462.503529][ T8582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1462.503549][ T8582] RIP: 0033:0x7fce4a35ed8e
[ 1462.503569][ T8582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1462.503582][ T8582] RSP: 002b:00007fce4b201fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1462.503600][ T8582] RAX: ffffffffffffffda RBX: 00007fce4b2026c0 RCX: 00007fce4a35ed8e
[ 1462.503613][ T8582] RDX: 0000000000000001 RSI: 00007fce4b2020a0 RDI: 0000000000000003
[ 1462.503625][ T8582] RBP: 00007fce4b202090 R08: 0000000000000000 R09: 0000000000000000
[ 1462.503635][ T8582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1462.503646][ T8582] R13: 00007fce4a626038 R14: 00007fce4a625fa0 R15: 00007ffc0375c838
[ 1462.503678][ T8582]  </TASK>
[ 1463.716509][ T8623] ip_tables: iptables: counters copy to user failed while replacing table
[ 1464.374476][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8471'.
[ 1464.465947][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8471'.
[ 1464.465975][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8471'.
[ 1464.486151][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8471'.
[ 1464.959606][ T8648] syzkaller0: entered promiscuous mode
[ 1464.959629][ T8648] syzkaller0: entered allmulticast mode
[ 1464.973893][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8474'.
[ 1465.192820][   T30] audit: type=1804 audit(1792277895.667:37): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8476" name="/newroot/458/cgroup.controllers" dev="tmpfs" ino=2364 res=1 errno=0
[ 1465.192873][   T30] audit: type=1800 audit(1792277895.667:38): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8476" name="cgroup.controllers" dev="tmpfs" ino=2364 res=0 errno=0
[ 1466.414509][ T8681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8486'.
[ 1466.848557][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8488'.
[ 1467.031659][ T8696] pimreg: tun_chr_ioctl cmd 1074025677
[ 1467.031762][ T8696] pimreg: linktype set to 32
[ 1468.747692][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8498'.
[ 1468.747725][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8498'.
[ 1468.748337][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8498'.
[ 1469.703055][ T8735] __nla_validate_parse: 1 callbacks suppressed
[ 1469.703076][ T8735] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8499'.
[ 1469.737162][ T8735] netlink: 19 bytes leftover after parsing attributes in process `syz.2.8499'.
[ 1469.897385][ T8738] Bluetooth: MGMT ver 1.23
[ 1469.929927][ T8738] ip6erspan1: entered allmulticast mode
[ 1471.161682][ T8746] netlink: 'syz.2.8503': attribute type 3 has an invalid length.
[ 1471.835537][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8507'.
[ 1473.152583][ T8773] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1473.280810][ T8778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8515'.
[ 1473.503970][ T8777] nbd7: detected capacity change from 0 to 63
[ 1473.662979][ T8794] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1473.801767][ T8800] netlink: 'syz.2.8521': attribute type 9 has an invalid length.
[ 1473.840810][ T8800] bridge5: entered promiscuous mode
[ 1474.017991][T22742] block nbd7: Receive control failed (result -104)
[ 1474.094517][ T8807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8523'.
[ 1474.335413][ T8811] netlink: 'syz.3.8526': attribute type 4 has an invalid length.
[ 1474.370953][ T8811] netlink: 'syz.3.8526': attribute type 4 has an invalid length.
[ 1474.871601][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8532'.
[ 1474.877620][ T8830] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1475.237954][ T8847] netlink: 'syz.2.8539': attribute type 3 has an invalid length.
[ 1475.290144][ T8847] netlink: 'syz.2.8539': attribute type 4 has an invalid length.
[ 1475.309290][ T8847] netlink: 'syz.2.8539': attribute type 4 has an invalid length.
[ 1475.668097][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8542'.
[ 1475.692133][ T8857] ip6tnl7: entered allmulticast mode
[ 1475.825783][ T6940] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1475.826010][ T6940] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1475.854549][  T990] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1475.942310][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8546'.
[ 1476.214430][ T5756] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1476.275294][ T5756] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1476.298520][ T8850] netlink: 'syz.3.8540': attribute type 3 has an invalid length.
