last executing test programs:

9.755388539s ago: executing program 1 (id=2947):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0xd0, r3, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}, @TIPC_NLA_MON_REF={0xffffffffffffffdf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0xdb0f}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

9.471834445s ago: executing program 3 (id=2948):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
close(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="1d8f32307346b935fbce817f846445f5de83cdd8439eaee40d8033bc5732586a1d80f4177ed8f88f4e5bc3951532c5bef555299bde500c241c2623b691412b03d67987b0f9cee741c34eaa0b00bf2a849573e24156ec1ccb10b3b6c847d973448e4b460416672866440ad3ea40bf29832d07ec41f63a2d49b4b7345fa7e21790068ecd3fb8e640410fb898acd7225069462e88e7f8b3b99bd64014fc945d2c56543542cabc7a7e5a013be9693ca5a6fffc899912d871f2a6791bbb0180324460166b63187343222605", @ANYRES16, @ANYBLOB="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"], 0x0, 0x54, 0x0, 0x40000000}, 0x28)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03a0005)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000005c0), 0x10)
read(r2, &(0x7f00000027c0)=""/4073, 0xfe9)
sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a00", @ANYBLOB="f9ffffff080002"], 0x4c}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x7, 0x3d, &(0x7f0000000200)=""/61, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x200, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1], &(0x7f0000000300)=[{0x101, 0x3, 0x1, 0x4}], 0x10, 0x8}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44010000f2ff12070000000000000000ffffffff000000000000000000000000ff010000000000000000000500000004000000000000000f0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008001600000000004c001400636d6163286165732900"/252], 0x144}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000040)={0x80000000, 0xf, 0x7ff, 0x3}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b00010020040000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x40010)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000bf4154194f53000000000000005303f173e0003629b52cba145f4312ae791c0effe60200631915e22ea99cdc3760f93587cb72142acbb862b7969a1b6c2b7e43ae3a41fa5215417afd53eb74", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r8, &(0x7f00000002c0), 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r7, 0x0, 0xcc0, 0x0, &(0x7f0000000100)="c1188e99001d4d296204c0a586dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

9.188797726s ago: executing program 1 (id=2951):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x12, 0x8008000, 0x7d, 0x8}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x40}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x200010}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r11)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r12, 0x0)
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000280))
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r12}, 0x20)
connect$unix(r11, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r11, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
poll(&(0x7f0000000080)=[{r11, 0x1040}], 0x1, 0x0)

8.84922809s ago: executing program 2 (id=2954):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x2400c001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r6=>r5, 0x1, 0x4, 0x7})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$cgroup_int(r9, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{}], 0x1, 0x40800)

8.767488274s ago: executing program 1 (id=2956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0xffff, 0x25dfdbfd, {}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20000800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x7, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r6)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf0000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)
r10 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}})

8.524184553s ago: executing program 3 (id=2958):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffe89}, 0x201}], 0x3ffffffffffff40, 0x10022, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

8.257276355s ago: executing program 2 (id=2961):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r2=>0x0, 0xf807, 0x80, 0x578, 0xd, {{0x23, 0x4, 0x3, 0x12, 0x8c, 0x65, 0x0, 0xd1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @local, {[@ssrr={0x89, 0x7, 0xd0, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x17, 0x80, [@dev={0xac, 0x14, 0x14, 0x37}, @remote, @rand_addr=0x64010100, @broadcast, @loopback]}, @noop, @ssrr={0x89, 0x23, 0xe3, [@multicast2, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010102, @local, @multicast1, @local]}, @generic={0x86, 0x10, "ac0196e30fb511622a19b67f642c"}, @ssrr={0x89, 0x13, 0x14, [@remote, @empty, @multicast1, @loopback]}, @ssrr={0x89, 0x7, 0x23, [@dev={0xac, 0x14, 0x14, 0x25}]}, @end, @lsrr={0x83, 0xb, 0x48, [@broadcast, @rand_addr=0x101]}]}}}}})
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0xfa, 0xe38, @vifc_lcl_ifindex=r2, @remote}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000500))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

8.101515691s ago: executing program 0 (id=2962):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00cd88261a00000000b8b4d310000104000000", @ANYRES32=0x0, @ANYBLOB="7f000000000000001c0012800b00010062726964676500000c0002800500180000000000"], 0x3c}}, 0x0)

7.954972325s ago: executing program 4 (id=2963):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$sock_ifreq(r2, 0x8915, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_names='vlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x6)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50)
close(r3)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
syz_emit_ethernet(0x8e, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r7}, 0x20)
connect$unix(r3, &(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast2, 0xc059}, 0x1c)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x32, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x40}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r8}, &(0x7f0000001b40), &(0x7f0000001b80)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.86414712s ago: executing program 0 (id=2964):
unshare(0x8040480)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x13200}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r2 = epoll_create1(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515301, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515301, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101080, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0) (async)
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r7=>0x0})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r8)
r9 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r11 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r11, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x395}}]}, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3b}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x2000c004) (async)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3b}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x2000c004)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x1})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) (async)
getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x10e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r12=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r12, &(0x7f0000000100)={0x20000014})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @tracing=0x682bd47720f31714, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @tracing=0x682bd47720f31714, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r13 = epoll_create(0x80000000)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r13)

7.758293187s ago: executing program 2 (id=2965):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
writev(r1, &(0x7f0000000200), 0x20)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xb0, 0xf8, 0x7000000, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4)
shutdown(r3, 0x1)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4c25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x4008880)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002500010328bd6e06fedbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x48050)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r5, &(0x7f0000000440)=ANY=[], 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe7, &(0x7f00000027c0)=""/231, 0x41000, 0x1e}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000050000000000000700000000001e2e615f61"], 0x0, 0x2d, 0x0, 0x1}, 0x28)

7.702028682s ago: executing program 4 (id=2966):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x3, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
r3 = socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x24, &(0x7f0000000280)={r5, 0xa}, &(0x7f00000002c0)=0x8)
connect(r4, &(0x7f0000000080)=@l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80)
sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e40000001000090503000000000000000c00d2000000000000000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce287128282829"], 0xe4}], 0x1, 0x0, 0x0, 0x1}, 0x40040)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r2, <r6=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

7.48739463s ago: executing program 4 (id=2967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r3, 0x638)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x1000006, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x3, 0x5}, 0x79}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xffffff14, @bearer=@l2={'ib', 0x3a, 'wlan1\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)
ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r10, 0x1, 0x6}, 0x10)
r11 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r11, 0x89ef, &(0x7f0000000000)=0xff00)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
socket$inet6(0xa, 0x5, 0x8)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r10, 0x1, 0x5, @multicast}, 0x10)

7.267235122s ago: executing program 2 (id=2968):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'tunl0\x00'})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x54}}, 0x4c044)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000100)="c1188e99001d4d296204c0a586dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

7.043579336s ago: executing program 2 (id=2969):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0x8, 0x215}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4000005}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xbb}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40088c1}, 0x801)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20)
bind$802154_raw(r4, &(0x7f0000000280)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003280)={'ip6_vti0\x00', 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x61, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}}, 0x14}}, 0x4000080)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.145288077s ago: executing program 3 (id=2970):
r0 = socket$inet6(0xa, 0x1, 0x0)
getpeername$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000840)=0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1c940000, 0x9711b6fcabe00d9d, 0x3, 0x8, 0x1, 0xb1}, 0x20)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f00000007c0)={&(0x7f0000000140)=0x70f9, 0xf67, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x20)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)

4.97302115s ago: executing program 3 (id=2971):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0xa, 0x5, 0x0)
sendto$inet6(r5, &(0x7f0000000680)="9f", 0x2a000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5d}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x2, 0x1000}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000000180)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @local}]}, 0x0)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7d, &(0x7f00000004c0)={r7, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.43610906s ago: executing program 0 (id=2972):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x1, 0x400000a0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r4, 0x515}, 0x8)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close(0x3)

2.563499336s ago: executing program 0 (id=2973):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = socket$igmp6(0xa, 0x3, 0x2) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async)
unshare(0x28000600)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r5, &(0x7f0000000000)="2d000000010001", 0x7)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006a00090528bd7000ffdbdf250210b4ab1e00000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x40) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) (async, rerun: 32)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x0) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080003", @ANYRES32=r8, @ANYBLOB="0c0099000080000030000000140004006e69637666300000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) (rerun: 64)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) (async)
close(0x3) (async, rerun: 32)
splice(r2, 0xfffffffffffffffe, r3, 0x0, 0x8, 0x0) (async, rerun: 32)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

859.11943ms ago: executing program 3 (id=2974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x6c, 0x0, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x2, 0x2}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x37ffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x9, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000340)={@local, 0x0, 0x0, 0x0, 0x5, 0x7cf3, 0xfffe}, &(0x7f00000001c0)=0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x4, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r4, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xfce)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRES8=r1], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0008000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r8, 0x0, 0x0}, 0x10)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRESHEX=r0], 0x70}, 0x1, 0x7}, 0x40041)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'pimreg1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x30c, 0x81, 0xf8, 0x0, 0x0, @multicast}, 0xfffffffffffffd8c)
connect$llc(r10, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

813.143136ms ago: executing program 0 (id=2975):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250200000008000c0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe92}, 0x21)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083a60000000000000000070000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x48081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x21, 0x0, 0x0, 0xbacc}, {0x0, 0x21, 0x0, 0x0, 0x10001}, {0x0, 0x19, 0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x0, 0x9}]}}]}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x68}, 0x1, 0x600, 0x0, 0x8014}, 0x40040)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)

812.460472ms ago: executing program 4 (id=2976):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={<r3=>0x0, 0xf2, "d863a32c80bd4b5633329045cde5f134a7854d3b6fc65383453202e6b0b09132e275682bafbe72b749ee7d1ef81b29e5649078a2a1ebf70c47cb7e9f9f854a7099d15bb7ee8bee86555f3cba23fb016963227040f4b61c497e9f267af2bc9e51d9b4aba38e543db56e4b2eed5474acb4491922c3abf65e07e00663ab88eb8b09188259f9898673c604e61800a0ecde78ee703355724e245b452ac9cf586082b4078a9d3bf888cf5fa0baa6bb17dfc5d0a60205c0b83f93756c8f0193783f069b6bf8de4a25c3232a52a5453be10c545630ff5d2fca8dc43fd7094db69ad74956d7809dc31dd7289cfaa8de4cebc9e6fb9aee"}, &(0x7f00000004c0)=0xfa)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r3, 0xfff, 0x30}, 0xc)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000e68000/0x3000)=nil, 0x3000, 0x400000d, 0x12, r4, 0x180000000)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002", 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000000000000000000000d0000001a000000000000000a"], 0x0, 0x4a, 0x0, 0x1, 0x7}, 0x28)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x2a8, 0x100000c, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0x7f7fffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0xff, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, &(0x7f00000000c0)=0x8)

811.58791ms ago: executing program 1 (id=2977):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{}], 0x1, 0x40800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6cb86bbc5ceb5ec4d1f3563f37557782000500", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf251a0000000700210061610000500022802c00008008000700030000000800010007000000080003001c000000080003000800000008000500000000001400008008000600a800000008000500bca8ca7b0c0000800800050000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20008005)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000008000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000020000000000000100010000000000840105"], 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x4000)
socket$inet6(0xa, 0x2, 0x6)

608.053359ms ago: executing program 2 (id=2978):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@deltclass={0x38, 0x29, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x2, 0x6}, {0x0, 0xfff3}, {0x3, 0x8}}, [@tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
syz_emit_ethernet(0x66, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}]}}}}}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="710502"], 0x13)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @remote}, 0x10)
close(r1)

576.746418ms ago: executing program 4 (id=2979):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x11, 0x18, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x7081, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000020c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002100)={0x2, 0x3, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000002140)=[{0x0, 0x1, 0x5, 0xc}, {0x5, 0x5, 0x1, 0xa}], 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000400)=r2, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'ip_vti0\x00', <r4=>0x0, 0x1, 0x10, 0x6, 0x8, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x68, 0x0, 0x10, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0x4, [{@multicast1, 0x10000}, {@loopback, 0x5}, {@empty, 0x7ff}, {@multicast2}, {@loopback, 0x7}, {@local, 0x1}]}]}}}}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32=r3, @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x0, 0xa5, 0xd2, &(0x7f0000000580)="c74c52b9fa9606a70f299e520a4cadc90dc4c62df882af115535fa208c5b35f156f642c73d0613f65b76f00263ba10f64380dd5becf0bc29302bbffecbd0be90fd2e6260f33e35b966faf12e77f1170af33a153e319aa9d486bc4ae67961d1d83397dfc2510d28e9975db6fa14ab4545ee0546e02759f374db6e5d8adad0141723f44c912b13dfe683702867ca4fc243c89e3c53bb045d6496820f3c71f08b8334af5d9821", &(0x7f0000000780)=""/210, 0xf, 0x0, 0x85, 0xc1, &(0x7f0000000880)="46fc47c583b913abd234c568cc67a7e3ca42c6559b1b1ec693bf2c56617c9720aee8453be4439477624feb5a1ff974e5a21c354774138e6b8e034f320c07267c8e38de1bbbb8d4ce0744d531a20bf26012bd3feb8d0345328fea630e77b4a5372dbce735a0fba59ce396de8618fec2dacda5bc9cf6fad4b284e92fd322909fd5f635a3c69d", &(0x7f0000000940)="400b1cb0695ac5f4269d775f49d256bfde70f9af9423882d140cfc2789e5a93e80a21a91a2971e63a38d2860238c10817663a0ce493c78e9c2439548b67e1d3673c8db82b113f170ff13c1383800bb2cf39697ffe637d4cbc9b98f15629b1e5b8b3252a5decae0dda093d353440ca9d099520fbd2a9d6fd2078dabc5dedebe4cf04708c9c5501cf0d3ff851c269bdedc88e1012c393a23e580bf0e34e3d56f6ed91c27be20b1c629be5972349817bdcd9703b37d5865d761ddb5777860379a8d58", 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9e01}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
setsockopt$MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x0, 0xcc0, 0x0, &(0x7f0000000100)="c1188e99001d4d296204c0a586dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x5c}}, 0x0)
r10 = openat$cgroup_ro(r8, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
preadv(r10, &(0x7f0000000040)=[{0x0, 0xf5}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x6, 0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000090000000900000fd060000000000000000000003000000000200000002000000080000000b0000000000000b03000000020000000000000200000000060000000000000902000000050000000000000a040000000d0000000100000604000000f9ffffffffffffff0a0000000000001004000000010000000000000e0400000001000000090000000000000c030000000f0000000000000903000000002e615f2e00"], &(0x7f0000000440)=""/105, 0xae, 0x69, 0x0, 0x4, 0x10000, @value=r10}, 0x28)

