last executing test programs:

4.75355267s ago: executing program 0 (id=4506):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_stats})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4)

4.526581948s ago: executing program 0 (id=4508):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001600)=<r1=>0x0)
sendmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="75694bef65736571d17c54f811b734d4b9fbc9681dfec8a83f8e5f246b4ed07ea2b50eeec17e579794eb8285dc030b91dd3a256f505169204b53361582aea0699f4337d9e66be31557ac0d8df96805c888f27d6ac8ae5544883e36ee7564fa3f02f7589c70cf7f4b52c76bb9892d0fa5689b5c6eeddaa9e008536e924ffa92a6408efee68e8b983f4e30a2291ca0ea8dc11d9a01375a31869ae18e2947d92d08edb5d480c6d45d474498b509ef8752a39fcf313245d0772fe62fcb1543adfce731681f33e223af83ff397dc34c6d32fe493f784baf2b50a36588effb1b18acda68c74411ee", 0xe5}, {&(0x7f0000000100)="396149f60fee0f", 0x7}, {&(0x7f0000000140)="ceeeab1a2bf099e9793f6c2c2a8963ae8cc1e32ff691d02035941d9072b6b55b2db8458f29dde84d2fa25f3e0682b68bbd5b6cc5f6cbcb37ae0dce144189aa2a01619f6b2ef98833f13cac7c52baac398ef9423350f408e91c67c5d4a9c817e042b83e46c214bda95107da43b574f1419500d8c6b998c0217bbcd701db85134ce2e5583ecb39c5afb2ceb98efea944014598af9450cf", 0x96}, {&(0x7f00000002c0)="75422554a0d0475f3893af330f6b14ed71ffe25f14beb731fae22b60196cac56d799ee42", 0x24}], 0x4, &(0x7f0000000440)=[{0x88, 0x88, 0x7, "3d59bd9260ee56e9813bde9339eb1fb6bdffaab86dbeeaf30d247019a31f6fe335d1fe2ebc53b5de37f172637be6c3eb509e781cef6ee204f84e5c86b4ce8e5091f103d23b664bd59e545d856aaccfe7b6e1f713ced60fd1f59d1f568496e04b82039b2463f2ed0613286a53d91d52194ff50d366e25"}, {0x68, 0x110, 0x6, "3675c2f2deef616a1698ea31fc9ececbce8c3874cc8f7e4288d276f5ab50af6214faba1e3163cfa82ca3b8949111a263bf0e176f70baa9b3ffa06ff9262045e60aa7807d3b213ba364b0d5602548358ed2c51fdb"}, {0x1010, 0x1, 0xf2, "23e28ef3e3072146a477c48bbc79a1e6da05aae8073b22faa93870e957a29acc3c942e4417be7348a130a8ef3019b362a34cfe262ebc5c43c32a1be7e7a77d6fb04fa6ea476ba4797ea564be4a46488c831f5fbf4c5654ed3969770d4509100ac47da766d2c4eea9d85696a11f6ad77dd8e494a2a26d9891a5158444b435c11295b3c8287cee0af1f4a5201e9001592db9b501e464dc3e9c3164ccd0dcc8196e32fccf75feb237b8b4a6a9b97575b24c434655cd89addd0c844288831b76de3bf8f8169c23585161727f634615e1e5ccf287b06f795f1c14375580a1e1c0b401a1c591cefa2d151678f56c3a30d52d14fa4b312ba73d83db0f92a95d931684e10b247fcc157264b3c93a0dbd854089f47cccaba6d326c05f8c678b82340e817c2a907a9b2a9c3bfac062d0300ad25f72ce17194191f9a4cc866c696e9ee2e86df1a1f6432773550cd714fa08000c1cc09405ef7632a7a43828b2b5d0d238b7476ee3341d777e5137199a82e3ba9ce1aaf9069d0d3daa969f0674bf459bf8e015d79576f590f85619cc84a9be2fd4eb7f123f6c36e766e2171664bfc33dffe48effb7e4bd381abb758da4c847b7a0b46a0dab18bfe3e0b73007112c5e8703c6443e46199133d5827c61e1c7f22fea5e951cf00be473322a46fe92d5e8ddf62d68d08eac14616665303da2a95abe34da04f6affc00f4c511f5b9f80a97f66d296489bd3e101a09a79a73f9c3a6fc62e1536e44994b5b93b5ed86402fb90e35a29eee36eadc09a2cfec0345fb1d94d771408b42ffea56d34f3a9b2f5bf75150b96a194e955463cc9c087c5bcc8eb6d471ba32117ddaad98093f248db01d2a2fb340a323f9d37d53ed49b0ed3e714a741f914c19cc3b589978fa6f8983d98555691d3e284bb4ccb1f237d0ae64ef5f4e5b8361d5bca4b2ed3b1a44e86b9065ad439cceb92ab4a28ce061bd7a23090a858c68ae5e7730148d07f4de04b10d51c7ab78e8b411eb84d28a8f869eb24cc95f819e28d3e9bbfecb662891e5257c28f1fdf348e51987d27d241fec1fb066e93623e61dd17310f1a003969409738623d7a20c00c624fab32b7dc59b62b1800da9b96cabdf8ac8bdf8152cdcfc7dde1dda9dda4b84e0bda4acf5286ce987449af40295269fa5643b25b7074284e6ddde49d813061c10fa176beac830076a8ccc7f64b4b54a793c91e7a7ab9a26b960a43bb57ddfb2dd924d114bd379324a365eb4232f0c4ec9cdfa3db37ab03b6f737fcbf04921c7b5f6d89494395d40ba8eace5c737355769dcad717d78a4391c02d247bc4c255818e41707f9132e3ef06b9c826dd8a2bd2f5c5b46c50813724bf642c2cdfa4ce27ceeae65c4208f61e76ca93371a57e85c24e951a71900445e44d44a97458349ec87ab454e533ac3aa3555014701033b51c00eeb4953a84abe2ed66cec4229e028fab2aac15903b5c512a27d741afb7198608db6a5b85d6c8c13984d3edf8b3c470be9d4074770ea4efadc97b6fbaca576953efcff3f4ba41d1643ac85cd223d2b407cba055f4a9ebdfa412b84dcfc2021c04bf2961a3c03b9f60faf6e3ed72f45a934539811ba55ecdb5c2868e24c178fd382503fed113a8eb596b00531266f72ad370c929b7bfac59044af10c7b8b21b10bca28cf2f69b9370bde664fe086caaccda84a79fad371c8d3d64302ef5ea232c67c21471ea0df5c1b9b50c310fc9b90adb0499075f552e4956a61531a14181ed587276034aa133b6dc11251b0cdc9398fff8752413f6835439ba02dd62ef0437a68f06e291b18cb090294b13ec95e69be8dce1552b5a7b5ed73f23773811532a33831a1f495ed69a3f2d24f2a64c9040ada65f9e22488148a99067216cb9d806f890369065d3320179ec66fb89fe3df3cd114efdf136ba8bb9a5eaf79a397e2a5a7ce37e9fd1d72027cb4c54e96e7fdcf303ceefd0672bcad0ab4638eccfdbc188b5b655e17223cea8f5f61daa9a135a2e41a2b6abb9aed864d6d9679b10b5c66f827d06b3ca58a374d230413989c1bc877b4f00037d446038b431b052b00073eb550f614208cd26d0f8cc1e1a13b3480d8c8f4c051eb15bad0be7fcf5ec5698aeb64c341b165c564615bab75e1ca0ff6691c61bd7464a1e853884a870737a6e6007dfff77b5b6b078a58ec522e47d55b8262049d670c83688c6f6c53fcf9bbc40552d629c5019ef7af41ec8355fd03e109fd5230557d5913d76477ceaf27189a254cf6fd2708d559340e5fa6b5931834c46e3615400089712c0fd6a36dbce4cdf1664f738af5580e895f814d7b33420d51bd5f73464f4899d9be647d671defd83a8bc2c5c5c7ab4081f8ac16533dbb595900d2730307cf0566ff1a2b3112f52571d70ee6ac8dfe284eaa3fba4b651327064e1b7a571b4a9cef9af2c615b4a1daf1d958b13cd73440fa6f318df986934c78376c9b73ee4294f49eb182599e735a83d79908693c4581bb23d0e5c78999d954141b83ee0a6910556ed7369792d5d91e394bcb76ab70804ea269d051b4054e307a77d368442f424b8c474af5610d527cc980a57cc3281fb84f8068ef8da66b0e95c8cc7ca9960858035b019c74d28b096931fd4390eb1b2629144598e8b61821778e35655c4b71f961e48d97f80e80253398522d0c0a8b05dd4ea001d67a719b07b8041b40e3cc00c0d20262aed67b3ff3b1f460aff23a6c28e8c8466c27ca3e336de64eda524447f30e77b4d3ad455dc2062fa7241e6eccd5b7b90f114fc63a61b7225154489886fd24e3512e0abaf63e381897ca1dc751b5e889ad1284d117e0d65e23f8843ff55dfdfe8bb69f1fa8dd9583beafd9d2f455785a248f415874af4155a256c393ee519c82f123ef9200248057297841b73359816fd3b25b4d8e0f39839fbcaffbc46aa795d058f2ba9f268f98603ab23fce0c6ee88629e2e51a7189d190927ef8dd381fde2e581791cfd2d77932410df86403793dcbab6a3ca76a26a661e5793ea370b01c7c3ecfb695216e0a91d064d6c9e5b413d46c5390e229d0005fb17497fb72304a99bc9b80c472317d05b937920eec4427ff668fe07991230771bac3ca9fe4f698ef5f064d16343195ef24338652a699c30bcc0771b494d8473031954b7ea2782476f3de402c89d44118aa62d2f7074b9f16943b5c7755b27e68df64f686b53250a69debbe5cdaa69c26cf390537a173513b4610f8207b51988a8eb53fd10e81aa6d19b5b3308395eee2a17f123d2e0be8e7044bf6e01b9ed8737415315226209723748d4d26e6c0765ad4fda96af5f7a11b64a56af10bc20287a3cfa7dd808ec887fa8366bcb479f30ed613391bae1ee667c8316ca6eb55c5849c5163673b3a10d0a0858975f3369d51d266c7e00d4102d0818d00310df5d74fc112af631130a975e2bed05963ce4dc488d02de67bdb20d83f27a9168c3fad279cc290956aeee09bd2f29949aa8e67985cd5e9f3b4298f80a67728c5a56997f23a952ce8373331bb194c2da44ce706533bbc9b28cc437afaf0647a47e58df081fb776293c90aad4eed107a4f294a122d5a1ad01f6f7e79bcce6729f1cac0f476781480f845192824e88b6dbb26abf9bca9fd811589c890bbbce0ef14e7a5e6432b3a060f61115d17f2bf4135183436a3903b66e73aafcea9a745a52efd44e46fde13f20668f38257ba844d48868f81b26075c4fc56dab357c852f815fe091c4ad169018ab830100a565a319027437f3dc65385bde8aa0dc32bee1398af76d55900cd2a3187a2125ac33b2c27c0a655120100e1bbd1f9b7d357c8d942e3355fdf4280ae66065a0978f0d1f77bed0572ef359526930fa7b98c060e9a037051f04d119a795aa3d0a6cd505d0d4934affb6856115f129d4b089d0fa92f56754c46b7c8d2b80d5917dc36957029ed786393a9b98d854fd7f10914decd890c7330bccdf124bab516076ed9c31b7e5d235faf18aaff6727920924f42c5a3f02936edc2b52f47b248dad3e849afc0d78e828be90a6fe320d5b0128f1534f3697e7969c150787c21c198b556b9466a27fd4996ab3a8e44b947ab92ec968b3a5c99a1f1a10679f47d27e0047cd0d7b827caaedecbec9e3a73096a11814554d3a4d2e00b6f352f7a5abdd7fcd81507914f95926d0aa56a9381f2929bd77002e2d38e9c32df8e2a8dd614a9980b157bd848dbbd64335f27b9c5c84edc2d1a95c78e2d1b28a0e4098fc61ce1f775a1190848d3a0da2c2b3d97b869ca5a1275a508e1b3e0cfebc7b0574704347c1ea5ce0029225c210ce88f6b934e879ef1c5e3f87b52d268b306c4923ef3db88ddb067716349bdac918a2da186edea5881450ebe124c7ba52eaaed6e89e5ac3c53d4159fe8ce999c217e8ed1d486708a82fe91544f306d9aab9070991fc1708501501cd9e60e1f9c4f730d8a7319b934824d3be576c3fc810e3c729dd90ada2dd1755d66ecb7494dcc40de9b4d09b0fbc03adfc8f6922913018f8cff30842f3b80bd39782528264a3472fb9dee05aab2975c7f5a7123e3d95afbd49b0a112ac8078fc4e77b4c76b758d6ea6a5333cfdf1490350d38397d820159ff405558d94f7192cdbec9f2650f05062c555e50cdbe3a348242933040f67a390de0b0328af00656387774fc1941e00bc5cc1466afa1b19b23522e6c884a2524f375cbf8ef2f1dfed56ba74bb9f15c0c692dd3396f74493eaa07b87858c28dab31b35bb3f8472d8725e3415d4c222a8fb0de985ea6361d4e670b074d830518aeaa0fb775f433e3ea01202bd56998364478d5869ed211d2ee28bda11919dc6b51cea8dbd39096c0b3f521c7bccefe0bae32e516f99d2960a7195d8013a50bf2eb9890d427eda935700bb757892e022d7162add4f0a6ae50b5a0a2e69e91f7aaacff2d6f86cb017bedb69747baba9f03e9308dd2a5a4176e92ba11712d3e27bdd2cb579233483caffc586cc7e718397eaf946259cf6a5a94d6666291b9fdc44434708713365da5d331c5d1e8259d4b9be4dc8fd352ce626009491bf6112ee8d00a899be0be0ebab72d737c3debd0bba95cdec93e0ad50c49b3b65388c2645ae5659c2f4ab520e5156246e2eb594284edbb42fa1d161e1accc2800797321d37f9dae707e2dcdab4ebeb4e903d537e8feda81a3d4e4f04f609d7d27c72fe3e1caefad6b7c96227bfd23a5f9c076ec5ab6699034596b63c11ebdf62076e3351eda8e91cbcdab335f10d7637021c19bfc68a71cd6d1754a27097c6c44ae7b523d992ae0a826f5575a7fe7d9f86a0f63ae17ab827623718cb4d4eb7c33d6b443bb8cb86870998bcd3859cbbf996d8ca6b0a688c7e1861532f08778fb55efef0fa29b8fb9ed4f678fafb07de4e8b9ab80432473fc26e9cbdf8f4f2529c36f5cc0ef847707fd6a10e1ad5e234e0b4587cc887cfca74ecdfb09d134afc2aabb5ab6de215a8ad3412175a469f07627055fdc1695101bafa8008735b19a7a4da232c5fccbdfbabf32ca8061461053a04f3b0840d33bfa70b6e827e8c401f3d7d0cb5ad93b4e11dd6363d7e22e4df3389b82cff8a290828a9e138d670fe8c42181450215356a84c5f098f0d59a911c2b364aa658c7d59c7a51b70f9533f64814e4f9f1ed875248184d30b98965aa8f6f020515d5a1e1b73811141675886272b40afbad296434950f335d7bf8bf143d98afa2a423756fe7b9e0335e6342cb60979ba7dc66df5f12d42305efc648883370cd82d03279b2b9963c59d174ba0a871251a2cbfaedf365d21f557cf64d2b8e9e3e1b05b12d1880e528c4525896"}, {0x88, 0x108, 0xf1, "017ed4d1f9358f282cdd4ec81aa1af7038c61ef2cf579f43a53b2059dd198de20ddbe469cdf798cffc077fba18a8b7f55eb0a662daa11301622a95407cd5b97b96d4d35a9b39b6b58dd7156e093ba5be10b39b7d6ab32cc4c2c77d4efb537736f021dfbd3356f2d7156d51f1e999269651"}], 0x1188}}, {{&(0x7f0000001640)=@nfc_llcp={0x27, r1, 0xffffffffffffffff, 0x7, 0x52, 0x9, "9ee5e7dfc54f4c34cf338f14992e5c322af7566393f468ef7b961f9ab6b635b47ce4c07eb2073bb46514926e3ba63b815837a3450efb36e34a6e2cf942b4cc", 0x31}, 0x80, &(0x7f0000001840)=[{&(0x7f00000016c0)="b4515b9403f222b451e2a670698944ab0950e2ca5f645381d6926995881971f5fdab24552333f2c4c910d12c8a3835a4f2064ccc4e257e38cf79dd8208f016ffe7779bd6b8104bc3e85f9456030259c19c2b0a939167f58feb8bf6c21512c8d70b0fcab1e6e69aceeaa692e7caa2b4856808821d46f4116c6bf970f9dd7cc634b51d8cf491b98ba1d85d8e6aabfb78bd26d37938", 0x94}, {&(0x7f0000001780)="9c123930aba9cbf016b3c0adf663e1d1a797f161f0e5fc03cf06285e47bfb01844f51d3fd8", 0x25}, {&(0x7f00000017c0)="d321ae67191b6dd96ede897047daea475c9a9efc5d50dd782c0c8bcd17b959886c6cb92bd2e16bff233c87544e828c6c74a9c66584ba207b4a242a975614841403f791a3d123cfe701f5614b14926cf4a2093cb3ce480eedcfdeb5163c809de7bfa3c9641f630e07f8a54c02504e694ccf59407684edbedacf2ba86fe301ae3e", 0x80}], 0x3, &(0x7f0000001880)=[{0x58, 0x108, 0x40, "4ae874a28123e809b316bed653f9282358d5b8ea569832cf82fa4018a377a83ed71a2fa1988f1704ff0416504f44083ca333593901b8ac6e21eeba341411a84db58c53a7"}, {0x40, 0x13d, 0x7, "1ccd51d8639e29a1bd169b4e096543fb3dd86d37a96192d7a360c497fe753eef5a64277a7da469346f9e181a"}, {0x20, 0x29, 0x5, "db693c58d1535027f3e67dfd74673e50"}, {0x30, 0x111, 0x2, "4932fd9a692aaad0d2fdae45d0a43c5d3aec338d7410c2941d1d757528"}, {0xc8, 0x104, 0xa5, "a26b10017305433371a97f2bfb3406595a7f99d4dff3c77657533d05b47edf3e95e6b20646f57e1439a4a5c64c1c6a1eadee5b622a3c67b8c6a28678a4d9fe3ad03685150bbe04f86447bc836dce61259ab4b6fd8551598caaae2c901a33d4c653f7bbc20ac9c914e77dda7d3de19539a60650dd2aa7f06897b61c02bf4d9d03ef7da5f4df98482756883eaa504fa67eac2432d9c6dfe0b8128f67ea2b7534b088c78235a4342da2cfc038d95de7fae0267d0a8c0fe1a9"}], 0x1b0}}, {{&(0x7f0000001a40)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001ac0)="07fe7a9730bf36ce023db590514c76c3051faea91e322e675fc2b605e19e3a275b0eab23e3966dfab1f830446ef6e8e9317b79c419e6f4e4e342843791e20130935851028b8190be3a22b400bbed799f12cf018963d8b368a1c0852c6005d303304fcba6d6ca712827a5a319a0d282901aa9ac90b829db5013fcc27f112a4a2b32c8", 0x82}, {&(0x7f0000001d80)="f26c47e23bee9e7f9303db9dba0fa0c75a6a2c722b8aba17c5047df6a68efafd96ddea8d143cd8e47a9ddaf47184cb7f88bb624ccf", 0x35}, {&(0x7f0000001dc0)="6c84791139942fce604ca8c13f851266afa8f6571e7a50b16102260791d54556025bc020f95c8a38a5c146a4d64917df8634a94b7ef213c8747c904034e2de2a79adfe9c", 0x44}], 0x3, &(0x7f0000001e80)=[{0x90, 0x107, 0x2, "3399453939228fbec98a7092de2761a141a3dfd271860cbc5bd025755e050f47e13565337be2cc4429459d12bcc843e435d84395a3f442be4f2854825b9f7e7111a31cc0de15c19b5df9fb92f40751e2e0601d104468c7b484b571b03d4295e1c8f04c634d650f007441fb2554e9ea450ee0cb06dd3904c9ec6f6d317137a8"}, {0xa8, 0xc8dc34dfb36b44f9, 0x4, "92f0fe85a7fe9ff298470f0f648ecbc38e7186ccaa248ef7b9ccf44ef9ccffb114bc2822fbeede2a6f1cee2e162a91cba52581fabe23896ea9eb32d8dc1ba7733a4be292760a28716eadefbb6637d41e30644ca2458b42dc53b54dcba7891a52d9960cf8ce04daea4ffebe33fbcc90065612cae63a32bb55209e66339419dec59f49d41c43e4d507187bc09cc278cce00d70081cb61100"}, {0x48, 0x116, 0x4, "9080ad3de03ab47b0fd834f4b4bb2a2b2325c390c75453c5dfc10ef3a7eb86976d7a5016057350f419a297580fd5f8695f37"}, {0x38, 0x217, 0x3, "fef88630fc7cfa263a2b6ac3e0d32e405b45caf61ff9aed0b2f2690219aa0573715fef"}, {0xa8, 0x108, 0xfff, "ab161098c7677f2b30310bf90b2a62faea1cc0f5d09671da3c62cb3c9cc161bb8ac69abecf546c1cb921437ad04dd39adbb436b3110d14ba1c87d030f59e2c4d0b67fe5c2e913e4aa28fd65c5d51475a4a5bdbc5a420f83c67aa49d0b27f78c4446f42fe7b554b69a2e2920d7e9f40ce32d8fa63627a2b6d6189592ea9947dfe6f9a3aed73d9cf061501dd620c145ce7a11b"}], 0x260}}, {{&(0x7f0000002100)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002180)="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", 0x1000}], 0x1, &(0x7f00000031c0)}}], 0x4, 0x40010)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0x0, 0x2}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740aa75", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.246157665s ago: executing program 0 (id=4510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x20, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xc29b9f0cf3c06c67, 0xfffe}}}, 0x24}}, 0x48880)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@udp6}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}, {0x0, 0x44}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470"], 0x78}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
unshare(0x8000400)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