[ 1476.421311][   T30] audit: type=1107 audit(1792277906.897:39): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1477.205948][    C0] vcan0: j1939_tp_rxtimer: 0xffff88804e585800: rx timeout, send abort
[ 1477.236973][ T8912] netlink: 'syz.1.8556': attribute type 1 has an invalid length.
[ 1477.366163][ T8920] 
[ 1477.368545][ T8920] ======================================================
[ 1477.375570][ T8920] WARNING: possible circular locking dependency detected
[ 1477.382607][ T8920] syzkaller #0 Not tainted
[ 1477.387118][ T8920] ------------------------------------------------------
[ 1477.394135][ T8920] syz.2.8559/8920 is trying to acquire lock:
[ 1477.400117][ T8920] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[ 1477.402846][ T8916] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1477.417337][ T8920] 
[ 1477.417337][ T8920] but task is already holding lock:
[ 1477.424703][ T8920] ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[ 1477.434819][ T8920] 
[ 1477.434819][ T8920] which lock already depends on the new lock.
[ 1477.434819][ T8920] 
[ 1477.445220][ T8920] 
[ 1477.445220][ T8920] the existing dependency chain (in reverse order) is:
[ 1477.454233][ T8920] 
[ 1477.454233][ T8920] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[ 1477.461973][ T8920]        cpus_read_lock+0x42/0x160
[ 1477.467105][ T8920]        static_key_slow_inc+0x12/0x30
[ 1477.472583][ T8920]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[ 1477.478945][ T8920]        nbd_genl_foreach_sock+0x265/0x450
[ 1477.484769][ T8920]        nbd_genl_reconfigure+0xbbb/0x1040
[ 1477.490582][ T8920]        genl_family_rcv_msg_doit+0x233/0x340
[ 1477.496659][ T8920]        genl_rcv_msg+0x614/0x7a0
[ 1477.501700][ T8920]        netlink_rcv_skb+0x226/0x4a0
[ 1477.506999][ T8920]        genl_rcv+0x28/0x40
[ 1477.511512][ T8920]        netlink_unicast+0x8ef/0xa80
[ 1477.516803][ T8920]        netlink_sendmsg+0x813/0xb40
[ 1477.522096][ T8920]        sock_sendmsg_nosec+0x14e/0x190
[ 1477.527652][ T8920]        ____sys_sendmsg+0x54e/0x850
[ 1477.532941][ T8920]        ___sys_sendmsg+0x2a5/0x360
[ 1477.538153][ T8920]        __x64_sys_sendmsg+0x1b1/0x290
[ 1477.543621][ T8920]        do_syscall_64+0x166/0x520
[ 1477.548745][ T8920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.555181][ T8920] 
[ 1477.555181][ T8920] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1477.562838][ T8920]        __mutex_lock+0x19d/0x1550
[ 1477.567955][ T8920]        nbd_queue_rq+0x373/0xff0
[ 1477.572987][ T8920]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1477.579191][ T8920]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1477.586167][ T8920]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1477.592691][ T8920]        blk_mq_run_work_fn+0x16c/0x300
[ 1477.598282][ T8920]        process_scheduled_works+0xc3d/0x1630
[ 1477.604357][ T8920]        worker_thread+0xa47/0xfb0
[ 1477.609487][ T8920]        kthread+0x38b/0x480
[ 1477.614089][ T8920]        ret_from_fork+0x514/0xb70
[ 1477.619215][ T8920]        ret_from_fork_asm+0x1a/0x30
[ 1477.624507][ T8920] 
[ 1477.624507][ T8920] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1477.631714][ T8920]        __mutex_lock+0x19d/0x1550
[ 1477.636838][ T8920]        nbd_queue_rq+0xc1/0xff0