495.204592ms ago: executing program 0 (id=2980):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180), 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r7, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYRES8=r6, @ANYRES8, @ANYRESHEX=r3], 0x33)
sendfile(r7, r6, 0x0, 0x10000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = getgid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)="d504b0e048fba24bf370c3323d8a6e13d986368ee3174791b895925caa2ffa00333619ad86150be45c5a8dba0329680f8e748141f4241be8f155774e25bb6c29a1fd87d33f7366900a7cc77f4182e27fd42279", 0x53}, {&(0x7f00000010c0)="f4f5cde668756bdca46c44f343154aa3dce08e187fd7a9e3cd54dce7b7097a83c33f66187c832e4fb585dea51b527fc9559683fec695199ca6d8", 0x3a}, {&(0x7f0000001100)="bf941fc5a0875148f1d44e84b05b4dae401e3d7064673db8b7664013af51247f8e72b190ebd6899b7351a03b0affe93a37febf030b0cd7fbba9c9a0d49a5360fc929aa73073a74f99a1b9475cea316f49b3d265760c752d2257ea746f10699eb4cd27ab9bc251a9fbe1a89334afece37c1b7f35d9b5c5a455e71c9786ff018761e0e46fbdb73984de2f9f2647680006f09984ce0c963d8881d6e6f1c5461dcbe34e858bc8b082d24bd5711", 0xab}], 0x3, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r6, r10, r6, 0xffffffffffffffff, r8, r3]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0xa8, 0xc001}}, {{0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=[@rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x18, 0x44}}], 0x2, 0x40004)
sendmsg$netlink(r1, &(0x7f0000001280)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)=[{&(0x7f00000008c0)={0x278, 0x1f, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="e6f7d3fd0b79a8632529b23bf203b0b20e718595e3a0054b7f49aca6c959fce109bea8185adad8cdd513792625e2add8c61de5cfc6ee897cf3b679417f53eb13bfb5db751fa21f1ff275cd24bef2825a24af345e47b76cb25aefe2f2a1b52bcc4be4e67b5e8203e497e3553322eefc7ceb852c2680ca9db8774022", @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="3773d357844bf714c22d2b3f4e4a844425d5e25e7ced609d1b9b03ba97ff04b9b10e5bc6c96b15c539f62d582bf72b6f7ceb985032072deebe2ecbd1c544657ea860800a71ca9978e15e78de5c6b4d86ca6e6b7637", @generic="dd0750821b5e68fdb963d1bb29f7869922b71bd0fe4a9e663e823ac774269d6229833b79ae87c9c9393aec9ef3f11f5613b8b90ddb5206c4d6ef6e5332bc7403e6dc59dc03005be57c51a6740b22b927f8613ce94125c154d0c3b8f106913c59feef01099ccc52c96c2f3a250f0e7ae1ddce471e2656a78b6b65b32af599c0b8e7a40b6d3e13752f0c60329f0cabac605e8c2300a29d0544fdc019c1b8e6da01c1f9c8551e5041692482086a466cbfb9e7c4651df6ad7c3b", @typed={0xcc, 0x168, 0x0, 0x0, @binary="d7d983a539fadf03f61100a27df03ca07eee4e71fc95966129cd38c7552e7e760d2cac52863d98e07aacd439c173b2c9d2adcf87b797a50a0f410a179a100b6c87c733ebea8e03fbc576b61c66e9c9643b8d5b16225867adaf49eaaff8a3ce36f4d22e097b0d90b27ac98e684fef8245ed58e116fc965e517669ac2ed557a725ab00f421a02dcfb620a501666d8aba423d6cb8dd96bb29be61677f23ddc83be031f853458e4feb6c9b6b3c848ca14d48acceea402b9b29b50b06e278ed5777aa435008e27d6f1566"}]}, 0x278}, {&(0x7f0000000b40)={0xc4, 0x3b, 0x4, 0x70bd28, 0x25dfdbfd, "", [@generic="48d4c982e9776e1c29fc4835d989e485106b7aa1fac6a91a7011d237a9f2d58823c6bb7547ef25ac4edbf87b0000f4213861438293eb92134daef95e4720cc37ee4d4f515c", @nested={0x34, 0x6a, 0x0, 0x1, [@nested={0x4, 0x3b}, @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x131}, @nested={0x4, 0x4c}, @typed={0x8, 0xf7, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x7}]}, @typed={0x4, 0x144}, @nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0xbe}]}, @typed={0x8, 0xeb, 0x0, 0x0, @uid}, @typed={0xc, 0x139, 0x0, 0x0, @u64=0x100000001}, @nested={0x8, 0xde, 0x0, 0x1, [@nested={0x4, 0xc4}]}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@empty}, @typed={0x5, 0x94, 0x0, 0x0, @str='\x00'}]}, 0xc4}, {&(0x7f0000000e00)={0x140, 0x38, 0x2, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x52}, @nested={0x12a, 0x9c, 0x0, 0x1, [@generic="922e2767d3d72dbad651c72e6890351a8e263339b14553a0cfe390eac992c2f50a224fb2b142a2bbdf48ff518c6553249c0926da72c8e88df4d86e8ee179c049e393f559da8d221c87af1226277d9d98babdcbc5e5704d93086a7e5ba4c5c838224763fbbc8cc9a915279ca197f845a92f8d0d59dada9f577c922921a01d55890d0753b18b94bada69b087545a334cd8", @generic="f26cb50ca1a2e2ee2414d78fec38a01a102604f8975d3bd0b685cf1461d7549f6adc9935da8f6ce0bf48bc6ce71165eefddcc9d1dcd9a8840c1ccb7d7acbec5ae49a74541c142a06d2876540860c4c9b5bb5", @typed={0xf, 0x121, 0x0, 0x0, @str='veth0_vlan\x00'}, @nested={0x4, 0x83}, @nested={0x4, 0x9b}, @nested={0x29, 0x67, 0x0, 0x1, [@generic="946830800ff1943fb3616d3b80a6f233c36182dc855b3662d593f14853ab0c37b359f4ffcd"]}]}]}, 0x140}, {&(0x7f0000000d80)={0x30, 0x12, 0x200, 0x70bd2a, 0x25dfdbff, "", [@nested={0x20, 0x11d, 0x0, 0x1, [@typed={0x5, 0x3, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xd7}, @nested={0x4, 0x94}, @typed={0x8, 0xf, 0x0, 0x0, @uid}, @nested={0x4, 0x5f}]}]}, 0x30}], 0x4, &(0x7f0000001180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}], 0xe8, 0x20008088}, 0x4010)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000100", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b000000"], 0x28}}, 0x0)
close(0x3)

248.092186ms ago: executing program 4 (id=2981):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfed, &(0x7f00000014c0)=""/4077, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=@migrate={0xec, 0x21, 0x1, 0x800000, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, @in=@multicast2, 0x6c, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@remote, @in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x1c}, @in=@empty, 0xff, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r3, @ANYRES64=r5], 0xfdef)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40884)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfed, &(0x7f00000014c0)=""/4077, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$kcm(0xa, 0x3, 0x87) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002880)=@migrate={0xec, 0x21, 0x1, 0x800000, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, @in=@multicast2, 0x6c, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in=@remote, @in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x1c}, @in=@empty, 0xff, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async)
write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r3, @ANYRES64=r5], 0xfdef) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40884) (async)

164.743562ms ago: executing program 1 (id=2982):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x10)
syz_emit_ethernet(0x9e, &(0x7f00000004c0)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @dstopts={0x11}, @dstopts={0x87}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

150.083704ms ago: executing program 3 (id=2983):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1}}], 0x1, 0x400000a0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close(0x3)

0s ago: executing program 1 (id=2984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000180)=0xfff, 0x4)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01030000000000000000010000040900010073797a3100000000080002400000010340000000030a01020000000000000000010000000900010073797a310000000014000480080002400000000005000140000000050900030073797a320000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a30000000000400048014000000020a01030000000000000000000000067c000000160a010400000000000000000500000a0c00054000000000000000054400038040000380140001007465616d5f736c6176655f3000000000140001007866726d3000000000000000000000001400010073797a6b616c6c6572300004000000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a77c3fe746da5f5ea5afba71da9b6357484fddb0b58e92df4b47fcb19066fc935442e"], 0x150}}, 0x0)
sendmsg(r0, &(0x7f00000009c0)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @empty, 'vlan0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="b07c25deeb4e2d4b2307c6cfeb53b8e21a144cb1ae2b1574bef4686ca0a059660fe9414e0cc4995299244de799dc2acd6f67df238274e0413335ecb68a0962829f1bdafe7dbd4fdd8b34af88e2d6e919682cedb5f89fa740dcf30ac228e17d88a6aec920204d8d08c38683fbdeaf824ecee4f3dce6e5d2ee72d355c949e411dd2d4bfde8bc83c1d9f8c1da3ccd93ecfc51d1b227eaa24fe8c11542ca16a504307e5538c5e598f5e3b2472fed679bfa7ca8f4ad8002ed8d973b98283b68e695ca3ed03439ad6e7d04637a2d3276630c38", 0xd0}, {&(0x7f00000004c0)="42668680515639ca574cc0bc7fbdc84ed8c608d0b598e9b7ac285b20b151bcc6a6db72069f3450a70b34ef998e9b913c257307230e235abe2d33c400ecbceaab02a0b5a7ee0b80ee8af22280e2de00f072434fb97aabc97117ac2ef986f7e4baf199fd73d49eacff523fef82a380f4509dbe144ce1c4aa32e58a26db1c597d1d84d7acbf13fdec48444e94417fd94f262c3c5df8b3d6e553e949d5352babef6215ce0cecd5ea0b0d381286cac9392f758c4c144a02660b03575a6549ca13c2910a727cd34b67eaa4a25185792fc8a9f0f8bbc2e04376071f8081666a5af33384ca480eae", 0xe4}, {&(0x7f00000005c0)="799b50fcb223b50390c3798e6485476129fd7b689addabf797bef11ab607dc5f30", 0x21}, {&(0x7f0000000600)="116256e6aa330cbbe7456a7017438afe265602b4db275b609a70000272613770d0ac1850cfeda15ca0763dbae6487f492db2e49b90bca6a25abd7b7a5c56efac8199397057c8f345a2405005cd9438b9c9a26ac2ef38c0e662e59770cc2f493c88f23f6c887e89b1d82541e3d337aad3ea274cb2766d943d092425f9ec556b88f78b987e5c09d204f8e31ac3bb339706775b932501d45852d2b6a73e51f389a23b4514ec3d6eda67", 0xa8}, {&(0x7f00000006c0)="38f2a6153c5439301852f8002d567e3752c18d60bde7e9e6edc00ec8c25a5f7f167286793a9fe15bb55fe9986303bd3781ca4762ffef1009bc53a517d51771c79e1d574ad34a8007a9df76a84b7dd6599c2a72e18d45c828a8e05441b2f3aec9b69cfe83f7a56333090e95d65ba4a85bad3b2ee88f2ea4ac3b79c0c050434db72fefdafd31ed79a1c6d0d1db2ef3db0e66f54f2f14146b8219d43d2a23a7be38a8add2bafce57fe41eb2bd4e7397f9791b5c1a54f539866ab89ab640919cfacf4f1cf58a69eedaae051364f18f510c75e9ee0827436185b988d7ea75b84c2d7fe42720196b75b3764481fcbe7af30363094dae5617e9555b84", 0xf9}], 0x5, &(0x7f0000000840)=[{0x40, 0x88, 0xf, "cfded76c4d3bfd32f98a329697dfd42d81b5100c4c0e1a296a374bb33bd94066037197bb88d6574bc8"}, {0xa0, 0x109, 0x3, "16d9a28a6a131c972a9aff6bd221b103ab017dd4d62fde159c84af7d352b8af24ee3e25cf485d72b57588ab9b353d115fd5b996e59ed83fd266d0c2402c958b69f1bb07a2ebc9552e922d83005c2ce6e915e6f31cb40d7af54a37c32894a603fb43b3d386370b7c9f2c0631ad7c558e12b831e6898b77bcb5e3c668e51be7935b80169915ee6187a4c3c3a46dff516db"}, {0x18, 0x10b, 0x3, "2a7ef3b4c19206"}, {0x58, 0x101, 0x94, "7d8dd075c7a7dc3a17cc9a05ae23cd0d744260bb4408309d86671fba53174bbc582c86f764ef4c489f3aaa75689eb24e678944727de00631350580be2c87a4ef4a4e167134"}], 0x150}, 0x0)

kernel console output (not intermixed with test programs):