3.982203391s ago: executing program 0 (id=4514):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0)
unshare(0x400)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf00000000000000000700000009000100738a7a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a310000797a3000000000080005400000000d08000640000000000800034000000038480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003801800008004000280040001800900090073797a3200000000140000001000010000000000000000000084000a"], 0xdc}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa00480000000000059078ac1414320a01010044140513ffffffff00000000ac141420000000008907ce0a01010183034a00b400"/71, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04fffd90780000"], 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
close(r4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r1, 0x8, 0x10, 0x0, @void, @value=r1}, 0x20)
openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff7)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNGETVNETLE(r4, 0x4004743b, &(0x7f0000001a00))
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="f3ffff000000000000000004cc"], 0x20)
write$cgroup_type(r1, &(0x7f00000000c0), 0x9)
sendfile(r1, r0, 0x0, 0x10000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000180))
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x2000, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50)
poll(&(0x7f0000000000)=[{r8, 0x5000}], 0x1, 0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'erspan0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettaction={0x178, 0x32, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1000}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6)

2.848173608s ago: executing program 0 (id=4522):
r0 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28)
mmap$xdp(&(0x7f0000e68000/0x3000)=nil, 0x3000, 0x400000d, 0x12, r0, 0x180000000)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140e, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x804c000}, 0x4000011)
socket$xdp(0x2c, 0x3, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28) (async)
mmap$xdp(&(0x7f0000e68000/0x3000)=nil, 0x3000, 0x400000d, 0x12, r0, 0x180000000) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140e, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x804c000}, 0x4000011) (async)

2.662226647s ago: executing program 0 (id=4524):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000e400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000e400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48)
socket(0x15, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000111408002cbd7080fddbdf25087b0e000300000008004f0005000000"], 0x20}, 0x1, 0x0, 0x0, 0x64040004}, 0x800) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000111408002cbd7080fddbdf25087b0e000300000008004f0005000000"], 0x20}, 0x1, 0x0, 0x0, 0x64040004}, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r8, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c085}, 0x40000000)

2.420234112s ago: executing program 3 (id=4528):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850010001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

2.403053304s ago: executing program 2 (id=4529):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa)

2.206398508s ago: executing program 3 (id=4531):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a030000000000000000000a0000090900010073797a310000000020000000080a050000000000000000000a0000090900010073797a3100000000140000001100010000000000000000000500000a8dc792d0846d9f494269c10ede713b46439c83cddb187d0d2007ff72d240185ca039fd148cee69c23a472e1dcfbc4318e2167880d0f1e2fa0b9a67da79d342fd80ea6351005d2ac3f0c5ce7642ef8871bca2a49a72350e014dbb9ae45bc1b42fdcfb7b3e57c3c7ed3aa93bb2903632f409912e63e7e8ca386c4bb5eae437ab8e1c34326ac9ee792f6170cc2c"], 0x68}, 0x1, 0x0, 0x0, 0x8000080}, 0x40810)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
pread64(r5, &(0x7f0000002840)=""/4096, 0x1000, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x3, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r8, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x80000003)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@delnexthop={0x18, 0x69, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x18}}, 0x0)

1.834310998s ago: executing program 4 (id=4535):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r4, 0x100000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f5af25bd7000000000000e000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x38, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25070000000500290000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000200)="05178100", 0x4, 0x8810, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0xfc, 0x6, @remote}, 0x14)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={<r9=>0x0, @private, @remote}, &(0x7f0000000280)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000003c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0xfffffffd}, 0x10}, 0x94)

1.776008968s ago: executing program 4 (id=4536):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7fd, @loopback}, 0x0, {[0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x800000]}}, 0x5c)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000002c0)=0x7, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x200000c, 0x4000010, r1, 0x41e90000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d4, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a8000000090a010400000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d640012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b0f0001800a0001006c696d6974000000240002800c0002400000"], 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001140))
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
syz_emit_ethernet(0xfa8, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf9a, 0xfffe, 0x0, 0x0, 0x11, 0x0, @remote, @empty}, {0x4e24, 0x4e23, 0xf86, 0x0, @opaque="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"}}}}}, 0x0)
syz_emit_ethernet(0x239, &(0x7f00000050c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "091ea6", 0x203, 0x0, 0x1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], "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"}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$qrtr(0x2a, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000035, 0x1, 0xff57)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001400)=@newtfilter={0x1d0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x194, 0x2, [@TCA_MATCHALL_ACT={0x190, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xec, 0xfbed, 0x10000002, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x144, 0x7, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9eaf, 0xffffffffffffffff, 0x8001, 0x9}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e4599, 0x4000, 0x1, 0x6, 0x80000000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x10000000, 0xffffffff, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x3, 0x3, 0x5}, 0xcf}}]}, {0xa1, 0x6, "5d1c68d3ebc4bc5a64d54d579d49ef8b3c449fca205de0dc1cd5ffc6dd013ad3dba78fa0d80c18056b93d2fe37e800d0277b0694e30a046276fc1f9272c7e9cd903d9e8ec03f7b0dae9321a0d753e3af8aef19e27cee43158c579355f61a1c0e9b95284647a1e15b11e0e8e176a70d6c5137f87e83093d8bbda4cf0a8d69ecb2bbefec598c0f85c653c6154ea654604d37eace9165ce93abc8c2daa648"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0xcc2be1335c283fe0}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x43, 0x9}}]}, 0x1d0}}, 0x800)

1.550061333s ago: executing program 2 (id=4538):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) (async)
sendto$inet(r0, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x10130}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x45f7, 0x7}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x24004004)

1.284049586s ago: executing program 3 (id=4540):
r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={<r1=>0x0, 0x2}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={<r2=>r1, 0x7ff, 0x7dc, 0xa, 0x2, 0x3}, &(0x7f00000000c0)=0x14)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={<r4=>r2, @in6={{0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, '\x00', 0x12}}}}, &(0x7f00000001c0)=0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0x6, @remote, 0x4}}}, 0x84)
pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="18d334e777825d48d19f84724528b8f01c87b8966ae55bebadedcd5360efd87237d43c", 0x23}, {&(0x7f0000000300)="abf425e40d5554219757b57c6915f71ea167cb90809cc33f90218cf43aa872e0376d4ef0952e1c981c3ef4fac9232d84a85e8f86316070d9126d5f651cceab5bcfc0b8e65a77fa7348c7f3a90b9e7f6feb94bd5f2e96f37d252edeafc8ac06dd23942ade9f8342b0bcb524bb2da4ca02537dbb052c81cc55497269454eb9986545516e0d3ad1c4728f110c012212f036be1708535ab92a4df1261b9ba2e312db7c8307da56b2f0330fc2", 0xaa}], 0x2, 0xffffffff, 0x1) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={r2, 0x2c, &(0x7f0000000400)=[@in={0x2, 0x4, @loopback}, @in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}]}, &(0x7f0000000480)=0x10)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000004c0)) (async)
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14, 0x800)
getsockname$packet(r5, &(0x7f0000000580), &(0x7f00000005c0)=0x14) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0x2387, 0x2, 0x9df, 0x5e5, 0x34, 0x1]}, &(0x7f0000000680)=0x78)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000006c0)=0x1, &(0x7f0000000700)=0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) (rerun: 32)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x69}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb7a0e867}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000010}, 0x10) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000880)) (async)
getpeername$packet(r5, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) (async, rerun: 64)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000940)) (rerun: 64)
ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000980)) (async, rerun: 64)
r9 = accept4(r6, &(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff}}, &(0x7f0000000a40)=0x80, 0xc0000) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r5)
sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000000e00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x2a4, r11, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x99}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2398de73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xde39, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @private0, 0xfffffffd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8a37, @private0, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20040811}, 0x0) (async)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000e40))
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f0000000e80)=0x2, 0x4) (async)
setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000ec0), 0x4) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r9)
sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xbc, r12, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0xb}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0xc, 0x1}, {0x12, 0x1}, {0x60, 0x1}, {0x5}, {0x5}, {0x48, 0x1}, {0x7, 0x1}, {0x2}, {0x16}, {0x13}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x12, 0xbe, "354c07ef5bd937832c1bf4354bcd"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x484}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x6c}, {0x18}, {0xc}, {0x12, 0x1}, {0x5, 0x1}, {0x3}, {0x3c, 0x1}, {0xb}, {0x28}, {0x4, 0x1}, {0x1}, {0x48, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1b}, {0x48, 0x1}, {0x18}, {0x48, 0x1}, {0x7a}, {0x4, 0x1}, {0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4890}, 0x4000800)

885.985681ms ago: executing program 1 (id=4541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850020001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

846.083682ms ago: executing program 1 (id=4542):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x14, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x3, 0xff, 0x0, @empty}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = socket(0x1a, 0xa, 0x8)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000001b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b00)={&(0x7f00000006c0)={0x1434, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x12b0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "b2fa773aaf1fdd4136f8af9c9325ab38fa1ef9f332f5be035fd1b27f74343317837519506b3b5b6d4e287ede81ec57feff086b0967aa323b61891930b569beb1d4be55b7b51790"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7949}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!{/!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}:*\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x34db42bd}]}]}, @ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "1e7a25bc8c22a783797d97064e776667aba7167f20e7e751fa78c3b3b912dee3c801b16d65fe55dbb909e940215209550327e8be029561bffe3bf9c1eb787ba87f02334ff2d906a37369c8257bef1c203e1919dea0f5e951b24a520d97cf993960e536ba495a2d80594b451c74fe2b30465a63fec68df3be50363f0c1d451db27ab2eec8813cf97319f7195890dd6d046605952e4a7d2c485ab8bd3515843e5cecced580"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "402a67552b5c7723be25e87a36dc1dd4a3bc43f1591f28a8bb93dc13f3da9a9b20e062b6fec836d8010baa0fa714aaecf39186ff146ebf30e769ac2e84c960a6e0f5e6df20764a319814d6a4d3e9ea365622f25393793e2e37d4fc84147613560f"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffe01}, @ETHTOOL_A_LINKMODES_OURS={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "86d87d24ac4039230c831e837eb46f56baf9b5272d3b356492985c634d751de9d504eb6cb12fa4c23e5cc1a30fe82b9cc5011d7cd585bd0ac09c10217ec9c3cabdf1b93ad557fb7408a1774832de14f83128e88348ec665fa27b76f0b9a2f519ae1c22af438875af8bb753fcf7d8ec05d01e63c99876950c485bf036b83c621bb6dba57c17b6965c16b727c32e4a0e83c8450e75d1a0702561c704b713309a5e8a055dc2ef5e6d67e53c699672cd3868c54b694256726fcb072b2825a8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffb57}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vlan\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1434}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004010)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

762.810162ms ago: executing program 3 (id=4543):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0}) (async)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}})
r4 = accept(r1, &(0x7f0000000000)=@isdn, &(0x7f0000000140)=0x80)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x10001}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)

658.271555ms ago: executing program 2 (id=4544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b40000007b0af800009500740000000000000000000000009592e4669cb3000000000000000025ad07e9c3b58fb299f77230cdccef38b6737227068b275c411dd3d4a836"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000030429bd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280080001006772650020000280060003001000000205000800000000000400120006000200"], 0x4c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$tipc(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000002c000480280001800d00010073796e70726f787900000000140002800500020001000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r8, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0)
setsockopt$inet6_opts(r8, 0x29, 0x37, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xa4, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}, @TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x48, 0x1, [@m_skbmod={0x44, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "ac74a020e69210ef1e4b1bec96d0381169"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
r9 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0xf0, 0x294, 0xf0, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@ipv6={@private2, @local, [0x0, 0xffffff, 0xff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 'pimreg1\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)

641.194358ms ago: executing program 4 (id=4545):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xfe, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2f, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x29, 0x0, "a58fc096f80633b333145c32b45013f55470b1304a19d216e6c8775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e90008000089c5a42145bb8b0bd564fd44893a00"}, 0xd8)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0x3, 0x40})
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400ad04000000470c45b45602067fffff0283004e22000d00ff0028925aa80020007b0009ffffffffffffffffffe7ee00000000000000000200000021", 0x41}], 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e1f, 0x5, @empty, 0x5}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1a, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x2}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', @random="f8e43efbc727"})
write$tun(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa568100200086dd6d002000000c110000000000000000000000000000006d09e135f47d976e0000ff0200000000000000000000000100014f194e20000c907841070000"], 0x46)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x7fff}, 0x1c)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1a010000000000002900000042c02e69d25495ec0000000018000000000000000e0000003b0000000000000000000000180000000000000042000000040000005e00000000000000"], 0x48}, 0x20040004)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf2505000000050012690300000008000c00040000000500220000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x480c1}, 0x40080d2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffffe}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
socket$inet6_mptcp(0xa, 0x1, 0x106)

635.177516ms ago: executing program 3 (id=4546):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000600000004000000"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000002400000006000b007b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'batadv0\x00'}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000500)="2c695eefb91f2ff2406b56ab4ed916cb7dd234aff44e4456e412bb044ed2c31187d431283580a2d33d5fbd5fc5cb89ae741f35cc3b2f2e0ed10b51c931b22c09da3cde67badd93d611b91530c9b8e89b9f9c56086209a36fb5d6384517e3bf", 0x5f}, {&(0x7f0000000580)="33283b5bd5e0ea8cd085f3b2050bea0f7b", 0x11}, {&(0x7f00000005c0)="9a522266638482e707a4aac09f7604d60d0517ea4797c35a9ce516d23305f718655e21f70ae650eeadde1ca20543f791c826ec35f0addcf5d9ac33eb0e4cfcff2a27beb80e59e5c164138fc2de3a7c326593748b27233975415d53489252ed9699468ab8a0adaf8676349ed1097b32985fb0b49cfb694cef7bab493b8dc2498e771a373a07c1c201", 0x88}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="c1dbf0eef7ade15f5ec52eeb32b69501c43718acfb97ef55924cd84ad3639b3fec549cf570810087081ed2831f976c618c8a57d2524d29e20876d2797971efaf13f2b029c2293daba2730ae3979d4e835a30315a00604f3fccc8c0ccdc05270d6da17da71d350e2a", 0x68}, {&(0x7f0000002a40)="f1f1deb6c7db4c9f20a811e31f9ad684ddeb74f0361b07a4e22c190db102602902ec063c2bf0fa123865952148fdfd3e68efbda02df1052b41da09cf574b4bae897b7ac9cb91ee3ae4e1ca27b8430b194ec65662c11dea2376cc0395730ac6d6a24e62a07bb2386e4d442ae56c6cc9aa8c547bf6a64907b7a0d4aa3e18833488058a0f9d8979fb14f5eb160af2c9a49d513c1c57408a0f2d6c474238905ebaa3af19375a410e81085c1e63eb94716906b8f04a269245eb76e72c01d811eb5307e451d69367c8f685c67093555d56163854fcd5ce8f3dedb6da5d5c39c818e70f26", 0xe1}, {&(0x7f0000002b40)="19baffd043c26592bd1c5b40f303a7e6e9e66bb9cd7294d5ffe52dd899ac0a4f281d471ac7f1dac412c8ca94877a2092494919f9c576e500b0b7797fb3968d84fc3324b2489f6a792edb53843d35a89bd1e7ad59ce0c660994b0d7fa6a26a189df9cbc863a6d8157ca27e6ec3a842692b2f860b91cc42500af0d1fd8420e292f2787b3d3181a3b6d23842f8031a62ee5228b9de930bb757a516cfd67795ce7d8843db4179866", 0xa6}], 0x7, &(0x7f0000002c80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f00000004c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x12)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendfile(r2, r1, 0x0, 0x205)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x5}, {0x8}}}, 0x24}}, 0x24040010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000fff90000000000000000000000000000006870a2202e164712e6020d9e33e66250b714a146fae80d4b00c60ec26682afd038d6c3bf93f12e7bc2b385c52aca74593dfffd2bf26c6522dad3dced", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

530.276466ms ago: executing program 1 (id=4547):
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="b8e535293096d3d8e489746366c16c27cec32abe1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9a", 0x81}], 0x1, 0x0, 0x0, 0x40088c5}, 0x4000060)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0104000800050007faf5051e01060006060702ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9652575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bda693770338925f824bd246893d221a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b752e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c03551cdd9226016700000000000000000000000000000015000300030000200503000054831bdbae1d82b30600"], 0x15b}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x8, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8814}, 0x24008004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000060a010400000000000000000a0004050900010073797a3100000000200004801c0001800a00010071756575650000000c00028006000140008500000900020073797a32000000000500074089000000140000001100010000000000b3890f0b0100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c40000001900010000400000000000000a01010000000000000000000000000000000000000000000000000000000000000000004e2200000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xffffffffffffff11}}, 0x4004)
r8 = socket$inet(0x2, 0x3, 0x7)
shutdown(r8, 0x0)
recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10)

426.991715ms ago: executing program 4 (id=4548):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000d9fc4089452b0100eaffffffffffffff0000000a28000000000a0101e6ffffff5d1dffd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014f90a6e7f2cdb2d455649c798ecb4a9d1af31f50871827079e5e61d087526288c5ae31a8fa61190ea4052ad70a50eeb5dbbe845a804068a217ad39e251a82090144a419b3c63daa36847762b0d75d44"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4804)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000d9fc4089452b0100eaffffffffffffff0000000a28000000000a0101e6ffffff5d1dffd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014f90a6e7f2cdb2d455649c798ecb4a9d1af31f50871827079e5e61d087526288c5ae31a8fa61190ea4052ad70a50eeb5dbbe845a804068a217ad39e251a82090144a419b3c63daa36847762b0d75d44"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4804) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) (async)

425.51131ms ago: executing program 3 (id=4549):
unshare(0x24020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffe5, 0xb}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @local}, 0x14)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
socket(0x2d, 0x2, 0x0)

262.462496ms ago: executing program 4 (id=4550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x2000800)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x80000003)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [], {0xfffffffffffffde1}}, 0x28}}, 0x20000000)

173.811366ms ago: executing program 1 (id=4551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x80000003)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (fail_nth: 5)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [], {0xfffffffffffffde1}}, 0x28}}, 0x20000000)

173.315164ms ago: executing program 2 (id=4552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000efffffffb702000008000000b703000000000000850048001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

106.1595ms ago: executing program 1 (id=4553):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010027bd7000fbdbdf250a000040"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@multicast1, @broadcast}, 0x10)

77.11434ms ago: executing program 2 (id=4554):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc881}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x0, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

2.145014ms ago: executing program 4 (id=4555):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7fd, @loopback}, 0x0, {[0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x800000]}}, 0x5c)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000002c0)=0x7, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x200000c, 0x4000010, r1, 0x41e90000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d4, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a8000000090a010400000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d640012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b0f0001800a0001006c696d6974000000240002800c0002400000"], 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001140))
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
syz_emit_ethernet(0xfa8, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf9a, 0xfffe, 0x0, 0x0, 0x11, 0x0, @remote, @empty}, {0x4e24, 0x4e23, 0xf86, 0x0, @opaque="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"}}}}}, 0x0)
syz_emit_ethernet(0x239, &(0x7f00000050c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "091ea6", 0x203, 0x0, 0x1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], "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"}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$qrtr(0x2a, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000035, 0x1, 0xff57)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001400)=@newtfilter={0x1d0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x194, 0x2, [@TCA_MATCHALL_ACT={0x190, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xec, 0xfbed, 0x10000002, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x144, 0x7, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9eaf, 0xffffffffffffffff, 0x8001, 0x9}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e4599, 0x4000, 0x1, 0x6, 0x80000000}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x10000000, 0xffffffff, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x3, 0x3, 0x5}, 0xcf}}]}, {0xa1, 0x6, "5d1c68d3ebc4bc5a64d54d579d49ef8b3c449fca205de0dc1cd5ffc6dd013ad3dba78fa0d80c18056b93d2fe37e800d0277b0694e30a046276fc1f9272c7e9cd903d9e8ec03f7b0dae9321a0d753e3af8aef19e27cee43158c579355f61a1c0e9b95284647a1e15b11e0e8e176a70d6c5137f87e83093d8bbda4cf0a8d69ecb2bbefec598c0f85c653c6154ea654604d37eace9165ce93abc8c2daa648"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0xcc2be1335c283fe0}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x43, 0x9}}]}, 0x1d0}}, 0x800)