[ 1477.641785][ T8920]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1477.647852][ T8920]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1477.654720][ T8920]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1477.661242][ T8920]        blk_mq_run_work_fn+0x16c/0x300
[ 1477.666803][ T8920]        process_scheduled_works+0xc3d/0x1630
[ 1477.672878][ T8920]        worker_thread+0xa47/0xfb0
[ 1477.678002][ T8920]        kthread+0x38b/0x480
[ 1477.682588][ T8920]        ret_from_fork+0x514/0xb70
[ 1477.687715][ T8920]        ret_from_fork_asm+0x1a/0x30
[ 1477.693014][ T8920] 
[ 1477.693014][ T8920] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1477.700155][ T8920]        __synchronize_srcu+0xc9/0x2f0
[ 1477.706138][ T8920]        elevator_switch+0x1e8/0x7b0
[ 1477.711528][ T8920]        elevator_change+0x2fa/0x480
[ 1477.716819][ T8920]        elevator_set_default+0x375/0x440
[ 1477.722534][ T8920]        blk_register_queue+0x3f3/0x4e0
[ 1477.729641][ T8920]        __add_disk+0x6b8/0xdb0
[ 1477.734502][ T8920]        add_disk_fwnode+0x100/0x3a0
[ 1477.739807][ T8920]        nbd_dev_add+0x733/0xb60
[ 1477.744769][ T8920]        nbd_init+0x168/0x1f0
[ 1477.749453][ T8920]        do_one_initcall+0x250/0x870
[ 1477.754751][ T8920]        do_initcall_level+0x10a/0x1a0
[ 1477.760211][ T8920]        do_initcalls+0x59/0xa0
[ 1477.765076][ T8920]        kernel_init_freeable+0x29d/0x3e0
[ 1477.770804][ T8920]        kernel_init+0x22/0x1d0
[ 1477.775658][ T8920]        ret_from_fork+0x514/0xb70
[ 1477.780772][ T8920]        ret_from_fork_asm+0x1a/0x30
[ 1477.786080][ T8920] 
[ 1477.786080][ T8920] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1477.793917][ T8920]        __mutex_lock+0x19d/0x1550
[ 1477.799051][ T8920]        elevator_change+0x1af/0x480
[ 1477.804347][ T8920]        elevator_set_none+0xb5/0x140
[ 1477.809733][ T8920]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1477.816080][ T8920]        nbd_start_device+0x189/0xb30
[ 1477.821469][ T8920]        nbd_genl_connect+0x167d/0x1cd0
[ 1477.827014][ T8920]        genl_family_rcv_msg_doit+0x233/0x340
[ 1477.833149][ T8920]        genl_rcv_msg+0x614/0x7a0
[ 1477.838182][ T8920]        netlink_rcv_skb+0x226/0x4a0
[ 1477.843475][ T8920]        genl_rcv+0x28/0x40
[ 1477.847993][ T8920]        netlink_unicast+0x8ef/0xa80
[ 1477.853303][ T8920]        netlink_sendmsg+0x813/0xb40
[ 1477.858603][ T8920]        sock_sendmsg_nosec+0x14e/0x190
[ 1477.864175][ T8920]        ____sys_sendmsg+0x54e/0x850
[ 1477.869516][ T8920]        ___sys_sendmsg+0x2a5/0x360
[ 1477.874728][ T8920]        __x64_sys_sendmsg+0x1b1/0x290
[ 1477.880192][ T8920]        do_syscall_64+0x166/0x520
[ 1477.885314][ T8920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.891741][ T8920] 
[ 1477.891741][ T8920] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1477.900366][ T8920]        blk_alloc_queue+0x544/0x690
[ 1477.905668][ T8920]        __blk_mq_alloc_disk+0x194/0x390
[ 1477.911322][ T8920]        nbd_dev_add+0x494/0xb60
[ 1477.916266][ T8920]        nbd_init+0x168/0x1f0
[ 1477.920944][ T8920]        do_one_initcall+0x250/0x870
[ 1477.926245][ T8920]        do_initcall_level+0x10a/0x1a0
[ 1477.931706][ T8920]        do_initcalls+0x59/0xa0
[ 1477.936566][ T8920]        kernel_init_freeable+0x29d/0x3e0
[ 1477.942290][ T8920]        kernel_init+0x22/0x1d0