64907][T11654] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  261.547472][T11691] netlink: 'syz.4.1617': attribute type 10 has an invalid length.
[  261.957382][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'.
[  262.489527][T11729] bond6: Removing last ns target with arp_interval on
[  262.498687][T11734] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  262.523261][T11739] openvswitch: netlink: Multiple metadata blocks provided
[  262.533498][T11734] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.616968][T11736] bond7: option lp_interval: invalid value (0)
[  262.626256][T11736] bond7: option lp_interval: allowed values 1 - 2147483647
[  262.637100][T11736] bond7 (unregistering): Released all slaves
[  262.698595][T11737] syzkaller0: entered promiscuous mode
[  262.704706][T11737] syzkaller0: entered allmulticast mode
[  262.909838][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  263.163566][T11773] batadv0: entered promiscuous mode
[  263.206682][T11773] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  263.332993][T11786] netlink: 'syz.2.1642': attribute type 8 has an invalid length.
[  263.368428][T11786] __nla_validate_parse: 6 callbacks suppressed
[  263.368458][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'.
[  263.399424][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'.
[  263.430717][T11786] veth1_to_team: entered promiscuous mode
[  263.463982][T11779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.475572][T11786] gretap0: entered promiscuous mode
[  263.510022][T11786] veth1_to_team: left promiscuous mode
[  263.549061][T11786] gretap0: left promiscuous mode
[  264.294157][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'.
[  264.737790][T11840] netlink: 'syz.3.1658': attribute type 4 has an invalid length.
[  264.773143][T11842] netlink: 'syz.4.1659': attribute type 16 has an invalid length.
[  264.805670][T11842] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1659'.
[  264.858232][T11842] netlink: 'syz.4.1659': attribute type 16 has an invalid length.
[  264.897647][T11846] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1660'.
[  264.940277][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1660'.
[  264.969732][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1660'.
[  265.010179][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1660'.
[  265.483256][T11876] netlink: 'syz.3.1666': attribute type 10 has an invalid length.
[  265.545613][T11876] syz_tun: entered promiscuous mode
[  265.600446][T11876] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  265.927885][T11893] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.092795][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'.
[  266.288515][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'.
[  267.851587][T11846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  268.386460][T11930] syzkaller1: tun_chr_ioctl cmd 1074025673
[  268.681426][T11949] sch_tbf: peakrate 55200 is lower than or equals to rate 4833251989064058569 !
[  269.054153][T11966] __nla_validate_parse: 3 callbacks suppressed
[  269.054175][T11966] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1690'.
[  269.102898][T11966] netlink: 'syz.3.1690': attribute type 10 has an invalid length.
[  269.232810][T11974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1694'.
[  270.062482][T12003] netlink: 'syz.0.1698': attribute type 4 has an invalid length.
[  270.124438][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'.
[  270.171805][T12010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1700'.
[  270.241960][T12009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  270.392129][T12009] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1701'.
[  270.534146][T12024] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1705'.
[  271.011130][T12045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1709'.
[  271.052128][T12045] netlink: 'syz.0.1709': attribute type 10 has an invalid length.
[  271.504032][T12065] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1717'.
[  271.703578][T12075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1719'.
[  271.716854][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1718'.
[  271.756019][T12078] netlink: 'syz.3.1719': attribute type 1 has an invalid length.
[  271.804848][T12078] netlink: 'syz.3.1719': attribute type 1 has an invalid length.
[  272.003994][T12082] netlink: 'syz.0.1721': attribute type 10 has an invalid length.
[  272.197040][T12077] lo speed is unknown, defaulting to 1000
[  272.522006][T12092] netlink: 'syz.1.1725': attribute type 10 has an invalid length.
[  272.813483][T12108] Bluetooth: ISO socket layer initialized
[  273.534637][T12120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.550669][T12121] netlink: 'syz.1.1731': attribute type 10 has an invalid length.
[  274.246084][T12136] syz_tun: left promiscuous mode
[  274.313157][T12136] xfrm0: left allmulticast mode
[  274.364731][T12136] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  274.400049][T12136] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  274.423468][T12136] vcan1: left promiscuous mode
[  274.496095][T12142] __nla_validate_parse: 5 callbacks suppressed
[  274.496119][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  274.672023][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'.
[  274.812622][T12155] bond0: (slave syz_tun): Releasing backup interface
[  274.896354][T12160] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1742'.
[  275.010017][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1744'.
[  275.061299][T12168] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1744'.
[  275.247180][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1747'.
[  275.460420][T12185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1750'.
[  275.476342][T12186] netlink: 'syz.4.1748': attribute type 10 has an invalid length.
[  275.498682][T12185] bond0: entered promiscuous mode
[  275.517834][T12185] bond_slave_0: entered promiscuous mode
[  275.758967][T12185] bond0: left promiscuous mode
[  275.771206][T12185] bond_slave_0: left promiscuous mode
[  275.977320][T12194] openvswitch: netlink: IP tunnel dst address not specified
[  276.000784][T12193] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  276.213660][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'.
[  276.443091][T12211] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1756'.
[  276.661722][T12219] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1760'.
[  277.237083][T12242] vlan4: entered allmulticast mode
[  277.246589][T12242] bond0: entered allmulticast mode
[  277.256246][T12242] bond_slave_0: entered allmulticast mode
[  277.266065][T12242] bond_slave_1: entered allmulticast mode
[  277.275970][T12242] syz_tun: entered allmulticast mode
[  277.547249][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.577377][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.615766][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.657737][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.708255][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.744073][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.770913][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.785990][T12268] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  277.801390][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  277.976691][T12268] bond10: option mode: invalid value (7)
[  278.001587][T12268] bond10 (unregistering): Released all slaves
[  278.074030][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  278.082118][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  278.092402][T12277] (: renamed from bridge_slave_0 (while UP)
[  278.102257][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  278.126906][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  278.157906][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  278.317441][T12284] 8021q: adding VLAN 0 to HW filter on device bond1
[  278.348189][T12284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.386054][T12256] debugfs: 'netdev:syzkaller0' already exists in 'phy9'
[  279.650965][T12351] netlink: 'syz.1.1790': attribute type 10 has an invalid length.
[  279.748362][T12353] __nla_validate_parse: 6 callbacks suppressed
[  279.748385][T12353] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1793'.
[  279.772622][T12344] syzkaller1: entered promiscuous mode
[  279.784736][T12344] syzkaller1: entered allmulticast mode
[  280.077773][T12357] lo speed is unknown, defaulting to 1000
[  280.378887][T12370] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1798'.
[  280.461767][T12376] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[  280.470379][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'.
[  280.695191][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'.
[  280.705261][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'.
[  280.785508][T12389] netlink: 'syz.2.1802': attribute type 30 has an invalid length.
[  280.833113][T12389] netlink: 'syz.2.1802': attribute type 29 has an invalid length.
[  280.892353][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'.
[  280.974772][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'.
[  281.028415][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'.
[  281.135702][T12376] bridge6: entered promiscuous mode
[  281.158573][T12376] bond10: (slave bridge6): making interface the new active one
[  281.185893][T12376] bond10: (slave bridge6): Enslaving as an active interface with an up link
[  281.356909][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'.
[  281.456209][T12414] vlan5: entered promiscuous mode
[  281.469901][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  281.497658][T12414] bridge0: entered promiscuous mode
[  281.677094][T12417] 0ªî{X¹¦: left allmulticast mode
[  281.684067][T12425] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1812'.
[  282.108909][T12417] syz_tun: left promiscuous mode
[  282.158624][T12417] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.166444][T12417] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.631357][T12417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.664132][T12417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.794938][T12417] geneve1: left promiscuous mode
[  282.903957][T12417] syzkaller0: left promiscuous mode
[  282.910830][T12417] syzkaller0: left allmulticast mode
[  282.960326][T12417] bond1: left promiscuous mode
[  282.965299][T12417] batadv0: left promiscuous mode
[  282.976481][T12417] bond1: left allmulticast mode
[  282.981893][T12417] batadv0: left allmulticast mode
[  282.997791][T12417] bond2: left promiscuous mode
[  283.005371][T12417] bridge1: left promiscuous mode
[  283.016867][T12417] vlan2: left allmulticast mode
[  283.022354][T12417] bond2: left allmulticast mode
[  283.027467][T12417] bridge1: left allmulticast mode
[  283.120537][T12417] bond3: left promiscuous mode
[  283.125461][T12417] ip6gre1: left promiscuous mode
[  283.180415][T12417] bond4: left promiscuous mode
[  283.199916][T12417] veth5: left allmulticast mode
[  283.234959][T12417] vlan4: left allmulticast mode
[  283.240970][T12417] bond0: left allmulticast mode
[  283.245917][T12417] bond_slave_0: left allmulticast mode
[  283.251562][T12417] bond_slave_1: left allmulticast mode
[  283.257111][T12417] syz_tun: left allmulticast mode
[  283.265474][T12417] vlan5: left promiscuous mode
[  283.270403][T12417] bridge0: left promiscuous mode
[  283.281941][T12432] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  283.311180][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.369877][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.393230][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.409288][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.493220][T12453] netlink: 'syz.3.1816': attribute type 2 has an invalid length.
[  283.534745][T12453] netlink: 'syz.3.1816': attribute type 2 has an invalid length.
[  283.774119][T12470] syzkaller0: Caught tx_queue_len zero misconfig
[  283.936993][T12474] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) !
[  284.092133][T12461] netlink: 'syz.2.1820': attribute type 1 has an invalid length.
[  284.470681][T12496] tipc: Can't bind to reserved service type 0
[  284.568338][T12500] netlink: 'syz.2.1829': attribute type 15 has an invalid length.
[  284.706143][T12499] syzkaller0: entered promiscuous mode
[  284.729247][T12499] syzkaller0: entered allmulticast mode
[  285.002668][T12519] __nla_validate_parse: 6 callbacks suppressed
[  285.002688][T12519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1835'.
[  285.029315][T12522] netlink: 'syz.0.1833': attribute type 10 has an invalid length.
[  285.062131][T12523] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1836'.
[  285.155452][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'.
[  285.245265][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1837'.
[  285.247576][T12531] netlink: 'syz.2.1838': attribute type 1 has an invalid length.
[  285.486113][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'.
[  285.681817][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'.
[  286.155609][T12559] netlink: 380 bytes leftover after parsing attributes in process `syz.4.1848'.
[  286.399398][T12568] syzkaller1: entered promiscuous mode
[  286.419785][T12568] syzkaller1: entered allmulticast mode
[  286.445980][T12568] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1851'.
[  286.554228][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  286.596645][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.871580][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  286.899068][T12568] 8021q: adding VLAN 0 to HW filter on device bond8
[  286.906487][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'.
[  286.924289][ T5742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  286.936679][T12584] netlink: 'syz.4.1854': attribute type 18 has an invalid length.
[  286.949064][T12568] veth1_to_bridge: entered promiscuous mode
[  286.957691][T12588] netlink: 'syz.4.1854': attribute type 18 has an invalid length.
[  286.978926][T12568] veth1_to_bridge: entered allmulticast mode
[  287.001646][T12589] netlink: 'syz.2.1855': attribute type 10 has an invalid length.
[  287.026897][T12568] 8021q: adding VLAN 0 to HW filter on device bond10
[  287.072015][T12568] 8021q: adding VLAN 0 to HW filter on device bond11
[  287.115687][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  287.229220][T12589] syz_tun: entered promiscuous mode
[  287.240497][  T262] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.294350][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.323230][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.350380][  T262] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.420080][T12602] netlink: 'syz.3.1858': attribute type 1 has an invalid length.
[  287.515072][T12602] 8021q: adding VLAN 0 to HW filter on device bond6
[  287.718214][T12608] bond6: (slave veth3): Enslaving as an active interface with a down link
[  287.792450][ T5742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  287.810498][T12602] 8021q: adding VLAN 0 to HW filter on device batadv2
[  287.842977][T12602] bond6: (slave batadv2): making interface the new active one
[  287.874347][T12602] batadv2: entered promiscuous mode
[  287.895108][T12602] bond6: (slave batadv2): Enslaving as an active interface with an up link
[  287.950141][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  287.972838][T12611] bond6 (unregistering): (slave veth3): Releasing active interface
[  288.003386][T12611] bond6 (unregistering): (slave batadv2): Releasing active interface
[  288.025734][T12611] bond6 (unregistering): Released all slaves
[  288.377853][T12645] ip6tnl1: entered allmulticast mode
[  288.400950][  T262] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.430922][  T262] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.440276][ T9463] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.477017][T12652] vcan0: entered allmulticast mode
[  288.669938][ T9463] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  288.878220][T12673] netlink: 'syz.1.1874': attribute type 10 has an invalid length.
[  288.911449][T12675] netlink: 'syz.2.1875': attribute type 2 has an invalid length.
[  288.935497][T12675] netlink: 'syz.2.1875': attribute type 11 has an invalid length.
[  289.047296][T12678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.232683][ T9463] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  289.344813][T12690] netlink: 'syz.4.1881': attribute type 1 has an invalid length.
[  289.359957][T12692] netlink: 'syz.4.1881': attribute type 1 has an invalid length.
[  289.457784][T12690] 8021q: adding VLAN 0 to HW filter on device bond7
[  289.513316][T12697] bond1: (slave batadv0): Releasing backup interface
[  289.569025][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.610389][T12697] bond7: (slave batadv0): Enslaving as a backup interface with an up link
[  289.636374][T12693] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  289.674486][ T8784] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  289.823063][ T8784] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  290.049193][T12717] __nla_validate_parse: 15 callbacks suppressed
[  290.049216][T12717] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1889'.
[  290.099047][T12717] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1889'.
[  290.523936][T12740] netlink: 'syz.1.1895': attribute type 10 has an invalid length.
[  290.544341][T12739] FAULT_INJECTION: forcing a failure.
[  290.544341][T12739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.578883][T12739] CPU: 1 UID: 0 PID: 12739 Comm: syz.2.1896 Not tainted syzkaller #0 PREEMPT(full) 
[  290.578925][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.578943][T12739] Call Trace:
[  290.578951][T12739]  <TASK>
[  290.578960][T12739]  dump_stack_lvl+0xe8/0x150
[  290.578998][T12739]  should_fail_ex+0x40c/0x560
[  290.579031][T12739]  _copy_from_user+0x2d/0xb0
[  290.579053][T12739]  ___sys_sendmsg+0x1c6/0x360
[  290.579080][T12739]  ? __lock_acquire+0x683/0x2cf0
[  290.579116][T12739]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.579182][T12739]  ? __fget_files+0x2a/0x420
[  290.579211][T12739]  ? __fget_files+0x3a2/0x420
[  290.579249][T12739]  __x64_sys_sendmsg+0x1b1/0x290
[  290.579279][T12739]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.579325][T12739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.579350][T12739]  do_syscall_64+0x174/0x580
[  290.579379][T12739]  ? trace_irq_disable+0x3b/0x140
[  290.579407][T12739]  ? clear_bhb_loop+0x40/0x90
[  290.579434][T12739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.579456][T12739] RIP: 0033:0x7f0d8fb9e019
[  290.579477][T12739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.579497][T12739] RSP: 002b:00007f0d8ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.579520][T12739] RAX: ffffffffffffffda RBX: 00007f0d8fe25fa0 RCX: 00007f0d8fb9e019
[  290.579537][T12739] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  290.579551][T12739] RBP: 00007f0d8ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  290.579569][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.579581][T12739] R13: 00007f0d8fe26038 R14: 00007f0d8fe25fa0 R15: 00007ffc076581d8
[  290.579616][T12739]  </TASK>
[  290.781426][T12742] syzkaller1: tun_chr_ioctl cmd 2147767521
[  291.022076][T12750] xt_l2tp: v2 doesn't support IP mode
[  291.110171][T12752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1899'.
[  291.439228][T12764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1902'.
[  291.749942][T12767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.846852][ T5741] udevd[5741]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  292.377354][T12802] syzkaller1: entered promiscuous mode
[  292.389021][T12802] syzkaller1: entered allmulticast mode
[  292.509892][    C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  292.509943][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  292.561715][T12806] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1915'.
[  292.618600][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'.
[  293.095046][T12819] syzkaller1: entered promiscuous mode
[  293.110973][T12819] syzkaller1: entered allmulticast mode
[  293.161604][T12824] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1919'.
[  293.437148][T12835] sctp: [Deprecated]: syz.1.1921 (pid 12835) Use of int in max_burst socket option.
[  293.437148][T12835] Use struct sctp_assoc_value instead
[  293.675077][T12842] syzkaller0: entered promiscuous mode
[  293.693244][T12842] syzkaller0: entered allmulticast mode