1.814082ms ago: executing program 2 (id=4556):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000)
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004851}, 0x4004001)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x6, 0x0)
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[], 0x6)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000005c0)={0x2, 0xf, 0x80, 0x9, 0x4a, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_key={0x18, 0x9, 0x588, 0x0, "6d81344f7830c278a433246e9d8e8b673d604a55500518a36ab83aa2ef673e001c014748dbcae80795d9186f1c6c8a3c83744d142b2653211997056b2fa6e56f9261a2ef5087c1795c300cdb246786b898e3f3aaeda68269dbf7ae112c14ad0a0868e1e89a8db97b08f3714d07de9e9cba833c1933c119fb86c7440c972ff5f38a56dc9beadb92d1a6f22c658ee6c0f862120110b53573726bcc86002804ec507db133c005b580022dafc33d942c2e8444"}, @sadb_lifetime={0x4, 0x2, 0x7, 0x0, 0x9}, @sadb_x_sec_ctx={0x19, 0x18, 0x0, 0x8, 0xb9, "65988f51da706a77ff52ea1acd617669ea905aace789432e9c794d062247bcb6ca3b47082ea27b00636a85b05ded069108865df41bd9adeb234e4f578e776befa40a0aeaa8e952a4f06d41c70f430eca5484b07dc43d2d4bb226fed13a9501ad1e4f710ddecf970f2b7e05f1918e731f507de7cf6300604c351e7eb66e36e33bc58f9bbacbc85d00d39e7abf6b375151862f42a5383a24e383476f0e698929b0f9b4957c563a50e36b070f0982664fabd3ea23c8aa78edf2fe"}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x8}, @sadb_lifetime={0x4, 0x2, 0xfffffffe, 0x10, 0x8, 0x3}, @sadb_address={0x5, 0x6, 0x2b, 0xa0, 0x0, @in6={0xa, 0x8, 0xffffff00, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x5080000, @private0, 0x80}}]}, 0x250}}, 0x5)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000010701040000000000000000030000010c00034000000000000000010c00034000000000000000022c000780080002400000000200000240000000ff080001400000000108004140000000060800014000000007"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4001094)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e)
sendmmsg(r8, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

0s ago: executing program 1 (id=4557):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

kernel console output (not intermixed with test programs):