[ 1477.947151][ T8920]        ret_from_fork+0x514/0xb70
[ 1477.952278][ T8920]        ret_from_fork_asm+0x1a/0x30
[ 1477.957577][ T8920] 
[ 1477.957577][ T8920] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1477.964799][ T8920]        fs_reclaim_acquire+0x71/0x100
[ 1477.970267][ T8920]        kmem_cache_alloc_noprof+0x5f/0x600
[ 1477.976207][ T8920]        __kernfs_iattrs+0xdd/0x380
[ 1477.981435][ T8920]        kernfs_iop_setattr+0xe6/0x3f0
[ 1477.986897][ T8920]        notify_change+0xbba/0xea0
[ 1477.992007][ T8920]        do_truncate+0x1c2/0x250
[ 1477.996957][ T8920]        path_openat+0x15b5/0x1d60
[ 1478.002089][ T8920]        do_file_open+0x23e/0x4a0
[ 1478.007131][ T8920]        do_sys_openat2+0x115/0x200
[ 1478.012435][ T8920]        __x64_sys_openat+0x138/0x170
[ 1478.017824][ T8920]        do_syscall_64+0x166/0x520
[ 1478.023029][ T8920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.029441][ T8920] 
[ 1478.029441][ T8920] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1478.037953][ T8920]        __lock_acquire+0x164c/0x2de0
[ 1478.043360][ T8920]        lock_acquire+0x115/0x350
[ 1478.048408][ T8920]        down_read+0x4a/0x330
[ 1478.053091][ T8920]        kernfs_iop_permission+0x7f/0x430
[ 1478.058803][ T8920]        inode_permission+0x3de/0x5f0
[ 1478.064176][ T8920]        cgroup_attach_permissions+0x28e/0x9f0
[ 1478.070338][ T8920]        __cgroup_procs_write+0x24b/0x320
[ 1478.076069][ T8920]        cgroup_threads_write+0x24/0x50
[ 1478.081606][ T8920]        cgroup_file_write+0x331/0x8f0
[ 1478.087062][ T8920]        kernfs_fop_write_iter+0x3a4/0x540
[ 1478.092868][ T8920]        vfs_write+0x612/0xba0
[ 1478.097627][ T8920]        ksys_write+0x150/0x270
[ 1478.102484][ T8920]        do_syscall_64+0x166/0x520
[ 1478.107593][ T8920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.114002][ T8920] 
[ 1478.114002][ T8920] other info that might help us debug this:
[ 1478.114002][ T8920] 
[ 1478.124226][ T8920] Chain exists of:
[ 1478.124226][ T8920]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[ 1478.124226][ T8920] 
[ 1478.138212][ T8920]  Possible unsafe locking scenario:
[ 1478.138212][ T8920] 
[ 1478.145665][ T8920]        CPU0                    CPU1
[ 1478.151057][ T8920]        ----                    ----
[ 1478.156409][ T8920]   rlock(cpu_hotplug_lock);
[ 1478.161014][ T8920]                                lock(&nsock->tx_lock);
[ 1478.167970][ T8920]                                lock(cpu_hotplug_lock);
[ 1478.174987][ T8920]   rlock(&root->kernfs_iattr_rwsem);
[ 1478.180363][ T8920] 
[ 1478.180363][ T8920]  *** DEADLOCK ***
[ 1478.180363][ T8920] 
[ 1478.188501][ T8920] locks held by syz.2.8559/8920: 5, last CPU#0:
[ 1478.194737][ T8920]  #0: ffff888051bf5eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 1478.203802][ T8920]  #1: ffff88803797a460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[ 1478.212700][ T8920]  #2: ffff88803e23bc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[ 1478.222458][ T8920]  #3: ffffffff8fd9c7e0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[ 1478.232228][ T8920]  #4: ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[ 1478.242756][ T8920] 
[ 1478.242756][ T8920] stack backtrace:
[ 1478.248648][ T8920] CPU: 0 UID: 0 PID: 8920 Comm: syz.2.8559 Not tainted syzkaller #0 PREEMPT(full) 