[  293.928271][T12854] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1924'.
[  294.998985][T12864] validate_nla: 1 callbacks suppressed
[  294.999004][T12864] netlink: 'syz.2.1926': attribute type 1 has an invalid length.
[  295.013014][T12864] netlink: 'syz.2.1926': attribute type 12 has an invalid length.
[  295.020985][T12864] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1926'.
[  295.668209][T12808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.953933][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'.
[  296.334847][T12887] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1935'.
[  296.397575][T12887] netlink: 'syz.3.1935': attribute type 12 has an invalid length.
[  296.516321][T12893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.532490][T12868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1928'.
[  296.683016][T12887] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.003467][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'.
[  297.080362][T12909] nft_compat: unsupported protocol 1
[  297.117261][T12907] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1940'.
[  297.149858][T12906] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1940'.
[  297.331136][T12913] syzkaller1: entered promiscuous mode
[  297.342955][T12913] syzkaller1: entered allmulticast mode
[  297.385522][T12913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1941'.
[  297.554764][T12924] bond0: (slave syz_tun): Releasing backup interface
[  297.604741][T12924] team0: Port device bond0 removed
[  297.699802][T12924] bond7: (slave batadv0): Removing an active aggregator
[  297.740965][T12924] bond7: (slave batadv0): Releasing backup interface
[  297.825528][T12924] bridge_slave_0: left allmulticast mode
[  297.851704][T12924] bridge_slave_0: left promiscuous mode
[  297.891904][T12924] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.918733][T12924] bridge_slave_1: left allmulticast mode
[  297.931001][T12924] bridge_slave_1: left promiscuous mode
[  297.939358][T12924] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.959330][T12924] bond0: (slave bond_slave_0): Releasing backup interface
[  298.040662][T12924] bond0: (slave bond_slave_1): Releasing backup interface
[  298.065486][T12924] team0: Port device team_slave_0 removed
[  298.087963][T12924] team0: Port device team_slave_1 removed
[  298.103677][T12924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.115884][T12924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.133464][T12924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  298.271209][T12927] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  298.374123][T12927] bond8 (unregistering): Released all slaves
[  298.593361][ T9446] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  298.785159][T12956] syzkaller0: entered promiscuous mode
[  298.799956][T12956] syzkaller0: entered allmulticast mode
[  298.940194][ T9446] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  299.221320][T12986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1962'.
[  299.287345][T12982] Can't find ip_set type hash:net,po
[  299.316386][T12983] Can't find ip_set type hash:net,po
[  299.389865][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  299.537557][T13006] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1966'.
[  300.651067][T13050] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1979'.
[  301.190627][T13067] __nla_validate_parse: 1 callbacks suppressed
[  301.190647][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1983'.
[  301.309788][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  301.417513][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'.
[  301.456192][T13075] netlink: 'syz.1.1987': attribute type 9 has an invalid length.
[  301.484208][T13075] netlink: 'syz.1.1987': attribute type 6 has an invalid length.
[  301.499649][T13075] netlink: 'syz.1.1987': attribute type 7 has an invalid length.
[  301.536760][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'.
[  301.546941][T13075] netlink: 'syz.1.1987': attribute type 8 has an invalid length.
[  301.569794][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'.
[  301.610965][T13087] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1990'.
[  301.707162][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'.
[  301.717743][T13090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'.
[  301.733955][T13089] siw: device registration error -23
[  301.940615][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'.
[  302.060700][T13098] 8021q: adding VLAN 0 to HW filter on device bond9
[  302.099402][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'.
[  302.184388][T13109] vlan1: entered allmulticast mode
[  302.200107][T13109] erspan0: entered allmulticast mode
[  302.425571][T13128] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2003'.
[  302.505176][T13132] xt_bpf: check failed: parse error
[  302.654255][T13131] syzkaller0: entered promiscuous mode
[  302.675313][T13131] syzkaller0: entered allmulticast mode
[  303.612477][T13193] xt_ipcomp: unknown flags 1D
[  304.796225][T13230] xt_socket: unknown flags 0x4c
[  305.726982][T13149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  306.000739][T13244] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  306.015144][T13242] x_tables: duplicate underflow at hook 1
[  307.083090][T13266] __nla_validate_parse: 2 callbacks suppressed
[  307.083112][T13266] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2027'.
[  307.099523][T13265] syz.1.2026: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  307.135663][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.1.2026 Not tainted syzkaller #0 PREEMPT(full) 
[  307.135694][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  307.135708][T13265] Call Trace:
[  307.135717][T13265]  <TASK>
[  307.135726][T13265]  dump_stack_lvl+0xe8/0x150
[  307.135777][T13265]  warn_alloc+0x24c/0x270
[  307.135809][T13265]  ? stack_depot_save_flags+0x33/0x800
[  307.135840][T13265]  ? __pfx_warn_alloc+0x10/0x10
[  307.135870][T13265]  ? kasan_save_track+0x3e/0x80
[  307.135897][T13265]  ? __kasan_kmalloc+0x93/0xb0
[  307.135927][T13265]  ? xsk_setsockopt+0x52a/0x960
[  307.135952][T13265]  ? do_sock_setsockopt+0x17c/0x1b0
[  307.135977][T13265]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  307.136001][T13265]  ? do_syscall_64+0x174/0x580
[  307.136030][T13265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.136062][T13265]  __vmalloc_node_range_noprof+0x12c/0x1730
[  307.136122][T13265]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  307.136155][T13265]  ? __kasan_kmalloc+0x93/0xb0
[  307.136186][T13265]  ? __kmalloc_cache_noprof+0x32d/0x660
[  307.136216][T13265]  ? __kmalloc_cache_noprof+0x150/0x660
[  307.136249][T13265]  vmalloc_user_noprof+0xad/0xe0
[  307.136277][T13265]  ? xskq_create+0xbf/0x170
[  307.136306][T13265]  xskq_create+0xbf/0x170
[  307.136337][T13265]  xsk_init_queue+0x8a/0xe0
[  307.136371][T13265]  xsk_setsockopt+0x52a/0x960
[  307.136396][T13265]  ? __fget_files+0x2a/0x420
[  307.136428][T13265]  ? __pfx_xsk_setsockopt+0x10/0x10
[  307.136454][T13265]  ? __pfx_aa_sk_perm+0x10/0x10
[  307.136481][T13265]  ? aa_sock_opt_perm+0xff/0x1a0
[  307.136508][T13265]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  307.136531][T13265]  ? __pfx_xsk_setsockopt+0x10/0x10
[  307.136558][T13265]  do_sock_setsockopt+0x17c/0x1b0
[  307.136591][T13265]  __x64_sys_setsockopt+0x13d/0x1b0
[  307.136620][T13265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.136643][T13265]  do_syscall_64+0x174/0x580
[  307.136672][T13265]  ? trace_irq_disable+0x3b/0x140
[  307.136700][T13265]  ? clear_bhb_loop+0x40/0x90
[  307.136725][T13265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.136756][T13265] RIP: 0033:0x7f33f799e019
[  307.136776][T13265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  307.136796][T13265] RSP: 002b:00007f33f881b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  307.136819][T13265] RAX: ffffffffffffffda RBX: 00007f33f7c25fa0 RCX: 00007f33f799e019
[  307.136835][T13265] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  307.136848][T13265] RBP: 00007f33f7a3500c R08: 0000000000000004 R09: 0000000000000000
[  307.136861][T13265] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  307.136874][T13265] R13: 00007f33f7c26038 R14: 00007f33f7c25fa0 R15: 00007ffce673b628
[  307.136906][T13265]  </TASK>
[  307.418960][T13276] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2029'.
[  307.454845][T13265] Mem-Info:
[  307.459605][T13265] active_anon:5706 inactive_anon:0 isolated_anon:0
[  307.459605][T13265]  active_file:0 inactive_file:43594 isolated_file:0
[  307.459605][T13265]  unevictable:768 dirty:86 writeback:0
[  307.459605][T13265]  slab_reclaimable:10863 slab_unreclaimable:141217
[  307.459605][T13265]  mapped:29798 shmem:1289 pagetables:1283
[  307.459605][T13265]  sec_pagetables:0 bounce:0
[  307.459605][T13265]  kernel_misc_reclaimable:0
[  307.459605][T13265]  free:1280634 free_pcp:10727 free_cma:0
[  307.505970][T13265] Node 0 active_anon:22824kB inactive_anon:0kB active_file:0kB inactive_file:174168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119192kB dirty:340kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14508kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  307.540242][T13265] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  307.573129][T13265] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  307.603226][T13265] lowmem_reserve[]: 0 2488 2489 2489 2489
[  307.609100][T13265] Node 0 DMA32 free:1167112kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22824kB inactive_anon:0kB active_file:0kB inactive_file:174168kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2548504kB mlocked:0kB bounce:0kB free_pcp:41248kB local_pcp:20188kB free_cma:0kB
[  307.642367][T13265] lowmem_reserve[]: 0 0 0 0 0
[  307.647144][T13265] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  307.678558][T13265] lowmem_reserve[]: 0 0 0 0 0
[  307.683713][T13265] Node 1 Normal free:3940448kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB
[  307.731331][T13265] lowmem_reserve[]: 0 0 0 0 0
[  307.738604][T13265] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  307.758182][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2030'.
[  307.773269][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2030'.
[  307.786808][T13265] Node 0 DMA32: 1825*4kB (UME) 738*8kB (UM) 463*16kB (UME) 272*32kB (UM) 51*64kB (UME) 28*128kB (UM) 18*256kB (M) 9*512kB (UM) 8*1024kB (UM) 4*2048kB (UM) 270*4096kB (UM) = 1167684kB
[  307.847984][T13265] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  307.882084][T13265] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3940448kB
[  307.933159][T13283] sctp: [Deprecated]: syz.0.2031 (pid 13283) Use of int in max_burst socket option deprecated.
[  307.933159][T13283] Use struct sctp_assoc_value instead
[  307.956995][T13265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  307.986318][T13265] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  308.007743][T13265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  308.033979][T13265] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  308.068493][T13265] 44879 total pagecache pages
[  308.089518][T13265] 0 pages in swap cache
[  308.139698][T13265] Free swap  = 124996kB
[  308.150069][T13265] Total swap = 124996kB
[  308.160229][T13265] 2097051 pages RAM
[  308.168764][T13265] 0 pages HighMem/MovableOnly
[  308.179660][T13265] 428245 pages reserved
[  308.197759][T13265] 0 pages cma reserved
[  308.372977][T13308] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2039'.
[  308.410316][T13310] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  308.670787][T13321] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2042'.
[  308.725582][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'.
[  309.141805][T13342] netlink: 'syz.4.2046': attribute type 10 has an invalid length.
[  309.238873][T13342] syz_tun: entered promiscuous mode
[  309.284920][T13342] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  309.496146][T13361] x_tables: ip6_tables: mh match: only valid for protocol 135
[  309.775233][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  309.814450][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  309.916930][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'.
[  310.126516][T13387] FAULT_INJECTION: forcing a failure.
[  310.126516][T13387] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.185750][T13387] CPU: 1 UID: 0 PID: 13387 Comm: syz.0.2058 Not tainted syzkaller #0 PREEMPT(full) 
[  310.185792][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.185805][T13387] Call Trace:
[  310.185814][T13387]  <TASK>
[  310.185823][T13387]  dump_stack_lvl+0xe8/0x150
[  310.185861][T13387]  should_fail_ex+0x40c/0x560
[  310.185894][T13387]  _copy_from_user+0x2d/0xb0
[  310.185917][T13387]  ___sys_sendmsg+0x1c6/0x360
[  310.185944][T13387]  ? __lock_acquire+0x683/0x2cf0
[  310.185979][T13387]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.186054][T13387]  ? __fget_files+0x2a/0x420
[  310.186082][T13387]  ? __fget_files+0x3a2/0x420
[  310.186125][T13387]  __x64_sys_sendmsg+0x1b1/0x290
[  310.186155][T13387]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  310.186202][T13387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.186231][T13387]  do_syscall_64+0x174/0x580
[  310.186278][T13387]  ? trace_irq_disable+0x3b/0x140
[  310.186307][T13387]  ? clear_bhb_loop+0x40/0x90
[  310.186333][T13387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.186355][T13387] RIP: 0033:0x7f073179e019
[  310.186376][T13387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.186394][T13387] RSP: 002b:00007f07325c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.186417][T13387] RAX: ffffffffffffffda RBX: 00007f0731a26090 RCX: 00007f073179e019
[  310.186434][T13387] RDX: 0000000004008050 RSI: 0000200000000100 RDI: 0000000000000003
[  310.186447][T13387] RBP: 00007f07325c0090 R08: 0000000000000000 R09: 0000000000000000
[  310.186462][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.186475][T13387] R13: 00007f0731a26128 R14: 00007f0731a26090 R15: 00007ffea75578d8
[  310.186510][T13387]  </TASK>
[  311.079341][T13406] openvswitch: netlink: Message has 512 unknown bytes.
[  311.227466][T13423] ip6t_REJECT: ECHOREPLY is not supported
[  311.309380][T13430] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  312.045043][T13455] netlink: 'syz.1.2075': attribute type 1 has an invalid length.
[  312.442148][T13470] __nla_validate_parse: 9 callbacks suppressed
[  312.442170][T13470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2078'.
[  312.750210][T13483] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2083'.
[  312.786679][T13483] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2083'.
[  312.989432][T13491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2085'.
[  313.010327][T13491] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2085'.
[  313.020212][T13491] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2085'.
[  313.146895][T13502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'.
[  313.343088][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  313.422372][T13507] tipc: Resetting bearer <eth:syzkaller0>
[  313.523726][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  313.536298][T13507] tipc: Disabling bearer <eth:syzkaller0>
[  313.981943][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2095'.
[  314.128987][T13535] syzkaller0: entered promiscuous mode
[  314.145099][T13542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.159818][T13535] syzkaller0: entered allmulticast mode
[  314.223741][T13542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.554223][T13558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.069162][T13574] tipc: Started in network mode
[  315.089385][T13574] tipc: Node identity fa767a8d1f82, cluster identity 4711
[  315.101633][T13574] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  315.326378][T13586] netlink: 'syz.3.2108': attribute type 11 has an invalid length.
[  315.340939][T13581] tipc: Resetting bearer <eth:syzkaller0>
[  315.405017][T13581] tipc: Disabling bearer <eth:syzkaller0>
[  315.719473][T13600] geneve3: entered promiscuous mode
[  315.771813][ T8784] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.800613][ T8784] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.841827][ T8784] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.886875][ T8784] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.669799][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  317.007165][T13666] lo speed is unknown, defaulting to 1000
[  317.324283][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  317.918231][T13728] netlink: 'syz.3.2141': attribute type 1 has an invalid length.
[  317.949787][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  318.078211][T13728] 8021q: adding VLAN 0 to HW filter on device bond6
[  318.096941][T13738] bond6: entered promiscuous mode
[  318.102945][T13738] bond6: entered allmulticast mode
[  318.608830][T13754] __nla_validate_parse: 8 callbacks suppressed
[  318.608849][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'.
[  320.615200][T13700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.674933][T13746] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2145'.
[  321.113467][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'.
[  321.204805][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'.
[  321.327957][T13801] x_tables: unsorted underflow at hook 3
[  321.373440][T13803] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2159'.
[  321.566704][T13814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2158'.
[  321.842182][T13826] netlink: 'syz.4.2164': attribute type 1 has an invalid length.
[  322.600226][T13830] macvtap1: entered allmulticast mode
[  322.643997][T13831] macvtap2: entered allmulticast mode
[  322.680801][T13832] bond8: (slave bridge5): making interface the new active one
[  322.691397][T13832] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  322.739258][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  322.799868][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'.
[  322.933597][T13848] syzkaller0: left promiscuous mode
[  322.938963][T13848] syzkaller0: left allmulticast mode
[  322.998020][T13848] tc action pedit offset 22 out of bounds
[  323.005031][T13848] tc action pedit offset 22 out of bounds
[  323.010864][T13848] tc action pedit offset 22 out of bounds
[  323.016653][T13848] tc action pedit offset 22 out of bounds
[  323.022456][T13848] tc action pedit offset 22 out of bounds
[  323.028216][T13848] tc action pedit offset 22 out of bounds
[  323.034025][T13848] tc action pedit offset 22 out of bounds
[  323.039814][T13848] tc action pedit offset 22 out of bounds
[  323.045615][T13848] tc action pedit offset 22 out of bounds
[  323.051413][T13848] tc action pedit offset 22 out of bounds
[  323.057180][T13848] 0: reclassify loop, rule prio 0, protocol 800
[  323.079013][T13851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2170'.
[  323.322968][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'.
[  323.861530][T13885] netlink: 'syz.3.2180': attribute type 1 has an invalid length.
[  324.077960][T13894] __nla_validate_parse: 1 callbacks suppressed
[  324.077980][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'.
[  324.891782][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2187'.
[  324.904127][T13919] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2186'.
[  324.930006][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2187'.
[  324.951519][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2186'.
[  325.295929][T13931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'.
[  325.347059][T13931] dummy0: mtu less than device minimum
[  325.705585][T13944] syzkaller1: entered promiscuous mode
[  325.731904][T13944] syzkaller1: entered allmulticast mode
[  325.904480][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  326.100425][ T8776] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  326.198833][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'.
[  326.315369][T13985] netlink: 'syz.3.2205': attribute type 15 has an invalid length.
[  326.329828][T13985] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2205'.
[  326.380756][T13986] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2205'.
[  326.447025][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'.
[  326.737447][T14008] Cannot find del_set index 17 as target
[  326.840451][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  327.153072][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  327.181701][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  327.568836][T14039] netlink: 'syz.2.2222': attribute type 1 has an invalid length.