k_pinned_pages+0x7af/0x870
[  533.025573][T19521]  gup_fast_fallback+0x1d84/0x20d0
[  533.025623][T19521]  ? __pfx_gup_fast_fallback+0x10/0x10
[  533.025641][T19521]  ? ____sys_recvmsg+0x1e6/0x4a0
[  533.025665][T19521]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  533.025680][T19521]  ? do_syscall_64+0x15f/0xf80
[  533.025695][T19521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.025717][T19521]  ? pin_user_pages_fast+0x4d/0xb0
[  533.025739][T19521]  iov_iter_extract_pages+0x37b/0x5f0
[  533.025775][T19521]  extract_iter_to_sg+0xefb/0x25d0
[  533.025811][T19521]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  533.025831][T19521]  ? rcu_is_watching+0x15/0xb0
[  533.025852][T19521]  ? trace_kmalloc+0x2a/0xf0
[  533.025880][T19521]  ? __kmalloc_noprof+0x1b8/0x760
[  533.025906][T19521]  ? __asan_memset+0x22/0x50
[  533.025930][T19521]  af_alg_get_rsgl+0x4b6/0x8e0
[  533.025969][T19521]  skcipher_recvmsg+0x392/0x1140
[  533.026010][T19521]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  533.026031][T19521]  ? __lock_acquire+0x6b5/0x2cf0
[  533.026048][T19521]  ? aa_sock_msg_perm+0xf1/0x1b0
[  533.026072][T19521]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  533.026093][T19521]  ? security_socket_recvmsg+0x7e/0x2c0
[  533.026119][T19521]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  533.026143][T19521]  sock_recvmsg+0x172/0x1b0
[  533.026166][T19521]  ____sys_recvmsg+0x1e6/0x4a0
[  533.026200][T19521]  ? __pfx_____sys_recvmsg+0x10/0x10
[  533.026241][T19521]  ? import_iovec+0x73/0xa0
[  533.026268][T19521]  ___sys_recvmsg+0x215/0x590
[  533.026282][T19521]  ? get_pid_task+0x20/0x1f0
[  533.026308][T19521]  ? __pfx____sys_recvmsg+0x10/0x10
[  533.026344][T19521]  ? __fget_files+0x2a/0x420
[  533.026381][T19521]  ? __fget_files+0x3a0/0x420
[  533.026411][T19521]  __x64_sys_recvmsg+0x1ba/0x2a0
[  533.026431][T19521]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  533.026458][T19521]  ? __pfx_ksys_write+0x10/0x10
[  533.026489][T19521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.026508][T19521]  do_syscall_64+0x15f/0xf80
[  533.026524][T19521]  ? trace_irq_disable+0x3b/0x140
[  533.026549][T19521]  ? clear_bhb_loop+0x40/0x90
[  533.026570][T19521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.026588][T19521] RIP: 0033:0x7ffba599ce59
[  533.026604][T19521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.026619][T19521] RSP: 002b:00007ffba6893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  533.026637][T19521] RAX: ffffffffffffffda RBX: 00007ffba5c15fa0 RCX: 00007ffba599ce59
[  533.026650][T19521] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  533.026661][T19521] RBP: 00007ffba6893090 R08: 0000000000000000 R09: 0000000000000000
[  533.026671][T19521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  533.026682][T19521] R13: 00007ffba5c16038 R14: 00007ffba5c15fa0 R15: 00007fff8286e8d8
[  533.026710][T19521]  </TASK>
[  533.331367][T19527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3579'.
[  533.335636][   T29] audit: type=1804 audit(1778654075.642:260): pid=19521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3576" name="/newroot/57/memory.events" dev="tmpfs" ino=309 res=1 errno=0
[  533.487208][T19533] netlink: 'syz.0.3580': attribute type 1 has an invalid length.
[  533.620398][T19533] bond2: (slave geneve2): making interface the new active one
[  533.630404][T19533] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  533.639085][   T57] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  533.667359][   T57] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  533.676314][   T57] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  533.685161][   T57] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  533.704744][T19533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3580'.
[  533.721311][T19533] 8021q: adding VLAN 0 to HW filter on device bond2
[  533.890538][T17642] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  533.974890][T19533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.986818][T19533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  534.082670][T19549] syzkaller0: entered promiscuous mode
[  534.088397][T19549] syzkaller0: entered allmulticast mode
[  534.108642][T19549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3584'.
[  534.130682][T16680] IPVS: stop unused estimator thread 0...
[  534.133989][T19549] netlink: 'syz.2.3584': attribute type 4 has an invalid length.
[  534.176479][T19549] netlink: 'syz.2.3584': attribute type 4 has an invalid length.
[  534.402584][T19533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.413106][T19533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  534.510197][T19561] tipc: Started in network mode
[  534.515378][T19561] tipc: Node identity ac1414aa, cluster identity 4711
[  534.526093][T19561] tipc: Enabled bearer <udp:s>, priority 10
[  534.709005][T19533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.729750][T19533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  534.878709][ T1560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.408685][T19533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.426029][T19533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  535.438394][T19591] tipc: Failed to remove unknown binding: 66,1,1/0:4198894979/4198894981
[  535.480435][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'.
[  535.522387][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'.
[  535.653524][T19603] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.660940][T19603] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.751891][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.781821][T19603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.830254][ T8237] tipc: Node number set to 2886997162
[  535.851008][ T6498] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.866551][ T6498] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.876199][ T6498] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.895746][ T6498] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.982116][T16679] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  535.992013][T16679] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  536.025129][T16679] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  536.040391][T16679] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  536.084994][ T6498] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  536.100182][ T6498] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  536.142885][ T6498] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  536.151190][ T6498] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  536.188417][T19614] netlink: 'syz.2.3601': attribute type 1 has an invalid length.
[  536.218695][T19612] netlink: 'syz.2.3601': attribute type 1 has an invalid length.
[  536.339925][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3603'.
[  536.443130][T19630] netlink: 'syz.1.3607': attribute type 5 has an invalid length.
[  537.103116][T19650] syzkaller0: entered promiscuous mode
[  537.138292][T19650] syzkaller0: entered allmulticast mode
[  538.040304][T19674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3617'.
[  538.041116][T19678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3617'.
[  538.729522][T19709] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  538.943916][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3631'.
[  538.964578][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3631'.
[  539.097296][T19724] pimreg0: tun_chr_ioctl cmd 1074025681
[  539.544234][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'.
[  539.634169][T19746] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3638'.
[  540.040194][T19756] netlink: 'syz.1.3642': attribute type 1 has an invalid length.
[  540.106329][T19765] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3644'.
[  540.212511][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3642'.
[  540.252476][T19757] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  540.265889][T19757] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  540.411254][T19756] bond4: (slave gretap1): making interface the new active one
[  540.426255][T19756] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  540.446157][T19774] macvlan2: entered promiscuous mode
[  540.451624][T19774] macvlan2: entered allmulticast mode
[  540.459422][T19779] syzkaller1: tun_chr_ioctl cmd 1074025677
[  540.466860][T19779] syzkaller1: Refused to change device type
[  540.478770][T19787] netlink: 'syz.2.3649': attribute type 1 has an invalid length.
[  540.664600][T19795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3650'.
[  541.043422][T19787] 8021q: adding VLAN 0 to HW filter on device bond2
[  541.077643][T19807] netlink: 'syz.2.3649': attribute type 1 has an invalid length.
[  541.125534][T19789] bond2: (slave veth5): Enslaving as an active interface with an up link
[  541.150019][T19821] netlink: 'syz.3.3657': attribute type 1 has an invalid length.
[  541.186022][T19821] net_ratelimit: 23 callbacks suppressed
[  541.186038][T19821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.201727][T19810] 8021q: adding VLAN 0 to HW filter on device batadv1
[  541.206587][T19810] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  541.392778][T19833] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  541.553163][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3664'.
[  541.586930][T19840] bond0: Unable to set down delay as MII monitoring is disabled
[  541.986608][T19866] netlink: 'syz.1.3670': attribute type 1 has an invalid length.
[  541.986630][T19867] netlink: 'syz.0.3669': attribute type 10 has an invalid length.
[  542.019687][T19857] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  542.300409][   T29] audit: type=1800 audit(1778654084.932:261): pid=19879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3673" name="memory.events" dev="tmpfs" ino=254 res=0 errno=0
[  542.338222][T19879] FAULT_INJECTION: forcing a failure.
[  542.338222][T19879] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  542.353194][T19880] Bluetooth: hci0: Opcode 0x080f failed: -22
[  542.393140][   T29] audit: type=1804 audit(1778654084.932:262): pid=19879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3673" name="/newroot/46/memory.events" dev="tmpfs" ino=254 res=1 errno=0
[  542.393818][T19879] CPU: 1 UID: 0 PID: 19879 Comm: syz.4.3673 Not tainted syzkaller #0 PREEMPT(full) 
[  542.393841][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  542.393851][T19879] Call Trace:
[  542.393858][T19879]  <TASK>
[  542.393864][T19879]  dump_stack_lvl+0xe8/0x150
[  542.393890][T19879]  should_fail_ex+0x412/0x560
[  542.393917][T19879]  prepare_alloc_pages+0x22a/0x650
[  542.393950][T19879]  __alloc_frozen_pages_noprof+0x12f/0x380
[  542.393980][T19879]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  542.394010][T19879]  ? __pfx_policy_nodemask+0x10/0x10
[  542.394032][T19879]  ? __folio_batch_add_and_move+0x11a/0xc50
[  542.394055][T19879]  ? lock_acquire+0x106/0x350
[  542.394082][T19879]  alloc_pages_mpol+0x235/0x490
[  542.394112][T19879]  folio_alloc_mpol_noprof+0x39/0x160
[  542.394138][T19879]  vma_alloc_folio_noprof+0xe1/0x1e0
[  542.394158][T19879]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  542.394185][T19879]  do_wp_page+0x118a/0x4cc0
[  542.394211][T19879]  ? __pte_offset_map+0x29/0x240
[  542.394243][T19879]  ? __pfx_do_wp_page+0x10/0x10
[  542.394261][T19879]  ? do_raw_spin_lock+0x12b/0x2f0
[  542.394288][T19879]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  542.394332][T19879]  handle_mm_fault+0x151d/0x3170
[  542.394368][T19879]  ? handle_mm_fault+0xee/0x3170
[  542.394396][T19879]  ? __pfx_handle_mm_fault+0x10/0x10
[  542.394418][T19879]  ? follow_page_pte+0xbb7/0xe50
[  542.394449][T19879]  ? __pfx_follow_page_pte+0x10/0x10
[  542.394480][T19879]  __get_user_pages+0x1683/0x2720
[  542.394532][T19879]  __gup_longterm_locked+0xdcf/0x1630
[  542.394564][T19879]  ? sanity_check_pinned_pages+0x7af/0x870
[  542.394593][T19879]  gup_fast_fallback+0x1d84/0x20d0
[  542.394644][T19879]  ? __pfx_gup_fast_fallback+0x10/0x10
[  542.394662][T19879]  ? ____sys_recvmsg+0x1e6/0x4a0
[  542.394688][T19879]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  542.394703][T19879]  ? do_syscall_64+0x15f/0xf80
[  542.394720][T19879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.394743][T19879]  ? pin_user_pages_fast+0x4d/0xb0
[  542.394765][T19879]  iov_iter_extract_pages+0x37b/0x5f0
[  542.394799][T19879]  extract_iter_to_sg+0xefb/0x25d0
[  542.394836][T19879]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  542.394856][T19879]  ? rcu_is_watching+0x15/0xb0
[  542.394877][T19879]  ? trace_kmalloc+0x2a/0xf0
[  542.394907][T19879]  ? __kmalloc_noprof+0x1b8/0x760
[  542.394935][T19879]  ? __asan_memset+0x22/0x50
[  542.394958][T19879]  af_alg_get_rsgl+0x4b6/0x8e0
[  542.394998][T19879]  skcipher_recvmsg+0x392/0x1140
[  542.395041][T19879]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  542.395062][T19879]  ? __lock_acquire+0x6b5/0x2cf0
[  542.395080][T19879]  ? aa_sock_msg_perm+0xf1/0x1b0
[  542.395105][T19879]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  542.395127][T19879]  ? security_socket_recvmsg+0x7e/0x2c0
[  542.395154][T19879]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  542.395178][T19879]  sock_recvmsg+0x172/0x1b0
[  542.395202][T19879]  ____sys_recvmsg+0x1e6/0x4a0
[  542.395237][T19879]  ? __pfx_____sys_recvmsg+0x10/0x10
[  542.395277][T19879]  ? import_iovec+0x73/0xa0
[  542.395310][T19879]  ___sys_recvmsg+0x215/0x590
[  542.395326][T19879]  ? get_pid_task+0x20/0x1f0
[  542.395353][T19879]  ? __pfx____sys_recvmsg+0x10/0x10
[  542.395375][T19879]  ? __fget_files+0x2a/0x420
[  542.395412][T19879]  ? __fget_files+0x3a0/0x420
[  542.395443][T19879]  __x64_sys_recvmsg+0x1ba/0x2a0
[  542.395464][T19879]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  542.395490][T19879]  ? __pfx_ksys_write+0x10/0x10
[  542.395523][T19879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.395543][T19879]  do_syscall_64+0x15f/0xf80
[  542.395561][T19879]  ? clear_bhb_loop+0x40/0x90
[  542.395584][T19879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.395601][T19879] RIP: 0033:0x7fd33a79ce59
[  542.395618][T19879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.395634][T19879] RSP: 002b:00007fd33b720028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  542.395653][T19879] RAX: ffffffffffffffda RBX: 00007fd33aa15fa0 RCX: 00007fd33a79ce59
[  542.395667][T19879] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  542.395678][T19879] RBP: 00007fd33b720090 R08: 0000000000000000 R09: 0000000000000000
[  542.395690][T19879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  542.395700][T19879] R13: 00007fd33aa16038 R14: 00007fd33aa15fa0 R15: 00007ffc24a165b8
[  542.395730][T19879]  </TASK>
[  542.576874][T19879] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.918742][T19879] 8021q: adding VLAN 0 to HW filter on device team0
[  542.948781][T19879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.983017][T19894] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  543.054978][T19879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.077644][T19879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.124143][   T50] block nbd5: Receive control failed (result -32)
[  543.137718][   T50] block nbd5: Receive control failed (result -32)
[  543.165517][T19871] nbd5: detected capacity change from 0 to 63
[  543.203505][T17048] block nbd5: Dead connection, failed to find a fallback
[  543.225170][T19895] __nla_validate_parse: 4 callbacks suppressed
[  543.225221][T19895] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3679'.
[  543.240059][T17048] block nbd5: shutting down sockets
[  543.247588][T17048] blk_print_req_error: 138 callbacks suppressed
[  543.247605][T17048] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.271234][T17048] buffer_io_error: 138 callbacks suppressed
[  543.271252][T17048] Buffer I/O error on dev nbd5, logical block 0, async page read
[  543.286391][T17048] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.296221][T17048] Buffer I/O error on dev nbd5, logical block 1, async page read
[  543.305239][T17048] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.315281][T17048] Buffer I/O error on dev nbd5, logical block 2, async page read
[  543.323254][T17048] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.332687][T17048] Buffer I/O error on dev nbd5, logical block 3, async page read
[  543.340719][T17048] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.350129][T17048] Buffer I/O error on dev nbd5, logical block 0, async page read
[  543.362146][T17048] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.372412][T17048] Buffer I/O error on dev nbd5, logical block 1, async page read
[  543.380787][T17048] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.382864][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.390585][T17048] Buffer I/O error on dev nbd5, logical block 2, async page read
[  543.396928][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.413205][T17048] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.423212][T17048] Buffer I/O error on dev nbd5, logical block 3, async page read
[  543.440879][T17048] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.441221][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.460358][T17048] Buffer I/O error on dev nbd5, logical block 0, async page read
[  543.460533][T17048] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  543.460558][T17048] Buffer I/O error on dev nbd5, logical block 1, async page read
[  543.467153][T17048] ldm_validate_partition_table(): Disk read failed.
[  543.468350][ T6498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.495308][T17048] Dev nbd5: unable to read RDB block 0
[  543.529576][T19909] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3681'.
[  543.565657][T17048]  nbd5: unable to read partition table
[  543.717832][T17048] ldm_validate_partition_table(): Disk read failed.
[  543.769703][T17048] Dev nbd5: unable to read RDB block 0
[  543.794740][T17048]  nbd5: unable to read partition table
[  544.074605][   T29] audit: type=1800 audit(1778654086.692:263): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3691" name="memory.events" dev="tmpfs" ino=560 res=0 errno=0
[  544.076796][T19930] FAULT_INJECTION: forcing a failure.
[  544.076796][T19930] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  544.096043][   T29] audit: type=1804 audit(1778654086.692:264): pid=19930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3691" name="/newroot/107/memory.events" dev="tmpfs" ino=560 res=1 errno=0
[  544.137441][T19930] CPU: 1 UID: 0 PID: 19930 Comm: syz.3.3691 Not tainted syzkaller #0 PREEMPT(full) 
[  544.137467][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.137477][T19930] Call Trace:
[  544.137485][T19930]  <TASK>
[  544.137492][T19930]  dump_stack_lvl+0xe8/0x150
[  544.137518][T19930]  should_fail_ex+0x412/0x560
[  544.137548][T19930]  prepare_alloc_pages+0x22a/0x650
[  544.137583][T19930]  __alloc_frozen_pages_noprof+0x12f/0x380
[  544.137614][T19930]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  544.137646][T19930]  ? __pfx_policy_nodemask+0x10/0x10
[  544.137670][T19930]  ? __folio_batch_add_and_move+0x11a/0xc50
[  544.137694][T19930]  ? lock_acquire+0x106/0x350
[  544.137722][T19930]  alloc_pages_mpol+0x235/0x490
[  544.137753][T19930]  folio_alloc_mpol_noprof+0x39/0x160
[  544.137782][T19930]  vma_alloc_folio_noprof+0xe1/0x1e0
[  544.137803][T19930]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  544.137833][T19930]  do_wp_page+0x118a/0x4cc0
[  544.137861][T19930]  ? __pte_offset_map+0x29/0x240
[  544.137893][T19930]  ? __pfx_do_wp_page+0x10/0x10
[  544.137910][T19930]  ? do_raw_spin_lock+0x12b/0x2f0
[  544.137937][T19930]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  544.137973][T19930]  handle_mm_fault+0x151d/0x3170
[  544.138010][T19930]  ? handle_mm_fault+0xee/0x3170
[  544.138039][T19930]  ? __pfx_handle_mm_fault+0x10/0x10
[  544.138061][T19930]  ? follow_page_pte+0xbb7/0xe50
[  544.138093][T19930]  ? __pfx_follow_page_pte+0x10/0x10
[  544.138130][T19930]  __get_user_pages+0x1683/0x2720
[  544.138194][T19930]  __gup_longterm_locked+0xdcf/0x1630
[  544.138228][T19930]  ? sanity_check_pinned_pages+0x7af/0x870
[  544.138258][T19930]  gup_fast_fallback+0x1d84/0x20d0
[  544.138313][T19930]  ? __pfx_gup_fast_fallback+0x10/0x10
[  544.138331][T19930]  ? ____sys_recvmsg+0x1e6/0x4a0
[  544.138358][T19930]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  544.138374][T19930]  ? do_syscall_64+0x15f/0xf80
[  544.138390][T19930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.138413][T19930]  ? pin_user_pages_fast+0x4d/0xb0
[  544.138437][T19930]  iov_iter_extract_pages+0x37b/0x5f0
[  544.138472][T19930]  extract_iter_to_sg+0xefb/0x25d0
[  544.138510][T19930]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  544.138531][T19930]  ? rcu_is_watching+0x15/0xb0
[  544.138552][T19930]  ? trace_kmalloc+0x2a/0xf0
[  544.138583][T19930]  ? __kmalloc_noprof+0x1b8/0x760
[  544.138610][T19930]  ? __asan_memset+0x22/0x50
[  544.138634][T19930]  af_alg_get_rsgl+0x4b6/0x8e0
[  544.138676][T19930]  skcipher_recvmsg+0x392/0x1140
[  544.138720][T19930]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  544.138742][T19930]  ? __lock_acquire+0x6b5/0x2cf0
[  544.138760][T19930]  ? aa_sock_msg_perm+0xf1/0x1b0
[  544.138785][T19930]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  544.138807][T19930]  ? security_socket_recvmsg+0x7e/0x2c0
[  544.138851][T19930]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  544.138876][T19930]  sock_recvmsg+0x172/0x1b0
[  544.138900][T19930]  ____sys_recvmsg+0x1e6/0x4a0
[  544.138932][T19930]  ? __pfx_____sys_recvmsg+0x10/0x10
[  544.138974][T19930]  ? import_iovec+0x73/0xa0
[  544.139002][T19930]  ___sys_recvmsg+0x215/0x590
[  544.139018][T19930]  ? get_pid_task+0x20/0x1f0
[  544.139046][T19930]  ? __pfx____sys_recvmsg+0x10/0x10
[  544.139069][T19930]  ? __fget_files+0x2a/0x420
[  544.139108][T19930]  ? __fget_files+0x3a0/0x420
[  544.139140][T19930]  __x64_sys_recvmsg+0x1ba/0x2a0
[  544.139161][T19930]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  544.139195][T19930]  ? __pfx_ksys_write+0x10/0x10
[  544.139229][T19930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.139249][T19930]  do_syscall_64+0x15f/0xf80
[  544.139265][T19930]  ? trace_irq_disable+0x3b/0x140
[  544.139291][T19930]  ? clear_bhb_loop+0x40/0x90
[  544.139314][T19930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.139332][T19930] RIP: 0033:0x7fe04c79ce59
[  544.139349][T19930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.139365][T19930] RSP: 002b:00007fe04d710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  544.139384][T19930] RAX: ffffffffffffffda RBX: 00007fe04ca15fa0 RCX: 00007fe04c79ce59
[  544.139396][T19930] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  544.139407][T19930] RBP: 00007fe04d710090 R08: 0000000000000000 R09: 0000000000000000
[  544.139418][T19930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  544.139429][T19930] R13: 00007fe04ca16038 R14: 00007fe04ca15fa0 R15: 00007ffc645a5bd8
[  544.139460][T19930]  </TASK>
[  544.978975][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3698'.
[  545.112541][T19950] ipvlan0: entered allmulticast mode
[  545.117882][T19950] gretap0: entered allmulticast mode
[  545.122410][T19960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3701'.
[  545.286107][T19968] FAULT_INJECTION: forcing a failure.
[  545.286107][T19968] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  545.299359][T19968] CPU: 0 UID: 0 PID: 19968 Comm: syz.3.3705 Not tainted syzkaller #0 PREEMPT(full) 
[  545.299383][T19968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  545.299394][T19968] Call Trace:
[  545.299402][T19968]  <TASK>
[  545.299409][T19968]  dump_stack_lvl+0xe8/0x150
[  545.299437][T19968]  should_fail_ex+0x412/0x560
[  545.299465][T19968]  prepare_alloc_pages+0x22a/0x650
[  545.299499][T19968]  __alloc_frozen_pages_noprof+0x12f/0x380
[  545.299530][T19968]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  545.299560][T19968]  ? __pfx_policy_nodemask+0x10/0x10
[  545.299585][T19968]  ? __folio_batch_add_and_move+0x11a/0xc50
[  545.299608][T19968]  ? lock_acquire+0x106/0x350
[  545.299635][T19968]  alloc_pages_mpol+0x235/0x490
[  545.299667][T19968]  folio_alloc_mpol_noprof+0x39/0x160
[  545.299695][T19968]  vma_alloc_folio_noprof+0xe1/0x1e0
[  545.299716][T19968]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  545.299751][T19968]  do_wp_page+0x118a/0x4cc0
[  545.299779][T19968]  ? __pte_offset_map+0x29/0x240
[  545.299810][T19968]  ? __pfx_do_wp_page+0x10/0x10
[  545.299828][T19968]  ? do_raw_spin_lock+0x12b/0x2f0
[  545.299856][T19968]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  545.299890][T19968]  handle_mm_fault+0x151d/0x3170
[  545.299927][T19968]  ? handle_mm_fault+0xee/0x3170
[  545.299957][T19968]  ? __pfx_handle_mm_fault+0x10/0x10
[  545.299978][T19968]  ? follow_page_pte+0xbb7/0xe50
[  545.300009][T19968]  ? __pfx_follow_page_pte+0x10/0x10
[  545.300041][T19968]  __get_user_pages+0x1683/0x2720
[  545.300095][T19968]  __gup_longterm_locked+0xdcf/0x1630
[  545.300129][T19968]  ? sanity_check_pinned_pages+0x7af/0x870
[  545.300158][T19968]  gup_fast_fallback+0x1d84/0x20d0
[  545.300210][T19968]  ? __pfx_gup_fast_fallback+0x10/0x10
[  545.300229][T19968]  ? ____sys_recvmsg+0x1e6/0x4a0
[  545.300253][T19968]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  545.300268][T19968]  ? do_syscall_64+0x15f/0xf80
[  545.300284][T19968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.300307][T19968]  ? pin_user_pages_fast+0x4d/0xb0
[  545.300330][T19968]  iov_iter_extract_pages+0x37b/0x5f0
[  545.300366][T19968]  extract_iter_to_sg+0xefb/0x25d0
[  545.300404][T19968]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  545.300424][T19968]  ? rcu_is_watching+0x15/0xb0
[  545.300446][T19968]  ? trace_kmalloc+0x2a/0xf0
[  545.300476][T19968]  ? __kmalloc_noprof+0x1b8/0x760
[  545.300504][T19968]  ? __asan_memset+0x22/0x50
[  545.300528][T19968]  af_alg_get_rsgl+0x4b6/0x8e0
[  545.300570][T19968]  skcipher_recvmsg+0x392/0x1140
[  545.300614][T19968]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  545.300636][T19968]  ? __lock_acquire+0x6b5/0x2cf0
[  545.300654][T19968]  ? aa_sock_msg_perm+0xf1/0x1b0
[  545.300679][T19968]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  545.300702][T19968]  ? security_socket_recvmsg+0x7e/0x2c0
[  545.300735][T19968]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  545.300759][T19968]  sock_recvmsg+0x172/0x1b0
[  545.300784][T19968]  ____sys_recvmsg+0x1e6/0x4a0
[  545.300819][T19968]  ? __pfx_____sys_recvmsg+0x10/0x10
[  545.300861][T19968]  ? import_iovec+0x73/0xa0
[  545.300890][T19968]  ___sys_recvmsg+0x215/0x590
[  545.300905][T19968]  ? get_pid_task+0x20/0x1f0
[  545.300932][T19968]  ? __pfx____sys_recvmsg+0x10/0x10
[  545.300955][T19968]  ? __fget_files+0x2a/0x420