[ 1478.257928][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1478.267984][ T8920] Call Trace:
[ 1478.271265][ T8920]  <TASK>
[ 1478.274189][ T8920]  dump_stack_lvl+0xe8/0x150
[ 1478.278785][ T8920]  print_circular_bug+0x2e2/0x300
[ 1478.283812][ T8920]  check_noncircular+0x12f/0x150
[ 1478.288760][ T8920]  __lock_acquire+0x164c/0x2de0
[ 1478.293610][ T8920]  ? __lock_acquire+0x747/0x2de0
[ 1478.298559][ T8920]  lock_acquire+0x115/0x350
[ 1478.303071][ T8920]  ? kernfs_iop_permission+0x7f/0x430
[ 1478.308440][ T8920]  ? __pfx_kernfs_iop_permission+0x10/0x10
[ 1478.314250][ T8920]  ? __pfx_kernfs_iop_permission+0x10/0x10
[ 1478.320066][ T8920]  down_read+0x4a/0x330
[ 1478.324239][ T8920]  ? kernfs_iop_permission+0x7f/0x430
[ 1478.329623][ T8920]  ? __pfx_kernfs_iop_permission+0x10/0x10
[ 1478.335440][ T8920]  kernfs_iop_permission+0x7f/0x430
[ 1478.340646][ T8920]  ? __pfx_kernfs_iop_permission+0x10/0x10
[ 1478.346453][ T8920]  inode_permission+0x3de/0x5f0
[ 1478.351321][ T8920]  cgroup_attach_permissions+0x28e/0x9f0
[ 1478.356965][ T8920]  __cgroup_procs_write+0x24b/0x320
[ 1478.362172][ T8920]  cgroup_threads_write+0x24/0x50
[ 1478.367202][ T8920]  ? __pfx_cgroup_threads_write+0x10/0x10
[ 1478.372928][ T8920]  cgroup_file_write+0x331/0x8f0
[ 1478.377866][ T8920]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1478.383329][ T8920]  ? __kmalloc_noprof+0x38c/0x720
[ 1478.388383][ T8920]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1478.393860][ T8920]  kernfs_fop_write_iter+0x3a4/0x540
[ 1478.399157][ T8920]  vfs_write+0x612/0xba0
[ 1478.403395][ T8920]  ? __pfx_vfs_write+0x10/0x10
[ 1478.408168][ T8920]  ? __fget_files+0x2a/0x420
[ 1478.412775][ T8920]  ksys_write+0x150/0x270
[ 1478.417097][ T8920]  ? __pfx_ksys_write+0x10/0x10
[ 1478.421953][ T8920]  do_syscall_64+0x166/0x520
[ 1478.426556][ T8920]  ? trace_irq_disable+0x3b/0x140
[ 1478.431580][ T8920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.437643][ T8920]  ? clear_bhb_loop+0x70/0xc0
[ 1478.442335][ T8920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.448227][ T8920] RIP: 0033:0x7f6ad0f9e559
[ 1478.452637][ T8920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1478.472241][ T8920] RSP: 002b:00007f6ad1e15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1478.480674][ T8920] RAX: ffffffffffffffda RBX: 00007f6ad1225fa0 RCX: 00007f6ad0f9e559
[ 1478.488659][ T8920] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 000000000000000a
[ 1478.496628][ T8920] RBP: 00007f6ad1035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1478.504605][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1478.512576][ T8920] R13: 00007f6ad1226038 R14: 00007f6ad1225fa0 R15: 00007ffc80d12ed8
[ 1478.520563][ T8920]  </TASK>
[ 1478.526907][    C0] vcan0: j1939_tp_rxtimer: 0xffff88804e585800: abort rx timeout. Force session deactivation
[ 1478.548477][ T8916] bond9: (slave bond10): making interface the new active one
[ 1478.559954][ T8916] bond9: (slave bond10): Enslaving as an active interface with an up link
[ 1478.596213][ T8912] bond9: (slave gretap2): Enslaving as a backup interface with an up link
[ 1478.596603][ T8926] bond0: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[ 1479.324075][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1480.203771][    C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!