[  327.881378][T14045] syzkaller0: entered promiscuous mode
[  327.894525][T14045] syzkaller0: entered allmulticast mode
[  327.996427][T14054] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  328.200142][ T9463] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  328.216858][T14060] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  328.926968][T14088] 8021q: VLANs not supported on sit0
[  328.939426][T14054] infiniband syz1: set down
[  328.946757][T14054] infiniband syz1: added bridge_slave_1
[  328.962451][T14054] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  328.973283][T14054] infiniband syz1: Couldn't open port 1
[  329.017954][T14054] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  329.049745][T14054] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  329.094493][T14054] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  329.125259][T14096] netlink: 'syz.3.2241': attribute type 2 has an invalid length.
[  329.153689][T14095] netlink: 'syz.3.2241': attribute type 2 has an invalid length.
[  329.168430][T14098] IPv6: addrconf: prefix option has invalid lifetime
[  329.181942][T14095] __nla_validate_parse: 7 callbacks suppressed
[  329.181958][T14095] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2241'.
[  329.204609][T14097] IPv6: addrconf: prefix option has invalid lifetime
[  329.365366][T14054] RDS/IB: syz1: added
[  329.395171][T14054] smc: adding ib device syz1 with port count 1
[  329.414017][T14054] smc:    ib device syz1 port 1 has no pnetid
[  329.524243][T14108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.557663][T14106] syzkaller0: entered promiscuous mode
[  329.583705][T14106] syzkaller0: entered allmulticast mode
[  329.822429][T14106] tipc: Resetting bearer <eth:syzkaller0>
[  329.871226][T14122] netlink: 'syz.0.2249': attribute type 10 has an invalid length.
[  331.069903][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  332.511939][T14106] tipc: Disabling bearer <eth:syzkaller0>
[  332.670930][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  332.891835][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'.
[  333.415063][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2261'.
[  333.464548][T14161] netlink: 'syz.1.2261': attribute type 11 has an invalid length.
[  333.542915][T14165] syzkaller0: left promiscuous mode
[  333.548636][T14165] syzkaller0: left allmulticast mode
[  333.577771][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'.
[  334.339983][T14195] netlink: 'syz.0.2271': attribute type 2 has an invalid length.
[  334.348903][T14195] netlink: 'syz.0.2271': attribute type 2 has an invalid length.
[  334.357349][T14195] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2271'.
[  334.375700][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'.
[  334.694485][T14212] bond4: (slave lo): Releasing backup interface
[  334.708255][T14212] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  334.751272][T14212] bond3: (slave dummy0): Releasing backup interface
[  334.759093][T14212] dummy0: left promiscuous mode
[  334.767724][T14212] dummy0: left allmulticast mode
[  334.786436][T14212] bridge_slave_0: left allmulticast mode
[  334.797715][T14212] bridge_slave_0: left promiscuous mode
[  334.805626][T14212] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.821173][T14212] bridge_slave_1: left allmulticast mode
[  334.827085][T14212] bridge_slave_1: left promiscuous mode
[  334.834047][T14212] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.852669][T14212] bond0: (slave bond_slave_0): Releasing backup interface
[  334.865724][T14212] bond0: (slave bond_slave_1): Releasing backup interface
[  334.894319][T14212] team0: Port device team_slave_0 removed
[  334.917481][T14212] team0: Port device team_slave_1 removed
[  334.930732][T14212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.941141][T14212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.950393][T14212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.957812][T14212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.976511][T14212] bond6: (slave bridge3): Releasing active interface
[  334.984362][T14212] bridge3: left promiscuous mode
[  334.989507][T14212] bridge3: left allmulticast mode
[  335.013861][ T9463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  335.024668][ T9446] lo speed is unknown, defaulting to 1000
[  335.032256][ T9446] syz2: Port: 1 Link DOWN
[  335.053279][T14211] xfrm0: left allmulticast mode
[  335.061559][T14211] team0: Port device xfrm0 added
[  335.069531][ T9447] lo speed is unknown, defaulting to 1000
[  335.243001][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'.
[  335.336413][T14223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  335.366231][T14222] bond0: (slave syz_tun): Releasing backup interface
[  335.490519][ T9463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  335.833254][T14246] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2284'.
[  335.900340][T14249] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2285'.
[  336.064005][T14263] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2289'.
[  336.197899][T14264] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2288'.
[  336.220451][T14264] netlink: 'syz.4.2288': attribute type 1 has an invalid length.
[  336.243867][T14264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2288'.
[  336.476454][T14283] xt_HMARK: spi-set and port-set can't be combined
[  336.531095][T14283] syzkaller0: entered promiscuous mode
[  336.543057][T14283] syzkaller0: entered allmulticast mode
[  336.959399][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'.
[  337.171701][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'.
[  337.423394][T14318] netlink: 'syz.0.2306': attribute type 1 has an invalid length.
[  338.275496][T14362] openvswitch: netlink: IP tunnel dst address not specified
[  338.325050][T14359] lo speed is unknown, defaulting to 1000
[  338.741729][T14380] netlink: 'syz.3.2322': attribute type 3 has an invalid length.
[  338.790694][T14382] netlink: 'syz.2.2320': attribute type 10 has an invalid length.
[  339.041244][T14386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.066514][T14386] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  339.086810][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.090977][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  339.094064][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.240535][T14393] syzkaller1: entered promiscuous mode
[  339.248522][T14393] syzkaller1: entered allmulticast mode
[  339.374123][T14393] netlink: 'syz.4.2325': attribute type 10 has an invalid length.
[  339.486097][T14402] __nla_validate_parse: 7 callbacks suppressed
[  339.486117][T14402] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2327'.
[  339.683964][T14405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2329'.
[  339.741488][T14413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2329'.
[  339.908377][T14426] syzkaller0: entered promiscuous mode
[  339.914044][T14426] syzkaller0: entered allmulticast mode
[  339.936237][T14426] netlink: 'syz.4.2333': attribute type 24 has an invalid length.
[  340.097558][T14436] veth0: entered promiscuous mode
[  340.236828][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'.
[  340.531312][T14432] veth0: left promiscuous mode
[  340.869053][T14460] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2339'.
[  340.931804][T14462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.037161][T14470] netlink: 'syz.3.2341': attribute type 1 has an invalid length.
[  341.183338][T14470] 8021q: adding VLAN 0 to HW filter on device bond8
[  341.222182][T14474] bond8: (slave veth5): Enslaving as an active interface with a down link
[  341.233926][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'.
[  341.263266][T14470] bond8: (slave veth7): Enslaving as an active interface with a down link
[  341.273393][T14480] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2345'.
[  341.312603][T14481] vcan0 (unregistering): left allmulticast mode
[  341.325308][T14466] bond8: entered allmulticast mode
[  341.460545][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'.
[  341.494623][T14490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2346'.
[  341.606546][T14491] (: left allmulticast mode
[  341.622372][T14491] (: left promiscuous mode
[  341.628768][T14491] bridge0: port 1(() entered disabled state
[  341.662214][T14491] bridge_slave_1: left allmulticast mode
[  341.675456][T14491] bridge_slave_1: left promiscuous mode
[  341.692867][T14491] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.739184][T14491] bond0: (slave bond_slave_0): Releasing backup interface
[  341.770669][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'.
[  341.795045][T14491] bond0: (slave bond_slave_1): Releasing backup interface
[  341.822999][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.837936][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.849453][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.859846][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.872913][T14491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  341.892581][T14501] §: renamed from sit0 (while UP)
[  341.928270][T14506] batman_adv: batadv0: Adding interface: macvtap1
[  341.949500][T14506] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.997896][T14506] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  342.103176][T14514] netlink: 'syz.3.2351': attribute type 1 has an invalid length.
[  342.391281][T14516] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  342.432487][T14516] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  342.446618][T14516] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  342.585339][T14537] batadv_slave_1: entered promiscuous mode
[  342.691101][T14530] batadv_slave_1: left promiscuous mode
[  342.849219][T14556] netlink: 'syz.0.2362': attribute type 2 has an invalid length.
[  342.986598][T14556] macvtap2: entered promiscuous mode
[  342.999358][T14556] dummy0: entered promiscuous mode
[  343.012424][T14556] macvtap2: entered allmulticast mode
[  343.028579][T14556] dummy0: entered allmulticast mode
[  343.453207][T14576] openvswitch: netlink: IPv4 tun info is not correct
[  343.530705][T14584] batadv_slave_1: entered promiscuous mode
[  343.680221][T14582] batadv_slave_1: left promiscuous mode
[  343.730916][T14590] pim6reg99999999: entered allmulticast mode
[  343.819865][T14597] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  344.030135][T14608] sctp: [Deprecated]: syz.4.2381 (pid 14608) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.030135][T14608] Use struct sctp_sack_info instead
[  345.007637][T14643] ip_tables: iptables: counters copy to user failed while replacing table
[  345.049074][T14652] __nla_validate_parse: 8 callbacks suppressed
[  345.049093][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  345.083666][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2394'.
[  345.195573][T14658] veth0_macvtap: left promiscuous mode
[  345.311534][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.336634][T14662] block nbd0: NBD_DISCONNECT
[  345.344044][T14662] block nbd0: Send disconnect failed -32
[  345.353035][T14662] block nbd0: shutting down sockets
[  345.394740][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.420792][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.430491][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.440154][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.449377][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.459911][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  345.469102][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'.
[  346.094462][T14694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.120025][T14694] netlink: zone id is out of range
[  346.129467][T14694] netlink: zone id is out of range
[  346.138251][T14694] netlink: zone id is out of range
[  346.805353][ T5283] veth0_macvtap: entered promiscuous mode
[  346.921569][T14718] block nbd0: server does not support multiple connections per device.
[  346.955401][T14718] block nbd0: shutting down sockets
[  347.219964][T12444] tipc: Node number set to 1513460655
[  347.599964][T14718] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  347.639009][T14718] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  347.793724][T14718] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  347.810523][T14718] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  347.871421][T14718] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  347.884493][T14718] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  347.944403][T14718] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  347.956182][T14718] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  349.949810][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.994430][T14870] veth0: entered promiscuous mode
[  350.074768][T14875] __nla_validate_parse: 66 callbacks suppressed
[  350.074818][T14875] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2452'.
[  350.094486][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'.
[  350.447799][T14869] veth0: left promiscuous mode
[  350.656219][T14894] openvswitch: netlink: VXLAN extension message has 232 unknown bytes.
[  350.676447][T14894] netlink: 'syz.3.2456': attribute type 1 has an invalid length.
[  350.794567][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'.
[  350.830212][T14901] x_tables: duplicate underflow at hook 2
[  350.963199][T14905] openvswitch: netlink: Duplicate or invalid key (type 0).
[  350.984829][T14905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2459'.
[  351.007867][T14905] netlink: 'syz.3.2459': attribute type 49 has an invalid length.
[  351.031294][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'.
[  351.048978][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'.
[  351.084614][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2459'.
[  351.230019][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  351.333620][T14920] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2463'.
[  351.494827][T14925] tc_dump_action: action bad kind
[  351.596617][T14931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  351.710878][T14938] xt_hashlimit: max too large, truncated to 1048576
[  351.721460][T14938] xt_hashlimit: overflow, try lower: 137438953472/8
[  352.382562][T14958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.670564][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  352.758707][T14960] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2477'.
[  353.089663][T14977] netlink: 'syz.2.2480': attribute type 10 has an invalid length.
[  353.358322][T14987] syz_tun: left promiscuous mode
[  353.374132][T14987] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.387252][T14987] 8021q: adding VLAN 0 to HW filter on device team0
[  353.411401][T14987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.893526][T15005] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2489'.
[  354.018060][T14987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  354.029026][T14987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  354.050791][T14987] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  354.216410][ T9445] syz1: Port: 1 Link ACTIVE
[  354.430063][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  354.470718][T15023] openvswitch: netlink: Flow key attr not present in new flow.
[  354.703579][T15041] netlink: zone id is out of range
[  354.927684][T15048] netlink: 'syz.4.2502': attribute type 1 has an invalid length.
[  355.040073][T15058] netlink: 'syz.2.2500': attribute type 10 has an invalid length.
[  355.104847][T15059] netlink: 'syz.0.2504': attribute type 1 has an invalid length.
[  355.508348][T15074] __nla_validate_parse: 3 callbacks suppressed
[  355.508372][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2508'.
[  355.540974][T15074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2508'.
[  355.551968][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2508'.
[  355.561687][T15074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2508'.
[  356.023944][   T30] audit: type=1800 audit(1785879016.596:4): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2516" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2879 res=0 errno=0
[  356.187806][T15111] netlink: 'syz.4.2519': attribute type 1 has an invalid length.
[  356.221457][T15114] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2521'.
[  356.251320][T15111] bond9: entered promiscuous mode
[  356.262408][T15111] bond9: entered allmulticast mode
[  356.269341][T15111] 8021q: adding VLAN 0 to HW filter on device bond9
[  356.309390][T15115] erspan1: entered allmulticast mode
[  356.329419][T15115] bond9: (slave erspan1): making interface the new active one
[  356.340051][T15115] erspan1: entered promiscuous mode
[  356.374774][T15115] bond9: (slave erspan1): Enslaving as an active interface with an up link
[  356.450156][T15119] syz.4.2519 (15119) used obsolete PPPIOCDETACH ioctl
[  356.663434][T15140] netlink: 'syz.1.2525': attribute type 10 has an invalid length.
[  357.053577][T15148] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2529'.
[  357.114195][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'.
[  357.202929][T15154] syzkaller0: entered promiscuous mode
[  357.233068][T15154] syzkaller0: entered allmulticast mode
[  357.303810][T15160] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2535'.
[  357.478888][T15163] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2537'.
[  357.507751][T15164] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2537'.
[  358.047376][T15194] netlink: 'syz.0.2542': attribute type 13 has an invalid length.
[  358.062066][T15194] netlink: 'syz.0.2542': attribute type 17 has an invalid length.
[  358.243533][T15194] syz_tun: left promiscuous mode
[  358.347894][T15194] batadv0: left promiscuous mode
[  358.391260][T15198] netlink: 'syz.3.2544': attribute type 1 has an invalid length.
[  358.440934][T15198] netlink: 'syz.3.2544': attribute type 2 has an invalid length.
[  358.806876][T15194] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  359.437311][T15218] tc_dump_action: action bad kind
[  359.478484][T15223] netlink: 'syz.1.2548': attribute type 10 has an invalid length.
[  360.440175][T15259] ip_tables: iptables: counters copy to user failed while replacing table
[  360.536180][T15268] __nla_validate_parse: 5 callbacks suppressed
[  360.536202][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2558'.
[  360.712678][T15260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.652004][T15300] lo speed is unknown, defaulting to 1000
[  361.675827][T15314] can: request_module (can-proto-3) failed.
[  361.944818][T15314] netlink: 'syz.3.2571': attribute type 1 has an invalid length.
[  362.039266][T15307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.089205][T15328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2574'.
[  362.104643][T15328] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2574'.
[  362.283930][T15314] 8021q: adding VLAN 0 to HW filter on device bond12
[  362.371385][T15307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.432038][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'.
[  362.547767][T15307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.826284][T15307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.900808][T15355] ±ÿ€: entered allmulticast mode
[  363.363734][T15372] batadv_slave_0: entered allmulticast mode
[  363.383045][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'.
[  363.401281][T15372] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  363.430099][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  363.631345][  T262] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  363.659726][ T8776] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.677041][ T8776] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  364.010219][T15384] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2589'.
[  364.200868][T15406] lo speed is unknown, defaulting to 1000
[  364.394308][T15410] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  364.411659][T15410] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  364.427960][T15410] ipt_ECN: cannot use operation on non-tcp rule
[  364.597326][T15414] syzkaller1: entered promiscuous mode
[  364.630872][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'.
[  364.648303][T15414] syzkaller1: entered allmulticast mode
[  364.675284][T15417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2597'.
[  364.696309][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'.