[  545.300994][T19968]  ? __fget_files+0x3a0/0x420
[  545.301026][T19968]  __x64_sys_recvmsg+0x1ba/0x2a0
[  545.301046][T19968]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  545.301073][T19968]  ? __pfx_ksys_write+0x10/0x10
[  545.301105][T19968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.301125][T19968]  do_syscall_64+0x15f/0xf80
[  545.301141][T19968]  ? trace_irq_disable+0x3b/0x140
[  545.301167][T19968]  ? clear_bhb_loop+0x40/0x90
[  545.301190][T19968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.301207][T19968] RIP: 0033:0x7fe04c79ce59
[  545.301225][T19968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  545.301239][T19968] RSP: 002b:00007fe04d710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  545.301258][T19968] RAX: ffffffffffffffda RBX: 00007fe04ca15fa0 RCX: 00007fe04c79ce59
[  545.301270][T19968] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  545.301281][T19968] RBP: 00007fe04d710090 R08: 0000000000000000 R09: 0000000000000000
[  545.301290][T19968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  545.301301][T19968] R13: 00007fe04ca16038 R14: 00007fe04ca15fa0 R15: 00007ffc645a5bd8
[  545.301331][T19968]  </TASK>
[  545.304626][   T29] audit: type=1800 audit(1778654087.912:265): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3705" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0
[  545.520125][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3707'.
[  545.573833][   T29] audit: type=1804 audit(1778654087.912:266): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3705" name="/newroot/111/memory.events" dev="tmpfs" ino=582 res=1 errno=0
[  545.629043][T19974] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3707'.
[  546.712282][   T29] audit: type=1800 audit(1778654089.342:267): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3719" name="memory.events" dev="tmpfs" ino=935 res=0 errno=0
[  546.739559][T20011] FAULT_INJECTION: forcing a failure.
[  546.739559][T20011] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  546.752886][   T29] audit: type=1804 audit(1778654089.362:268): pid=20011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3719" name="/newroot/178/memory.events" dev="tmpfs" ino=935 res=1 errno=0
[  546.775383][T20011] CPU: 1 UID: 0 PID: 20011 Comm: syz.1.3719 Not tainted syzkaller #0 PREEMPT(full) 
[  546.775408][T20011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  546.775419][T20011] Call Trace:
[  546.775426][T20011]  <TASK>
[  546.775434][T20011]  dump_stack_lvl+0xe8/0x150
[  546.775460][T20011]  should_fail_ex+0x412/0x560
[  546.775489][T20011]  prepare_alloc_pages+0x22a/0x650
[  546.775523][T20011]  __alloc_frozen_pages_noprof+0x12f/0x380
[  546.775553][T20011]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  546.775581][T20011]  ? __pfx_policy_nodemask+0x10/0x10
[  546.775605][T20011]  ? __folio_batch_add_and_move+0x11a/0xc50
[  546.775628][T20011]  ? lock_acquire+0x106/0x350
[  546.775656][T20011]  alloc_pages_mpol+0x235/0x490
[  546.775687][T20011]  folio_alloc_mpol_noprof+0x39/0x160
[  546.775717][T20011]  vma_alloc_folio_noprof+0xe1/0x1e0
[  546.775738][T20011]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  546.775767][T20011]  do_wp_page+0x118a/0x4cc0
[  546.775795][T20011]  ? __pte_offset_map+0x29/0x240
[  546.775828][T20011]  ? __pfx_do_wp_page+0x10/0x10
[  546.775846][T20011]  ? do_raw_spin_lock+0x12b/0x2f0
[  546.775881][T20011]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  546.775917][T20011]  handle_mm_fault+0x151d/0x3170
[  546.775955][T20011]  ? handle_mm_fault+0xee/0x3170
[  546.775983][T20011]  ? __pfx_handle_mm_fault+0x10/0x10
[  546.776006][T20011]  ? follow_page_pte+0xbb7/0xe50
[  546.776037][T20011]  ? __pfx_follow_page_pte+0x10/0x10
[  546.776069][T20011]  __get_user_pages+0x1683/0x2720
[  546.776123][T20011]  __gup_longterm_locked+0xdcf/0x1630
[  546.776157][T20011]  ? sanity_check_pinned_pages+0x7af/0x870
[  546.776188][T20011]  gup_fast_fallback+0x1d84/0x20d0
[  546.776241][T20011]  ? __pfx_gup_fast_fallback+0x10/0x10
[  546.776260][T20011]  ? ____sys_recvmsg+0x1e6/0x4a0
[  546.776285][T20011]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  546.776301][T20011]  ? do_syscall_64+0x15f/0xf80
[  546.776316][T20011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.776340][T20011]  ? pin_user_pages_fast+0x4d/0xb0
[  546.776363][T20011]  iov_iter_extract_pages+0x37b/0x5f0
[  546.776402][T20011]  extract_iter_to_sg+0xefb/0x25d0
[  546.776440][T20011]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  546.776460][T20011]  ? rcu_is_watching+0x15/0xb0
[  546.776482][T20011]  ? trace_kmalloc+0x2a/0xf0
[  546.776513][T20011]  ? __kmalloc_noprof+0x1b8/0x760
[  546.776541][T20011]  ? __asan_memset+0x22/0x50
[  546.776566][T20011]  af_alg_get_rsgl+0x4b6/0x8e0
[  546.776607][T20011]  skcipher_recvmsg+0x392/0x1140
[  546.776651][T20011]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  546.776674][T20011]  ? __lock_acquire+0x6b5/0x2cf0
[  546.776692][T20011]  ? aa_sock_msg_perm+0xf1/0x1b0
[  546.776717][T20011]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  546.776740][T20011]  ? security_socket_recvmsg+0x7e/0x2c0
[  546.776766][T20011]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  546.776791][T20011]  sock_recvmsg+0x172/0x1b0
[  546.776816][T20011]  ____sys_recvmsg+0x1e6/0x4a0
[  546.776851][T20011]  ? __pfx_____sys_recvmsg+0x10/0x10
[  546.776899][T20011]  ? import_iovec+0x73/0xa0
[  546.776928][T20011]  ___sys_recvmsg+0x215/0x590
[  546.776944][T20011]  ? get_pid_task+0x20/0x1f0
[  546.776972][T20011]  ? __pfx____sys_recvmsg+0x10/0x10
[  546.776994][T20011]  ? __fget_files+0x2a/0x420
[  546.777034][T20011]  ? __fget_files+0x3a0/0x420
[  546.777066][T20011]  __x64_sys_recvmsg+0x1ba/0x2a0
[  546.777087][T20011]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  546.777115][T20011]  ? __pfx_ksys_write+0x10/0x10
[  546.777150][T20011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.777169][T20011]  do_syscall_64+0x15f/0xf80
[  546.777185][T20011]  ? trace_irq_disable+0x3b/0x140
[  546.777210][T20011]  ? clear_bhb_loop+0x40/0x90
[  546.777233][T20011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.777251][T20011] RIP: 0033:0x7f448739ce59
[  546.777268][T20011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.777284][T20011] RSP: 002b:00007f448817a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  546.777303][T20011] RAX: ffffffffffffffda RBX: 00007f4487615fa0 RCX: 00007f448739ce59
[  546.777316][T20011] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  546.777327][T20011] RBP: 00007f448817a090 R08: 0000000000000000 R09: 0000000000000000
[  546.777338][T20011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  546.777348][T20011] R13: 00007f4487616038 R14: 00007f4487615fa0 R15: 00007ffdb04db148
[  546.777379][T20011]  </TASK>
[  547.378270][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3722'.
[  547.387455][T20018] lo speed is unknown, defaulting to 1000
[  547.406140][T20017] pim6reg1: entered promiscuous mode
[  547.411437][T20017] pim6reg1: entered allmulticast mode
[  547.442779][T20021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3720'.
[  547.676312][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  547.983791][T20047] netlink: 'syz.2.3729': attribute type 1 has an invalid length.
[  548.404551][   T29] audit: type=1800 audit(1778654091.032:269): pid=20050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3731" name="memory.events" dev="tmpfs" ino=669 res=0 errno=0
[  548.428204][T20050] FAULT_INJECTION: forcing a failure.
[  548.428204][T20050] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  548.465281][   T29] audit: type=1804 audit(1778654091.032:270): pid=20050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3731" name="/newroot/127/memory.events" dev="tmpfs" ino=669 res=1 errno=0
[  548.489376][T20050] CPU: 1 UID: 0 PID: 20050 Comm: syz.0.3731 Not tainted syzkaller #0 PREEMPT(full) 
[  548.489400][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  548.489411][T20050] Call Trace:
[  548.489418][T20050]  <TASK>
[  548.489426][T20050]  dump_stack_lvl+0xe8/0x150
[  548.489459][T20050]  should_fail_ex+0x412/0x560
[  548.489487][T20050]  prepare_alloc_pages+0x22a/0x650
[  548.489522][T20050]  __alloc_frozen_pages_noprof+0x12f/0x380
[  548.489551][T20050]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  548.489583][T20050]  ? __pfx_policy_nodemask+0x10/0x10
[  548.489613][T20050]  ? __folio_batch_add_and_move+0x11a/0xc50
[  548.489637][T20050]  ? lock_acquire+0x106/0x350
[  548.489664][T20050]  alloc_pages_mpol+0x235/0x490
[  548.489696][T20050]  folio_alloc_mpol_noprof+0x39/0x160
[  548.489724][T20050]  vma_alloc_folio_noprof+0xe1/0x1e0
[  548.489745][T20050]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  548.489774][T20050]  do_wp_page+0x118a/0x4cc0
[  548.489802][T20050]  ? __pte_offset_map+0x29/0x240
[  548.489833][T20050]  ? __pfx_do_wp_page+0x10/0x10
[  548.489851][T20050]  ? do_raw_spin_lock+0x12b/0x2f0
[  548.489878][T20050]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  548.489913][T20050]  handle_mm_fault+0x151d/0x3170
[  548.489950][T20050]  ? handle_mm_fault+0xee/0x3170
[  548.489979][T20050]  ? __pfx_handle_mm_fault+0x10/0x10
[  548.490001][T20050]  ? follow_page_pte+0xbb7/0xe50
[  548.490031][T20050]  ? __pfx_follow_page_pte+0x10/0x10
[  548.490064][T20050]  __get_user_pages+0x1683/0x2720
[  548.490118][T20050]  __gup_longterm_locked+0xdcf/0x1630
[  548.490151][T20050]  ? sanity_check_pinned_pages+0x7af/0x870
[  548.490181][T20050]  gup_fast_fallback+0x1d84/0x20d0
[  548.490234][T20050]  ? __pfx_gup_fast_fallback+0x10/0x10
[  548.490253][T20050]  ? ____sys_recvmsg+0x1e6/0x4a0
[  548.490278][T20050]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  548.490294][T20050]  ? do_syscall_64+0x15f/0xf80
[  548.490310][T20050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.490333][T20050]  ? pin_user_pages_fast+0x4d/0xb0
[  548.490356][T20050]  iov_iter_extract_pages+0x37b/0x5f0
[  548.490389][T20050]  extract_iter_to_sg+0xefb/0x25d0
[  548.490427][T20050]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  548.490452][T20050]  ? rcu_is_watching+0x15/0xb0
[  548.490472][T20050]  ? trace_kmalloc+0x2a/0xf0
[  548.490501][T20050]  ? __kmalloc_noprof+0x1b8/0x760
[  548.490528][T20050]  ? __asan_memset+0x22/0x50
[  548.490553][T20050]  af_alg_get_rsgl+0x4b6/0x8e0
[  548.490593][T20050]  skcipher_recvmsg+0x392/0x1140
[  548.490636][T20050]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  548.490657][T20050]  ? __lock_acquire+0x6b5/0x2cf0
[  548.490674][T20050]  ? aa_sock_msg_perm+0xf1/0x1b0
[  548.490700][T20050]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  548.490722][T20050]  ? security_socket_recvmsg+0x7e/0x2c0
[  548.490745][T20050]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  548.490766][T20050]  sock_recvmsg+0x172/0x1b0
[  548.490790][T20050]  ____sys_recvmsg+0x1e6/0x4a0
[  548.490826][T20050]  ? __pfx_____sys_recvmsg+0x10/0x10
[  548.490866][T20050]  ? import_iovec+0x73/0xa0
[  548.490894][T20050]  ___sys_recvmsg+0x215/0x590
[  548.490908][T20050]  ? get_pid_task+0x20/0x1f0
[  548.490934][T20050]  ? __pfx____sys_recvmsg+0x10/0x10
[  548.490957][T20050]  ? __fget_files+0x2a/0x420
[  548.490993][T20050]  ? __fget_files+0x3a0/0x420
[  548.491024][T20050]  __x64_sys_recvmsg+0x1ba/0x2a0
[  548.491045][T20050]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  548.491072][T20050]  ? __pfx_ksys_write+0x10/0x10
[  548.491106][T20050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.491126][T20050]  do_syscall_64+0x15f/0xf80
[  548.491142][T20050]  ? trace_irq_disable+0x3b/0x140
[  548.491167][T20050]  ? clear_bhb_loop+0x40/0x90
[  548.491190][T20050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.491207][T20050] RIP: 0033:0x7f53db99ce59
[  548.491225][T20050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.491241][T20050] RSP: 002b:00007f53dc82d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  548.491260][T20050] RAX: ffffffffffffffda RBX: 00007f53dbc15fa0 RCX: 00007f53db99ce59
[  548.491273][T20050] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  548.491284][T20050] RBP: 00007f53dc82d090 R08: 0000000000000000 R09: 0000000000000000
[  548.491295][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  548.491306][T20050] R13: 00007f53dbc16038 R14: 00007f53dbc15fa0 R15: 00007ffd4c8f82e8
[  548.491337][T20050]  </TASK>
[  559.604765][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  562.806055][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  573.010315][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3741'.
[  573.040197][T20081] erspan0: entered promiscuous mode
[  573.051560][T20081] macvlan0: entered allmulticast mode
[  573.061554][T20081] erspan0: entered allmulticast mode
[  573.534501][T20094] netlink: 'syz.1.3742': attribute type 13 has an invalid length.
[  573.542618][T20094] netlink: 'syz.1.3742': attribute type 17 has an invalid length.
[  573.807801][T20100] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.815206][T20100] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.998550][   T29] audit: type=1800 audit(1778654116.622:271): pid=20108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3746" name="memory.events" dev="tmpfs" ino=504 res=0 errno=0
[  573.999277][T20108] FAULT_INJECTION: forcing a failure.
[  573.999277][T20108] name failslab, interval 1, probability 0, space 0, times 0
[  574.019869][   T29] audit: type=1804 audit(1778654116.622:272): pid=20108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3746" name="/newroot/95/memory.events" dev="tmpfs" ino=504 res=1 errno=0
[  574.098503][T20100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.112062][T20108] CPU: 1 UID: 0 PID: 20108 Comm: syz.2.3746 Not tainted syzkaller #0 PREEMPT(full) 
[  574.112087][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  574.112097][T20108] Call Trace:
[  574.112104][T20108]  <TASK>
[  574.112112][T20108]  dump_stack_lvl+0xe8/0x150
[  574.112139][T20108]  should_fail_ex+0x412/0x560
[  574.112167][T20108]  should_failslab+0xa8/0x100
[  574.112196][T20108]  __kmalloc_noprof+0xe8/0x760
[  574.112221][T20108]  ? sock_kmalloc+0xd6/0x160
[  574.112244][T20108]  sock_kmalloc+0xd6/0x160
[  574.112265][T20108]  skcipher_recvmsg+0x517/0x1140
[  574.112308][T20108]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  574.112331][T20108]  ? __lock_acquire+0x6b5/0x2cf0
[  574.112349][T20108]  ? aa_sock_msg_perm+0xf1/0x1b0
[  574.112374][T20108]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  574.112397][T20108]  ? security_socket_recvmsg+0x7e/0x2c0
[  574.112424][T20108]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  574.112448][T20108]  sock_recvmsg+0x172/0x1b0
[  574.112472][T20108]  ____sys_recvmsg+0x1e6/0x4a0
[  574.112512][T20108]  ? __pfx_____sys_recvmsg+0x10/0x10
[  574.112554][T20108]  ? import_iovec+0x73/0xa0
[  574.112582][T20108]  ___sys_recvmsg+0x215/0x590
[  574.112598][T20108]  ? get_pid_task+0x20/0x1f0
[  574.112625][T20108]  ? __pfx____sys_recvmsg+0x10/0x10
[  574.112647][T20108]  ? __fget_files+0x2a/0x420
[  574.112687][T20108]  ? __fget_files+0x3a0/0x420
[  574.112718][T20108]  __x64_sys_recvmsg+0x1ba/0x2a0
[  574.112738][T20108]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  574.112765][T20108]  ? __pfx_ksys_write+0x10/0x10
[  574.112796][T20108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.112816][T20108]  do_syscall_64+0x15f/0xf80
[  574.112835][T20108]  ? clear_bhb_loop+0x40/0x90
[  574.112856][T20108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.112873][T20108] RIP: 0033:0x7ffba599ce59
[  574.112890][T20108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.112906][T20108] RSP: 002b:00007ffba6893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  574.112925][T20108] RAX: ffffffffffffffda RBX: 00007ffba5c15fa0 RCX: 00007ffba599ce59
[  574.112939][T20108] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  574.112951][T20108] RBP: 00007ffba6893090 R08: 0000000000000000 R09: 0000000000000000
[  574.112962][T20108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  574.112973][T20108] R13: 00007ffba5c16038 R14: 00007ffba5c15fa0 R15: 00007fff8286e8d8
[  574.113004][T20108]  </TASK>
[  574.394228][T20100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.485741][T20118] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3749'.
[  574.556600][T20122] xt_hashlimit: size too large, truncated to 1048576
[  574.849087][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3753'.
[  574.866269][T20094] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  574.896109][ T6503] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  574.918623][ T6503] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  574.998541][ T6503] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  575.016608][ T6503] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  575.058165][ T6503] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  575.172371][ T6503] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  575.207474][ T6503] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  575.235300][ T6503] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  575.247020][T20157] netlink: 'syz.3.3758': attribute type 10 has an invalid length.
[  575.479816][T20156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3759'.
[  575.489287][T20158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3758'.
[  575.645897][   T29] audit: type=1800 audit(1778654118.272:273): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3765" name="memory.events" dev="tmpfs" ino=721 res=0 errno=0
[  575.685265][T20175] FAULT_INJECTION: forcing a failure.
[  575.685265][T20175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  575.698333][T20175] CPU: 0 UID: 0 PID: 20175 Comm: syz.0.3765 Not tainted syzkaller #0 PREEMPT(full) 
[  575.698357][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  575.698366][T20175] Call Trace:
[  575.698373][T20175]  <TASK>
[  575.698380][T20175]  dump_stack_lvl+0xe8/0x150
[  575.698404][T20175]  should_fail_ex+0x412/0x560
[  575.698433][T20175]  _copy_to_user+0x31/0xb0
[  575.698460][T20175]  simple_read_from_buffer+0xe1/0x170
[  575.698486][T20175]  proc_fail_nth_read+0x1bb/0x230
[  575.698513][T20175]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  575.698538][T20175]  ? rw_verify_area+0x2a6/0x4d0
[  575.698561][T20175]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  575.698593][T20175]  vfs_read+0x20c/0xa70
[  575.698622][T20175]  ? __pfx___mutex_lock+0x10/0x10
[  575.698642][T20175]  ? __pfx_vfs_read+0x10/0x10
[  575.698668][T20175]  ? __fget_files+0x2a/0x420
[  575.698694][T20175]  ? __fget_files+0x3a0/0x420
[  575.698713][T20175]  ? __fget_files+0x2a/0x420
[  575.698742][T20175]  ksys_read+0x150/0x270
[  575.698769][T20175]  ? __pfx_ksys_read+0x10/0x10
[  575.698802][T20175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.698821][T20175]  do_syscall_64+0x15f/0xf80
[  575.698838][T20175]  ? trace_irq_disable+0x3b/0x140
[  575.698862][T20175]  ? clear_bhb_loop+0x40/0x90
[  575.698883][T20175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.698901][T20175] RIP: 0033:0x7f53db95d68e
[  575.698919][T20175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  575.698934][T20175] RSP: 002b:00007f53dc82cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  575.698953][T20175] RAX: ffffffffffffffda RBX: 00007f53dc82d6c0 RCX: 00007f53db95d68e
[  575.698966][T20175] RDX: 000000000000000f RSI: 00007f53dc82d0a0 RDI: 0000000000000008
[  575.698978][T20175] RBP: 00007f53dc82d090 R08: 0000000000000000 R09: 0000000000000000
[  575.698990][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  575.699000][T20175] R13: 00007f53dbc16038 R14: 00007f53dbc15fa0 R15: 00007ffd4c8f82e8
[  575.699030][T20175]  </TASK>
[  575.699403][   T29] audit: type=1804 audit(1778654118.272:274): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3765" name="/newroot/137/memory.events" dev="tmpfs" ino=721 res=1 errno=0
[  576.052990][T20188] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3770'.
[  576.070008][T20188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3770'.
[  576.137216][T20190] syzkaller1: entered promiscuous mode
[  576.142929][T20190] syzkaller1: entered allmulticast mode
[  576.265463][T20188] lo speed is unknown, defaulting to 1000
[  576.340694][T20197] netlink: 'syz.2.3773': attribute type 1 has an invalid length.
[  576.376685][T20197] 8021q: adding VLAN 0 to HW filter on device bond3
[  576.442151][T20197] vlan2: entered promiscuous mode
[  576.447236][T20197] bond3: entered promiscuous mode
[  576.452502][T20197] vlan2: entered allmulticast mode
[  576.457630][T20197] bond3: entered allmulticast mode
[  576.477503][T20197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3773'.
[  576.777467][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3777'.
[  576.786526][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3777'.
[  576.818727][T20197] 8021q: adding VLAN 0 to HW filter on device batadv2
[  576.828746][T20197] bond3: (slave batadv2): making interface the new active one
[  576.836311][T20197] batadv2: entered promiscuous mode
[  576.841638][T20197] batadv2: entered allmulticast mode
[  576.847750][T20197] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  577.090779][T20212] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.098375][T20212] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.261825][T20212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.282005][T20212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  577.495347][T20217] netlink: 'syz.4.3777': attribute type 14 has an invalid length.
[  577.646725][T20232] lo speed is unknown, defaulting to 1000
[  578.051050][T20272] netlink: 'syz.0.3790': attribute type 10 has an invalid length.
[  578.053776][T20277] ÿ: renamed from vcan0 (while UP)
[  578.090695][T20275] __nla_validate_parse: 5 callbacks suppressed
[  578.090713][T20275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3791'.
[  578.111723][T20272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3790'.
[  578.164131][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3791'.
[  578.173136][T20275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3791'.
[  578.233807][T20283] openvswitch: netlink: Message has 4 unknown bytes.
[  578.240549][T20283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.404567][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  578.440156][T20300] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3791'.
[  578.535662][T20275] syz_tun: entered promiscuous mode
[  578.573880][T20275] macsec1: entered promiscuous mode
[  578.588060][T20275] syz_tun: left promiscuous mode
[  578.613223][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  578.641587][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  578.652048][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  578.661266][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  578.924099][T20326] lo speed is unknown, defaulting to 1000
[  579.257565][T20345] netlink: 'syz.4.3805': attribute type 13 has an invalid length.
[  579.318722][T20343] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1520) !
[  579.988261][T20385] netlink: 'syz.2.3814': attribute type 13 has an invalid length.
[  580.231439][ T5715] IPVS: starting estimator thread 0...
[  580.324439][T20397] IPVS: using max 31 ests per chain, 74400 per kthread
[  580.475508][T20396] netlink: 'syz.4.3819': attribute type 29 has an invalid length.
[  580.507542][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.516716][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.570240][T20403] bridge_slave_1: left allmulticast mode
[  580.582629][T20403] bridge_slave_1: left promiscuous mode
[  580.590500][T20403] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.660189][T20403] bridge_slave_0: left allmulticast mode
[  580.666283][T20403] bridge_slave_0: left promiscuous mode
[  580.679255][T20403] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.733317][T20413] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002
[  580.766209][T20413] netlink: 'syz.0.3824': attribute type 1 has an invalid length.
[  580.893453][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.902503][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.160753][T20436] lo speed is unknown, defaulting to 1000
[  581.383448][T20448] netlink: 'syz.1.3829': attribute type 3 has an invalid length.
[  581.448225][T20448] netlink: 'syz.1.3829': attribute type 4 has an invalid length.
[  581.466033][T20450] IPv6: NLM_F_CREATE should be specified when creating new route
[  581.494847][T20450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  581.502294][T20450] IPv6: NLM_F_CREATE should be set when creating new route
[  581.509654][T20450] IPv6: NLM_F_CREATE should be set when creating new route
[  581.516969][T20450] IPv6: NLM_F_CREATE should be set when creating new route
[  582.246602][T20467] x_tables: duplicate underflow at hook 2
[  582.382463][T20479] xt_TCPMSS: Only works on TCP SYN packets
[  582.537712][T20487] netlink: 'syz.0.3844': attribute type 3 has an invalid length.
[  582.565074][T20490] syzkaller0: entered promiscuous mode
[  582.571804][T20490] syzkaller0: entered allmulticast mode
[  582.639564][T20487] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.648064][T20487] 8021q: adding VLAN 0 to HW filter on device team0
[  582.658830][T20487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.723279][T20487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.782603][T20487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.795945][T20487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  582.806322][T20487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  582.820399][T20487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  582.839685][T16679] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.857367][T16679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.877428][T16679] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.884640][T16679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.162774][T20513] __nla_validate_parse: 15 callbacks suppressed
[  583.162797][T20513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3854'.
[  583.197763][T20513] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3854'.
[  584.537602][T20573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3870'.
[  584.606063][T20579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3872'.
[  584.812469][T20589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3874'.
[  584.985739][T20601] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3878'.
[  585.001614][T20604] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3878'.
[  585.163929][T20602] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  585.177108][T20602] bond5 (unregistering): Released all slaves
[  585.390168][T20616] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3881'.
[  585.447581][T20618] sctp: [Deprecated]: syz.1.3883 (pid 20618) Use of struct sctp_assoc_value in delayed_ack socket option.
[  585.447581][T20618] Use struct sctp_sack_info instead