[  364.711973][T15419] openvswitch: netlink: Message has 86 unknown bytes.
[  364.760058][T15417] netlink: 'syz.2.2597': attribute type 5 has an invalid length.
[  364.930706][T15417] bond0: (slave syz_tun): Releasing backup interface
[  365.577903][T15458] 8021q: VLANs not supported on wg1
[  366.068464][T15476] openvswitch: netlink: Missing key (keys=40, expected=100)
[  366.157862][T15474] veth0: entered promiscuous mode
[  366.221475][T15476] tc action pedit 'at' offset 20 out of bounds
[  366.463542][T15488] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2615'.
[  366.509460][T15488] openvswitch: netlink: Message has 512 unknown bytes.
[  366.565261][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'.
[  366.729059][T15501] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001
[  366.955661][T15507] netlink: 'syz.2.2621': attribute type 1 has an invalid length.
[  367.061459][T15508] bond6: (slave dummy0): making interface the new active one
[  367.074766][T15508] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  367.103019][T15514] bond6: (slave dummy0): Releasing active interface
[  367.114651][T15514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  367.327033][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'.
[  367.388453][T15525] gtp1: entered allmulticast mode
[  367.514145][T15534] netlink: 'syz.4.2627': attribute type 4 has an invalid length.
[  367.524164][T15533] netlink: 'syz.4.2627': attribute type 4 has an invalid length.
[  367.854245][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'.
[  367.866724][T15557] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2634'.
[  367.881706][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'.
[  368.176079][T15582] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2638'.
[  368.246598][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2638'.
[  368.319482][T15582] netlink: 'syz.4.2638': attribute type 4 has an invalid length.
[  368.395273][T15574] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2638'.
[  368.430934][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2638'.
[  368.584067][T15595] netlink: 'syz.3.2643': attribute type 1 has an invalid length.
[  368.610935][T15595] netlink: 'syz.3.2643': attribute type 2 has an invalid length.
[  368.714662][T15598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.729805][T15600] netlink: 'syz.3.2643': attribute type 1 has an invalid length.
[  368.749952][T15600] netlink: 'syz.3.2643': attribute type 2 has an invalid length.
[  369.197372][T15631] gretap0: entered promiscuous mode
[  369.267966][T15634] bond13: option lacp_rate: invalid value (3)
[  369.294946][T15634] bond13 (unregistering): Released all slaves
[  369.598069][T15631] 0ªî{X¹¦: renamed from gretap0
[  369.622284][T15631] 0ªî{X¹¦: left promiscuous mode
[  369.627733][T15631] 0ªî{X¹¦: entered allmulticast mode
[  369.662842][T15631] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  369.681984][T15644] netlink: 'syz.4.2656': attribute type 2 has an invalid length.
[  369.834662][T15653] bridge_slave_1: entered allmulticast mode
[  369.862608][ T9463] syz1: Port: 1 Link DOWN
[  369.952751][ T8776] tipc: Subscription rejected, illegal request
[  369.978771][T15655] netlink: zone id is out of range
[  369.985804][T15655] netlink: zone id is out of range
[  369.996999][T15655] netlink: zone id is out of range
[  370.009768][T15655] netlink: zone id is out of range
[  370.035503][T15655] netlink: zone id is out of range
[  370.074924][T15655] netlink: zone id is out of range
[  370.091340][T15655] netlink: zone id is out of range
[  370.096773][T15655] netlink: zone id is out of range
[  370.103229][T15655] netlink: zone id is out of range
[  370.108622][T15655] netlink: zone id is out of range
[  371.066421][T15712] netlink: 'syz.0.2669': attribute type 1 has an invalid length.
[  371.179181][T15712] bond13: entered promiscuous mode
[  371.203642][T15712] 8021q: adding VLAN 0 to HW filter on device bond13
[  371.416864][T15706] bond13: (slave bridge10): making interface the new active one
[  371.427263][T15706] bridge10: entered promiscuous mode
[  371.434678][T15706] bond13: (slave bridge10): Enslaving as an active interface with an up link
[  371.485809][T15724] __nla_validate_parse: 12 callbacks suppressed
[  371.485829][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'.
[  371.527314][T15724] tipc: Resetting bearer <eth:syzkaller0>
[  371.582227][T15724] tipc: Disabling bearer <eth:syzkaller0>
[  371.644570][T15727] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2675'.
[  371.900763][T15734] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2679'.
[  372.098651][T15745] x_tables: duplicate underflow at hook 2
[  372.126374][T15744] gretap1: entered promiscuous mode
[  372.386887][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'.
[  372.561948][T15770] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2687'.
[  372.597840][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2687'.
[  372.811496][T15769] smc: removing ib device syz1
[  372.998640][T15783] bond13: option arp_interval: invalid value (18446744073709551615)
[  373.007321][T15783] bond13: option arp_interval: allowed values 0 - 2147483647
[  373.022385][T15783] bond13 (unregistering): Released all slaves
[  373.114973][T15769] smbdirect: ib_dev[syz1] removed
[  373.530771][T15802] gretap1: entered promiscuous mode
[  373.811858][T15814] bridge0: port 1(vlan0) entered blocking state
[  373.827419][T15814] bridge0: port 1(vlan0) entered disabled state
[  373.849174][T15814] vlan0: entered allmulticast mode
[  373.874437][T15814] dummy0: entered allmulticast mode
[  373.925054][T15814] vlan0: entered promiscuous mode
[  373.949837][T15814] dummy0: entered promiscuous mode
[  374.296195][T15814] syzkaller0: entered promiscuous mode
[  374.311535][T15814] syzkaller0: entered allmulticast mode
[  374.375518][T15838] netlink: 'syz.3.2707': attribute type 2 has an invalid length.
[  374.493478][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'.
[  374.522971][T15846] netlink: 'syz.4.2709': attribute type 1 has an invalid length.
[  374.785747][T15838] D†'|o: entered promiscuous mode
[  374.804746][T15851] FAULT_INJECTION: forcing a failure.
[  374.804746][T15851] name failslab, interval 1, probability 0, space 0, times 0
[  374.818698][T15851] CPU: 1 UID: 0 PID: 15851 Comm: syz.2.2710 Not tainted syzkaller #0 PREEMPT(full) 
[  374.818744][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  374.818775][T15851] Call Trace:
[  374.818783][T15851]  <TASK>
[  374.818793][T15851]  dump_stack_lvl+0xe8/0x150
[  374.818925][T15851]  should_fail_ex+0x40c/0x560
[  374.819085][T15851]  should_failslab+0xa8/0x100
[  374.819150][T15851]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  374.819189][T15851]  ? local_lock_release+0x9c/0x160
[  374.819293][T15851]  ? __alloc_skb+0x1d7/0x7a0
[  374.819315][T15851]  ? __alloc_skb+0x1d7/0x7a0
[  374.819345][T15851]  __alloc_skb+0x1d7/0x7a0
[  374.819372][T15851]  netlink_ack+0x136/0xb30
[  374.819457][T15851]  ? __pfx___mutex_trylock_common+0x10/0x10
[  374.819510][T15851]  ? rcu_is_watching+0x15/0xb0
[  374.819538][T15851]  ? trace_contention_end+0x3d/0x140
[  374.819569][T15851]  netlink_rcv_skb+0x2a4/0x4a0
[  374.819597][T15851]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  374.819670][T15851]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  374.819716][T15851]  ? netlink_deliver_tap+0x2e/0x1b0
[  374.819745][T15851]  ? netlink_deliver_tap+0x2e/0x1b0
[  374.819776][T15851]  xfrm_netlink_rcv+0x79/0x90
[  374.819812][T15851]  netlink_unicast+0x7bb/0x940
[  374.819850][T15851]  netlink_sendmsg+0x813/0xb40
[  374.819890][T15851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.819923][T15851]  ? aa_sock_msg_perm+0xf1/0x1b0
[  374.820029][T15851]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.820057][T15851]  sock_sendmsg_nosec+0x13a/0x180
[  374.820146][T15851]  ____sys_sendmsg+0x54e/0x850
[  374.820180][T15851]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.820219][T15851]  ? import_iovec+0x73/0xa0
[  374.820270][T15851]  ___sys_sendmsg+0x2a5/0x360
[  374.820297][T15851]  ? __lock_acquire+0x683/0x2cf0
[  374.820333][T15851]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.820403][T15851]  ? __fget_files+0x2a/0x420
[  374.820444][T15851]  ? __fget_files+0x3a2/0x420
[  374.820485][T15851]  __x64_sys_sendmsg+0x1b1/0x290
[  374.820516][T15851]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.820566][T15851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.820610][T15851]  do_syscall_64+0x174/0x580
[  374.820726][T15851]  ? clear_bhb_loop+0x40/0x90
[  374.820753][T15851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.820775][T15851] RIP: 0033:0x7f0d8fb9e019
[  374.820803][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.820822][T15851] RSP: 002b:00007f0d8ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.820846][T15851] RAX: ffffffffffffffda RBX: 00007f0d8fe25fa0 RCX: 00007f0d8fb9e019
[  374.820862][T15851] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  374.820876][T15851] RBP: 00007f0d8ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  374.820889][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.820902][T15851] R13: 00007f0d8fe26038 R14: 00007f0d8fe25fa0 R15: 00007ffc076581d8
[  374.820938][T15851]  </TASK>
[  375.113807][T15847] gretap1: entered allmulticast mode
[  375.331987][T15846] netlink: 'syz.4.2709': attribute type 1 has an invalid length.
[  375.517256][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.532868][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.542588][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.567873][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.578905][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.722132][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.737746][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.747734][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.767894][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.778217][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.656811][ T5626] bond0: (slave syz_tun): Releasing backup interface
[  376.878937][T15895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2720'.
[  377.106599][T15893] xt_CT: You must specify a L4 protocol and not use inversions on it
[  377.667433][T15860] lo speed is unknown, defaulting to 1000
[  377.870421][ T5641] Bluetooth: hci5: command tx timeout
[  378.037470][T15941] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2726'.
[  378.242007][T15928] lo speed is unknown, defaulting to 1000
[  378.384353][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2726'.
[  379.950930][ T5641] Bluetooth: hci5: command tx timeout
[  380.018856][T16001] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  380.057010][T16001] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  380.083911][T16001] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  380.185442][ T3297] IPVS: starting estimator thread 0...
[  380.186100][T16016] net_ratelimit: 1 callbacks suppressed
[  380.186143][T16016] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  380.218896][T16001] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  380.232688][T15860] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.255910][T15860] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.270970][T15860] bridge_slave_0: entered allmulticast mode
[  380.282673][T15860] bridge_slave_0: entered promiscuous mode
[  380.299900][T16019] IPVS: using max 35 ests per chain, 84000 per kthread
[  380.304676][T15860] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.315835][T15860] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.323361][T15860] bridge_slave_1: entered allmulticast mode
[  380.331912][T15860] bridge_slave_1: entered promiscuous mode
[  380.610924][T15860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.625200][T15860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.720580][T15860] team0: Port device team_slave_0 added
[  380.739429][T15860] team0: Port device team_slave_1 added
[  380.813837][T15860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.821383][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.848221][T15860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.921913][T15860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.932595][T15860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  380.961355][T15860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.146319][T15860] hsr_slave_0: entered promiscuous mode
[  381.174728][T15860] hsr_slave_1: entered promiscuous mode
[  381.260480][T16038] xt_hashlimit: size too large, truncated to 1048576
[  381.556934][T16052] x_tables: duplicate underflow at hook 2
[  381.847497][T15860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.860108][T15860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.032084][ T5641] Bluetooth: hci5: command tx timeout
[  382.078992][T15860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.089920][T15860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.296826][T15860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.308242][T15860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.335596][T16072] netlink: 'syz.2.2752': attribute type 4 has an invalid length.
[  382.565512][T15860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.588495][T15860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.223854][T15860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  383.231035][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  383.250817][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  383.261261][T15860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  383.284517][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  383.303600][T15860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  383.328880][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  383.346309][T15860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  383.354287][T16093] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2760'.
[  383.389468][T15860] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  383.418143][T16093] vlan0 (unregistering): left allmulticast mode
[  383.431150][T16093] dummy0 (unregistering): left allmulticast mode
[  383.439008][T16093] vlan0 (unregistering): left promiscuous mode
[  383.468956][T16093] dummy0 (unregistering): left promiscuous mode
[  383.488355][T16093] bridge0: port 1(vlan0) entered disabled state
[  383.683799][T16109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.892199][T16113] lo speed is unknown, defaulting to 1000
[  383.924397][T15860] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.109756][ T5641] Bluetooth: hci5: command tx timeout
[  384.119243][T15860] 8021q: adding VLAN 0 to HW filter on device team0
[  384.224416][ T8776] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.231719][ T8776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.331611][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.338921][ T8774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.490913][T16123] netlink: 'syz.1.2765': attribute type 30 has an invalid length.
[  385.705473][T15860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.862824][T15860] veth0_vlan: entered promiscuous mode
[  385.882314][T15860] veth1_vlan: entered promiscuous mode
[  386.063509][T15860] veth0_macvtap: entered promiscuous mode
[  386.104412][T15860] veth1_macvtap: entered promiscuous mode
[  386.230207][T15860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.264042][T15860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.309893][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.350657][ T8774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.408244][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.435422][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.638345][T16165] 8021q: adding VLAN 0 to HW filter on device team0
[  386.751819][T16165] 8021q: adding VLAN 0 to HW filter on device bond3
[  386.771203][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  386.780348][T16165] 8021q: adding VLAN 0 to HW filter on device bond4
[  386.823218][ T9460] lo speed is unknown, defaulting to 1000
[  386.829213][ T9460] syz2: Port: 1 Link ACTIVE
[  386.905997][ T8777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.943943][ T8777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.013007][ T8774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.033586][ T8774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.420150][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  387.445735][T16188] netlink: 'syz.1.2778': attribute type 1 has an invalid length.
[  387.456718][T16188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'.
[  388.144892][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'.
[  388.176882][T16212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2785'.
[  388.424406][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'.
[  389.268436][T16264] openvswitch: netlink: Message has 8 unknown bytes.
[  391.333052][T16222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  391.343068][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'.
[  391.656474][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2803'.
[  391.669443][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'.
[  392.551084][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'.
[  392.565073][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'.
[  392.650876][T16319] FAULT_INJECTION: forcing a failure.
[  392.650876][T16319] name failslab, interval 1, probability 0, space 0, times 0
[  392.680058][T16321] netlink: 632 bytes leftover after parsing attributes in process `syz.3.2813'.
[  392.690227][T16319] CPU: 1 UID: 0 PID: 16319 Comm: syz.2.2814 Not tainted syzkaller #0 PREEMPT(full) 
[  392.690256][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  392.690270][T16319] Call Trace:
[  392.690279][T16319]  <TASK>
[  392.690288][T16319]  dump_stack_lvl+0xe8/0x150
[  392.690337][T16319]  should_fail_ex+0x40c/0x560
[  392.690372][T16319]  should_failslab+0xa8/0x100
[  392.690410][T16319]  __kmalloc_noprof+0xfe/0x720
[  392.690440][T16319]  ? bpf_test_init+0x9f/0x150
[  392.690551][T16319]  ? bpf_test_init+0x9f/0x150
[  392.690585][T16319]  bpf_test_init+0x9f/0x150
[  392.690618][T16319]  bpf_prog_test_run_skb+0x31e/0x2230
[  392.690670][T16319]  ? __fget_files+0x3a2/0x420
[  392.690699][T16319]  ? __fget_files+0x2a/0x420
[  392.690735][T16319]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  392.690764][T16319]  bpf_prog_test_run+0x2c5/0x340
[  392.690823][T16319]  __sys_bpf+0xa22/0xd90
[  392.690862][T16319]  ? __pfx___sys_bpf+0x10/0x10
[  392.690904][T16319]  ? __fget_files+0x2a/0x420
[  392.690952][T16319]  ? ksys_write+0x242/0x270
[  392.690983][T16319]  ? __pfx_ksys_write+0x10/0x10
[  392.691011][T16319]  __x64_sys_bpf+0xba/0xd0
[  392.691041][T16319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.691066][T16319]  do_syscall_64+0x174/0x580
[  392.691096][T16319]  ? trace_irq_disable+0x3b/0x140
[  392.691130][T16319]  ? clear_bhb_loop+0x40/0x90
[  392.691157][T16319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.691179][T16319] RIP: 0033:0x7f0d8fb9e019
[  392.691200][T16319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.691218][T16319] RSP: 002b:00007f0d8ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  392.691242][T16319] RAX: ffffffffffffffda RBX: 00007f0d8fe25fa0 RCX: 00007f0d8fb9e019
[  392.691258][T16319] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  392.691272][T16319] RBP: 00007f0d8ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  392.691286][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.691299][T16319] R13: 00007f0d8fe26038 R14: 00007f0d8fe25fa0 R15: 00007ffc076581d8
[  392.691342][T16319]  </TASK>
[  393.234811][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'.
[  393.264464][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'.
[  393.277219][T16339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2820'.
[  393.455905][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'.
[  393.474719][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'.
[  393.643988][T16354] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  393.763014][T16357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2826'.
[  393.855915][T16356] netlink: 'syz.4.2827': attribute type 1 has an invalid length.
[  393.933591][T16356] 8021q: adding VLAN 0 to HW filter on device bond10
[  393.997179][T16359] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.026024][T16359] bond10: (slave bond0): making interface the new active one
[  394.071322][T16359] bond10: (slave bond0): Enslaving as an active interface with an up link
[  394.280672][T16372] FAULT_INJECTION: forcing a failure.
[  394.280672][T16372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.337551][T16372] CPU: 1 UID: 0 PID: 16372 Comm: syz.2.2829 Not tainted syzkaller #0 PREEMPT(full) 
[  394.337582][T16372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  394.337596][T16372] Call Trace:
[  394.337605][T16372]  <TASK>
[  394.337614][T16372]  dump_stack_lvl+0xe8/0x150
[  394.337654][T16372]  should_fail_ex+0x40c/0x560
[  394.337688][T16372]  _copy_from_user+0x2d/0xb0
[  394.337802][T16372]  bpf_test_init+0xd8/0x150
[  394.337836][T16372]  bpf_prog_test_run_skb+0x31e/0x2230
[  394.337887][T16372]  ? __fget_files+0x3a2/0x420
[  394.337916][T16372]  ? __fget_files+0x2a/0x420
[  394.337952][T16372]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  394.337981][T16372]  bpf_prog_test_run+0x2c5/0x340
[  394.338016][T16372]  __sys_bpf+0xa22/0xd90
[  394.338055][T16372]  ? __pfx___sys_bpf+0x10/0x10
[  394.338097][T16372]  ? __fget_files+0x2a/0x420
[  394.338146][T16372]  ? ksys_write+0x242/0x270
[  394.338171][T16372]  ? __pfx_ksys_write+0x10/0x10
[  394.338206][T16372]  __x64_sys_bpf+0xba/0xd0
[  394.338233][T16372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.338258][T16372]  do_syscall_64+0x174/0x580
[  394.338289][T16372]  ? trace_irq_disable+0x3b/0x140
[  394.338317][T16372]  ? clear_bhb_loop+0x40/0x90
[  394.338344][T16372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.338366][T16372] RIP: 0033:0x7f0d8fb9e019
[  394.338386][T16372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.338405][T16372] RSP: 002b:00007f0d8ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  394.338428][T16372] RAX: ffffffffffffffda RBX: 00007f0d8fe25fa0 RCX: 00007f0d8fb9e019
[  394.338444][T16372] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  394.338458][T16372] RBP: 00007f0d8ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  394.338472][T16372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.338485][T16372] R13: 00007f0d8fe26038 R14: 00007f0d8fe25fa0 R15: 00007ffc076581d8
[  394.338520][T16372]  </TASK>
[  395.043761][T16397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2837'.
[  395.660577][T16419] FAULT_INJECTION: forcing a failure.
[  395.660577][T16419] name failslab, interval 1, probability 0, space 0, times 0
[  395.688018][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.2.2844 Not tainted syzkaller #0 PREEMPT(full) 
[  395.688051][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.688065][T16419] Call Trace:
[  395.688074][T16419]  <TASK>
[  395.688084][T16419]  dump_stack_lvl+0xe8/0x150
[  395.688124][T16419]  should_fail_ex+0x40c/0x560
[  395.688167][T16419]  should_failslab+0xa8/0x100
[  395.688202][T16419]  __kmalloc_noprof+0xfe/0x720
[  395.688232][T16419]  ? sk_prot_alloc+0xe7/0x210
[  395.688258][T16419]  ? sk_prot_alloc+0xe7/0x210
[  395.688290][T16419]  sk_prot_alloc+0xe7/0x210
[  395.688315][T16419]  ? sk_alloc+0x27/0x390
[  395.688343][T16419]  sk_alloc+0x3a/0x390
[  395.688373][T16419]  bpf_prog_test_run_skb+0x3a6/0x2230
[  395.688425][T16419]  ? __fget_files+0x3a2/0x420
[  395.688454][T16419]  ? __fget_files+0x2a/0x420
[  395.688488][T16419]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  395.688517][T16419]  bpf_prog_test_run+0x2c5/0x340
[  395.688554][T16419]  __sys_bpf+0xa22/0xd90
[  395.688592][T16419]  ? __pfx___sys_bpf+0x10/0x10
[  395.688633][T16419]  ? __fget_files+0x2a/0x420
[  395.688680][T16419]  ? ksys_write+0x242/0x270
[  395.688705][T16419]  ? __pfx_ksys_write+0x10/0x10
[  395.688732][T16419]  __x64_sys_bpf+0xba/0xd0
[  395.688759][T16419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.688784][T16419]  do_syscall_64+0x174/0x580
[  395.688814][T16419]  ? trace_irq_disable+0x3b/0x140
[  395.688842][T16419]  ? clear_bhb_loop+0x40/0x90
[  395.688869][T16419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.688891][T16419] RIP: 0033:0x7f0d8fb9e019
[  395.688911][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.688931][T16419] RSP: 002b:00007f0d8ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  395.688953][T16419] RAX: ffffffffffffffda RBX: 00007f0d8fe25fa0 RCX: 00007f0d8fb9e019
[  395.688969][T16419] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  395.688983][T16419] RBP: 00007f0d8ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  395.688997][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.689010][T16419] R13: 00007f0d8fe26038 R14: 00007f0d8fe25fa0 R15: 00007ffc076581d8
[  395.689046][T16419]  </TASK>
[  396.096184][T16425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'.
[  396.124098][T16425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'.
[  396.170222][T16425] gretap0: entered promiscuous mode
[  396.184442][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'.
[  396.195791][T16425] gretap0: left promiscuous mode
[  396.200955][T16428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'.
[  396.321999][T16428] gretap0: entered promiscuous mode
[  396.354302][T16428] gretap0: left promiscuous mode
[  396.519144][   T30] audit: type=1107 audit(1785879057.086:5): pid=16437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  396.529348][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'.
[  396.677924][T16446] netlink: 'syz.4.2850': attribute type 1 has an invalid length.
[  396.748625][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'.
[  397.698296][T16492] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  397.792634][T16496] FAULT_INJECTION: forcing a failure.
[  397.792634][T16496] name failslab, interval 1, probability 0, space 0, times 0
[  397.860333][T16496] CPU: 0 UID: 0 PID: 16496 Comm: syz.4.2868 Not tainted syzkaller #0 PREEMPT(full) 
[  397.860366][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  397.860380][T16496] Call Trace:
[  397.860388][T16496]  <TASK>
[  397.860397][T16496]  dump_stack_lvl+0xe8/0x150
[  397.860438][T16496]  should_fail_ex+0x40c/0x560
[  397.860473][T16496]  should_failslab+0xa8/0x100
[  397.860510][T16496]  __kmalloc_noprof+0xfe/0x720
[  397.860539][T16496]  ? security_sk_alloc+0x52/0x360
[  397.860693][T16496]  ? security_sk_alloc+0x52/0x360
[  397.860723][T16496]  ? __kmalloc_noprof+0x1ad/0x720
[  397.860755][T16496]  security_sk_alloc+0x52/0x360
[  397.860788][T16496]  sk_prot_alloc+0x101/0x210
[  397.860822][T16496]  ? sk_alloc+0x27/0x390
[  397.860849][T16496]  sk_alloc+0x3a/0x390
[  397.860880][T16496]  bpf_prog_test_run_skb+0x3a6/0x2230
[  397.860932][T16496]  ? __fget_files+0x3a2/0x420
[  397.860962][T16496]  ? __fget_files+0x2a/0x420
[  397.860997][T16496]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  397.861026][T16496]  bpf_prog_test_run+0x2c5/0x340
[  397.861063][T16496]  __sys_bpf+0xa22/0xd90
[  397.861101][T16496]  ? __pfx___sys_bpf+0x10/0x10
[  397.861148][T16496]  ? __fget_files+0x2a/0x420
[  397.861197][T16496]  ? ksys_write+0x242/0x270
[  397.861221][T16496]  ? __pfx_ksys_write+0x10/0x10
[  397.861249][T16496]  __x64_sys_bpf+0xba/0xd0
[  397.861276][T16496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.861301][T16496]  do_syscall_64+0x174/0x580
[  397.861330][T16496]  ? trace_irq_disable+0x3b/0x140
[  397.861358][T16496]  ? clear_bhb_loop+0x40/0x90
[  397.861386][T16496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.861409][T16496] RIP: 0033:0x7feb1659e019
[  397.861429][T16496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.861448][T16496] RSP: 002b:00007feb17416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  397.861471][T16496] RAX: ffffffffffffffda RBX: 00007feb16825fa0 RCX: 00007feb1659e019
[  397.861487][T16496] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  397.861501][T16496] RBP: 00007feb17416090 R08: 0000000000000000 R09: 0000000000000000
[  397.861515][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.861527][T16496] R13: 00007feb16826038 R14: 00007feb16825fa0 R15: 00007ffddf04bdb8
[  397.861562][T16496]  </TASK>
[  398.156111][T16503] netlink: 'syz.1.2870': attribute type 1 has an invalid length.
[  398.349324][T16503] 8021q: adding VLAN 0 to HW filter on device bond10
[  398.447570][T16508] bond10: entered promiscuous mode
[  398.453324][T16508] bond10: entered allmulticast mode
[  398.522865][T16512] bond10: (slave dummy0): making interface the new active one
[  398.560010][T16512] dummy0: entered promiscuous mode
[  398.568710][T16512] dummy0: entered allmulticast mode
[  398.601103][T16512] bond10: (slave dummy0): Enslaving as an active interface with an up link
[  398.665042][T16513] bond13: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  398.680214][T16513] bond13 (unregistering): Released all slaves
[  398.755066][T16523] syzkaller0: left promiscuous mode
[  398.779699][T16523] syzkaller0: left allmulticast mode
[  398.797341][T16523] tipc: Resetting bearer <eth:syzkaller0>
[  399.753851][T16569] FAULT_INJECTION: forcing a failure.
[  399.753851][T16569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  399.767187][T16569] CPU: 0 UID: 0 PID: 16569 Comm: syz.1.2885 Not tainted syzkaller #0 PREEMPT(full) 
[  399.767217][T16569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.767230][T16569] Call Trace:
[  399.767239][T16569]  <TASK>
[  399.767248][T16569]  dump_stack_lvl+0xe8/0x150
[  399.767287][T16569]  should_fail_ex+0x40c/0x560
[  399.767322][T16569]  strncpy_from_user+0x36/0x2c0
[  399.767465][T16569]  strncpy_from_user_nofault+0x71/0x150
[  399.767514][T16569]  bpf_probe_read_user_str+0x2a/0x70
[  399.767537][T16569]  ? bpf_test_run+0x1d1/0x830
[  399.767565][T16569]  bpf_prog_773e9060f951ddb2+0x46/0x4c
[  399.767586][T16569]  bpf_test_run+0x354/0x830
[  399.767639][T16569]  ? __pfx_bpf_test_run+0x10/0x10
[  399.767687][T16569]  ? csum_partial+0x239/0x2c0
[  399.767719][T16569]  ? bpf_prog_test_run_skb+0x903/0x2230
[  399.767747][T16569]  ? convert___skb_to_skb+0x3d/0x5b0
[  399.767778][T16569]  bpf_prog_test_run_skb+0xe35/0x2230
[  399.767828][T16569]  ? __fget_files+0x3a2/0x420
[  399.767858][T16569]  ? __fget_files+0x2a/0x420
[  399.767892][T16569]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  399.767921][T16569]  bpf_prog_test_run+0x2c5/0x340
[  399.767957][T16569]  __sys_bpf+0xa22/0xd90
[  399.767995][T16569]  ? __pfx___sys_bpf+0x10/0x10
[  399.768037][T16569]  ? __fget_files+0x2a/0x420
[  399.768087][T16569]  ? ksys_write+0x242/0x270
[  399.768111][T16569]  ? __pfx_ksys_write+0x10/0x10
[  399.768139][T16569]  __x64_sys_bpf+0xba/0xd0
[  399.768165][T16569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.768190][T16569]  do_syscall_64+0x174/0x580
[  399.768221][T16569]  ? trace_irq_disable+0x3b/0x140
[  399.768248][T16569]  ? clear_bhb_loop+0x40/0x90
[  399.768276][T16569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.768297][T16569] RIP: 0033:0x7f33f799e019
[  399.768317][T16569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.768335][T16569] RSP: 002b:00007f33f881b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  399.768358][T16569] RAX: ffffffffffffffda RBX: 00007f33f7c25fa0 RCX: 00007f33f799e019
[  399.768374][T16569] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  399.768388][T16569] RBP: 00007f33f881b090 R08: 0000000000000000 R09: 0000000000000000
[  399.768401][T16569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.768413][T16569] R13: 00007f33f7c26038 R14: 00007f33f7c25fa0 R15: 00007ffce673b628
[  399.768448][T16569]  </TASK>
[  400.065544][T16575] netlink: 'syz.0.2887': attribute type 8 has an invalid length.
[  400.097030][T16573] 8021q: VLANs not supported on vcan0
[  400.410043][T16589] ªªªªªª: renamed from vlan0 (while UP)
[  400.703755][T16606] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  400.935169][T16608] ±ÿ€: left allmulticast mode
[  401.006167][T16611] __nla_validate_parse: 5 callbacks suppressed
[  401.006188][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'.
[  401.050633][T16615] FAULT_INJECTION: forcing a failure.
[  401.050633][T16615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.063841][T16615] CPU: 0 UID: 0 PID: 16615 Comm: syz.4.2899 Not tainted syzkaller #0 PREEMPT(full) 
[  401.063870][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  401.063883][T16615] Call Trace:
[  401.063892][T16615]  <TASK>
[  401.063901][T16615]  dump_stack_lvl+0xe8/0x150
[  401.063940][T16615]  should_fail_ex+0x40c/0x560
[  401.063975][T16615]  strncpy_from_user+0x36/0x2c0
[  401.064007][T16615]  strncpy_from_user_nofault+0x71/0x150
[  401.064041][T16615]  bpf_probe_read_user_str+0x2a/0x70
[  401.064064][T16615]  ? bpf_test_run+0x1d1/0x830
[  401.064092][T16615]  bpf_prog_773e9060f951ddb2+0x46/0x4c
[  401.064115][T16615]  bpf_test_run+0x5c9/0x830
[  401.064168][T16615]  ? __pfx_bpf_test_run+0x10/0x10
[  401.064209][T16615]  ? csum_partial+0x239/0x2c0
[  401.064243][T16615]  ? bpf_prog_test_run_skb+0x903/0x2230
[  401.064270][T16615]  ? convert___skb_to_skb+0x3d/0x5b0
[  401.064301][T16615]  bpf_prog_test_run_skb+0xe35/0x2230
[  401.064351][T16615]  ? __fget_files+0x3a2/0x420
[  401.064382][T16615]  ? __fget_files+0x2a/0x420
[  401.064417][T16615]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  401.064447][T16615]  bpf_prog_test_run+0x2c5/0x340
[  401.064483][T16615]  __sys_bpf+0xa22/0xd90
[  401.064522][T16615]  ? __pfx___sys_bpf+0x10/0x10
[  401.064572][T16615]  ? __fget_files+0x2a/0x420
[  401.064621][T16615]  ? ksys_write+0x242/0x270
[  401.064645][T16615]  ? __pfx_ksys_write+0x10/0x10
[  401.064673][T16615]  __x64_sys_bpf+0xba/0xd0
[  401.064700][T16615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.064725][T16615]  do_syscall_64+0x174/0x580
[  401.064755][T16615]  ? trace_irq_disable+0x3b/0x140
[  401.064783][T16615]  ? clear_bhb_loop+0x40/0x90
[  401.064811][T16615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.064832][T16615] RIP: 0033:0x7feb1659e019
[  401.064853][T16615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.064871][T16615] RSP: 002b:00007feb17416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  401.064896][T16615] RAX: ffffffffffffffda RBX: 00007feb16825fa0 RCX: 00007feb1659e019
[  401.064912][T16615] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  401.064926][T16615] RBP: 00007feb17416090 R08: 0000000000000000 R09: 0000000000000000
[  401.064940][T16615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.064952][T16615] R13: 00007feb16826038 R14: 00007feb16825fa0 R15: 00007ffddf04bdb8
[  401.064989][T16615]  </TASK>
[  401.085282][T16611] team1: entered promiscuous mode
[  401.127252][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'.
[  401.152594][T16611] team1: entered allmulticast mode
[  401.163102][T16611] 8021q: adding VLAN 0 to HW filter on device team1
[  401.540516][T16618] team2: entered promiscuous mode
[  401.545882][T16618] team2: entered allmulticast mode
[  401.552827][T16618] 8021q: adding VLAN 0 to HW filter on device team2
[  401.608048][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'.
[  401.664966][T16633] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2903'.
[  402.087605][T16649] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2908'.
[  402.142634][T16649] IPv6: sit3: Disabled Multicast RS
[  402.301402][T16662] netlink: 'syz.4.2907': attribute type 1 has an invalid length.
[  402.333746][T16662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2907'.
[  402.375373][T16669] FAULT_INJECTION: forcing a failure.
[  402.375373][T16669] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.378019][T16662] netlink: 'syz.4.2907': attribute type 1 has an invalid length.
[  402.388571][T16669] CPU: 1 UID: 0 PID: 16669 Comm: syz.2.2911 Not tainted syzkaller #0 PREEMPT(full) 
[  402.388636][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  402.388686][T16669] Call Trace:
[  402.388721][T16669]  <TASK>
[  402.388737][T16669]  dump_stack_lvl+0xe8/0x150
[  402.388856][T16669]  should_fail_ex+0x40c/0x560
[  402.388934][T16669]  strncpy_from_user+0x36/0x2c0
[  402.389020][T16669]  strncpy_from_user_nofault+0x71/0x150
[  402.389102][T16669]  bpf_probe_read_user_str+0x2a/0x70
[  402.389179][T16669]  ? bpf_test_run+0x1d1/0x830
[  402.389253][T16669]  bpf_prog_773e9060f951ddb2+0x46/0x4c
[  402.389315][T16669]  bpf_test_run+0x354/0x830
[  402.389453][T16669]  ? __pfx_bpf_test_run+0x10/0x10
[  402.389552][T16669]  ? csum_partial+0x239/0x2c0
[  402.389683][T16669]  ? bpf_prog_test_run_skb+0x903/0x2230
[  402.389758][T16669]  ? convert___skb_to_skb+0x3d/0x5b0
[  402.389834][T16669]  bpf_prog_test_run_skb+0xe35/0x2230
[  402.389975][T16669]  ? __fget_files+0x3a2/0x420
[  402.390055][T16669]  ? __fget_files+0x2a/0x420
[  402.390173][T16669]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  402.390253][T16669]  bpf_prog_test_run+0x2c5/0x340
[  402.390349][T16669]  __sys_bpf+0xa22/0xd90
[  402.390455][T16669]  ? __pfx___sys_bpf+0x10/0x10
[  402.390560][T16669]  ? __fget_files+0x2a/0x420
[  402.390696][T16669]  ? ksys_write+0x242/0x270
[  402.390778][T16669]  ? __pfx_ksys_write+0x10/0x10
[  402.390853][T16669]  __x64_sys_bpf+0xba/0xd0
[  402.390918][T16669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.390985][T16669]  do_syscall_64+0x174/0x580
[  402.391067][T16669]  ? trace_irq_disable+0x3b/0x140
[  402.391141][T16669]  ? clear_bhb_loop+0x40/0x90
[  402.391207][T16669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.391270][T16669] RIP: 0033:0x7f0d8fb9e019
[  402.391322][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.391367][T16669] RSP: 002b:00007f0d8ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  402.391428][T16669] RAX: ffffffffffffffda RBX: 00007f0d8fe25fa0 RCX: 00007f0d8fb9e019
[  402.391485][T16669] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  402.391532][T16669] RBP: 00007f0d8ddf6090 R08: 0000000000000000 R09: 0000000000000000
[  402.391579][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.391611][T16669] R13: 00007f0d8fe26038 R14: 00007f0d8fe25fa0 R15: 00007ffc076581d8
[  402.391703][T16669]  </TASK>
[  402.702314][T16645] No such timeout policy "syz1"
[  403.095836][T16688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2915'.
[  403.152916][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2917'.
[  403.172712][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2917'.
[  403.182819][T16690] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2917'.
[  403.192747][T16698] netlink: 'syz.0.2919': attribute type 1 has an invalid length.
[  403.201256][T16698] netlink: 'syz.0.2919': attribute type 1 has an invalid length.
[  403.650782][T16713] FAULT_INJECTION: forcing a failure.
[  403.650782][T16713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.664012][T16713] CPU: 1 UID: 0 PID: 16713 Comm: syz.1.2923 Not tainted syzkaller #0 PREEMPT(full) 
[  403.664042][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  403.664056][T16713] Call Trace:
[  403.664065][T16713]  <TASK>
[  403.664074][T16713]  dump_stack_lvl+0xe8/0x150
[  403.664112][T16713]  should_fail_ex+0x40c/0x560
[  403.664147][T16713]  strncpy_from_user+0x36/0x2c0
[  403.664180][T16713]  strncpy_from_user_nofault+0x71/0x150
[  403.664213][T16713]  bpf_probe_read_user_str+0x2a/0x70
[  403.664237][T16713]  ? bpf_test_run+0x1d1/0x830
[  403.664264][T16713]  bpf_prog_773e9060f951ddb2+0x46/0x4c
[  403.664286][T16713]  bpf_test_run+0x354/0x830
[  403.664339][T16713]  ? __pfx_bpf_test_run+0x10/0x10
[  403.664380][T16713]  ? csum_partial+0x239/0x2c0
[  403.664413][T16713]  ? bpf_prog_test_run_skb+0x903/0x2230
[  403.664441][T16713]  ? convert___skb_to_skb+0x3d/0x5b0
[  403.664481][T16713]  bpf_prog_test_run_skb+0xe35/0x2230
[  403.664533][T16713]  ? __fget_files+0x3a2/0x420
[  403.664564][T16713]  ? __fget_files+0x2a/0x420
[  403.664599][T16713]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  403.664628][T16713]  bpf_prog_test_run+0x2c5/0x340
[  403.664665][T16713]  __sys_bpf+0xa22/0xd90
[  403.664704][T16713]  ? __pfx___sys_bpf+0x10/0x10
[  403.664746][T16713]  ? __fget_files+0x2a/0x420
[  403.664795][T16713]  ? ksys_write+0x242/0x270
[  403.664820][T16713]  ? __pfx_ksys_write+0x10/0x10
[  403.664848][T16713]  __x64_sys_bpf+0xba/0xd0
[  403.664875][T16713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.664899][T16713]  do_syscall_64+0x174/0x580
[  403.664927][T16713]  ? trace_irq_disable+0x3b/0x140
[  403.664955][T16713]  ? clear_bhb_loop+0x40/0x90
[  403.664983][T16713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.665005][T16713] RIP: 0033:0x7f33f799e019
[  403.665025][T16713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.665044][T16713] RSP: 002b:00007f33f881b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  403.665068][T16713] RAX: ffffffffffffffda RBX: 00007f33f7c25fa0 RCX: 00007f33f799e019
[  403.665084][T16713] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  403.665098][T16713] RBP: 00007f33f881b090 R08: 0000000000000000 R09: 0000000000000000