[  585.486543][T20618] sctp: [Deprecated]: syz.1.3883 (pid 20618) Use of struct sctp_assoc_value in delayed_ack socket option.
[  585.486543][T20618] Use struct sctp_sack_info instead
[  585.545364][T20618] lo speed is unknown, defaulting to 1000
[  585.833239][T20635] netlink: 'syz.0.3885': attribute type 5 has an invalid length.
[  585.879707][T20635] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3885'.
[  586.123397][T20647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3888'.
[  586.680562][T20653] syzkaller0: entered promiscuous mode
[  586.686043][T20653] syzkaller0: entered allmulticast mode
[  586.950309][T20662] FAULT_INJECTION: forcing a failure.
[  586.950309][T20662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  586.960358][T20665] xfrm0: Caught tx_queue_len zero misconfig
[  586.963377][T20662] CPU: 0 UID: 0 PID: 20662 Comm: syz.1.3892 Not tainted syzkaller #0 PREEMPT(full) 
[  586.963402][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  586.963413][T20662] Call Trace:
[  586.963421][T20662]  <TASK>
[  586.963429][T20662]  dump_stack_lvl+0xe8/0x150
[  586.963456][T20662]  should_fail_ex+0x412/0x560
[  586.963482][T20662]  _copy_from_iter+0x1d3/0x1670
[  586.963509][T20662]  ? rcu_is_watching+0x15/0xb0
[  586.963536][T20662]  ? __pfx__copy_from_iter+0x10/0x10
[  586.963566][T20662]  ? netlink_sendmsg+0x650/0xb40
[  586.963589][T20662]  ? skb_put+0x11b/0x210
[  586.963616][T20662]  netlink_sendmsg+0x6c0/0xb40
[  586.963655][T20662]  ? __pfx_netlink_sendmsg+0x10/0x10
[  586.963683][T20662]  ? aa_sock_msg_perm+0xf1/0x1b0
[  586.963708][T20662]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  586.963734][T20662]  ____sys_sendmsg+0x972/0x9f0
[  586.963759][T20662]  ? __might_fault+0xaf/0x130
[  586.963787][T20662]  ? __pfx_____sys_sendmsg+0x10/0x10
[  586.963820][T20662]  ? import_iovec+0x73/0xa0
[  586.963847][T20662]  ___sys_sendmsg+0x2a5/0x360
[  586.963872][T20662]  ? __lock_acquire+0x6b5/0x2cf0
[  586.963894][T20662]  ? __pfx____sys_sendmsg+0x10/0x10
[  586.963950][T20662]  ? __fget_files+0x2a/0x420
[  586.963970][T20662]  ? __fget_files+0x3a0/0x420
[  586.964000][T20662]  __x64_sys_sendmsg+0x1bd/0x2a0
[  586.964028][T20662]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  586.964060][T20662]  ? __pfx_ksys_write+0x10/0x10
[  586.964093][T20662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.964111][T20662]  do_syscall_64+0x15f/0xf80
[  586.964129][T20662]  ? trace_irq_disable+0x3b/0x140
[  586.964153][T20662]  ? clear_bhb_loop+0x40/0x90
[  586.964175][T20662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.964192][T20662] RIP: 0033:0x7f448739ce59
[  586.964210][T20662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.964225][T20662] RSP: 002b:00007f448817a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  586.964245][T20662] RAX: ffffffffffffffda RBX: 00007f4487615fa0 RCX: 00007f448739ce59
[  586.964257][T20662] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  586.964268][T20662] RBP: 00007f448817a090 R08: 0000000000000000 R09: 0000000000000000
[  586.964279][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.964290][T20662] R13: 00007f4487616038 R14: 00007f4487615fa0 R15: 00007ffdb04db148
[  586.964318][T20662]  </TASK>
[  587.268214][T20665] netem: change failed
[  587.378987][T20677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  587.795016][T20705] block nbd0: NBD_DISCONNECT
[  587.826422][T20705] block nbd0: Send disconnect failed -32
[  587.834231][T20705] block nbd0: Send disconnect failed -32
[  587.880269][T20708] FAULT_INJECTION: forcing a failure.
[  587.880269][T20708] name failslab, interval 1, probability 0, space 0, times 0
[  587.898303][T20708] CPU: 1 UID: 0 PID: 20708 Comm: syz.0.3905 Not tainted syzkaller #0 PREEMPT(full) 
[  587.898328][T20708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  587.898338][T20708] Call Trace:
[  587.898345][T20708]  <TASK>
[  587.898352][T20708]  dump_stack_lvl+0xe8/0x150
[  587.898376][T20708]  should_fail_ex+0x412/0x560
[  587.898401][T20708]  should_failslab+0xa8/0x100
[  587.898427][T20708]  ? skb_clone+0x212/0x3a0
[  587.898445][T20708]  kmem_cache_alloc_noprof+0x87/0x650
[  587.898466][T20708]  ? apparmor_capable+0x126/0x170
[  587.898489][T20708]  skb_clone+0x212/0x3a0
[  587.898509][T20708]  ? nfnetlink_rcv+0x4b0/0x27b0
[  587.898542][T20708]  nfnetlink_rcv+0x4de/0x27b0
[  587.898577][T20708]  ? lockdep_hardirqs_on+0x7a/0x110
[  587.898603][T20708]  ? __local_bh_enable_ip+0xd0/0x130
[  587.898621][T20708]  ? __dev_queue_xmit+0x2b6/0x3950
[  587.898638][T20708]  ? __dev_queue_xmit+0x1fe5/0x3950
[  587.898654][T20708]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  587.898689][T20708]  ? __dev_queue_xmit+0x2b6/0x3950
[  587.898712][T20708]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  587.898747][T20708]  ? ref_tracker_free+0x693/0x840
[  587.898771][T20708]  ? __pfx_ref_tracker_free+0x10/0x10
[  587.898806][T20708]  ? skb_clone+0x246/0x3a0
[  587.898824][T20708]  ? __netlink_deliver_tap+0x807/0x850
[  587.898848][T20708]  ? netlink_deliver_tap+0x2e/0x1b0
[  587.898876][T20708]  ? netlink_deliver_tap+0x2e/0x1b0
[  587.898898][T20708]  ? netlink_deliver_tap+0x2e/0x1b0
[  587.898925][T20708]  netlink_unicast+0x75c/0x8e0
[  587.898954][T20708]  netlink_sendmsg+0x813/0xb40
[  587.898984][T20708]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.899011][T20708]  ? aa_sock_msg_perm+0xf1/0x1b0
[  587.899034][T20708]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  587.899058][T20708]  ____sys_sendmsg+0x972/0x9f0
[  587.899081][T20708]  ? __might_fault+0xaf/0x130
[  587.899108][T20708]  ? __pfx_____sys_sendmsg+0x10/0x10
[  587.899139][T20708]  ? import_iovec+0x73/0xa0
[  587.899164][T20708]  ___sys_sendmsg+0x2a5/0x360
[  587.899188][T20708]  ? __lock_acquire+0x6b5/0x2cf0
[  587.899212][T20708]  ? __pfx____sys_sendmsg+0x10/0x10
[  587.899271][T20708]  ? __fget_files+0x2a/0x420
[  587.899290][T20708]  ? __fget_files+0x3a0/0x420
[  587.899320][T20708]  __x64_sys_sendmsg+0x1bd/0x2a0
[  587.899349][T20708]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  587.899384][T20708]  ? __pfx_ksys_write+0x10/0x10
[  587.899416][T20708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.899436][T20708]  do_syscall_64+0x15f/0xf80
[  587.899453][T20708]  ? trace_irq_disable+0x3b/0x140
[  587.899478][T20708]  ? clear_bhb_loop+0x40/0x90
[  587.899500][T20708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.899518][T20708] RIP: 0033:0x7f53db99ce59
[  587.899543][T20708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.899557][T20708] RSP: 002b:00007f53dc82d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.899577][T20708] RAX: ffffffffffffffda RBX: 00007f53dbc15fa0 RCX: 00007f53db99ce59
[  587.899589][T20708] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  587.899600][T20708] RBP: 00007f53dc82d090 R08: 0000000000000000 R09: 0000000000000000
[  587.899611][T20708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.899623][T20708] R13: 00007f53dbc16038 R14: 00007f53dbc15fa0 R15: 00007ffd4c8f82e8
[  587.899649][T20708]  </TASK>
[  588.424480][T20721] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  588.451231][T20721] ip6tnl0: Caught tx_queue_len zero misconfig
[  588.731865][T20744] FAULT_INJECTION: forcing a failure.
[  588.731865][T20744] name failslab, interval 1, probability 0, space 0, times 0
[  588.744614][T20744] CPU: 0 UID: 0 PID: 20744 Comm: syz.2.3916 Not tainted syzkaller #0 PREEMPT(full) 
[  588.744639][T20744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  588.744652][T20744] Call Trace:
[  588.744660][T20744]  <TASK>
[  588.744668][T20744]  dump_stack_lvl+0xe8/0x150
[  588.744696][T20744]  should_fail_ex+0x412/0x560
[  588.744725][T20744]  should_failslab+0xa8/0x100
[  588.744754][T20744]  __kmalloc_cache_noprof+0x88/0x660
[  588.744781][T20744]  ? nf_tables_newtable+0x435/0x1910
[  588.744802][T20744]  ? nla_strcmp+0x106/0x140
[  588.744832][T20744]  nf_tables_newtable+0x435/0x1910
[  588.744873][T20744]  nfnetlink_rcv+0x123e/0x27b0
[  588.744932][T20744]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  588.745004][T20744]  ? netlink_deliver_tap+0x2e/0x1b0
[  588.745041][T20744]  ? netlink_deliver_tap+0x2e/0x1b0
[  588.745065][T20744]  ? netlink_deliver_tap+0x2e/0x1b0
[  588.745096][T20744]  netlink_unicast+0x75c/0x8e0
[  588.745132][T20744]  netlink_sendmsg+0x813/0xb40
[  588.745166][T20744]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.745196][T20744]  ? aa_sock_msg_perm+0xf1/0x1b0
[  588.745221][T20744]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  588.745248][T20744]  ____sys_sendmsg+0x972/0x9f0
[  588.745274][T20744]  ? __might_fault+0xaf/0x130
[  588.745326][T20744]  ? __pfx_____sys_sendmsg+0x10/0x10
[  588.745361][T20744]  ? import_iovec+0x73/0xa0
[  588.745390][T20744]  ___sys_sendmsg+0x2a5/0x360
[  588.745413][T20744]  ? __lock_acquire+0x6b5/0x2cf0
[  588.745437][T20744]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.745497][T20744]  ? __fget_files+0x2a/0x420
[  588.745518][T20744]  ? __fget_files+0x3a0/0x420
[  588.745549][T20744]  __x64_sys_sendmsg+0x1bd/0x2a0
[  588.745578][T20744]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.745614][T20744]  ? __pfx_ksys_write+0x10/0x10
[  588.745648][T20744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.745667][T20744]  do_syscall_64+0x15f/0xf80
[  588.745684][T20744]  ? trace_irq_disable+0x3b/0x140
[  588.745710][T20744]  ? clear_bhb_loop+0x40/0x90
[  588.745732][T20744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.745749][T20744] RIP: 0033:0x7ffba599ce59
[  588.745767][T20744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.745782][T20744] RSP: 002b:00007ffba6893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.745802][T20744] RAX: ffffffffffffffda RBX: 00007ffba5c15fa0 RCX: 00007ffba599ce59
[  588.745816][T20744] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  588.745827][T20744] RBP: 00007ffba6893090 R08: 0000000000000000 R09: 0000000000000000
[  588.745838][T20744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.745849][T20744] R13: 00007ffba5c16038 R14: 00007ffba5c15fa0 R15: 00007fff8286e8d8
[  588.745879][T20744]  </TASK>
[  589.093827][T20748] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  589.132834][T20750] tipc: Started in network mode
[  589.137836][T20750] tipc: Node identity ceb5dc1346b2, cluster identity 4711
[  589.145112][T20750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.163030][T20750] syzkaller0: entered promiscuous mode
[  589.183105][T20750] syzkaller0: entered allmulticast mode
[  589.235953][T20750] tipc: Resetting bearer <eth:syzkaller0>
[  589.252915][T20749] tipc: Resetting bearer <eth:syzkaller0>
[  589.282878][T20749] tipc: Disabling bearer <eth:syzkaller0>
[  589.291634][T20760] syzkaller1: entered promiscuous mode
[  589.297221][T20760] syzkaller1: entered allmulticast mode
[  589.660784][T20770] netlink: 'syz.2.3923': attribute type 32 has an invalid length.
[  589.800624][T20770] __nla_validate_parse: 6 callbacks suppressed
[  589.800642][T20770] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3923'.
[  589.967591][T20776] lo speed is unknown, defaulting to 1000
[  590.196219][T20784] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  590.512786][T20803] FAULT_INJECTION: forcing a failure.
[  590.512786][T20803] name failslab, interval 1, probability 0, space 0, times 0
[  590.577910][T20803] CPU: 1 UID: 0 PID: 20803 Comm: syz.0.3930 Not tainted syzkaller #0 PREEMPT(full) 
[  590.577936][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  590.577947][T20803] Call Trace:
[  590.577954][T20803]  <TASK>
[  590.577962][T20803]  dump_stack_lvl+0xe8/0x150
[  590.577989][T20803]  should_fail_ex+0x412/0x560
[  590.578024][T20803]  should_failslab+0xa8/0x100
[  590.578054][T20803]  __kmalloc_noprof+0xe8/0x760
[  590.578077][T20803]  ? __kasan_kmalloc+0x93/0xb0
[  590.578102][T20803]  ? nla_strdup+0x9d/0x140
[  590.578125][T20803]  ? __kmalloc_cache_noprof+0x31c/0x660
[  590.578152][T20803]  nla_strdup+0x9d/0x140
[  590.578179][T20803]  nf_tables_newtable+0x491/0x1910
[  590.578200][T20803]  ? nfnetlink_subsys_unregister+0x172/0x1b0
[  590.578241][T20803]  nfnetlink_rcv+0x123e/0x27b0
[  590.578296][T20803]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  590.578335][T20803]  ? ref_tracker_free+0x693/0x840
[  590.578385][T20803]  ? __netlink_deliver_tap+0x807/0x850
[  590.578420][T20803]  ? netlink_deliver_tap+0x2e/0x1b0
[  590.578444][T20803]  ? netlink_deliver_tap+0x2e/0x1b0
[  590.578475][T20803]  netlink_unicast+0x75c/0x8e0
[  590.578507][T20803]  netlink_sendmsg+0x813/0xb40
[  590.578541][T20803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  590.578569][T20803]  ? aa_sock_msg_perm+0xf1/0x1b0
[  590.578595][T20803]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  590.578622][T20803]  ____sys_sendmsg+0x972/0x9f0
[  590.578649][T20803]  ? __might_fault+0xaf/0x130
[  590.578678][T20803]  ? __pfx_____sys_sendmsg+0x10/0x10
[  590.578712][T20803]  ? import_iovec+0x73/0xa0
[  590.578742][T20803]  ___sys_sendmsg+0x2a5/0x360
[  590.578767][T20803]  ? __lock_acquire+0x6b5/0x2cf0
[  590.578791][T20803]  ? __pfx____sys_sendmsg+0x10/0x10
[  590.578853][T20803]  ? __fget_files+0x2a/0x420
[  590.578875][T20803]  ? __fget_files+0x3a0/0x420
[  590.578906][T20803]  __x64_sys_sendmsg+0x1bd/0x2a0
[  590.578935][T20803]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  590.578976][T20803]  ? __pfx_ksys_write+0x10/0x10
[  590.579009][T20803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.579038][T20803]  do_syscall_64+0x15f/0xf80
[  590.579055][T20803]  ? trace_irq_disable+0x3b/0x140
[  590.579082][T20803]  ? clear_bhb_loop+0x40/0x90
[  590.579104][T20803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.579122][T20803] RIP: 0033:0x7f53db99ce59
[  590.579140][T20803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.579157][T20803] RSP: 002b:00007f53dc82d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  590.579176][T20803] RAX: ffffffffffffffda RBX: 00007f53dbc15fa0 RCX: 00007f53db99ce59
[  590.579189][T20803] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  590.579201][T20803] RBP: 00007f53dc82d090 R08: 0000000000000000 R09: 0000000000000000
[  590.579210][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.579222][T20803] R13: 00007f53dbc16038 R14: 00007f53dbc15fa0 R15: 00007ffd4c8f82e8
[  590.579249][T20803]  </TASK>
[  590.954205][T20813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3935'.
[  590.992554][T20813] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3935'.
[  591.193589][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'.
[  591.319664][T20830] tipc: Started in network mode
[  591.324586][T20830] tipc: Node identity ff, cluster identity 4711
[  591.330901][T20830] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  591.467809][T20842] netlink: 'syz.1.3939': attribute type 21 has an invalid length.
[  591.495539][T20842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3939'.
[  591.530486][T20842] netlink: 'syz.1.3939': attribute type 4 has an invalid length.
[  591.538250][T20842] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3939'.
[  591.547780][T20846] netlink: 'syz.2.3940': attribute type 9 has an invalid length.
[  591.555621][T20846] netlink: 'syz.2.3940': attribute type 6 has an invalid length.
[  592.097561][T20867] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode
[  592.104641][T20867] mac80211_hwsim hwsim77 wlan0: entered allmulticast mode
[  592.111920][T20867] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  592.334367][T20879] FAULT_INJECTION: forcing a failure.
[  592.334367][T20879] name failslab, interval 1, probability 0, space 0, times 0
[  592.349955][T20882] netlink: 'syz.1.3950': attribute type 3 has an invalid length.
[  592.361180][T20883] netlink: 'syz.4.3949': attribute type 1 has an invalid length.
[  592.406813][T20879] CPU: 0 UID: 0 PID: 20879 Comm: syz.0.3948 Not tainted syzkaller #0 PREEMPT(full) 
[  592.406841][T20879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  592.406853][T20879] Call Trace:
[  592.406861][T20879]  <TASK>
[  592.406869][T20879]  dump_stack_lvl+0xe8/0x150
[  592.406897][T20879]  should_fail_ex+0x412/0x560
[  592.406926][T20879]  should_failslab+0xa8/0x100
[  592.406955][T20879]  __kvmalloc_node_noprof+0x178/0x8a0
[  592.406981][T20879]  ? rhashtable_init_noprof+0x52e/0xad0
[  592.407007][T20879]  ? rhashtable_init_noprof+0x12d/0xad0
[  592.407036][T20879]  rhashtable_init_noprof+0x52e/0xad0
[  592.407066][T20879]  rhltable_init_noprof+0x1e/0x60
[  592.407097][T20879]  nf_tables_newtable+0x68f/0x1910
[  592.407140][T20879]  nfnetlink_rcv+0x123e/0x27b0
[  592.407194][T20879]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  592.407229][T20879]  ? ref_tracker_free+0x693/0x840
[  592.407276][T20879]  ? __netlink_deliver_tap+0x807/0x850
[  592.407306][T20879]  ? netlink_deliver_tap+0x2e/0x1b0
[  592.407328][T20879]  ? netlink_deliver_tap+0x2e/0x1b0
[  592.407355][T20879]  netlink_unicast+0x75c/0x8e0
[  592.407387][T20879]  netlink_sendmsg+0x813/0xb40
[  592.407419][T20879]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.407446][T20879]  ? aa_sock_msg_perm+0xf1/0x1b0
[  592.407470][T20879]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  592.407499][T20879]  ____sys_sendmsg+0x972/0x9f0
[  592.407526][T20879]  ? __might_fault+0xaf/0x130
[  592.407556][T20879]  ? __pfx_____sys_sendmsg+0x10/0x10
[  592.407591][T20879]  ? import_iovec+0x73/0xa0
[  592.407621][T20879]  ___sys_sendmsg+0x2a5/0x360
[  592.407646][T20879]  ? __lock_acquire+0x6b5/0x2cf0
[  592.407670][T20879]  ? __pfx____sys_sendmsg+0x10/0x10
[  592.407729][T20879]  ? __fget_files+0x2a/0x420
[  592.407750][T20879]  ? __fget_files+0x3a0/0x420
[  592.407783][T20879]  __x64_sys_sendmsg+0x1bd/0x2a0
[  592.407811][T20879]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  592.407846][T20879]  ? __pfx_ksys_write+0x10/0x10
[  592.407880][T20879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.407900][T20879]  do_syscall_64+0x15f/0xf80
[  592.407917][T20879]  ? trace_irq_disable+0x3b/0x140
[  592.407942][T20879]  ? clear_bhb_loop+0x40/0x90
[  592.407964][T20879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.407980][T20879] RIP: 0033:0x7f53db99ce59
[  592.407997][T20879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.408012][T20879] RSP: 002b:00007f53dc82d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.408032][T20879] RAX: ffffffffffffffda RBX: 00007f53dbc15fa0 RCX: 00007f53db99ce59
[  592.408045][T20879] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  592.408057][T20879] RBP: 00007f53dc82d090 R08: 0000000000000000 R09: 0000000000000000
[  592.408068][T20879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.408079][T20879] R13: 00007f53dbc16038 R14: 00007f53dbc15fa0 R15: 00007ffd4c8f82e8
[  592.408116][T20879]  </TASK>
[  593.018347][T20903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3958'.
[  593.378678][T20926] netlink: 'syz.2.3961': attribute type 1 has an invalid length.
[  593.381801][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3957'.
[  593.542709][T20920] netlink: 'syz.4.3960': attribute type 1 has an invalid length.
[  593.550501][T20920] netlink: 'syz.4.3960': attribute type 1 has an invalid length.
[  593.558236][T20920] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.3960'.
[  593.623849][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'.
[  594.064986][T20942] bridge_slave_1: left allmulticast mode
[  594.081451][T20942] bridge_slave_1: left promiscuous mode
[  594.094342][T20942] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.783016][T20970] sctp: [Deprecated]: syz.0.3972 (pid 20970) Use of int in max_burst socket option.
[  594.783016][T20970] Use struct sctp_assoc_value instead
[  595.077255][T20982] syzkaller0: entered promiscuous mode
[  595.082749][T20982] syzkaller0: entered allmulticast mode
[  595.758832][T21006] __nla_validate_parse: 1 callbacks suppressed
[  595.758851][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'.
[  597.794367][ T1173] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  597.808483][ T1173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  597.830787][ T1173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  597.839580][ T1173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  598.039520][T21026] ipt_REJECT: TCP_RESET invalid for non-tcp
[  598.225553][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3986'.
[  598.338567][T21048] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  598.349685][T21048] netlink: 'syz.3.3990': attribute type 1 has an invalid length.
[  598.409634][T21054] tipc: Enabling of bearer <eth:xfrm0> rejected, already enabled
[  598.660165][T21067] bond2: entered promiscuous mode
[  598.762320][T21066] syzkaller0: entered promiscuous mode
[  598.768308][T21066] syzkaller0: entered allmulticast mode
[  598.957283][T21077] netlink: 'syz.3.3997': attribute type 4 has an invalid length.
[  598.976702][T21077] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3997'.
[  599.242908][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4002'.
[  601.529845][T21081] team_slave_1: Caught tx_queue_len zero misconfig
[  601.543194][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'.
[  601.568510][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'.
[  601.622256][ T8237] tipc: Node number set to 4075794574
[  601.641440][ T6503] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  601.672291][ T6503] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  601.709332][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4003'.
[  601.745036][ T6503] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  601.918047][T21108] bond6: entered promiscuous mode
[  601.923663][T21108] 8021q: adding VLAN 0 to HW filter on device bond6
[  601.963502][T21108] bond6 (unregistering): Released all slaves
[  602.114013][ T6503] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  602.257965][T21116] pim6reg: entered allmulticast mode
[  602.263068][T21133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4008'.
[  602.388906][   T29] audit: type=1804 audit(1778654145.022:275): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4009" name="/newroot/225/memory.events" dev="tmpfs" ino=1179 res=1 errno=0
[  602.437741][   T29] audit: type=1800 audit(1778654145.022:276): pid=21136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4009" name="memory.events" dev="tmpfs" ino=1179 res=0 errno=0
[  602.509136][T21136] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  602.537985][T21136] bond5 (unregistering): Released all slaves
[  602.633902][T21144] syzkaller0: entered promiscuous mode
[  602.639617][T21144] syzkaller0: entered allmulticast mode
[  602.943692][T21161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4015'.
[  605.407783][T21158] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  605.417138][T21158] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  605.426717][T21158] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  605.560919][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4018'.
[  605.581350][T21187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4018'.
[  605.608952][T21189] Bluetooth: hci3: Opcode 0x0401 failed: -22
[  605.820911][T21197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4022'.
[  605.851365][T21197] netlink: 'syz.4.4022': attribute type 21 has an invalid length.
[  605.871793][T21202] netlink: 'syz.3.4024': attribute type 1 has an invalid length.
[  605.918790][T21202] bond3: (slave gretap1): making interface the new active one
[  605.959882][T21202] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  606.121845][T21219] ipip0: entered promiscuous mode
[  606.230586][T21224] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  606.316058][T21228] syzkaller0: entered promiscuous mode
[  606.321544][T21228] syzkaller0: entered allmulticast mode
[  606.600089][T21240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4035'.
[  606.614511][T21240] netpci0: tun_chr_ioctl cmd 1074025678
[  606.621096][T21240] netpci0: group set to 0
[  606.665768][T21242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'.
[  606.787959][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4039'.
[  606.856572][T21256] netlink: 'syz.2.4041': attribute type 1 has an invalid length.
[  606.972829][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'.
[  607.000820][T21256] 8021q: adding VLAN 0 to HW filter on device bond6
[  607.022669][T21259] nbd: illegal input index -1113835520
[  607.063721][T21252] netlink: 'syz.0.4037': attribute type 2 has an invalid length.
[  607.087520][T21256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4041'.
[  607.122997][T21267] xt_hashlimit: size too large, truncated to 1048576
[  607.135500][T21252] netlink: 'syz.0.4037': attribute type 1 has an invalid length.
[  607.149466][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'.
[  607.165686][T21255] bond0: Caught tx_queue_len zero misconfig
[  607.172434][T21252] netlink: 'syz.0.4037': attribute type 1 has an invalid length.
[  607.205057][T21260] vlan3: entered promiscuous mode
[  607.218484][T21260] bond6: entered promiscuous mode
[  607.232799][T21260] vlan3: entered allmulticast mode
[  607.244459][T21260] bond6: entered allmulticast mode
[  607.289425][T21256] 8021q: adding VLAN 0 to HW filter on device batadv3
[  607.313092][T21256] bond6: (slave batadv3): making interface the new active one
[  607.321237][T21256] batadv3: entered promiscuous mode
[  607.327411][T21256] batadv3: entered allmulticast mode
[  607.339010][T21256] bond6: (slave batadv3): Enslaving as an active interface with an up link
[  607.381096][T21270] syzkaller0: entered promiscuous mode
[  607.401384][T21270] syzkaller0: entered allmulticast mode
[  607.634301][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'.
[  607.788420][T21294] Cannot find set identified by id 65534 to match
[  607.849689][T21300] syzkaller1: entered promiscuous mode
[  607.855835][T21300] syzkaller1: entered allmulticast mode
[  607.865777][T21300] netlink: 'syz.0.4051': attribute type 2 has an invalid length.
[  607.924147][T21294] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4049'.
[  608.090960][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4052'.
[  608.447434][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'.
[  608.458325][T21331] openvswitch: netlink: Flow actions attr not present in new flow.
[  608.586750][T21336] syzkaller0: entered promiscuous mode
[  608.592604][T21336] syzkaller0: entered allmulticast mode
[  609.085559][T21358] lo speed is unknown, defaulting to 1000
[  609.349621][T21367] netlink: 'syz.0.4067': attribute type 13 has an invalid length.
[  609.573332][T21387] sock: sock_timestamping_bind_phc: sock not bind to device
[  609.588349][T21382] sock: sock_timestamping_bind_phc: sock not bind to device
[  609.685699][T21395] syzkaller0: entered promiscuous mode
[  609.691224][T21395] syzkaller0: entered allmulticast mode
[  610.021101][T21404] netlink: 'syz.1.4074': attribute type 66 has an invalid length.
[  610.039124][T21408] netlink: 'syz.3.4075': attribute type 1 has an invalid length.
[  610.088267][T21408] 8021q: adding VLAN 0 to HW filter on device bond4
[  610.108648][T21408] bond4: entered allmulticast mode
[  610.542169][T21423] : entered promiscuous mode
[  610.944226][T21427] netem: incorrect ge model size
[  610.965348][T21427] netem: change failed
[  611.010925][T21436] syzkaller0: entered promiscuous mode
[  611.051057][T21436] syzkaller0: entered allmulticast mode
[  611.379151][T21455] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  611.488143][T21458] syzkaller0: entered promiscuous mode
[  611.512218][T21458] syzkaller0: entered allmulticast mode
[  611.618316][T21467] __nla_validate_parse: 7 callbacks suppressed
[  611.618334][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4091'.
[  611.748124][T21472] lo speed is unknown, defaulting to 1000
[  612.002577][T21485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4096'.
[  612.130422][T21498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4099'.
[  612.340607][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'.
[  612.540845][T21511] netlink: 'syz.4.4103': attribute type 1 has an invalid length.
[  612.570837][T21515] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4105'.
[  612.590289][T21515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4105'.
[  612.607250][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4105'.
[  612.623210][T21525] netlink: 'syz.3.4106': attribute type 1 has an invalid length.
[  612.654828][T21511] 8021q: adding VLAN 0 to HW filter on device bond2
[  612.675222][T21527] netlink: 'syz.3.4106': attribute type 1 has an invalid length.
[  612.719025][T21511] veth5: entered allmulticast mode
[  612.775758][T21511] bond2: (slave veth5): Enslaving as an active interface with a down link
[  612.792470][T21525] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  612.797125][T21527] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  612.887662][T21538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4107'.
[  613.000215][T21530] bond2 (unregistering): (slave veth5): Releasing active interface
[  613.033580][T21530] bond2 (unregistering): Released all slaves
[  613.483947][T21559] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.491690][T21559] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.497570][T21566] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4117'.
[  613.508608][T21566] netlink: Unknown conntrack attr (0)
[  613.574222][T21559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.602360][T21559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  613.829914][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4118'.
[  613.901941][T16682] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.913893][T16682] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.932499][T16682] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  613.951844][T16682] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  613.971230][T21574] lo: Caught tx_queue_len zero misconfig
[  614.108276][T16682] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.118283][T16682] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.130327][T16682] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  614.142780][T16682] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.346680][T21591] netlink: 'syz.4.4126': attribute type 7 has an invalid length.
[  614.589315][T21598] syzkaller0: entered promiscuous mode
[  614.594828][T21598] syzkaller0: entered allmulticast mode
[  614.737338][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.757501][ T8237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.774538][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.786391][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.799124][T21609] geneve2: entered promiscuous mode
[  614.804932][T21609] geneve2: entered allmulticast mode
[  614.979214][T21617] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.998095][T21617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.100261][T21617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.126669][T21617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.182010][T21617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  615.204603][T21617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  615.278197][ T6500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.295208][ T6503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.305166][ T6503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.317079][ T8247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.331496][T21617] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  615.383978][T21652] netlink: 'syz.1.4142': attribute type 1 has an invalid length.
[  615.511987][T21653] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.519507][T21653] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.571314][T21653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.581340][T21653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.596450][T21653] erspan0: left allmulticast mode
[  615.613271][T21658] batadv_slave_0: entered promiscuous mode
[  616.099087][T21676] syzkaller0: entered promiscuous mode
[  616.122983][T21676] syzkaller0: entered allmulticast mode
[  616.255395][T21657] batadv_slave_0: left promiscuous mode
[  616.976693][T21713] syzkaller0: entered promiscuous mode
[  616.993790][T21713] syzkaller0: entered allmulticast mode
[  617.102760][T21722] __nla_validate_parse: 157 callbacks suppressed
[  617.102780][T21722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4159'.
[  617.139621][T21719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4163'.
[  617.225500][ T6503] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  617.619609][T21738] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4170'.
[  617.630443][T21738] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4170'.
[  617.640194][T21738] netlink: 'syz.3.4170': attribute type 5 has an invalid length.
[  617.650660][T21738] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4170'.
[  617.668338][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'.
[  617.681555][T21738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4170'.
[  617.690636][T21738] netlink: 'syz.3.4170': attribute type 12 has an invalid length.
[  617.698574][T21738] netlink: 'syz.3.4170': attribute type 13 has an invalid length.
[  618.138799][T21762] Bluetooth: MGMT ver 1.23
[  618.148900][T21761] pim6reg1: entered promiscuous mode
[  618.158084][T21761] pim6reg1: entered allmulticast mode
[  618.292726][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4177'.
[  618.307516][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4177'.
[  618.350905][T21767] netlink: 'syz.3.4177': attribute type 11 has an invalid length.
[  618.496092][T21773] lo speed is unknown, defaulting to 1000
[  618.886010][T21795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4183'.
[  619.689464][T21818] netlink: 'syz.2.4188': attribute type 1 has an invalid length.
[  619.717016][T21818] netlink: 'syz.2.4188': attribute type 2 has an invalid length.
[  620.282275][T21846] xt_SECMARK: invalid mode: 4
[  620.303802][T21845] xt_SECMARK: invalid mode: 4
[  621.133504][T21869] net_ratelimit: 4 callbacks suppressed
[  621.133525][T21869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.156250][T21847] lo speed is unknown, defaulting to 1000
[  622.341925][T21896] __nla_validate_parse: 5 callbacks suppressed
[  622.341943][T21896] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4208'.
[  622.699553][T21911] xt_nfacct: accounting object `syz0' does not exist
[  623.263961][T21913] vlan2: entered promiscuous mode
[  623.269008][T21913] veth0_to_team: entered promiscuous mode
[  623.291945][T21917] syzkaller0: entered promiscuous mode
[  623.311525][T21917] syzkaller0: entered allmulticast mode
[  623.457293][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4214'.
[  623.480608][T21923] netlink: 'syz.0.4214': attribute type 1 has an invalid length.
[  623.499447][T21923] netlink: 'syz.0.4214': attribute type 1 has an invalid length.
[  623.507212][T21923] nbd: illegal input index 871591272
[  623.711016][T21929] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4215'.
[  623.735887][T21929] netlink: 'syz.2.4215': attribute type 11 has an invalid length.
[  624.178921][T21944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4220'.
[  624.260385][T21946] netlink: 'syz.0.4222': attribute type 29 has an invalid length.
[  624.278488][T21946] netlink: 'syz.0.4222': attribute type 29 has an invalid length.
[  624.288336][T21948] tunl0: entered promiscuous mode
[  624.293671][T21948] netlink: 'syz.1.4223': attribute type 4 has an invalid length.
[  624.302351][T21948] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4223'.
[  624.427765][T21950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4222'.
[  624.622768][T21958] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.4225'.
[  625.184954][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'.
[  625.616568][T21992] xt_hashlimit: size too large, truncated to 1048576
[  626.269121][T22000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4234'.
[  627.927098][T21998] ip6gre1: entered promiscuous mode
[  627.932320][T21998] ip6gre1: entered allmulticast mode
[  627.968179][T21997] lo speed is unknown, defaulting to 1000
[  628.244761][T22019] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4238'.
[  628.313402][T22017] batman_adv: batadv0: Adding interface: ipvlan2
[  628.321072][T22017] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.333355][T22019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4238'.
[  628.347763][T22017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.347786][T22017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.347802][T22017] batman_adv: batadv0: Interface activated: ipvlan2
[  628.380029][T22014] : entered promiscuous mode
[  628.555332][T22031] xt_CONNSECMARK: invalid mode: 0
[  628.581928][T22033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4241'.
[  628.615974][T22031] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4242'.
[  628.787528][T22045] netlink: 'syz.1.4246': attribute type 2 has an invalid length.
[  628.805501][T22045] tipc: Cannot configure node identity twice
[  629.806751][T22086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  629.827350][T22090] netlink: 'syz.1.4261': attribute type 39 has an invalid length.
[  629.880456][T22090] hsr_slave_0 (unregistering): left promiscuous mode
[  629.919821][T22103] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  629.987154][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4260'.
[  630.027506][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4266'.
[  630.040505][T22086] vlan3: entered allmulticast mode
[  630.062920][T22086] macvtap0: entered allmulticast mode
[  630.086029][T22107] ip6gre1: entered promiscuous mode
[  630.091275][T22107] ip6gre1: entered allmulticast mode
[  630.097904][T16689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  630.106262][T16689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  630.106392][T22107] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  630.120452][T22094] dvmrp0: entered allmulticast mode
[  630.131773][T22105] netlink: 'syz.3.4266': attribute type 4 has an invalid length.
[  630.171130][T17642] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  630.392574][ T8247] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  630.486334][T22125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4269'.
[  630.590244][T22130] lo speed is unknown, defaulting to 1000
[  630.938524][ T8247] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  631.015069][T22148] syzkaller0: entered promiscuous mode
[  631.020579][T22148] syzkaller0: entered allmulticast mode
[  631.033166][T22151] syz_tun: entered allmulticast mode
[  631.394573][T22162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4282'.
[  631.463042][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'.
[  631.518486][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4283'.
[  632.019625][T22186] netlink: 'syz.3.4290': attribute type 1 has an invalid length.
[  632.156175][T22192] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  632.316891][T22201] x_tables: duplicate underflow at hook 2
[  632.447494][T22205] bridge_slave_1: left allmulticast mode
[  632.455599][T22205] bridge_slave_1: left promiscuous mode
[  632.464430][T22205] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.498446][T22205] bridge_slave_0: left allmulticast mode
[  632.506377][T22205] bridge_slave_0: left promiscuous mode
[  632.512260][T22205] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.706985][T22203] syzkaller0: entered promiscuous mode
[  632.712470][T22203] syzkaller0: entered allmulticast mode
[  633.096110][T22226] netlink: 'syz.1.4302': attribute type 11 has an invalid length.
[  633.345820][T22237] netlink: 'syz.3.4305': attribute type 61 has an invalid length.
[  633.367605][T22237] netlink: 'syz.3.4305': attribute type 15 has an invalid length.
[  633.417335][T22239] __nla_validate_parse: 2 callbacks suppressed
[  633.417367][T22239] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4306'.
[  633.468409][T22242] veth5: entered promiscuous mode
[  633.499010][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'.
[  633.624993][T22253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4308'.
[  633.750334][T22261] netlink: 'syz.2.4312': attribute type 1 has an invalid length.
[  633.803592][T22257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4312'.
[  633.817273][T22261] bond7: entered promiscuous mode
[  633.822663][T22261] 8021q: adding VLAN 0 to HW filter on device bond7
[  633.839967][T22257] bond7: entered allmulticast mode
[  633.926325][T22257] bond7: (slave bridge1): making interface the new active one
[  633.951876][T22257] bridge1: entered promiscuous mode
[  633.957319][T22257] bridge1: entered allmulticast mode
[  633.987517][T22257] bond7: (slave bridge1): Enslaving as an active interface with an up link
[  634.019284][T22264] syzkaller0: entered promiscuous mode
[  634.028786][T22264] syzkaller0: entered allmulticast mode
[  634.088184][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4316'.
[  634.143128][T22273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4316'.
[  634.189139][T22272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4315'.
[  634.199474][T22272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4315'.
[  634.211661][T22267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4315'.
[  634.213834][T22278] IPVS: Error connecting to the multicast addr
[  634.481590][T22282] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4320'.
[  634.518304][T22282] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  634.607847][T22289] lo speed is unknown, defaulting to 1000
[  635.322990][T22315] syzkaller0: entered promiscuous mode
[  635.358679][T22315] syzkaller0: entered allmulticast mode
[  635.753450][T22331] netlink: 'syz.1.4332': attribute type 1 has an invalid length.
[  635.887714][T22331] bond5: entered promiscuous mode
[  635.902362][T22331] 8021q: adding VLAN 0 to HW filter on device bond5
[  635.929131][T22340] 8021q: adding VLAN 0 to HW filter on device bond5
[  635.966462][T22340] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  636.011882][T22340] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  636.046988][T22340] bond5: (slave wireguard0): making interface the new active one
[  636.067685][T22340] wireguard0: entered promiscuous mode
[  636.074942][T22340] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[  636.115550][T22342] bond5: option broadcast_neighbor: invalid value (30)
[  636.128605][T22342] bond5 (unregistering): Released all slaves
[  636.307342][T22331] bond5: entered allmulticast mode
[  636.319530][T22331] wireguard0: entered allmulticast mode
[  636.468932][T22337] bond8: option lp_interval: invalid value (0)
[  636.482644][T22337] bond8: option lp_interval: allowed values 1 - 2147483647
[  636.513902][T22337] bond8 (unregistering): Released all slaves
[  636.717795][T22380] netlink: 'syz.3.4342': attribute type 1 has an invalid length.
[  636.776788][T22353] syzkaller0: entered promiscuous mode
[  636.783074][T22353] syzkaller0: entered allmulticast mode
[  636.923632][T22380] bond5: entered promiscuous mode
[  636.929143][T22380] 8021q: adding VLAN 0 to HW filter on device bond5
[  636.939088][T22359] lo speed is unknown, defaulting to 1000
[  637.016632][T22387] 8021q: adding VLAN 0 to HW filter on device bond5
[  637.027569][T22387] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  637.039672][T22387] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  637.053371][T22387] bond5: (slave ip6gre2): making interface the new active one
[  637.060881][T22387] ip6gre2: entered promiscuous mode
[  637.067798][T22387] bond5: (slave ip6gre2): Enslaving as an active interface with an up link
[  640.099592][T22413] syzkaller0: entered promiscuous mode
[  640.115841][T22413] syzkaller0: entered allmulticast mode
[  640.179778][T22440] __nla_validate_parse: 8 callbacks suppressed
[  640.179813][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4354'.
[  640.251743][T22441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4354'.
[  640.426739][T22454] netlink: set zone limit has 4 unknown bytes
[  640.499846][T22454] netlink: set zone limit has 4 unknown bytes
[  641.518354][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  643.129814][T22466] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4358'.
[  643.158381][T22467] FAULT_INJECTION: forcing a failure.
[  643.158381][T22467] name failslab, interval 1, probability 0, space 0, times 0
[  643.195447][T22467] CPU: 1 UID: 0 PID: 22467 Comm: syz.3.4360 Not tainted syzkaller #0 PREEMPT(full) 
[  643.195473][T22467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  643.195485][T22467] Call Trace:
[  643.195494][T22467]  <TASK>
[  643.195502][T22467]  dump_stack_lvl+0xe8/0x150
[  643.195530][T22467]  should_fail_ex+0x412/0x560
[  643.195558][T22467]  should_failslab+0xa8/0x100
[  643.195585][T22467]  __kmalloc_cache_node_noprof+0x8a/0x6b0
[  643.195606][T22467]  ? trace_kmalloc+0x2a/0xf0
[  643.195628][T22467]  ? page_pool_create_percpu+0x76/0xc80
[  643.195654][T22467]  page_pool_create_percpu+0x76/0xc80
[  643.195676][T22467]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  643.195707][T22467]  bpf_test_run_xdp_live+0x23d/0x1cf0
[  643.195740][T22467]  ? bpf_dispatcher_change_prog+0xae0/0xd70
[  643.195778][T22467]  ? __pfx_autoremove_wake_function+0x10/0x10
[  643.195808][T22467]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  643.195873][T22467]  ? 0xffffffffa020164c
[  643.195889][T22467]  ? 0xffffffffa02016d8
[  643.195904][T22467]  ? 0xffffffffa0201834
[  643.195943][T22467]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  643.195972][T22467]  ? _copy_from_user+0x94/0xb0
[  643.196001][T22467]  ? bpf_test_init+0x113/0x150
[  643.196024][T22467]  ? xdp_convert_md_to_buff+0x5b/0x330
[  643.196052][T22467]  bpf_prog_test_run_xdp+0x81c/0x1160
[  643.196093][T22467]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  643.196123][T22467]  ? __fget_files+0x2a/0x420
[  643.196150][T22467]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  643.196175][T22467]  bpf_prog_test_run+0x2c7/0x340
[  643.196196][T22467]  __sys_bpf+0x643/0x950
[  643.196223][T22467]  ? __pfx___sys_bpf+0x10/0x10
[  643.196262][T22467]  ? ksys_write+0x242/0x270
[  643.196290][T22467]  ? __pfx_ksys_write+0x10/0x10
[  643.196318][T22467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.196339][T22467]  __x64_sys_bpf+0x7c/0x90
[  643.196363][T22467]  do_syscall_64+0x15f/0xf80
[  643.196380][T22467]  ? trace_irq_disable+0x3b/0x140
[  643.196405][T22467]  ? clear_bhb_loop+0x40/0x90
[  643.196428][T22467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.196446][T22467] RIP: 0033:0x7fe04c79ce59
[  643.196463][T22467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.196478][T22467] RSP: 002b:00007fe04d710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  643.196496][T22467] RAX: ffffffffffffffda RBX: 00007fe04ca15fa0 RCX: 00007fe04c79ce59
[  643.196510][T22467] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  643.196522][T22467] RBP: 00007fe04d710090 R08: 0000000000000000 R09: 0000000000000000
[  643.196533][T22467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.196545][T22467] R13: 00007fe04ca16038 R14: 00007fe04ca15fa0 R15: 00007ffc645a5bd8
[  643.196573][T22467]  </TASK>
[  643.730263][T22470] netlink: 'syz.2.4362': attribute type 1 has an invalid length.
[  643.819952][T22470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4362'.
[  643.879627][T22473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4362'.
[  643.963296][T22483] netlink: 'syz.1.4366': attribute type 1 has an invalid length.
[  644.171315][T22487] syzkaller0: entered promiscuous mode
[  644.189314][T22487] syzkaller0: entered allmulticast mode
[  644.217770][T22487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'.
[  644.258448][T22487] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4367'.
[  644.352627][T22495] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 !
[  644.592124][T22502] mac80211_hwsim hwsim82 syzkaller0: entered promiscuous mode
[  644.629395][T22502] mac80211_hwsim hwsim82 syzkaller0: entered allmulticast mode
[  644.672692][T22505] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  644.749123][T22511] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  644.899693][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'.
[  644.946581][T22516] xt_TCPMSS: Only works on TCP SYN packets
[  645.045891][T22520] netlink: 'syz.1.4378': attribute type 1 has an invalid length.
[  645.053949][T22520] netlink: 476 bytes leftover after parsing attributes in process `syz.1.4378'.
[  645.066320][T22520] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4378'.
[  646.286667][T22568] netlink: 'syz.3.4388': attribute type 2 has an invalid length.
[  646.339946][T22560] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  646.571025][T22578] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4392'.
[  646.997515][T22590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4395'.
[  647.016785][T22590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4395'.
[  647.533859][T22609] netlink: 'syz.4.4400': attribute type 1 has an invalid length.
[  647.549760][T22609] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4400'.
[  647.724461][T22617] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4403'.
[  647.757129][T22617] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20002
[  648.303162][T22630] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.322869][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4414'.
[  648.345300][T22630] 8021q: adding VLAN 0 to HW filter on device team0
[  648.402999][T22630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  648.496529][T22630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  648.507633][T22630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  648.523339][T22630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  648.539994][T22630] veth1_vlan: left promiscuous mode
[  648.548407][T22630] veth0_vlan: left promiscuous mode
[  648.563040][T22630] veth0_vlan: entered promiscuous mode
[  648.575893][T22630] veth1_vlan: entered promiscuous mode
[  648.590553][T22630] veth1_macvtap: left promiscuous mode
[  648.598267][T22630] veth0_macvtap: left promiscuous mode
[  648.606300][T22630] veth0_macvtap: entered promiscuous mode
[  648.616732][T22630] veth1_macvtap: entered promiscuous mode
[  648.639720][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  648.650171][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  648.661352][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  648.672480][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  648.708563][T22630] 8021q: adding VLAN 0 to HW filter on device bond1
[  648.726141][T22658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4415'.
[  648.737493][T22630] 8021q: adding VLAN 0 to HW filter on device bond2
[  648.752165][T22630] 8021q: adding VLAN 0 to HW filter on device bond3
[  648.762597][T22630] 8021q: adding VLAN 0 to HW filter on device bond4
[  648.773007][T22630] bond4: entered promiscuous mode
[  648.780898][T22630] gretap1: entered promiscuous mode
[  648.788648][T22630] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  649.133598][T22654] hsr0: entered promiscuous mode
[  649.147783][T16680] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  649.169095][T16680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.188653][T22658] hsr_slave_0: left promiscuous mode
[  649.201840][T22658] hsr_slave_1: left promiscuous mode
[  649.240866][T22658] hsr0 (unregistering): left promiscuous mode
[  649.363276][T16680] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  649.403302][T16680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.429080][T16680] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  649.464936][T16680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.525324][T16680] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  649.558338][T16680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.647365][ T1173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  649.694541][ T1173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  649.745568][ T8247] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  650.065946][ T8247] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  650.365228][ T8247] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  650.388516][T22706] nbd: socks must be embedded in a SOCK_ITEM attr
[  650.442458][T22709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4429'.
[  650.572625][T22713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'.
[  650.896787][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'.
[  650.989988][T22740] tc_dump_action: action bad kind
[  652.318577][T22783] netlink: 'syz.4.4452': attribute type 1 has an invalid length.
[  652.329191][T22783] netlink: 'syz.4.4452': attribute type 1 has an invalid length.
[  652.509475][T22793] syzkaller0: entered promiscuous mode
[  652.516011][T22793] syzkaller0: entered allmulticast mode
[  652.771040][T22801] __nla_validate_parse: 4 callbacks suppressed
[  652.771060][T22801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4458'.
[  652.786435][T22798] netlink: 'syz.2.4457': attribute type 1 has an invalid length.
[  653.588423][T22846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.601969][T22846] syzkaller0: entered promiscuous mode
[  653.607509][T22846] syzkaller0: entered allmulticast mode
[  653.710882][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  653.789125][T22844] tipc: Disabling bearer <eth:syzkaller0>
[  654.005522][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  654.636769][T22864] xt_l2tp: v2 sid > 0xffff: 8388608
[  654.642553][T22864] netem: change failed
[  654.716922][T22864] 