[  403.665112][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  403.665125][T16713] R13: 00007f33f7c26038 R14: 00007f33f7c25fa0 R15: 00007ffce673b628
[  403.665161][T16713]  </TASK>
[  404.784208][T16743] FAULT_INJECTION: forcing a failure.
[  404.784208][T16743] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.797431][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.0.2935 Not tainted syzkaller #0 PREEMPT(full) 
[  404.797462][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  404.797475][T16743] Call Trace:
[  404.797483][T16743]  <TASK>
[  404.797492][T16743]  dump_stack_lvl+0xe8/0x150
[  404.797531][T16743]  should_fail_ex+0x40c/0x560
[  404.797565][T16743]  strncpy_from_user+0x36/0x2c0
[  404.797597][T16743]  strncpy_from_user_nofault+0x71/0x150
[  404.797627][T16743]  bpf_probe_read_user_str+0x2a/0x70
[  404.797650][T16743]  ? bpf_test_run+0x1d1/0x830
[  404.797680][T16743]  bpf_prog_773e9060f951ddb2+0x46/0x4c
[  404.797702][T16743]  bpf_test_run+0x354/0x830
[  404.797752][T16743]  ? __pfx_bpf_test_run+0x10/0x10
[  404.797792][T16743]  ? csum_partial+0x239/0x2c0
[  404.797826][T16743]  ? bpf_prog_test_run_skb+0x903/0x2230
[  404.797854][T16743]  ? convert___skb_to_skb+0x3d/0x5b0
[  404.797886][T16743]  bpf_prog_test_run_skb+0xe35/0x2230
[  404.797936][T16743]  ? __fget_files+0x3a2/0x420
[  404.797967][T16743]  ? __fget_files+0x2a/0x420
[  404.798015][T16743]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  404.798042][T16743]  bpf_prog_test_run+0x2c5/0x340
[  404.798078][T16743]  __sys_bpf+0xa22/0xd90
[  404.798116][T16743]  ? __pfx___sys_bpf+0x10/0x10
[  404.798157][T16743]  ? __fget_files+0x2a/0x420
[  404.798203][T16743]  ? ksys_write+0x242/0x270
[  404.798227][T16743]  ? __pfx_ksys_write+0x10/0x10
[  404.798253][T16743]  __x64_sys_bpf+0xba/0xd0
[  404.798290][T16743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.798315][T16743]  do_syscall_64+0x174/0x580
[  404.798345][T16743]  ? trace_irq_disable+0x3b/0x140
[  404.798372][T16743]  ? clear_bhb_loop+0x40/0x90
[  404.798398][T16743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.798419][T16743] RIP: 0033:0x7ff03039e019
[  404.798439][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.798456][T16743] RSP: 002b:00007ff031237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  404.798479][T16743] RAX: ffffffffffffffda RBX: 00007ff030625fa0 RCX: 00007ff03039e019
[  404.798494][T16743] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  404.798507][T16743] RBP: 00007ff031237090 R08: 0000000000000000 R09: 0000000000000000
[  404.798521][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  404.798533][T16743] R13: 00007ff030626038 R14: 00007ff030625fa0 R15: 00007ffff23b2f08
[  404.798567][T16743]  </TASK>
[  405.146540][T16749] netlink: 'syz.1.2937': attribute type 1 has an invalid length.
[  405.341884][T16749] bond11: entered promiscuous mode
[  405.356047][T16749] 8021q: adding VLAN 0 to HW filter on device bond11
[  405.413877][T16751] bond11: (slave veth3): making interface the new active one
[  405.437478][T16751] veth3: entered promiscuous mode
[  405.445846][T16751] bond11: (slave veth3): Enslaving as an active interface with an up link
[  405.532441][T16740] syzkaller0: entered promiscuous mode
[  405.540282][T16740] syzkaller0: entered allmulticast mode
[  405.845212][T16781] FAULT_INJECTION: forcing a failure.
[  405.845212][T16781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.858422][T16781] CPU: 0 UID: 0 PID: 16781 Comm: syz.0.2946 Not tainted syzkaller #0 PREEMPT(full) 
[  405.858452][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  405.858466][T16781] Call Trace:
[  405.858475][T16781]  <TASK>
[  405.858485][T16781]  dump_stack_lvl+0xe8/0x150
[  405.858526][T16781]  should_fail_ex+0x40c/0x560
[  405.858561][T16781]  strncpy_from_user+0x36/0x2c0
[  405.858594][T16781]  strncpy_from_user_nofault+0x71/0x150
[  405.858627][T16781]  bpf_probe_read_user_str+0x2a/0x70
[  405.858650][T16781]  ? bpf_test_run+0x1d1/0x830
[  405.858679][T16781]  bpf_prog_773e9060f951ddb2+0x46/0x4c
[  405.858702][T16781]  bpf_test_run+0x354/0x830
[  405.858754][T16781]  ? __pfx_bpf_test_run+0x10/0x10
[  405.858795][T16781]  ? csum_partial+0x239/0x2c0
[  405.858828][T16781]  ? bpf_prog_test_run_skb+0x903/0x2230
[  405.858857][T16781]  ? convert___skb_to_skb+0x3d/0x5b0
[  405.858889][T16781]  bpf_prog_test_run_skb+0xe35/0x2230
[  405.858940][T16781]  ? __fget_files+0x3a2/0x420
[  405.858970][T16781]  ? __fget_files+0x2a/0x420
[  405.859006][T16781]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  405.859035][T16781]  bpf_prog_test_run+0x2c5/0x340
[  405.859070][T16781]  __sys_bpf+0xa22/0xd90
[  405.859110][T16781]  ? __pfx___sys_bpf+0x10/0x10
[  405.859151][T16781]  ? __fget_files+0x2a/0x420
[  405.859201][T16781]  ? ksys_write+0x242/0x270
[  405.859224][T16781]  ? __pfx_ksys_write+0x10/0x10
[  405.859251][T16781]  __x64_sys_bpf+0xba/0xd0
[  405.859277][T16781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.859310][T16781]  do_syscall_64+0x174/0x580
[  405.859340][T16781]  ? trace_irq_disable+0x3b/0x140
[  405.859369][T16781]  ? clear_bhb_loop+0x40/0x90
[  405.859396][T16781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.859418][T16781] RIP: 0033:0x7ff03039e019
[  405.859438][T16781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.859457][T16781] RSP: 002b:00007ff031237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  405.859481][T16781] RAX: ffffffffffffffda RBX: 00007ff030625fa0 RCX: 00007ff03039e019
[  405.859497][T16781] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a
[  405.859515][T16781] RBP: 00007ff031237090 R08: 0000000000000000 R09: 0000000000000000
[  405.859528][T16781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  405.859539][T16781] R13: 00007ff030626038 R14: 00007ff030625fa0 R15: 00007ffff23b2f08
[  405.859573][T16781]  </TASK>
[  406.205576][T16786] __nla_validate_parse: 8 callbacks suppressed
[  406.205611][T16786] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2947'.
[  406.254707][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2947'.
[  406.500045][T16797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2951'.
[  406.536996][T16797] syzkaller0: entered promiscuous mode
[  406.549688][T16797] syzkaller0: entered allmulticast mode
[  406.673603][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'.
[  406.842881][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2954'.
[  406.918688][T16806] 8021q: adding VLAN 0 to HW filter on device bond7
[  406.951188][T16819] 8021q: adding VLAN 0 to HW filter on device bond7
[  406.958740][T16819] bond7: (slave nlmon0): The slave device specified does not support setting the MAC address
[  406.973155][T16819] bond7: (slave nlmon0): Error -95 calling set_mac_address
[  406.996980][T16806] bond7: entered promiscuous mode
[  407.015308][T16806] bond7: entered allmulticast mode
[  407.110538][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'.
[  407.398688][T16814] syzkaller0: entered promiscuous mode
[  407.409664][T16814] syzkaller0: entered allmulticast mode
[  407.575018][T16840] dvmrp0: entered allmulticast mode
[  407.719202][T16847] xt_l2tp: invalid flags combination: 8
[  408.020417][T16849] syzkaller0: entered promiscuous mode
[  408.043262][T16849] syzkaller0: entered allmulticast mode
[  414.589949][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  414.590668][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  414.658882][T16887] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  414.892261][T16918] sctp: [Deprecated]: syz.4.2976 (pid 16918) Use of struct sctp_assoc_value in delayed_ack socket option.
[  414.892261][T16918] Use struct sctp_sack_info instead
[  414.911373][T16917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'.
[  414.932745][T16917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2975'.
[  415.582007][    C0] ------------[ cut here ]------------
[  415.587791][    C0] refcount_t: underflow; use-after-free.
[  415.595037][    C0] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#0: syz-executor/5624
[  415.605259][    C0] Modules linked in:
[  415.611334][    C0] CPU: 0 UID: 0 PID: 5624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  415.620934][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  415.631073][    C0] RIP: 0010:refcount_warn_saturate+0xb2/0x110
[  415.637220][    C0] Code: 54 b3 8e 0b 67 48 0f b9 3a eb 4a e8 b8 21 f3 fc 48 8d 3d 51 b3 8e 0b 67 48 0f b9 3a eb 37 e8 a5 21 f3 fc 48 8d 3d 4e b3 8e 0b <67> 48 0f b9 3a eb 24 e8 92 21 f3 fc 48 8d 3d 4b b3 8e 0b 67 48 0f
[  415.657041][    C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00010246
[  415.663226][    C0] RAX: ffffffff84d3f25b RBX: 0000000000000003 RCX: ffff8880337b8000
[  415.671306][    C0] RDX: 0000000000000100 RSI: ffffffff8f3652c0 RDI: ffffffff9062a5b0
[  415.679359][    C0] RBP: ffffc90000007d70 R08: ffff8880337b8000 R09: 0000000000000005
[  415.687469][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: 0000000000000000
[  415.695547][    C0] R13: 0000000100002c63 R14: ffff88801e6ff020 R15: ffff88801e6ff168
[  415.703631][    C0] FS:  0000555564cdc500(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000
[  415.712741][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  415.719382][    C0] CR2: 00007f33f7bed158 CR3: 000000005e6ec000 CR4: 00000000003526f0
[  415.727469][    C0] Call Trace:
[  415.730832][    C0]  <IRQ>
[  415.733726][    C0]  call_timer_fn+0x192/0x5e0
[  415.738410][    C0]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  415.744887][    C0]  ? call_timer_fn+0xd4/0x5e0
[  415.749652][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  415.754823][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  415.760242][    C0]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  415.766540][    C0]  __run_timer_base+0x652/0x8b0
[  415.771504][    C0]  ? ktime_get+0x45/0x220
[  415.775907][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  415.781407][    C0]  ? ktime_get+0x1f5/0x220
[  415.785889][    C0]  ? lapic_next_event+0x11/0x20
[  415.790921][    C0]  run_timer_softirq+0xb7/0x170
[  415.795840][    C0]  handle_softirqs+0x225/0x840
[  415.800741][    C0]  ? __irq_exit_rcu+0xca/0x220
[  415.805568][    C0]  __irq_exit_rcu+0xca/0x220
[  415.810267][    C0]  irq_exit_rcu+0x9/0x30
[  415.814621][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  415.820477][    C0]  </IRQ>
[  415.823459][    C0]  <TASK>
[  415.826439][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  415.832551][    C0] RIP: 0010:lock_acquire+0x221/0x350
[  415.837913][    C0] Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 16 b8
[  415.857631][    C0] RSP: 0018:ffffc900042df690 EFLAGS: 00000286
[  415.863796][    C0] RAX: 31cbd4cd9db52d00 RBX: 0000000000000000 RCX: 0000000080000002
[  415.871893][    C0] RDX: 00000000e306de71 RSI: ffffffff8e4b6387 RDI: ffffffff8c4bdd80
[  415.879971][    C0] RBP: ffffffff8225f924 R08: ffffffff8225f924 R09: 0000000000000000
[  415.887997][    C0] R10: 0000000000008000 R11: ffff8880b8641098 R12: 0000000000000000
[  415.896049][    C0] R13: ffff8880b8641098 R14: 0000000000000001 R15: 0000000000000246
[  415.904213][    C0]  ? __free_frozen_pages+0x7b4/0xd10
[  415.909654][    C0]  ? __free_frozen_pages+0x7b4/0xd10
[  415.915026][    C0]  _raw_spin_trylock+0x47/0x80
[  415.919881][    C0]  ? __free_frozen_pages+0x7b4/0xd10
[  415.925242][    C0]  __free_frozen_pages+0x7b4/0xd10
[  415.930467][    C0]  __free_contig_range_common+0x2d1/0x340
[  415.936253][    C0]  free_pages_bulk+0x48/0x120
[  415.941049][    C0]  vfree+0x224/0x4a0
[  415.945013][    C0]  do_ipt_get_ctl+0xf57/0x1300
[  415.950009][    C0]  ? reacquire_held_locks+0x104/0x190
[  415.955482][    C0]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  415.960787][    C0]  ? do_ip_getsockopt+0x12fb/0x1d00
[  415.966165][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  415.971561][    C0]  ? __mutex_trylock_common+0x15f/0x270
[  415.977171][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  415.983172][    C0]  ? rcu_is_watching+0x15/0xb0
[  415.987996][    C0]  ? trace_contention_end+0x3d/0x140
[  415.993392][    C0]  ? nf_getsockopt+0x224/0x290
[  415.998322][    C0]  ? __mutex_unlock_slowpath+0x731/0x900
[  416.004070][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  416.010150][    C0]  ? __might_fault+0xaf/0x130
[  416.014905][    C0]  nf_getsockopt+0x26e/0x290
[  416.019589][    C0]  ip_getsockopt+0x19e/0x230
[  416.024247][    C0]  ? __pfx_ip_getsockopt+0x10/0x10
[  416.029434][    C0]  ? sock_common_getsockopt+0x2d/0xb0
[  416.034916][    C0]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  416.041484][    C0]  do_sock_getsockopt+0x51d/0x7e0
[  416.046581][    C0]  ? file_init_path+0x3b/0x5a0
[  416.051452][    C0]  ? errseq_sample+0x40/0x70
[  416.056113][    C0]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  416.061764][    C0]  ? fd_install+0x94/0x3d0
[  416.066274][    C0]  __x64_sys_getsockopt+0x1a4/0x240
[  416.071580][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.077714][    C0]  do_syscall_64+0x174/0x580
[  416.082412][    C0]  ? trace_irq_disable+0x3b/0x140
[  416.087514][    C0]  ? clear_bhb_loop+0x40/0x90
[  416.092296][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.098264][    C0] RIP: 0033:0x7f33f799f7ea
[  416.102778][    C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  416.122561][    C0] RSP: 002b:00007ffce673b298 EFLAGS: 00000202 ORIG_RAX: 0000000000000037
[  416.131077][    C0] RAX: ffffffffffffffda RBX: 00007ffce673b320 RCX: 00007f33f799f7ea
[  416.139111][    C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  416.147174][    C0] RBP: 0000000000000003 R08: 00007ffce673b2bc R09: 0000000000000000
[  416.155249][    C0] R10: 00007ffce673b320 R11: 0000000000000202 R12: 00007f33f7bf0680
[  416.163328][    C0] R13: 00007ffce673b2bc R14: 0000000000000000 R15: 00007f33f7bf2180
[  416.171415][    C0]  </TASK>
[  416.174503][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  416.181831][    C0] CPU: 0 UID: 0 PID: 5624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  416.191334][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  416.201443][    C0] Call Trace:
[  416.204764][    C0]  <IRQ>
[  416.207645][    C0]  vpanic+0x56c/0xa60
[  416.211731][    C0]  ? __pfx__printk+0x10/0x10
[  416.216371][    C0]  ? __pfx_vpanic+0x10/0x10
[  416.220963][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  416.226315][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  416.231581][    C0]  panic+0xc5/0xd0
[  416.235386][    C0]  ? __pfx_panic+0x10/0x10
[  416.239954][    C0]  __warn+0x315/0x4c0
[  416.243998][    C0]  ? refcount_warn_saturate+0xb2/0x110
[  416.249644][    C0]  ? refcount_warn_saturate+0xb2/0x110
[  416.255153][    C0]  __report_bug+0x276/0x570
[  416.259854][    C0]  ? refcount_warn_saturate+0xb2/0x110
[  416.265373][    C0]  ? __pfx___report_bug+0x10/0x10
[  416.270475][    C0]  report_bug_entry+0x19a/0x290
[  416.275381][    C0]  ? refcount_warn_saturate+0xb2/0x110
[  416.280947][    C0]  ? refcount_warn_saturate+0xb7/0x110
[  416.286450][    C0]  handle_bug+0xce/0x200
[  416.290743][    C0]  exc_invalid_op+0x1a/0x50
[  416.295307][    C0]  asm_exc_invalid_op+0x1a/0x20
[  416.300209][    C0] RIP: 0010:refcount_warn_saturate+0xb2/0x110
[  416.306333][    C0] Code: 54 b3 8e 0b 67 48 0f b9 3a eb 4a e8 b8 21 f3 fc 48 8d 3d 51 b3 8e 0b 67 48 0f b9 3a eb 37 e8 a5 21 f3 fc 48 8d 3d 4e b3 8e 0b <67> 48 0f b9 3a eb 24 e8 92 21 f3 fc 48 8d 3d 4b b3 8e 0b 67 48 0f
[  416.325998][    C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00010246
[  416.332143][    C0] RAX: ffffffff84d3f25b RBX: 0000000000000003 RCX: ffff8880337b8000
[  416.340169][    C0] RDX: 0000000000000100 RSI: ffffffff8f3652c0 RDI: ffffffff9062a5b0
[  416.348192][    C0] RBP: ffffc90000007d70 R08: ffff8880337b8000 R09: 0000000000000005
[  416.356219][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: 0000000000000000
[  416.364247][    C0] R13: 0000000100002c63 R14: ffff88801e6ff020 R15: ffff88801e6ff168
[  416.372303][    C0]  ? refcount_warn_saturate+0xab/0x110
[  416.377841][    C0]  ? refcount_warn_saturate+0xab/0x110
[  416.383374][    C0]  call_timer_fn+0x192/0x5e0
[  416.388028][    C0]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  416.394340][    C0]  ? call_timer_fn+0xd4/0x5e0
[  416.399094][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  416.404288][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  416.409554][    C0]  ? __pfx_sctp_generate_t3_rtx_event+0x10/0x10
[  416.415856][    C0]  __run_timer_base+0x652/0x8b0
[  416.420777][    C0]  ? ktime_get+0x45/0x220
[  416.425188][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  416.430630][    C0]  ? ktime_get+0x1f5/0x220
[  416.435109][    C0]  ? lapic_next_event+0x11/0x20
[  416.440027][    C0]  run_timer_softirq+0xb7/0x170
[  416.444937][    C0]  handle_softirqs+0x225/0x840
[  416.449763][    C0]  ? __irq_exit_rcu+0xca/0x220
[  416.454590][    C0]  __irq_exit_rcu+0xca/0x220
[  416.459236][    C0]  irq_exit_rcu+0x9/0x30
[  416.463540][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  416.469240][    C0]  </IRQ>
[  416.472225][    C0]  <TASK>
[  416.475201][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  416.481246][    C0] RIP: 0010:lock_acquire+0x221/0x350
[  416.486634][    C0] Code: ff ff ff e8 61 5f 2f 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 78 16 b8
[  416.506304][    C0] RSP: 0018:ffffc900042df690 EFLAGS: 00000286
[  416.512437][    C0] RAX: 31cbd4cd9db52d00 RBX: 0000000000000000 RCX: 0000000080000002
[  416.520465][    C0] RDX: 00000000e306de71 RSI: ffffffff8e4b6387 RDI: ffffffff8c4bdd80
[  416.528573][    C0] RBP: ffffffff8225f924 R08: ffffffff8225f924 R09: 0000000000000000
[  416.536605][    C0] R10: 0000000000008000 R11: ffff8880b8641098 R12: 0000000000000000
[  416.544640][    C0] R13: ffff8880b8641098 R14: 0000000000000001 R15: 0000000000000246
[  416.552668][    C0]  ? __free_frozen_pages+0x7b4/0xd10
[  416.558023][    C0]  ? __free_frozen_pages+0x7b4/0xd10
[  416.563394][    C0]  _raw_spin_trylock+0x47/0x80
[  416.568222][    C0]  ? __free_frozen_pages+0x7b4/0xd10
[  416.573593][    C0]  __free_frozen_pages+0x7b4/0xd10
[  416.578788][    C0]  __free_contig_range_common+0x2d1/0x340
[  416.584585][    C0]  free_pages_bulk+0x48/0x120
[  416.589372][    C0]  vfree+0x224/0x4a0
[  416.593345][    C0]  do_ipt_get_ctl+0xf57/0x1300
[  416.598177][    C0]  ? reacquire_held_locks+0x104/0x190
[  416.603652][    C0]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  416.608929][    C0]  ? do_ip_getsockopt+0x12fb/0x1d00
[  416.614171][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  416.619538][    C0]  ? __mutex_trylock_common+0x15f/0x270
[  416.625141][    C0]  ? __pfx___mutex_trylock_common+0x10/0x10
[  416.631069][    C0]  ? rcu_is_watching+0x15/0xb0
[  416.635889][    C0]  ? trace_contention_end+0x3d/0x140
[  416.641212][    C0]  ? nf_getsockopt+0x224/0x290
[  416.646030][    C0]  ? __mutex_unlock_slowpath+0x731/0x900
[  416.651723][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  416.657762][    C0]  ? __might_fault+0xaf/0x130
[  416.662472][    C0]  nf_getsockopt+0x26e/0x290
[  416.667088][    C0]  ip_getsockopt+0x19e/0x230
[  416.671733][    C0]  ? __pfx_ip_getsockopt+0x10/0x10
[  416.676881][    C0]  ? sock_common_getsockopt+0x2d/0xb0
[  416.682290][    C0]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  416.688197][    C0]  do_sock_getsockopt+0x51d/0x7e0
[  416.693239][    C0]  ? file_init_path+0x3b/0x5a0
[  416.698032][    C0]  ? errseq_sample+0x40/0x70
[  416.702660][    C0]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  416.708267][    C0]  ? fd_install+0x94/0x3d0
[  416.712769][    C0]  __x64_sys_getsockopt+0x1a4/0x240
[  416.717995][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.724080][    C0]  do_syscall_64+0x174/0x580
[  416.728718][    C0]  ? trace_irq_disable+0x3b/0x140
[  416.733781][    C0]  ? clear_bhb_loop+0x40/0x90
[  416.738505][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.744432][    C0] RIP: 0033:0x7f33f799f7ea
[  416.748863][    C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  416.768484][    C0] RSP: 002b:00007ffce673b298 EFLAGS: 00000202 ORIG_RAX: 0000000000000037
[  416.776922][    C0] RAX: ffffffffffffffda RBX: 00007ffce673b320 RCX: 00007f33f799f7ea
[  416.784936][    C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  416.792924][    C0] RBP: 0000000000000003 R08: 00007ffce673b2bc R09: 0000000000000000
[  416.800924][    C0] R10: 00007ffce673b320 R11: 0000000000000202 R12: 00007f33f7bf0680
[  416.808912][    C0] R13: 00007ffce673b2bc R14: 0000000000000000 R15: 00007f33f7bf2180
[  416.816915][    C0]  </TASK>
[  416.820711][    C0] Kernel Offset: disabled
[  416.825061][    C0] Rebooting in 86400 seconds..