: option downdelay: invalid value (18446744073709547007)
[  654.724345][T22864] 

: option downdelay: allowed values 0 - 2147483647
[  654.733234][T22864] 

 (unregistering): Released all slaves
[  654.933625][T22856] Unsupported ieee802154 address type: 0
[  655.215194][T22877] syzkaller1: entered promiscuous mode
[  655.251282][T22877] syzkaller1: entered allmulticast mode
[  655.661739][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  655.725304][T22898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4481'.
[  656.139056][T22909] netlink: 724 bytes leftover after parsing attributes in process `syz.2.4484'.
[  656.164525][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4484'.
[  656.174663][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4484'.
[  656.183643][T22909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4484'.
[  656.320367][T22912] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  656.847791][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4492'.
[  657.012549][T22949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4495'.
[  657.234199][T22959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4497'.
[  657.338365][T22968] netlink: 'syz.1.4499': attribute type 4 has an invalid length.
[  657.389453][T22971] netlink: 'syz.1.4499': attribute type 4 has an invalid length.
[  657.587885][ T5624] block nbd0: Receive control failed (result -1)
[  657.951093][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4499'.
[  658.267423][T23005] ip6t_REJECT: ECHOREPLY is not supported
[  658.282569][T23005] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  658.406509][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4507'.
[  658.655019][T23015] batadv_slave_0: Caught tx_queue_len zero misconfig
[  658.668728][T23015] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  658.709792][T23015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.932846][T23025] FAULT_INJECTION: forcing a failure.
[  658.932846][T23025] name failslab, interval 1, probability 0, space 0, times 0
[  658.945481][T23025] CPU: 0 UID: 0 PID: 23025 Comm: syz.1.4512 Not tainted syzkaller #0 PREEMPT(full) 
[  658.945506][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  658.945517][T23025] Call Trace:
[  658.945525][T23025]  <TASK>
[  658.945533][T23025]  dump_stack_lvl+0xe8/0x150
[  658.945558][T23025]  should_fail_ex+0x412/0x560
[  658.945586][T23025]  should_failslab+0xa8/0x100
[  658.945613][T23025]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  658.945637][T23025]  ? __alloc_skb+0x186/0x7d0
[  658.945659][T23025]  ? __alloc_skb+0x1d0/0x7d0
[  658.945680][T23025]  ? __local_bh_enable_ip+0xd0/0x130
[  658.945704][T23025]  __alloc_skb+0x1d0/0x7d0
[  658.945733][T23025]  netlink_sendmsg+0x5d4/0xb40
[  658.945766][T23025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  658.945791][T23025]  ? aa_sock_msg_perm+0xf1/0x1b0
[  658.945814][T23025]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  658.945838][T23025]  ____sys_sendmsg+0x972/0x9f0
[  658.945862][T23025]  ? __might_fault+0xaf/0x130
[  658.945889][T23025]  ? __pfx_____sys_sendmsg+0x10/0x10
[  658.945923][T23025]  ? import_iovec+0x73/0xa0
[  658.945953][T23025]  ___sys_sendmsg+0x2a5/0x360
[  658.945976][T23025]  ? __lock_acquire+0x6b5/0x2cf0
[  658.946000][T23025]  ? __pfx____sys_sendmsg+0x10/0x10
[  658.946057][T23025]  ? __fget_files+0x2a/0x420
[  658.946078][T23025]  ? __fget_files+0x3a0/0x420
[  658.946106][T23025]  __x64_sys_sendmsg+0x1bd/0x2a0
[  658.946132][T23025]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  658.946166][T23025]  ? __pfx_ksys_write+0x10/0x10
[  658.946197][T23025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.946222][T23025]  do_syscall_64+0x15f/0xf80
[  658.946240][T23025]  ? trace_irq_disable+0x3b/0x140
[  658.946265][T23025]  ? clear_bhb_loop+0x40/0x90
[  658.946287][T23025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.946303][T23025] RIP: 0033:0x7f448739ce59
[  658.946318][T23025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  658.946333][T23025] RSP: 002b:00007f448817a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  658.946353][T23025] RAX: ffffffffffffffda RBX: 00007f4487615fa0 RCX: 00007f448739ce59
[  658.946366][T23025] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  658.946379][T23025] RBP: 00007f448817a090 R08: 0000000000000000 R09: 0000000000000000
[  658.946391][T23025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.946402][T23025] R13: 00007f4487616038 R14: 00007f4487615fa0 R15: 00007ffdb04db148
[  658.946427][T23025]  </TASK>
[  659.232178][T23033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4514'.
[  659.451326][T23042] sch_tbf: burst 0 is lower than device sit0 mtu (1520) !
[  659.467793][T23033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4514'.
[  659.478517][T23042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4517'.
[  659.549682][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4516'.
[  659.682503][T23052] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  659.697892][T23052] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  659.789343][T23056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4520'.
[  659.883736][T23056] openvswitch: netlink: Flow key attr not present in new flow.
[  659.913246][T23057] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  660.378835][T23076] openvswitch: netlink: IP tunnel dst address not specified
[  660.594502][T23092] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4529'.
[  660.603918][T23092] netlink: ct family unspecified
[  661.029070][T23112] lo speed is unknown, defaulting to 1000
[  661.153451][T23108] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4534'.
[  661.162538][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4534'.
[  661.368539][T23120] syzkaller0: entered promiscuous mode
[  661.374112][T23120] syzkaller0: entered allmulticast mode
[  661.578690][T23127] FAULT_INJECTION: forcing a failure.
[  661.578690][T23127] name failslab, interval 1, probability 0, space 0, times 0
[  661.614082][T23127] CPU: 1 UID: 0 PID: 23127 Comm: syz.1.4539 Not tainted syzkaller #0 PREEMPT(full) 
[  661.614108][T23127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  661.614120][T23127] Call Trace:
[  661.614128][T23127]  <TASK>
[  661.614136][T23127]  dump_stack_lvl+0xe8/0x150
[  661.614163][T23127]  should_fail_ex+0x412/0x560
[  661.614192][T23127]  should_failslab+0xa8/0x100
[  661.614219][T23127]  ? skb_clone+0x212/0x3a0
[  661.614238][T23127]  kmem_cache_alloc_noprof+0x87/0x650
[  661.614266][T23127]  ? __netlink_lookup+0xc6/0x8b0
[  661.614296][T23127]  skb_clone+0x212/0x3a0
[  661.614318][T23127]  __netlink_deliver_tap+0x404/0x850
[  661.614353][T23127]  ? netlink_deliver_tap+0x2e/0x1b0
[  661.614380][T23127]  netlink_deliver_tap+0x19c/0x1b0
[  661.614406][T23127]  netlink_unicast+0x730/0x8e0
[  661.614439][T23127]  netlink_sendmsg+0x813/0xb40
[  661.614473][T23127]  ? __pfx_netlink_sendmsg+0x10/0x10
[  661.614501][T23127]  ? aa_sock_msg_perm+0xf1/0x1b0
[  661.614527][T23127]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  661.614556][T23127]  ____sys_sendmsg+0x972/0x9f0
[  661.614581][T23127]  ? __might_fault+0xaf/0x130
[  661.614610][T23127]  ? __pfx_____sys_sendmsg+0x10/0x10
[  661.614653][T23127]  ? import_iovec+0x73/0xa0
[  661.614683][T23127]  ___sys_sendmsg+0x2a5/0x360
[  661.614708][T23127]  ? __lock_acquire+0x6b5/0x2cf0
[  661.614733][T23127]  ? __pfx____sys_sendmsg+0x10/0x10
[  661.614794][T23127]  ? __fget_files+0x2a/0x420
[  661.614816][T23127]  ? __fget_files+0x3a0/0x420
[  661.614846][T23127]  __x64_sys_sendmsg+0x1bd/0x2a0
[  661.614875][T23127]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  661.614911][T23127]  ? __pfx_ksys_write+0x10/0x10
[  661.614945][T23127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.614965][T23127]  do_syscall_64+0x15f/0xf80
[  661.614984][T23127]  ? clear_bhb_loop+0x40/0x90
[  661.615007][T23127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.615024][T23127] RIP: 0033:0x7f448739ce59
[  661.615043][T23127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.615058][T23127] RSP: 002b:00007f448817a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  661.615078][T23127] RAX: ffffffffffffffda RBX: 00007f4487615fa0 RCX: 00007f448739ce59
[  661.615092][T23127] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  661.615103][T23127] RBP: 00007f448817a090 R08: 0000000000000000 R09: 0000000000000000
[  661.615115][T23127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.615126][T23127] R13: 00007f4487616038 R14: 00007f4487615fa0 R15: 00007ffdb04db148
[  661.615157][T23127]  </TASK>
[  662.577067][T23157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.587708][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.610237][T23157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.619286][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.633134][T23156] syzkaller0: entered promiscuous mode
[  662.638634][T23156] syzkaller0: entered allmulticast mode
[  662.675198][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  662.837940][T23166] dvmrp0: entered allmulticast mode
[  662.936985][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.947270][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.956753][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.972670][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.981735][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.990332][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.028988][T23174] 
[  663.031351][T23174] ======================================================
[  663.038373][T23174] WARNING: possible circular locking dependency detected
[  663.045403][T23174] syzkaller #0 Not tainted
[  663.049804][T23174] ------------------------------------------------------
[  663.056824][T23174] syz.1.4557/23174 is trying to acquire lock:
[  663.062876][T23174] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  663.072707][T23174] 
[  663.072707][T23174] but task is already holding lock:
[  663.080057][T23174] ffff8880909ae0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  663.088758][T23174] 
[  663.088758][T23174] which lock already depends on the new lock.
[  663.088758][T23174] 
[  663.099151][T23174] 
[  663.099151][T23174] the existing dependency chain (in reverse order) is:
[  663.108148][T23174] 
[  663.108148][T23174] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  663.115872][T23174]        lock_sock_nested+0x41/0x100
[  663.121153][T23174]        inet_shutdown+0x6a/0x390
[  663.126170][T23174]        nbd_mark_nsock_dead+0x2e9/0x560
[  663.131795][T23174]        recv_work+0x1c2e/0x1d40
[  663.136729][T23174]        process_scheduled_works+0xb5d/0x1860
[  663.142790][T23174]        worker_thread+0xa53/0xfc0
[  663.147934][T23174]        kthread+0x388/0x470
[  663.152601][T23174]        ret_from_fork+0x514/0xb70
[  663.157708][T23174]        ret_from_fork_asm+0x1a/0x30
[  663.163006][T23174] 
[  663.163006][T23174] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  663.170659][T23174]        __mutex_lock+0x1a3/0x1550
[  663.175777][T23174]        nbd_queue_rq+0x37b/0x1100
[  663.180885][T23174]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  663.186951][T23174]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  663.193802][T23174]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  663.200301][T23174]        blk_mq_run_hw_queue+0x348/0x4f0
[  663.205935][T23174]        blk_mq_dispatch_list+0xd16/0xe10
[  663.211649][T23174]        blk_mq_flush_plug_list+0x48d/0x570
[  663.217552][T23174]        __blk_flush_plug+0x3ed/0x4d0
[  663.222924][T23174]        __submit_bio+0x28d/0x580
[  663.227940][T23174]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  663.234090][T23174]        block_read_full_folio+0x599/0x830
[  663.239891][T23174]        filemap_read_folio+0x137/0x3b0
[  663.245433][T23174]        do_read_cache_folio+0x358/0x590
[  663.251071][T23174]        read_part_sector+0xb6/0x2b0
[  663.256356][T23174]        adfspart_check_ICS+0xb1/0x960
[  663.261814][T23174]        bdev_disk_changed+0x817/0x1770
[  663.267354][T23174]        blkdev_get_whole+0x380/0x510
[  663.272724][T23174]        bdev_open+0x31e/0xd30
[  663.277487][T23174]        blkdev_open+0x470/0x610
[  663.282411][T23174]        do_dentry_open+0x785/0x14e0
[  663.287693][T23174]        vfs_open+0x3b/0x340
[  663.292285][T23174]        path_openat+0x2e08/0x3860
[  663.297389][T23174]        do_file_open+0x23e/0x4a0
[  663.302405][T23174]        do_sys_openat2+0x113/0x200
[  663.307593][T23174]        __x64_sys_openat+0x138/0x170
[  663.312960][T23174]        do_syscall_64+0x15f/0xf80
[  663.318066][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.324473][T23174] 
[  663.324473][T23174] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  663.331681][T23174]        __mutex_lock+0x1a3/0x1550
[  663.336786][T23174]        nbd_queue_rq+0xc6/0x1100
[  663.341915][T23174]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  663.347993][T23174]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  663.354860][T23174]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  663.361363][T23174]        blk_mq_run_hw_queue+0x348/0x4f0
[  663.367079][T23174]        blk_mq_dispatch_list+0xd16/0xe10
[  663.372796][T23174]        blk_mq_flush_plug_list+0x48d/0x570
[  663.378683][T23174]        __blk_flush_plug+0x3ed/0x4d0
[  663.384051][T23174]        __submit_bio+0x28d/0x580
[  663.389067][T23174]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  663.395220][T23174]        block_read_full_folio+0x599/0x830
[  663.401032][T23174]        filemap_read_folio+0x137/0x3b0
[  663.406575][T23174]        do_read_cache_folio+0x358/0x590
[  663.412203][T23174]        read_part_sector+0xb6/0x2b0
[  663.417483][T23174]        adfspart_check_ICS+0xb1/0x960
[  663.422960][T23174]        bdev_disk_changed+0x817/0x1770
[  663.428517][T23174]        blkdev_get_whole+0x380/0x510
[  663.433989][T23174]        bdev_open+0x31e/0xd30
[  663.438759][T23174]        blkdev_open+0x470/0x610
[  663.443686][T23174]        do_dentry_open+0x785/0x14e0
[  663.448970][T23174]        vfs_open+0x3b/0x340
[  663.453636][T23174]        path_openat+0x2e08/0x3860
[  663.458744][T23174]        do_file_open+0x23e/0x4a0
[  663.463767][T23174]        do_sys_openat2+0x113/0x200
[  663.468954][T23174]        __x64_sys_openat+0x138/0x170
[  663.474333][T23174]        do_syscall_64+0x15f/0xf80
[  663.479437][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.485841][T23174] 
[  663.485841][T23174] -> #3 (set->srcu){.+.+}-{0:0}:
[  663.492963][T23174]        __synchronize_srcu+0xca/0x300
[  663.498415][T23174]        elevator_switch+0x1e8/0x7a0
[  663.503695][T23174]        elevator_change+0x2cc/0x450
[  663.508977][T23174]        elevator_set_default+0x36c/0x430
[  663.514695][T23174]        blk_register_queue+0x3e9/0x4e0
[  663.520231][T23174]        __add_disk+0x677/0xd50
[  663.525072][T23174]        add_disk_fwnode+0xfb/0x480
[  663.530261][T23174]        nbd_dev_add+0x72c/0xb50
[  663.535191][T23174]        nbd_init+0x168/0x1f0
[  663.539862][T23174]        do_one_initcall+0x250/0x870
[  663.545144][T23174]        do_initcall_level+0x104/0x190
[  663.550601][T23174]        do_initcalls+0x59/0xa0
[  663.555442][T23174]        kernel_init_freeable+0x2a6/0x3e0
[  663.561156][T23174]        kernel_init+0x1d/0x1d0
[  663.565999][T23174]        ret_from_fork+0x514/0xb70
[  663.571099][T23174]        ret_from_fork_asm+0x1a/0x30
[  663.576378][T23174] 
[  663.576378][T23174] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  663.584190][T23174]        __mutex_lock+0x1a3/0x1550
[  663.589291][T23174]        elevator_change+0x1b3/0x450
[  663.594579][T23174]        elevator_set_none+0xb5/0x140
[  663.599943][T23174]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  663.606278][T23174]        nbd_start_device+0x17f/0xb10
[  663.611637][T23174]        nbd_genl_connect+0x165b/0x1cf0
[  663.617172][T23174]        genl_family_rcv_msg_doit+0x22a/0x330
[  663.623236][T23174]        genl_rcv_msg+0x61c/0x7a0
[  663.628249][T23174]        netlink_rcv_skb+0x232/0x4b0
[  663.633528][T23174]        genl_rcv+0x28/0x40
[  663.638025][T23174]        netlink_unicast+0x75c/0x8e0
[  663.643306][T23174]        netlink_sendmsg+0x813/0xb40
[  663.648609][T23174]        ____sys_sendmsg+0x972/0x9f0
[  663.653891][T23174]        ___sys_sendmsg+0x2a5/0x360
[  663.659091][T23174]        __x64_sys_sendmsg+0x1bd/0x2a0
[  663.664546][T23174]        do_syscall_64+0x15f/0xf80
[  663.669644][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.676050][T23174] 
[  663.676050][T23174] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  663.684651][T23174]        blk_alloc_queue+0x546/0x680
[  663.689942][T23174]        __blk_mq_alloc_disk+0x197/0x390
[  663.695563][T23174]        nbd_dev_add+0x499/0xb50
[  663.700503][T23174]        nbd_init+0x168/0x1f0
[  663.705184][T23174]        do_one_initcall+0x250/0x870
[  663.710463][T23174]        do_initcall_level+0x104/0x190
[  663.715921][T23174]        do_initcalls+0x59/0xa0
[  663.720774][T23174]        kernel_init_freeable+0x2a6/0x3e0
[  663.726497][T23174]        kernel_init+0x1d/0x1d0
[  663.731343][T23174]        ret_from_fork+0x514/0xb70
[  663.736616][T23174]        ret_from_fork_asm+0x1a/0x30
[  663.741903][T23174] 
[  663.741903][T23174] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  663.749103][T23174]        __lock_acquire+0x15a5/0x2cf0
[  663.754470][T23174]        lock_acquire+0x106/0x350
[  663.759487][T23174]        fs_reclaim_acquire+0x71/0x100
[  663.765030][T23174]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  663.771353][T23174]        __alloc_skb+0x1d0/0x7d0
[  663.776374][T23174]        tcp_send_active_reset+0x8a/0x550
[  663.782085][T23174]        __tcp_close+0x4c5/0xfe0
[  663.787026][T23174]        tcp_close+0x28/0x110
[  663.791709][T23174]        inet_release+0x143/0x190
[  663.796722][T23174]        sock_close+0xc3/0x240
[  663.801478][T23174]        __fput+0x44f/0xa60
[  663.805979][T23174]        task_work_run+0x1d9/0x270
[  663.811084][T23174]        exit_to_user_mode_loop+0xed/0x480
[  663.816880][T23174]        do_syscall_64+0x33e/0xf80
[  663.821982][T23174]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.828387][T23174] 
[  663.828387][T23174] other info that might help us debug this:
[  663.828387][T23174] 
[  663.838612][T23174] Chain exists of:
[  663.838612][T23174]   fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6
[  663.838612][T23174] 
[  663.851381][T23174]  Possible unsafe locking scenario:
[  663.851381][T23174] 
[  663.858819][T23174]        CPU0                    CPU1
[  663.864184][T23174]        ----                    ----
[  663.869536][T23174]   lock(sk_lock-AF_INET6);
[  663.874035][T23174]                                lock(&nsock->tx_lock);
[  663.880961][T23174]                                lock(sk_lock-AF_INET6);
[  663.888078][T23174]   lock(fs_reclaim);
[  663.892102][T23174] 
[  663.892102][T23174]  *** DEADLOCK ***
[  663.892102][T23174] 
[  663.900234][T23174] 2 locks held by syz.1.4557/23174:
[  663.905512][T23174]  #0: ffff8880613c2640 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  663.915759][T23174]  #1: ffff8880909ae0e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[  663.924901][T23174] 
[  663.924901][T23174] stack backtrace:
[  663.930782][T23174] CPU: 1 UID: 0 PID: 23174 Comm: syz.1.4557 Not tainted syzkaller #0 PREEMPT(full) 
[  663.930802][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  663.930812][T23174] Call Trace:
[  663.930823][T23174]  <TASK>
[  663.930831][T23174]  dump_stack_lvl+0xe8/0x150
[  663.930851][T23174]  print_circular_bug+0x2e1/0x300
[  663.930873][T23174]  check_noncircular+0x12e/0x150
[  663.930896][T23174]  __lock_acquire+0x15a5/0x2cf0
[  663.930913][T23174]  ? __lock_acquire+0x6b5/0x2cf0
[  663.930933][T23174]  ? do_raw_spin_lock+0x12b/0x2f0
[  663.930954][T23174]  ? inet_unhash+0x1fe/0xab0
[  663.930975][T23174]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  663.930995][T23174]  lock_acquire+0x106/0x350
[  663.931010][T23174]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  663.931031][T23174]  ? lock_acquire+0x106/0x350
[  663.931050][T23174]  fs_reclaim_acquire+0x71/0x100
[  663.931069][T23174]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  663.931090][T23174]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  663.931110][T23174]  ? __alloc_skb+0x1d0/0x7d0
[  663.931128][T23174]  ? __local_bh_enable_ip+0xd0/0x130
[  663.931146][T23174]  __alloc_skb+0x1d0/0x7d0
[  663.931165][T23174]  ? __pfx_skb_attempt_defer_free+0x10/0x10
[  663.931189][T23174]  tcp_send_active_reset+0x8a/0x550
[  663.931207][T23174]  __tcp_close+0x4c5/0xfe0
[  663.931230][T23174]  tcp_close+0x28/0x110
[  663.931249][T23174]  inet_release+0x143/0x190
[  663.931265][T23174]  sock_close+0xc3/0x240
[  663.931283][T23174]  ? __pfx_sock_close+0x10/0x10
[  663.931298][T23174]  __fput+0x44f/0xa60
[  663.931320][T23174]  task_work_run+0x1d9/0x270
[  663.931343][T23174]  ? __pfx_task_work_run+0x10/0x10
[  663.931365][T23174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.931382][T23174]  exit_to_user_mode_loop+0xed/0x480
[  663.931396][T23174]  ? rcu_is_watching+0x15/0xb0
[  663.931416][T23174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.931430][T23174]  do_syscall_64+0x33e/0xf80
[  663.931448][T23174]  ? clear_bhb_loop+0x40/0x90
[  663.931465][T23174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.931482][T23174] RIP: 0033:0x7f448739ce59
[  663.931496][T23174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.931511][T23174] RSP: 002b:00007ffdb04db2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  663.931526][T23174] RAX: 0000000000000000 RBX: 00007ffdb04db390 RCX: 00007f448739ce59
[  663.931538][T23174] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  663.931548][T23174] RBP: 00000000000a1d70 R08: 0000000000000001 R09: 0000000000000000
[  663.931556][T23174] R10: 0000001b32420000 R11: 0000000000000246 R12: 00007ffdb04db3d0
[  663.931567][T23174] R13: 00007f4487615fac R14: 00000000000a1e04 R15: 00007f4487615fa0
[  663.931585][T23174]  </TASK>
[  664.215730][T23176] __nla_validate_parse: 3 callbacks suppressed
[  664.215752][T23176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4555'.
[  670.314573][    C1] net_ratelimit: 12 callbacks suppressed
[  670.314594][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.328372][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.336473][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.344756][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.353039][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.362722][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.370866][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog