last executing test programs:

5.575986779s ago: executing program 0 (id=5851):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0)
getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000500)=0x46, 0x4)

5.437676039s ago: executing program 0 (id=5855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

5.352638621s ago: executing program 0 (id=5856):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}, 0x1c)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x7, &(0x7f0000000100)=[{0x48, 0x0, 0x7, 0x2}, {0x6, 0xfd, 0xee, 0xc2}, {0x55, 0x3, 0x0, 0x10}, {0x9f8, 0x5c, 0x36, 0xa}, {0x1632, 0x4, 0x86, 0x1}, {0x96c, 0x8, 0x8}, {0x2, 0x5}]})
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000540)=0xfff)
write$ppp(r1, &(0x7f00000001c0)="43f1", 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x258, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x80, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x42}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x30}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x122}}, 0x0)

5.152847433s ago: executing program 0 (id=5860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2})
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e14", @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0)
write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40)

4.591270359s ago: executing program 0 (id=5866):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close(r1)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001cc0)={{<r2=>r0, &(0x7f0000000040)='syz0\x00', 0x400, &(0x7f0000000100)={@_ha_fsid={[0x56a, 0x8]}, {0xb41, 0x101, 0x1, 0x8}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}, 0x6, &(0x7f0000001c00)=[{0x3, 0x0, &(0x7f00000001c0)='$/!{\x00', &(0x7f0000000200)="60d1c2ace82da6b06630a439ad02a7496b9826880133dcd9785d1ed516c3a4f710184d0aaa2297c9123e75c1140edb21341391492d0f87e4ccf977a288e31fe2cc83cbd0df67a1887f2378c0749509b4fc3fbba24c6b7b7d4bc4384cd838020dc5c57f53ab24426272c039645ea14e85d94f6656f2f96f41b71e1b2d23b7c82d846bafc9518e", 0x86, 0x30}, {0x3, 0x4, &(0x7f00000002c0)='syz0\x00', &(0x7f0000000880)="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", 0x1000}, {0x3, 0x1, &(0x7f0000001880)='!]{#\x02\x00', &(0x7f00000018c0)="25b44e8943fce83043d2b44a5160e0756a14829053cf7660723831aa4df9aa8ef35ad08b0326e85090feaf339a4805cf9b369e3100dd710b91afd149be944e790a98690840257deb4b429d61aeec50dbcdb45469", 0x54, 0x18}, {0x2, 0xa19, &(0x7f0000001940)='*\x00', &(0x7f0000001980)="396289b8cfc9cb94ec6502eb781700dea67fb0b71b1b5f02aba9ff0d7c91f391ab9374b0b7a8211b39b129b00e23db08803a4190f0dec9b131e40835c60d19fdc6871debe5ad03791d160bafd7230ab606651404b5c242779d0ca8bdce46e88d1fb168d8baac881f7cd144706cb3d6cf2186abef74c28d3436206508fbea7c7ae377636ad6f2a37d1ccd43e22706df3cb141673dff573793e17a0768e5efcf220378f99c63edc458a0e9f90830db2bd5ec28ebfb060368c4104ea72cf240b7bae6da6ff28d9eb186205c3a", 0xcb}, {0x2, 0x81, &(0x7f0000001a80)='\'\x00', &(0x7f0000001ac0)="ec7e27f34a319030d48a1d32dc72205178a5c44e617898ee2d7f8e4c641d139da775b83eb34a108b83447c207c91a21c455fb9f47e8c99cb698309d91ce1f3ade3cffc8899a3ae8f8f6dfb39b4e31b60d70658fc3850c2810f4a621b66724baeb438a6e146316bf116bb96b9ee7fff1804ac332a880c056d954cb3dd9f628a8df0e0e29f6c68b65651cbda6df4d68e15fea6d383646315474c5fc8ecf578dc45b2419f5f3b", 0xa5, 0x20}, {0x3, 0x34, &(0x7f0000001b80)='\x00', &(0x7f0000001bc0)="92df0bb50dd6938c42793d0126b386d81238941a7b1a2b3e31ff1c031bea84843081c0c0da684b8335", 0x29, 0x12}]})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d80), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xa4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffffb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r5 = gettid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2)
sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200026bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8050)

4.508853997s ago: executing program 0 (id=5867):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) (async)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a2020302000b000200ffff4d89004b006500008e739078ac1414aaac1e000144108f90800000000000000800000006010707f135a97a188307e9ac1e0001009863aeb0587110a3991c321e9e71e6e2c866c7adc3b5b7"], 0x59)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r3=>0x0}) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1"], &(0x7f0000000b80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_pressure(r1, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) (async)
write$cgroup_pressure(r2, &(0x7f0000000400)={'some', 0x20, 0x2000000007, 0x20, 0x201000000100001}, 0x2f) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3], 0x124}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) (async, rerun: 64)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3b"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084)
clock_gettime(0x0, &(0x7f0000000340)={<r7=>0x0, <r8=>0x0})
recvmmsg(r5, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r7, r8+60000000})
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r10, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x1)

2.561257885s ago: executing program 3 (id=5896):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4)
r3 = socket$inet6(0xa, 0xa, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x15, 0x0, 0x1}]}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x3, 0x1, 0x9, 0x7, 0x4, 0x8000009, 0x400009, 0xf9, 0xfffffffe, 0x7fffffff, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}})

2.090948623s ago: executing program 1 (id=5898):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e00000000000000", 0x48}], 0x1)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000)

1.968227103s ago: executing program 3 (id=5899):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0)
recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'gre0\x00', r4, 0x40, 0x8000, 0x1, 0x68, {{0x14, 0x4, 0x2, 0x5, 0x50, 0x67, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@cipso={0x86, 0x3a, 0x1, [{0x1, 0x5, "fcbb4e"}, {0x6, 0x3, "d6"}, {0xeb96bda0fd9e4146, 0xe, "91bb454288022d15a6e45a7b"}, {0x1, 0x4, "ed86"}, {0x2, 0x7, "ce5d12d351"}, {0x2, 0x2}, {0x0, 0x11, "f304ea599ead70b716c65c8c9949f8"}]}]}}}}})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0)

1.810492918s ago: executing program 1 (id=5901):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xe, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x10086)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.778253879s ago: executing program 2 (id=5902):
pipe(0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0xbc8)
r0 = socket(0x11, 0x3, 0x0)
setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r1=>0x0})
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_data=&(0x7f0000000580)="77629e9ffe408b0e43366c56b77e81b935d7e1584378dc9ed7c6ed9be933cd1f"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44)
recvmmsg(r3, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000001640)=""/195, 0xc3}, {&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000500)=""/4090, 0xffa}], 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x0, 0x0)

1.636212933s ago: executing program 1 (id=5903):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c0010800400058004004480040002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x108}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x17, 0x0, './file0\x00'}})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000010651fbe347b2c2b00000c0001800800"], 0x20}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x228, r9, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x1e3, 0x2a, [@random_vendor={0xdd, 0xa9, "04d19fd84bc066f13aee5552e12656c517730eba51b93b027429d980e89eb412d428215739fbeff09f9e063f5200f0030682633367c74a987f6a3bd05e567e97d4843d0f0a146d2d58feebb78daa6801d2dca560a0622a49c63a3671e811682bb4973fa9b3d24cecc44c09a1c259963236a29fee762d73bbe9252bc31d6a1dd087ae68ebc4a689af236610a523cff3f139f2516a198b18f51b607bd6ac671dceb4c6fd7bf17b4d2f38"}, @perr={0x84, 0x12f, {0x7, 0x13, [{{}, @broadcast, 0xffffffff, @void, 0x2b}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@broadcast, 0x19}, {{0x0, 0x1}, @broadcast, 0xf, @value=@device_b, 0x3b}, {{0x0, 0x1}, @broadcast, 0xac1, @value, 0x2e}, {{}, @device_a, 0x8, @void, 0x15}, {{}, @broadcast, 0x4c32, @void, 0x2c}, {{}, @device_a, 0x9, @void, 0x2b}, {{}, @device_a, 0xfc, @void, 0x9}, {{}, @device_a, 0x1, @void, 0x35}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@device_b, 0xd}, {{}, @device_a, 0x9, @void, 0x31}, {{0x0, 0x1}, @device_b, 0xd364, @value=@device_b, 0x39}, {{0x0, 0x1}, @device_a, 0xfffffffd, @value=@device_b, 0x9}, {{}, @device_a, 0x401, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x8}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x27}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x3a}, {{}, @device_b, 0x3ff, @void, 0x28}, {{}, @device_a, 0x4, @void, 0x41}]}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x228}, 0x1, 0x0, 0x0, 0x20840}, 0x40)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

1.636095567s ago: executing program 4 (id=5904):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000040012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)

1.591843859s ago: executing program 2 (id=5905):
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000014}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6)
r6 = socket$inet(0x2, 0x2, 0x56) (async)
write$bt_hci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x0, 0x9, 0x5, 0x2, 0x13]}, &(0x7f0000000640)=0x78)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xa, 0x10, 0x3, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd}, 0x10}}, 0x2000c040)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x84}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000580)=@newtaction={0x14, 0x30, 0x9, 0x70bd26, 0x3}, 0x14}}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000002", @ANYRES16=r10, @ANYBLOB="000327bd7000fcdbdf254d0000000e00a80066697273746e616d65000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x14000054)

1.535409689s ago: executing program 4 (id=5906):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket$inet(0x2, 0xa, 0x8)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0)
close(0x4)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) (async)
shutdown(r0, 0x1) (async)
setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async)
socket$inet(0x2, 0xa, 0x8) (async)
syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) (async)
close(0x4) (async)
close(0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) (async)

1.429144343s ago: executing program 3 (id=5907):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="8031050000000000400012800e00616e0000002c0002801400050000000000000000000000ffff7f00000104001200050016000100000008001500488103a0000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getqdisc={0x44, 0x26, 0x832b999736b2688, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0xb99e120267c18ceb}, {0xfff2, 0xf}, {0x8, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000140)={0x1})
vmsplice(r6, &(0x7f0000000300)=[{&(0x7f0000000a80)="86", 0x1}], 0x1, 0x8)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2)
sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x10, 0x0, 0x0, 0x4, 0x0, 0x5, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4e044}, 0x4050)
recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
write$cgroup_devices(r6, &(0x7f00000001c0)={'b', ' *:* ', 'wm\x00'}, 0x9)
listen(r1, 0xfffffff0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="800000001900010000000000000000001d0109005500118025b57efaa223b473fe7783bc8f506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb3f"], 0x80}}, 0x8004)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)

1.392567018s ago: executing program 2 (id=5908):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty=0xff00, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x7}, 0x3c)

1.380355631s ago: executing program 1 (id=5909):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, r0}, 0xc)

1.234199313s ago: executing program 1 (id=5910):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800080000000200b600140002004b1700fa006700000221"], 0x108) (fail_nth: 4)

1.232751156s ago: executing program 3 (id=5911):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200"], 0x50)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="180f00080714019eae29c3f5dd8a5d603d0d2800de34949b24ba0365cac6743752cb66afc3dc4771b824a0c4c8d72b9059a2921225fec3849e1665c54caab55232487d5d30a0a9c93ebc4732860ccdf1fed1b769c043fa6fb41e4c794f82cee58772892d452fb48a2e9137b485dcbef3e2873780d79398c8cb9e5e7ca8e8921c3536dcd7cd1efaea49e798e6bb57d7f7653a506527cbc28b71947f2e6eea188a080f81e20ebaba9c85cd141b9d4bad7735f42159e0b120b63c14378a9b04a3808940bb91565e0a40d2793a3956b971758d86649e26d98f873c2515259454a348560c3b92dfca91033f486839cb8daa1c55cc9f3d7cfcbd0e"], 0x18}}, 0x20000090)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58}, 0xfffffffffffffef4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000500))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25e0000000000000000000000000000001e000000200000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES8=r8, @ANYRESOCT=r8, @ANYRES16], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r9, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1.155746018s ago: executing program 2 (id=5912):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
socket$rds(0x15, 0x5, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="0c00238006000100ff7f0000"], 0x28}, 0x1, 0x0, 0x0, 0x34044040}, 0x10)

1.095538534s ago: executing program 4 (id=5913):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x400000000010, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
pipe(&(0x7f0000000080))
socket(0x28, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create(0x4)
socket$l2tp(0x2, 0x2, 0x73)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x4}]}, 0x38}}, 0x4000010)

1.007581698s ago: executing program 4 (id=5914):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000580)=[@op={0x2a, 0x117, 0x3, 0x1}, @op], 0x4}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="9d743c98d6ba81ce36d9efebfb6de188b7b617f3d155b430231050738b9aaeba5db4f14f166043fc6657ba56868d9a1444b779e27d584d557c50ef38b1662cfa43ebd2d820caeb07be36f11ea68da7b6cee5a11f46592f4380025bfe93a0e0fffef7ae6033cae128915a7cc47209cd7b7387efb03bae9746"}], 0x0, &(0x7f0000000340)=[@assoc={0x0, 0x117, 0x4, 0x3c0c}, @assoc={0x0, 0x117, 0x4, 0x18}], 0x0, 0x10}], 0x1, 0x800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xf0ff}, 0x0)

920.356473ms ago: executing program 2 (id=5915):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pipe(&(0x7f0000000080))
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1406, 0x1, 0x70bd27, 0x255fdbfd}, 0x10}}, 0x4000004)
setsockopt$sock_int(r3, 0x1, 0x31, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002040)={&(0x7f00000000c0)="c0b90ab4845234ae0fb94165d7d5ce094d434e2538dc8e8ba640e3ba9a2e872342eb030af24946d5bade3f9e59e67d48776778cee79e9ef5f3020d836132cd3ad4f473ada1a72f6925b28db1ae6e36539d59c145f4d90f389faf4b6759202ff48689da1287d740d724b0e78291a74396e3fc055eb3dfcfab64cd", &(0x7f0000000e80)=""/4096, &(0x7f0000001e80)="f4a11976d9044595a6197854138da85ea71ea22f1cc73b6e9471ccb5859f3bdfb0d6ab902f9f28cdb6cd547cf73d6037f426c05ca9e8871c8151132265a9de862748ac945ae5079d790226d3325303c716106899661e0b83bdbdde5ce32604f6f6549d8f2bdde9b27c745ddef33011793c5d5f64ce5bb2ac63bb66f049fe4f32f3523200271eb6d16b103fd8f94151d9bcc7b8634f187efd5184ed4d904ce52e5001990a5083bb426441e445f747e4229279df20a9cee6c57baf5b32daf92cbf12cb9a966e7e560adf08b4d461c02ba1e2", &(0x7f0000001f80)="8e0581db581c9f18072a88c804ac40bc2b24da0caf3860202cd7d3ae3fe51012e1cb1721d99816055e1368ea30cb5abd2ff21bb48672054f76011fcbcc335f0435f3e28e087ef9fd8543a5d028eb58a8dcaefcee8ad7300db454c3f70ea37122fe163ca284a438902fb6164df41383cc067963278c3cacddbe9eb506ec62edd7c5e752efe10282608116940ff358215f7be7ac6f", 0x7, r0, 0x4}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)

919.793448ms ago: executing program 1 (id=5916):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x7, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x7ffe}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0xfffffffa, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x3, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0x400}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x38a, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x5, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0xfa}], 0x1}, 0x20000885)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {0x9}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0)
r17 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r18=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r18, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

919.52999ms ago: executing program 3 (id=5917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x88, 0x0, 0x2, 0x8}, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', <r6=>0x0, 0x29, 0x2, 0x0, 0x0, 0x1a, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x20, 0x80, 0x0, 0x9}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20000000)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0}, 0x1400c0c0)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)="97452a307eb495fe2236000000000000006bfadf302e815cb994e6d0", 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1}}}], 0x20}, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x2d, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@nested={0x11, 0x99, 0x0, 0x1, [@generic="32881935c6d6e2c0dea5ea75b6"]}]}]}, @nested={0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"})
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES64=r8, @ANYRES32=r11, @ANYBLOB="05003300eb000000080034", @ANYRES64=0x0, @ANYRES8=r8, @ANYRES16=r11, @ANYRES32=0x0, @ANYRESHEX], 0x2c}}, 0x80)

838.885877ms ago: executing program 4 (id=5918):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x2, 0x2, 0x6, 0x7, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_address={0x5, 0x7, 0x33, 0xa0, 0x0, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x7}}]}, 0x38}}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r7, 0x0, 0xa0028000}, 0x38)

739.335571ms ago: executing program 4 (id=5919):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000100)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000140)='GPL\x00', 0x5, 0x5b, &(0x7f0000000180)=""/91, 0x41100, 0x1, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x5, 0x7, 0xb}], 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000000c0), &(0x7f0000000500)=r4}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r6, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

686.247177ms ago: executing program 3 (id=5920):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
socket$kcm(0x2, 0xa, 0x2)
r0 = socket(0x400000000010, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2, 0xa, 0xbfffffe6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
accept4(r0, 0x0, &(0x7f0000000140), 0x800)
ioctl(r2, 0x8b1a, &(0x7f0000000040))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c331780040015000400", @ANYRES8=r3, @ANYRES64=r3], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

0s ago: executing program 2 (id=5921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
write(r1, &(0x7f0000000400)="00008847", 0x4)

kernel console output (not intermixed with test programs):

0x765/0x950
[  660.615007][T22451]  bond_newlink+0x48/0xd0
[  660.615086][T22451]  ? __pfx_bond_newlink+0x10/0x10
[  660.615099][T22451]  rtnl_newlink_create+0x305/0x7b0
[  660.615120][T22451]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  660.615144][T22451]  ? __pfx___mutex_lock+0x10/0x10
[  660.615177][T22451]  ? ns_capable+0x89/0xe0
[  660.615203][T22451]  rtnl_newlink+0x166d/0x1c30
[  660.615238][T22451]  ? __pfx_rtnl_newlink+0x10/0x10
[  660.615259][T22451]  ? __lock_acquire+0x683/0x2cf0
[  660.615284][T22451]  ? __lock_acquire+0x683/0x2cf0
[  660.615300][T22451]  ? __lock_acquire+0x683/0x2cf0
[  660.615319][T22451]  ? unwind_next_frame+0x8f/0x2550
[  660.615336][T22451]  ? is_bpf_text_address+0x26/0x2b0
[  660.615359][T22451]  ? is_bpf_text_address+0x26/0x2b0
[  660.615377][T22451]  ? __lock_acquire+0x683/0x2cf0
[  660.615393][T22451]  ? kernel_text_address+0xa5/0xe0
[  660.615403][T22451]  ? __kernel_text_address+0xd/0x30
[  660.615413][T22451]  ? unwind_get_return_address+0x4d/0x90
[  660.615433][T22451]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  660.615457][T22451]  ? arch_stack_walk+0xfb/0x150
[  660.615489][T22451]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  660.615520][T22451]  ? __pfx_rtnl_newlink+0x10/0x10
[  660.615531][T22451]  rtnetlink_rcv_msg+0x802/0xc00
[  660.615544][T22451]  ? netlink_sendmsg+0x5d4/0xb40
[  660.615561][T22451]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  660.615571][T22451]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  660.615582][T22451]  ? __lock_acquire+0x683/0x2cf0
[  660.615603][T22451]  netlink_rcv_skb+0x226/0x4a0
[  660.615617][T22451]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  660.615628][T22451]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  660.615648][T22451]  ? netlink_deliver_tap+0x2e/0x1b0
[  660.615660][T22451]  ? netlink_deliver_tap+0x2e/0x1b0
[  660.615675][T22451]  netlink_unicast+0x7bb/0x940
[  660.615692][T22451]  netlink_sendmsg+0x813/0xb40
[  660.615710][T22451]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.615724][T22451]  ? aa_sock_msg_perm+0xf1/0x1b0
[  660.615741][T22451]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.615753][T22451]  sock_sendmsg_nosec+0x13a/0x180
[  660.615772][T22451]  ____sys_sendmsg+0x54e/0x850
[  660.615788][T22451]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.615805][T22451]  ? import_iovec+0x73/0xa0
[  660.615825][T22451]  ___sys_sendmsg+0x2a5/0x360
[  660.615837][T22451]  ? __lock_acquire+0x683/0x2cf0
[  660.615853][T22451]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.615885][T22451]  ? __fget_files+0x2a/0x420
[  660.615901][T22451]  ? __fget_files+0x3a2/0x420
[  660.615920][T22451]  __x64_sys_sendmsg+0x1b1/0x290
[  660.615937][T22451]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  660.615959][T22451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.615971][T22451]  do_syscall_64+0x174/0x580
[  660.615983][T22451]  ? trace_irq_disable+0x3b/0x140
[  660.615998][T22451]  ? clear_bhb_loop+0x40/0x90
[  660.616012][T22451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.616022][T22451] RIP: 0033:0x7f7ec3b9de99
[  660.616034][T22451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.616043][T22451] RSP: 002b:00007f7ec4ab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.616056][T22451] RAX: ffffffffffffffda RBX: 00007f7ec3e25fa0 RCX: 00007f7ec3b9de99
[  660.616063][T22451] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  660.616070][T22451] RBP: 00007f7ec4ab0090 R08: 0000000000000000 R09: 0000000000000000
[  660.616077][T22451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  660.616083][T22451] R13: 00007f7ec3e26038 R14: 00007f7ec3e25fa0 R15: 00007fff1e08aee8
[  660.616100][T22451]  </TASK>
[  661.513364][   T36] dvmrp8: left allmulticast mode
[  661.522990][T22496] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4964'.
[  661.557075][T22496] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4964'.
[  661.577914][T22496] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4964'.
[  661.611947][   T36] bond10 (unregistering): (slave ip6gre1): Releasing backup interface
[  661.620997][   T36] ip6gre1 (unregistering): left promiscuous mode
[  661.961690][   T36] bond7 (unregistering): (slave bridge2): Releasing active interface
[  661.978566][   T36] bond9 (unregistering): (slave bridge3): Releasing active interface
[  662.014486][   T36] bond0 (unregistering): Released all slaves
[  662.026603][   T36] bond1 (unregistering): (slave bond2): Releasing backup interface
[  662.035894][   T36] bond1 (unregistering): Released all slaves
[  662.056368][   T36] bond2 (unregistering): Released all slaves
[  662.087348][   T36] bond3 (unregistering): (slave veth3): Releasing backup interface
[  662.097275][   T36] bond3 (unregistering): Released all slaves
[  662.125339][   T36] bond4 (unregistering): Released all slaves
[  662.140816][   T36] bond5 (unregistering): Released all slaves
[  662.156127][   T36] bond6 (unregistering): Released all slaves
[  662.187247][   T36] bond7 (unregistering): Released all slaves
[  662.210677][   T36] bond8 (unregistering): Released all slaves
[  662.230550][   T36] bond9 (unregistering): Released all slaves
[  662.259518][   T36] bond10 (unregistering): Released all slaves
[  662.281685][   T36] bond11 (unregistering): Released all slaves
[  662.719932][   T36] tipc: Disabling bearer <udp:syz2>
[  662.732539][   T36] tipc: Left network mode
[  662.842722][T22525] syzkaller0: entered promiscuous mode
[  662.855042][T22525] syzkaller0: entered allmulticast mode
[  662.924932][T22528] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4973'.
[  663.024974][T22528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4973'.
[  664.064498][T22552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4982'.
[  664.300849][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4985'.
[  664.429570][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4985'.
[  664.486854][ T7259] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  664.511493][T22562] netlink: 'syz.0.4984': attribute type 1 has an invalid length.
[  664.522758][ T7259] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  664.548918][T22562] netlink: 'syz.0.4984': attribute type 3 has an invalid length.
[  664.555732][ T7259] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  664.603643][ T7259] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  664.720869][T22567] syzkaller0: entered promiscuous mode
[  664.753610][T22567] syzkaller0: entered allmulticast mode
[  664.973931][T22575] __nla_validate_parse: 1 callbacks suppressed
[  664.973953][T22575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4991'.
[  665.043469][   T36] hsr_slave_0: left promiscuous mode
[  665.067644][   T36] hsr_slave_1: left promiscuous mode
[  665.789890][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4999'.
[  665.801187][T22604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4999'.
[  665.811572][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4999'.
[  665.827040][T22603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4999'.
[  666.016968][T22614] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  666.726305][T22637] netlink: 'syz.2.5008': attribute type 1 has an invalid length.
[  666.739321][   T36] IPVS: stop unused estimator thread 0...
[  666.746806][T22637] netlink: 'syz.2.5008': attribute type 3 has an invalid length.
[  666.804197][T22637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5008'.
[  666.811680][T22639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5009'.
[  667.532999][T22658] syzkaller0: entered promiscuous mode
[  667.562857][T22658] syzkaller0: entered allmulticast mode
[  667.688200][T22665] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5020'.
[  667.700300][T22665] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5020'.
[  667.715228][T22665] netlink: 'syz.1.5020': attribute type 32 has an invalid length.
[  667.738440][T22665] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5020'.
[  667.973708][T22682] netlink: 'syz.3.5027': attribute type 1 has an invalid length.
[  667.989196][T22682] netlink: 'syz.3.5027': attribute type 2 has an invalid length.
[  668.105877][T22691] netlink: 'syz.0.5030': attribute type 10 has an invalid length.
[  668.169846][T22692] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  668.192618][T22691] bridge0: left allmulticast mode
[  668.610138][T22691] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  669.055524][T22715] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  669.141998][T22715] bond9 (unregistering): Released all slaves
[  669.735627][T22745] netlink: 'syz.3.5049': attribute type 3 has an invalid length.
[  669.921814][T22751] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode
[  669.945604][T22751] tipc: Resetting bearer <eth:syzkaller0>
[  670.368936][T22756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  670.418988][T22764] FAULT_INJECTION: forcing a failure.
[  670.418988][T22764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  670.455147][T22764] CPU: 1 UID: 0 PID: 22764 Comm: syz.2.5055 Not tainted syzkaller #0 PREEMPT(full) 
[  670.455176][T22764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  670.455188][T22764] Call Trace:
[  670.455196][T22764]  <TASK>
[  670.455205][T22764]  dump_stack_lvl+0xe8/0x150
[  670.455245][T22764]  should_fail_ex+0x40c/0x560
[  670.455286][T22764]  _copy_to_user+0x31/0xb0
[  670.455306][T22764]  bpf_test_finish+0x52e/0x690
[  670.455339][T22764]  ? __pfx____migrate_enable+0x10/0x10
[  670.455368][T22764]  ? __pfx_bpf_test_finish+0x10/0x10
[  670.455397][T22764]  bpf_prog_test_run_flow_dissector+0x478/0x610
[  670.455462][T22764]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  670.455482][T22764]  ? __fget_files+0x2a/0x420
[  670.455510][T22764]  ? __fget_files+0x2a/0x420
[  670.455536][T22764]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  670.455558][T22764]  bpf_prog_test_run+0x2c5/0x340
[  670.455589][T22764]  __sys_bpf+0xa22/0xd90
[  670.455620][T22764]  ? __pfx___sys_bpf+0x10/0x10
[  670.455650][T22764]  ? __fget_files+0x2a/0x420
[  670.455689][T22764]  ? ksys_write+0x242/0x270
[  670.455709][T22764]  ? __pfx_ksys_write+0x10/0x10
[  670.455730][T22764]  __x64_sys_bpf+0xba/0xd0
[  670.455753][T22764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.455772][T22764]  do_syscall_64+0x174/0x580
[  670.455794][T22764]  ? trace_irq_disable+0x3b/0x140
[  670.455821][T22764]  ? clear_bhb_loop+0x40/0x90
[  670.455844][T22764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.455863][T22764] RIP: 0033:0x7f7ec3b9de99
[  670.455880][T22764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.455896][T22764] RSP: 002b:00007f7ec4ab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  670.455918][T22764] RAX: ffffffffffffffda RBX: 00007f7ec3e25fa0 RCX: 00007f7ec3b9de99
[  670.455932][T22764] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  670.455945][T22764] RBP: 00007f7ec4ab0090 R08: 0000000000000000 R09: 0000000000000000
[  670.455958][T22764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  670.455970][T22764] R13: 00007f7ec3e26038 R14: 00007f7ec3e25fa0 R15: 00007fff1e08aee8
[  670.455999][T22764]  </TASK>
[  670.685446][T22766] __nla_validate_parse: 6 callbacks suppressed
[  670.685470][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5057'.
[  670.876852][T22756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  670.904678][T22772] netlink: 'syz.0.5060': attribute type 1 has an invalid length.
[  671.000027][T22772] 8021q: adding VLAN 0 to HW filter on device bond9
[  671.033616][T22777] bond9: (slave veth11): Enslaving as an active interface with a down link
[  671.070428][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'.
[  671.121751][T22756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.240095][T22772] 8021q: adding VLAN 0 to HW filter on device batadv3
[  671.252007][T22772] bond9: (slave batadv3): making interface the new active one
[  671.264507][T22772] batadv3: entered promiscuous mode
[  671.272818][T22772] bond9: (slave batadv3): Enslaving as an active interface with an up link
[  671.282198][T22779] syzkaller0: entered promiscuous mode
[  671.290657][T22779] syzkaller0: entered allmulticast mode
[  671.333539][T22756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.392593][T22790] syzkaller0: entered promiscuous mode
[  671.408597][T22790] syzkaller0: entered allmulticast mode
[  671.559874][T22794] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 3, id = 0
[  671.624622][T22792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5065'.
[  671.705808][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  671.761492][T22799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5065'.
[  671.801527][   T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  672.140075][T22756] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.276493][T22756] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  672.370457][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5075'.
[  672.394588][T22832] syzkaller0: entered promiscuous mode
[  672.400196][T22836] netlink: 'syz.1.5075': attribute type 10 has an invalid length.
[  672.410568][T22832] syzkaller0: entered allmulticast mode
[  672.423536][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5075'.
[  672.487867][T22836] geneve4: entered promiscuous mode
[  672.494661][T22836] geneve4: entered allmulticast mode
[  672.508016][T22844] netlink: 'syz.2.5077': attribute type 15 has an invalid length.
[  672.518318][T22844] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5077'.
[  672.518960][T22845] FAULT_INJECTION: forcing a failure.
[  672.518960][T22845] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.533067][T22844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5077'.
[  672.583567][T22845] CPU: 1 UID: 0 PID: 22845 Comm: syz.0.5078 Not tainted syzkaller #0 PREEMPT(full) 
[  672.583600][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  672.583612][T22845] Call Trace:
[  672.583621][T22845]  <TASK>
[  672.583630][T22845]  dump_stack_lvl+0xe8/0x150
[  672.583669][T22845]  should_fail_ex+0x40c/0x560
[  672.583702][T22845]  _copy_from_iter+0x1d3/0x1660
[  672.583729][T22845]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  672.583757][T22845]  ? rcu_is_watching+0x15/0xb0
[  672.583778][T22845]  ? trace_kmem_cache_alloc+0x29/0xe0
[  672.583804][T22845]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  672.583829][T22845]  ? __pfx__copy_from_iter+0x10/0x10
[  672.583855][T22845]  ? __alloc_skb+0x276/0x7a0
[  672.583876][T22845]  ? __alloc_skb+0x276/0x7a0
[  672.583899][T22845]  ? netlink_sendmsg+0x650/0xb40
[  672.583924][T22845]  ? skb_put+0x112/0x210
[  672.583947][T22845]  netlink_sendmsg+0x6c0/0xb40
[  672.583981][T22845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  672.584014][T22845]  ? aa_sock_msg_perm+0xf1/0x1b0
[  672.584044][T22845]  ? __pfx_netlink_sendmsg+0x10/0x10
[  672.584066][T22845]  sock_sendmsg_nosec+0x13a/0x180
[  672.584098][T22845]  ____sys_sendmsg+0x54e/0x850
[  672.584126][T22845]  ? __pfx_____sys_sendmsg+0x10/0x10
[  672.584153][T22845]  ? import_iovec+0x73/0xa0
[  672.584184][T22845]  ___sys_sendmsg+0x2a5/0x360
[  672.584205][T22845]  ? __lock_acquire+0x683/0x2cf0
[  672.584236][T22845]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.584292][T22845]  ? __fget_files+0x2a/0x420
[  672.584318][T22845]  ? __fget_files+0x3a2/0x420
[  672.584353][T22845]  __x64_sys_sendmsg+0x1b1/0x290
[  672.584378][T22845]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  672.584427][T22845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.584448][T22845]  do_syscall_64+0x174/0x580
[  672.584474][T22845]  ? trace_irq_disable+0x3b/0x140
[  672.584501][T22845]  ? clear_bhb_loop+0x40/0x90
[  672.584524][T22845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.584544][T22845] RIP: 0033:0x7f475339de99
[  672.584563][T22845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.584578][T22845] RSP: 002b:00007f47542f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.584598][T22845] RAX: ffffffffffffffda RBX: 00007f4753626090 RCX: 00007f475339de99
[  672.584612][T22845] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  672.584621][T22845] RBP: 00007f47542f4090 R08: 0000000000000000 R09: 0000000000000000
[  672.584633][T22845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.584643][T22845] R13: 00007f4753626128 R14: 00007f4753626090 R15: 00007ffee9f41a58
[  672.584674][T22845]  </TASK>
[  673.038659][T22859] netlink: 'syz.0.5082': attribute type 1 has an invalid length.
[  673.046550][T22859] netlink: 'syz.0.5082': attribute type 7 has an invalid length.
[  673.079071][T22859] netlink: 'syz.0.5082': attribute type 8 has an invalid length.
[  673.087737][T22859] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5082'.
[  673.096117][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5079'.
[  673.118245][T22859] NCSI netlink: No device for ifindex 1073545264
[  673.493136][T22870] netlink: 'syz.3.5086': attribute type 21 has an invalid length.
[  673.530441][T22870] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  673.665720][T22885] syzkaller0: entered promiscuous mode
[  673.682185][T22885] syzkaller0: entered allmulticast mode
[  674.201312][T22906] netlink: 'syz.3.5097': attribute type 2 has an invalid length.
[  674.246188][T22906] 
: entered promiscuous mode
[  674.337039][T22904] 8021q: adding VLAN 0 to HW filter on device bond10
[  674.359015][T22904] vlan2: entered allmulticast mode
[  674.364456][T22904] erspan0: entered allmulticast mode
[  674.376232][T22904] bond10: (slave vlan2): Error -34 calling dev_set_mtu
[  674.387160][T22912] netlink: zone id is out of range
[  675.660173][T22931] lo speed is unknown, defaulting to 1000
[  675.671852][T22931] lo speed is unknown, defaulting to 1000
[  675.682217][T22931] lo speed is unknown, defaulting to 1000
[  676.102809][T22942] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  676.149145][T22942] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  676.323347][T22948] __nla_validate_parse: 3 callbacks suppressed
[  676.323368][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5108'.
[  676.719830][T22957] 8021q: adding VLAN 0 to HW filter on device bond11
[  676.748225][T22959] bond8: (slave bond0): Releasing backup interface
[  676.789900][T22931] infiniband syz0: set down
[  676.802171][T22959] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.807037][T22931] infiniband syz0: added lo
[  676.862831][T22959] bond11: (slave bond0): Enslaving as an active interface with an up link
[  676.874152][T22931] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  676.895541][T22931] infiniband syz0: Couldn't open port 1
[  676.988074][T22931] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  677.032830][ T8543] lo speed is unknown, defaulting to 1000
[  677.039419][T22931] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  677.040077][T22931] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  677.202791][T22931] RDS/IB: syz0: added
[  677.215051][T22931] smc: adding ib device syz0 with port count 1
[  677.241624][T22987] FAULT_INJECTION: forcing a failure.
[  677.241624][T22987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.268775][T22931] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[  677.300709][T22987] CPU: 0 UID: 0 PID: 22987 Comm: syz.2.5116 Not tainted syzkaller #0 PREEMPT(full) 
[  677.300735][T22987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  677.300747][T22987] Call Trace:
[  677.300756][T22987]  <TASK>
[  677.300764][T22987]  dump_stack_lvl+0xe8/0x150
[  677.300799][T22987]  should_fail_ex+0x40c/0x560
[  677.300830][T22987]  _copy_from_user+0x2d/0xb0
[  677.300848][T22987]  kstrtouint_from_user+0xd6/0x180
[  677.300877][T22987]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  677.300921][T22987]  proc_fail_nth_write+0x8e/0x210
[  677.300950][T22987]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  677.300985][T22987]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  677.301011][T22987]  vfs_write+0x296/0xba0
[  677.301056][T22987]  ? __pfx_vfs_write+0x10/0x10
[  677.301075][T22987]  ? __fget_files+0x2a/0x420
[  677.301117][T22987]  ? __fget_files+0x3a2/0x420
[  677.301141][T22987]  ? __fget_files+0x2a/0x420
[  677.301173][T22987]  ksys_write+0x150/0x270
[  677.301194][T22987]  ? __pfx_ksys_write+0x10/0x10
[  677.301220][T22987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.301242][T22987]  do_syscall_64+0x174/0x580
[  677.301265][T22987]  ? trace_irq_disable+0x3b/0x140
[  677.301290][T22987]  ? clear_bhb_loop+0x40/0x90
[  677.301314][T22987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.301332][T22987] RIP: 0033:0x7f7ec3b5e6ce
[  677.301350][T22987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  677.301367][T22987] RSP: 002b:00007f7ec4aaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  677.301387][T22987] RAX: ffffffffffffffda RBX: 00007f7ec4ab06c0 RCX: 00007f7ec3b5e6ce
[  677.301408][T22987] RDX: 0000000000000001 RSI: 00007f7ec4ab00a0 RDI: 0000000000000004
[  677.301420][T22987] RBP: 00007f7ec4ab0090 R08: 0000000000000000 R09: 0000000000000000
[  677.301432][T22987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.301444][T22987] R13: 00007f7ec3e26038 R14: 00007f7ec3e25fa0 R15: 00007fff1e08aee8
[  677.301475][T22987]  </TASK>
[  677.373458][T22977] syzkaller0: entered promiscuous mode
[  677.400079][T22994] netlink: 'syz.4.5118': attribute type 10 has an invalid length.
[  677.405148][T22977] syzkaller0: entered allmulticast mode
[  677.555401][T22989] batman_adv: batadv0: Adding interface: vlan2
[  677.561958][T22989] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  677.590357][T22989] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  677.608904][T22931] lo speed is unknown, defaulting to 1000
[  682.222568][T22998] bond2: entered allmulticast mode
[  682.230923][T20446] lo speed is unknown, defaulting to 1000
[  682.239691][T22931] lo speed is unknown, defaulting to 1000
[  682.261158][T23016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  682.287399][T23024] tipc: Resetting bearer <eth:syzkaller0>
[  682.329366][T23007] bond2: left allmulticast mode
[  682.446150][T23024] tipc: Disabling bearer <eth:syzkaller0>
[  682.628934][   T12] batadv3: left promiscuous mode
[  682.730522][T23049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5129'.
[  682.822754][T22931] lo speed is unknown, defaulting to 1000
[  682.937760][T23057] nbd: must specify a size in bytes for the device
[  682.991520][T23059] syzkaller0: entered promiscuous mode
[  682.997307][T23059] syzkaller0: entered allmulticast mode
[  683.003688][T23061] xt_hashlimit: size too large, truncated to 1048576
[  683.082474][T23061] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  683.307172][T22931] lo speed is unknown, defaulting to 1000
[  683.700320][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  683.700340][   T30] audit: type=1800 audit(1785272110.799:70): pid=23074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5138" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1960 res=0 errno=0
[  683.920919][T22931] lo speed is unknown, defaulting to 1000
[  684.011353][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5140'.
[  684.083296][T23096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5141'.
[  684.232038][T23098] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5142'.
[  684.318332][T22931] lo speed is unknown, defaulting to 1000
[  684.435067][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'.
[  684.466273][T23108] netlink: 'syz.0.5144': attribute type 10 has an invalid length.
[  684.481660][T23108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5144'.
[  684.553088][T23108] geneve3: entered promiscuous mode
[  684.571434][T23108] geneve3: entered allmulticast mode
[  684.807756][T23115] syzkaller0: entered promiscuous mode
[  684.827220][T23115] syzkaller0: entered allmulticast mode
[  684.950342][T22931] lo speed is unknown, defaulting to 1000
[  685.076175][T23122] syzkaller0: entered promiscuous mode
[  685.082461][T23122] syzkaller0: entered allmulticast mode
[  685.274932][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5152'.
[  685.515176][T23134] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5155'.
[  685.612904][T23107] lo speed is unknown, defaulting to 1000
[  685.871270][T23149] syzkaller0: entered promiscuous mode
[  685.906654][T23149] syzkaller0: entered allmulticast mode
[  685.963215][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5160'.
[  685.972291][T23145] sock: sock_timestamping_bind_phc: sock not bind to device
[  685.995581][T23153] netlink: 'syz.3.5160': attribute type 10 has an invalid length.
[  686.005620][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5160'.
[  686.111912][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  686.129522][T23153] geneve2: entered promiscuous mode
[  686.138783][T23153] geneve2: entered allmulticast mode
[  686.206025][T23164] FAULT_INJECTION: forcing a failure.
[  686.206025][T23164] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  686.222165][T23164] CPU: 0 UID: 0 PID: 23164 Comm: syz.1.5166 Not tainted syzkaller #0 PREEMPT(full) 
[  686.222195][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  686.222244][T23164] Call Trace:
[  686.222252][T23164]  <TASK>
[  686.222262][T23164]  dump_stack_lvl+0xe8/0x150
[  686.222296][T23164]  should_fail_ex+0x40c/0x560
[  686.222322][T23164]  _copy_from_user+0x2d/0xb0
[  686.222345][T23164]  ___sys_sendmsg+0x1c6/0x360
[  686.222366][T23164]  ? __lock_acquire+0x683/0x2cf0
[  686.222395][T23164]  ? __pfx____sys_sendmsg+0x10/0x10
[  686.222446][T23164]  ? __fget_files+0x2a/0x420
[  686.222468][T23164]  ? __fget_files+0x3a2/0x420
[  686.222495][T23164]  __x64_sys_sendmsg+0x1b1/0x290
[  686.222517][T23164]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  686.222555][T23164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.222576][T23164]  do_syscall_64+0x174/0x580
[  686.222594][T23164]  ? trace_irq_disable+0x3b/0x140
[  686.222615][T23164]  ? clear_bhb_loop+0x40/0x90
[  686.222638][T23164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.222657][T23164] RIP: 0033:0x7f5ceb19de99
[  686.222677][T23164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.222694][T23164] RSP: 002b:00007f5cebffb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.222714][T23164] RAX: ffffffffffffffda RBX: 00007f5ceb425fa0 RCX: 00007f5ceb19de99
[  686.222729][T23164] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000003
[  686.222741][T23164] RBP: 00007f5cebffb090 R08: 0000000000000000 R09: 0000000000000000
[  686.222753][T23164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.222764][T23164] R13: 00007f5ceb426038 R14: 00007f5ceb425fa0 R15: 00007ffeb308f7e8
[  686.222795][T23164]  </TASK>
[  687.021268][T23191] netlink: 'syz.0.5175': attribute type 1 has an invalid length.
[  687.336057][T23203] netlink: 'syz.0.5178': attribute type 4 has an invalid length.
[  688.022871][T23196] lo speed is unknown, defaulting to 1000
[  688.331040][T23232] bond5: entered promiscuous mode
[  688.336497][T23232] bond5: entered allmulticast mode
[  688.343905][T23232] 8021q: adding VLAN 0 to HW filter on device bond5
[  688.356335][T23228] openvswitch: netlink: Key 6 has unexpected len 8 expected 2
[  688.449458][T23242] netlink: 'syz.2.5188': attribute type 1 has an invalid length.
[  688.478495][T23242] __nla_validate_parse: 7 callbacks suppressed
[  688.478513][T23242] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5188'.
[  688.616335][T23249] netlink: 'syz.4.5192': attribute type 13 has an invalid length.
[  688.628859][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5191'.
[  688.807185][T23264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5192'.
[  688.835939][T23261] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  688.884441][T23261] syzkaller0: entered promiscuous mode
[  688.913399][T23261] syzkaller0: entered allmulticast mode
[  689.736625][T23275] netlink: 'syz.3.5196': attribute type 1 has an invalid length.
[  689.754768][T23275] netlink: 756 bytes leftover after parsing attributes in process `syz.3.5196'.
[  689.795441][T23284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5197'.
[  690.023195][T23295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5197'.
[  690.076121][T23284] tc_dump_action: action bad kind
[  690.082012][T23262] lo speed is unknown, defaulting to 1000
[  690.532184][T23310] x_tables: duplicate underflow at hook 1
[  691.121992][T23319] syzkaller0: entered promiscuous mode
[  691.141413][T23319] syzkaller0: entered allmulticast mode
[  691.645095][T23314] lo speed is unknown, defaulting to 1000
[  691.671365][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5213'.
[  691.688000][T23341] netlink: 'syz.2.5213': attribute type 10 has an invalid length.
[  691.707026][T23341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5213'.
[  691.767122][T23341] geneve2: entered promiscuous mode
[  691.778861][T23341] geneve2: entered allmulticast mode
[  691.794150][ T7266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.807976][T23346] netlink: 'syz.0.5212': attribute type 1 has an invalid length.
[  691.824058][ T7266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.841465][T23346] netlink: 'syz.0.5212': attribute type 3 has an invalid length.
[  691.856437][ T7266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.873466][T23346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5212'.
[  692.054056][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'.
[  692.871949][T23369] FAULT_INJECTION: forcing a failure.
[  692.871949][T23369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  692.908900][T23369] CPU: 0 UID: 0 PID: 23369 Comm: syz.0.5222 Not tainted syzkaller #0 PREEMPT(full) 
[  692.908929][T23369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  692.908941][T23369] Call Trace:
[  692.908949][T23369]  <TASK>
[  692.908958][T23369]  dump_stack_lvl+0xe8/0x150
[  692.908995][T23369]  should_fail_ex+0x40c/0x560
[  692.909025][T23369]  _copy_from_iter+0x1d3/0x1660
[  692.909051][T23369]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  692.909078][T23369]  ? rcu_is_watching+0x15/0xb0
[  692.909099][T23369]  ? trace_kmem_cache_alloc+0x29/0xe0
[  692.909131][T23369]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  692.909155][T23369]  ? __pfx__copy_from_iter+0x10/0x10
[  692.909180][T23369]  ? __alloc_skb+0x276/0x7a0
[  692.909198][T23369]  ? __alloc_skb+0x276/0x7a0
[  692.909222][T23369]  ? netlink_sendmsg+0x650/0xb40
[  692.909245][T23369]  ? skb_put+0x112/0x210
[  692.909266][T23369]  netlink_sendmsg+0x6c0/0xb40
[  692.909298][T23369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  692.909324][T23369]  ? aa_sock_msg_perm+0xf1/0x1b0
[  692.909351][T23369]  ? __pfx_netlink_sendmsg+0x10/0x10
[  692.909375][T23369]  sock_sendmsg_nosec+0x13a/0x180
[  692.909406][T23369]  ____sys_sendmsg+0x54e/0x850
[  692.909434][T23369]  ? __pfx_____sys_sendmsg+0x10/0x10
[  692.909465][T23369]  ? import_iovec+0x73/0xa0
[  692.909505][T23369]  ___sys_sendmsg+0x2a5/0x360
[  692.909526][T23369]  ? __lock_acquire+0x683/0x2cf0
[  692.909558][T23369]  ? __pfx____sys_sendmsg+0x10/0x10
[  692.909615][T23369]  ? __fget_files+0x2a/0x420
[  692.909641][T23369]  ? __fget_files+0x3a2/0x420
[  692.909674][T23369]  __x64_sys_sendmsg+0x1b1/0x290
[  692.909699][T23369]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  692.909739][T23369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.909760][T23369]  do_syscall_64+0x174/0x580
[  692.909783][T23369]  ? trace_irq_disable+0x3b/0x140
[  692.909808][T23369]  ? clear_bhb_loop+0x40/0x90
[  692.909831][T23369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.909850][T23369] RIP: 0033:0x7f475339de99
[  692.909869][T23369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.909886][T23369] RSP: 002b:00007f4754315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  692.909907][T23369] RAX: ffffffffffffffda RBX: 00007f4753625fa0 RCX: 00007f475339de99
[  692.909921][T23369] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  692.909933][T23369] RBP: 00007f4754315090 R08: 0000000000000000 R09: 0000000000000000
[  692.909945][T23369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  692.909956][T23369] R13: 00007f4753626038 R14: 00007f4753625fa0 R15: 00007ffee9f41a58
[  692.909986][T23369]  </TASK>
[  692.916943][T23371] netlink: 'syz.2.5224': attribute type 10 has an invalid length.
[  693.745418][T23391] syzkaller0: entered promiscuous mode
[  693.768731][T23391] syzkaller0: entered allmulticast mode
[  694.167044][T23408] __nla_validate_parse: 4 callbacks suppressed
[  694.167068][T23408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5239'.
[  694.275837][T23408] 8021q: adding VLAN 0 to HW filter on device bond9
[  694.331430][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5240'.
[  694.352654][T23410] netlink: 'syz.3.5240': attribute type 10 has an invalid length.
[  694.381433][T23410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5240'.
[  694.402478][T23410] geneve2: entered promiscuous mode
[  694.411646][T23410] geneve2: entered allmulticast mode
[  694.823978][T23444] syzkaller0: entered promiscuous mode
[  694.845181][T23444] syzkaller0: entered allmulticast mode
[  695.162405][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5256'.
[  695.209092][T23464] gretap0: entered promiscuous mode
[  695.227673][T23464] macvlan2: entered allmulticast mode
[  695.242997][T23464] gretap0: entered allmulticast mode
[  695.255625][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5257'.
[  695.267711][T23468] netlink: 'syz.0.5257': attribute type 10 has an invalid length.
[  695.276833][T23468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5257'.
[  695.329541][T23468] geneve3: entered promiscuous mode
[  695.349600][T23468] geneve3: entered allmulticast mode
[  695.439342][T23474] C: renamed from veth1_to_team (while UP)
[  695.576737][T23474] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5259'.
[  695.634456][T23479] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  695.809196][T23490] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  695.937736][T23489] syzkaller0: entered promiscuous mode
[  695.948056][T23489] syzkaller0: entered allmulticast mode
[  696.001596][T23493] syzkaller0: entered promiscuous mode
[  696.015513][T23493] syzkaller0: entered allmulticast mode
[  698.022797][T23478] lo speed is unknown, defaulting to 1000
[  698.061526][T23496] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5267'.
[  698.075925][T23496] netlink: 'syz.2.5267': attribute type 9 has an invalid length.
[  698.087636][T23496] netlink: 'syz.2.5267': attribute type 1 has an invalid length.
[  698.541611][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5270'.
[  698.551156][T23508] netlink: 'syz.3.5270': attribute type 10 has an invalid length.
[  698.571829][T23508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5270'.
[  701.690538][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5272'.
[  701.735233][T23524] macvtap1: entered promiscuous mode
[  701.756478][T23524] batadv0: entered promiscuous mode
[  701.785896][T23524] macvtap1: entered allmulticast mode
[  701.796257][T23524] batadv0: entered allmulticast mode
[  701.803576][T23524] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  701.850656][T23524] batadv0: left allmulticast mode
[  701.869631][T23524] batadv0: left promiscuous mode
[  702.093425][T23537] netlink: 'syz.1.5278': attribute type 39 has an invalid length.
[  702.147454][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5278'.
[  702.317057][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5278'.
[  702.589306][T23558] netlink: 'syz.3.5284': attribute type 9 has an invalid length.
[  702.807346][T23566] netlink: 'syz.4.5287': attribute type 2 has an invalid length.
[  702.924287][T23572] netlink: 'syz.1.5289': attribute type 1 has an invalid length.
[  702.932988][T23569] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode
[  702.954944][T23569] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode
[  702.976903][T23569] tipc: Resetting bearer <eth:syzkaller0>
[  703.004685][T23572] 8021q: adding VLAN 0 to HW filter on device bond10
[  703.046073][T23577] 8021q: adding VLAN 0 to HW filter on device bond10
[  703.055017][T23577] bond10: (slave ipip2): The slave device specified does not support setting the MAC address
[  703.066970][T23577] bond10: (slave ipip2): Error -95 calling set_mac_address
[  703.411182][T23595] netlink: 'syz.3.5297': attribute type 1 has an invalid length.
[  703.431581][T23595] netlink: 'syz.3.5297': attribute type 3 has an invalid length.
[  703.447877][T23598] netlink: zone id is out of range
[  703.456071][T23595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5297'.
[  703.603434][T23605] FAULT_INJECTION: forcing a failure.
[  703.603434][T23605] name failslab, interval 1, probability 0, space 0, times 0
[  703.610773][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5301'.
[  703.638637][T23605] CPU: 1 UID: 0 PID: 23605 Comm: syz.0.5300 Not tainted syzkaller #0 PREEMPT(full) 
[  703.638662][T23605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  703.638673][T23605] Call Trace:
[  703.638682][T23605]  <TASK>
[  703.638691][T23605]  dump_stack_lvl+0xe8/0x150
[  703.638728][T23605]  should_fail_ex+0x40c/0x560
[  703.638757][T23605]  should_failslab+0xa8/0x100
[  703.638788][T23605]  __kmalloc_noprof+0xfe/0x720
[  703.638815][T23605]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  703.638847][T23605]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  703.638890][T23605]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  703.638927][T23605]  genl_family_rcv_msg_doit+0xda/0x340
[  703.638961][T23605]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  703.638995][T23605]  ? apparmor_capable+0x126/0x170
[  703.639025][T23605]  ? bpf_lsm_capable+0x9/0x20
[  703.639050][T23605]  ? security_capable+0x7e/0x2c0
[  703.639078][T23605]  genl_rcv_msg+0x614/0x7a0
[  703.639112][T23605]  ? __pfx_genl_rcv_msg+0x10/0x10
[  703.639138][T23605]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  703.639289][T23605]  netlink_rcv_skb+0x226/0x4a0
[  703.639313][T23605]  ? __pfx_genl_rcv_msg+0x10/0x10
[  703.639342][T23605]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  703.639380][T23605]  ? down_read+0x2be/0x330
[  703.639412][T23605]  genl_rcv+0x28/0x40
[  703.639437][T23605]  netlink_unicast+0x7bb/0x940
[  703.639466][T23605]  netlink_sendmsg+0x813/0xb40
[  703.639499][T23605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  703.639527][T23605]  ? aa_sock_msg_perm+0xf1/0x1b0
[  703.639554][T23605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  703.639576][T23605]  sock_sendmsg_nosec+0x13a/0x180
[  703.639609][T23605]  ____sys_sendmsg+0x54e/0x850
[  703.639638][T23605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  703.639666][T23605]  ? import_iovec+0x73/0xa0
[  703.639700][T23605]  ___sys_sendmsg+0x2a5/0x360
[  703.639720][T23605]  ? __lock_acquire+0x683/0x2cf0
[  703.639749][T23605]  ? __pfx____sys_sendmsg+0x10/0x10
[  703.639800][T23605]  ? __fget_files+0x2a/0x420
[  703.639825][T23605]  ? __fget_files+0x3a2/0x420
[  703.639859][T23605]  __x64_sys_sendmsg+0x1b1/0x290
[  703.639889][T23605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  703.639928][T23605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.639948][T23605]  do_syscall_64+0x174/0x580
[  703.639970][T23605]  ? trace_irq_disable+0x3b/0x140
[  703.639993][T23605]  ? clear_bhb_loop+0x40/0x90
[  703.640014][T23605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.640033][T23605] RIP: 0033:0x7f475339de99
[  703.640051][T23605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.640067][T23605] RSP: 002b:00007f4754315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  703.640086][T23605] RAX: ffffffffffffffda RBX: 00007f4753625fa0 RCX: 00007f475339de99
[  703.640098][T23605] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  703.640110][T23605] RBP: 00007f4754315090 R08: 0000000000000000 R09: 0000000000000000
[  703.640121][T23605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.640132][T23605] R13: 00007f4753626038 R14: 00007f4753625fa0 R15: 00007ffee9f41a58
[  703.640162][T23605]  </TASK>
[  704.057144][T23607] xt_l2tp: invalid flags combination: 8
[  704.140226][T23610] netlink: 'syz.2.5301': attribute type 1 has an invalid length.
[  704.219713][T23607] gre0: entered promiscuous mode
[  704.265486][T23607] gre0: entered allmulticast mode
[  704.456523][T23622] vxcan0: tx address claim with dest, not broadcast
[  704.513922][T23627] netlink: 360 bytes leftover after parsing attributes in process `syz.0.5308'.
[  704.534126][T23626] netlink: 'syz.2.5307': attribute type 34 has an invalid length.
[  704.742893][T23635] lo: entered allmulticast mode
[  704.760756][T23635] lo: left allmulticast mode
[  705.363683][T23651] FAULT_INJECTION: forcing a failure.
[  705.363683][T23651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  705.400182][T23651] CPU: 1 UID: 0 PID: 23651 Comm: syz.3.5314 Not tainted syzkaller #0 PREEMPT(full) 
[  705.400208][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  705.400218][T23651] Call Trace:
[  705.400226][T23651]  <TASK>
[  705.400235][T23651]  dump_stack_lvl+0xe8/0x150
[  705.400268][T23651]  should_fail_ex+0x40c/0x560
[  705.400301][T23651]  _copy_from_iter+0x1d3/0x1660
[  705.400327][T23651]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  705.400355][T23651]  ? rcu_is_watching+0x15/0xb0
[  705.400375][T23651]  ? trace_kmem_cache_alloc+0x29/0xe0
[  705.400400][T23651]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  705.400422][T23651]  ? __pfx__copy_from_iter+0x10/0x10
[  705.400446][T23651]  ? __alloc_skb+0x276/0x7a0
[  705.400464][T23651]  ? __alloc_skb+0x276/0x7a0
[  705.400484][T23651]  ? netlink_sendmsg+0x650/0xb40
[  705.400506][T23651]  ? skb_put+0x112/0x210
[  705.400527][T23651]  netlink_sendmsg+0x6c0/0xb40
[  705.400557][T23651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.400584][T23651]  ? aa_sock_msg_perm+0xf1/0x1b0
[  705.400607][T23651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.400628][T23651]  sock_sendmsg_nosec+0x13a/0x180
[  705.400666][T23651]  ____sys_sendmsg+0x54e/0x850
[  705.400691][T23651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  705.400719][T23651]  ? import_iovec+0x73/0xa0
[  705.400746][T23651]  ___sys_sendmsg+0x2a5/0x360
[  705.400766][T23651]  ? __lock_acquire+0x683/0x2cf0
[  705.400794][T23651]  ? __pfx____sys_sendmsg+0x10/0x10
[  705.400846][T23651]  ? __fget_files+0x2a/0x420
[  705.400872][T23651]  ? __fget_files+0x3a2/0x420
[  705.400903][T23651]  __x64_sys_sendmsg+0x1b1/0x290
[  705.400928][T23651]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  705.400967][T23651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.400987][T23651]  do_syscall_64+0x174/0x580
[  705.401010][T23651]  ? trace_irq_disable+0x3b/0x140
[  705.401043][T23651]  ? clear_bhb_loop+0x40/0x90
[  705.401067][T23651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.401087][T23651] RIP: 0033:0x7f7ef079de99
[  705.401105][T23651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.401121][T23651] RSP: 002b:00007f7ef1708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  705.401141][T23651] RAX: ffffffffffffffda RBX: 00007f7ef0a26090 RCX: 00007f7ef079de99
[  705.401154][T23651] RDX: 0000000000000000 RSI: 00002000000032c0 RDI: 0000000000000003
[  705.401165][T23651] RBP: 00007f7ef1708090 R08: 0000000000000000 R09: 0000000000000000
[  705.401176][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.401186][T23651] R13: 00007f7ef0a26128 R14: 00007f7ef0a26090 R15: 00007ffd6ad3d048
[  705.401215][T23651]  </TASK>
[  705.786002][T23656] bond0: (slave bridge0): Releasing backup interface
[  706.188319][T23656] team0: Port device bridge0 added
[  706.222326][T23620] lo speed is unknown, defaulting to 1000
[  706.223676][T23661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5317'.
[  706.242647][T23661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5317'.
[  706.497638][T23665] netlink: 'syz.1.5319': attribute type 61 has an invalid length.
[  706.506420][T23665] netlink: 'syz.1.5319': attribute type 62 has an invalid length.
[  706.860676][T23668] lo speed is unknown, defaulting to 1000
[  707.495901][T23626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  707.803318][T23677] netlink: 'syz.1.5323': attribute type 4 has an invalid length.
[  707.859814][T23679] netlink: 'syz.2.5324': attribute type 16 has an invalid length.
[  707.871207][T23679] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5324'.
[  707.971086][T23677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  707.986596][T23677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.064754][ T7266] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.089425][ T7266] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.115211][ T7266] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.136243][ T7266] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  708.222593][T23688] FAULT_INJECTION: forcing a failure.
[  708.222593][T23688] name failslab, interval 1, probability 0, space 0, times 0
[  708.235316][T23688] CPU: 1 UID: 0 PID: 23688 Comm: syz.3.5327 Not tainted syzkaller #0 PREEMPT(full) 
[  708.235341][T23688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  708.235351][T23688] Call Trace:
[  708.235359][T23688]  <TASK>
[  708.235366][T23688]  dump_stack_lvl+0xe8/0x150
[  708.235398][T23688]  should_fail_ex+0x40c/0x560
[  708.235424][T23688]  should_failslab+0xa8/0x100
[  708.235454][T23688]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  708.235476][T23688]  ? skb_clone+0x212/0x3a0
[  708.235497][T23688]  ? skb_clone+0x212/0x3a0
[  708.235523][T23688]  skb_clone+0x212/0x3a0
[  708.235546][T23688]  bpf_clone_redirect+0x170/0x4b0
[  708.235577][T23688]  ? bpf_test_run+0x1d1/0x830
[  708.235598][T23688]  bpf_prog_2f59963de350c2d2+0x5e/0x67
[  708.235619][T23688]  ? __kernel_text_address+0xd/0x30
[  708.235637][T23688]  ? unwind_get_return_address+0x4d/0x90
[  708.235655][T23688]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  708.235678][T23688]  ? arch_stack_walk+0xfb/0x150
[  708.235702][T23688]  ? ktime_get+0x45/0x220
[  708.235731][T23688]  ? ktime_get+0x45/0x220
[  708.235753][T23688]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  708.235776][T23688]  ? lockdep_hardirqs_on+0x7a/0x110
[  708.235799][T23688]  ? ktime_get+0x45/0x220
[  708.235820][T23688]  ? seqcount_lockdep_reader_access+0xea/0x100
[  708.235843][T23688]  ? bpf_test_run+0x1d1/0x830
[  708.235867][T23688]  ? bpf_test_timer_continue+0x10c/0x320
[  708.235895][T23688]  bpf_test_run+0x354/0x830
[  708.235937][T23688]  ? __pfx_bpf_test_run+0x10/0x10
[  708.235972][T23688]  ? __kasan_krealloc+0xec/0x110
[  708.236005][T23688]  ? skb_dst_set+0x72/0x140
[  708.236028][T23688]  bpf_prog_test_run_skb+0xe35/0x2230
[  708.236071][T23688]  ? __fget_files+0x3a2/0x420
[  708.236095][T23688]  ? __fget_files+0x2a/0x420
[  708.236124][T23688]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  708.236147][T23688]  bpf_prog_test_run+0x2c5/0x340
[  708.236176][T23688]  __sys_bpf+0xa22/0xd90
[  708.236206][T23688]  ? __pfx___sys_bpf+0x10/0x10
[  708.236236][T23688]  ? __fget_files+0x2a/0x420
[  708.236278][T23688]  ? ksys_write+0x242/0x270
[  708.236295][T23688]  ? __pfx_ksys_write+0x10/0x10
[  708.236314][T23688]  __x64_sys_bpf+0xba/0xd0
[  708.236333][T23688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.236351][T23688]  do_syscall_64+0x174/0x580
[  708.236370][T23688]  ? trace_irq_disable+0x3b/0x140
[  708.236389][T23688]  ? clear_bhb_loop+0x40/0x90
[  708.236409][T23688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.236425][T23688] RIP: 0033:0x7f7ef079de99
[  708.236441][T23688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.236457][T23688] RSP: 002b:00007f7ef1729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  708.236477][T23688] RAX: ffffffffffffffda RBX: 00007f7ef0a25fa0 RCX: 00007f7ef079de99
[  708.236490][T23688] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  708.236502][T23688] RBP: 00007f7ef1729090 R08: 0000000000000000 R09: 0000000000000000
[  708.236512][T23688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  708.236521][T23688] R13: 00007f7ef0a26038 R14: 00007f7ef0a25fa0 R15: 00007ffd6ad3d048
[  708.236549][T23688]  </TASK>
[  709.029765][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'.
[  709.260205][T23714] syzkaller0: entered promiscuous mode
[  709.266434][T23714] syzkaller0: entered allmulticast mode
[  709.276261][T23718] netlink: 'syz.4.5336': attribute type 9 has an invalid length.
[  709.559145][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'.
[  709.614634][T23732] netlink: 'syz.4.5341': attribute type 10 has an invalid length.
[  709.661432][T23732] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5341'.
[  709.705906][T23732] geneve3: entered promiscuous mode
[  709.728298][T23732] geneve3: entered allmulticast mode
[  710.075980][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'.
[  710.400298][T23765] FAULT_INJECTION: forcing a failure.
[  710.400298][T23765] name failslab, interval 1, probability 0, space 0, times 0
[  710.430131][T23765] CPU: 0 UID: 0 PID: 23765 Comm: syz.0.5351 Not tainted syzkaller #0 PREEMPT(full) 
[  710.430157][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  710.430168][T23765] Call Trace:
[  710.430177][T23765]  <TASK>
[  710.430186][T23765]  dump_stack_lvl+0xe8/0x150
[  710.430222][T23765]  should_fail_ex+0x40c/0x560
[  710.430254][T23765]  should_failslab+0xa8/0x100
[  710.430286][T23765]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  710.430311][T23765]  ? local_lock_release+0x9c/0x160
[  710.430334][T23765]  ? __alloc_skb+0x1d7/0x7a0
[  710.430351][T23765]  ? __alloc_skb+0x1d7/0x7a0
[  710.430377][T23765]  __alloc_skb+0x1d7/0x7a0
[  710.430400][T23765]  alloc_skb_with_frags+0xc6/0x760
[  710.430432][T23765]  sock_alloc_send_pskb+0x878/0x990
[  710.430474][T23765]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  710.430497][T23765]  ? kasan_quarantine_put+0xbb/0x1f0
[  710.430529][T23765]  ? lockdep_hardirqs_on+0x7a/0x110
[  710.430558][T23765]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  710.430687][T23765]  ? kmem_cache_free+0x182/0x650
[  710.430714][T23765]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  710.430739][T23765]  unix_dgram_sendmsg+0x4da/0x17b0
[  710.430766][T23765]  ? __lock_acquire+0x683/0x2cf0
[  710.430807][T23765]  ? __lock_acquire+0x683/0x2cf0
[  710.430832][T23765]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  710.430863][T23765]  ? aa_sock_msg_perm+0xda/0x1b0
[  710.430885][T23765]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  710.430913][T23765]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  710.430937][T23765]  sock_sendmsg_nosec+0x13a/0x180
[  710.430966][T23765]  ____sys_sendmsg+0x54e/0x850
[  710.430991][T23765]  ? __pfx_____sys_sendmsg+0x10/0x10
[  710.431018][T23765]  ? import_iovec+0x73/0xa0
[  710.431047][T23765]  ___sys_sendmsg+0x2a5/0x360
[  710.431067][T23765]  ? __lock_acquire+0x683/0x2cf0
[  710.431091][T23765]  ? __pfx____sys_sendmsg+0x10/0x10
[  710.431110][T23765]  ? __lock_acquire+0x683/0x2cf0
[  710.431140][T23765]  ? kstrtouint+0x6e/0xe0
[  710.431203][T23765]  __sys_sendmmsg+0x273/0x4d0
[  710.431228][T23765]  ? __pfx___sys_sendmmsg+0x10/0x10
[  710.431258][T23765]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  710.431294][T23765]  ? ksys_write+0x242/0x270
[  710.431315][T23765]  ? __pfx_ksys_write+0x10/0x10
[  710.431339][T23765]  __x64_sys_sendmmsg+0xa0/0xc0
[  710.431361][T23765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.431381][T23765]  do_syscall_64+0x174/0x580
[  710.431402][T23765]  ? trace_irq_disable+0x3b/0x140
[  710.431426][T23765]  ? clear_bhb_loop+0x40/0x90
[  710.431450][T23765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.431470][T23765] RIP: 0033:0x7f475339de99
[  710.431488][T23765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.431513][T23765] RSP: 002b:00007f4754315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  710.431535][T23765] RAX: ffffffffffffffda RBX: 00007f4753625fa0 RCX: 00007f475339de99
[  710.431551][T23765] RDX: 04000000000002cf RSI: 00002000000002c0 RDI: 0000000000000003
[  710.431565][T23765] RBP: 00007f4754315090 R08: 0000000000000000 R09: 0000000000000000
[  710.431577][T23765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  710.431589][T23765] R13: 00007f4753626038 R14: 00007f4753625fa0 R15: 00007ffee9f41a58
[  710.431620][T23765]  </TASK>
[  710.826925][T23771] 8021q: adding VLAN 0 to HW filter on device macsec1
[  710.863649][ T5737] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  710.868626][T23777] Cannot find del_set index 3 as target
[  710.929326][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5355'.
[  710.947622][T23782] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  710.970233][T23781] --map-set only usable from mangle table
[  711.155641][T23784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5356'.
[  711.164789][T23784] netlink: 'syz.3.5356': attribute type 10 has an invalid length.
[  711.178444][T23784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5356'.
[  711.342546][T23795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5359'.
[  711.451765][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5361'.
[  711.548313][T23809] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode
[  711.570019][T23809] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode
[  711.591932][T23809] tipc: Resetting bearer <eth:syzkaller0>
[  711.616474][T23809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  711.827018][T23824] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  711.915180][T23832] netlink: 'syz.4.5371': attribute type 10 has an invalid length.
[  711.926078][T23831] netlink: 'syz.1.5372': attribute type 30 has an invalid length.
[  711.974927][   T76] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  711.985823][T23831] netlink: 'syz.1.5372': attribute type 30 has an invalid length.
[  712.004666][   T76] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  712.035367][   T76] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  712.051121][   T76] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  712.690516][T23866] tunl0: Caught tx_queue_len zero misconfig
[  712.850343][T23868] xfrm1: entered promiscuous mode
[  712.850819][T23874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.855825][T23868] xfrm1: entered allmulticast mode
[  712.872110][T23873] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  712.882985][T23868] __nla_validate_parse: 6 callbacks suppressed
[  712.883003][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5381'.
[  712.945873][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5385'.
[  712.968553][T23877] netlink: 'syz.2.5385': attribute type 10 has an invalid length.
[  712.976695][T23877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5385'.
[  713.024868][T23880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  713.047352][T23881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5387'.
[  713.147517][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5389'.
[  713.167921][T23891] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5387'.
[  713.201401][T23881] 8021q: adding VLAN 0 to HW filter on device bond7
[  713.241071][T23891] 8021q: adding VLAN 0 to HW filter on device batadv1
[  713.250316][T23891] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  713.409860][T23900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5394'.
[  713.482858][T23900] xt_l2tp: invalid flags combination: 8
[  713.490318][T23900] netlink: 'syz.1.5394': attribute type 1 has an invalid length.
[  713.763664][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5399'.
[  713.776934][T23918] netlink: 'syz.3.5399': attribute type 10 has an invalid length.
[  713.803910][T23918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5399'.
[  713.893335][T23926] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5401'.
[  713.946976][T23927] bridge0: port 3(vlan3) entered blocking state
[  713.969655][T23927] bridge0: port 3(vlan3) entered disabled state
[  713.984061][T23927] vlan3: entered allmulticast mode
[  714.002344][T23927] geneve0: entered allmulticast mode
[  714.019320][T23927] vlan3: entered promiscuous mode
[  714.027643][T23927] geneve0: entered promiscuous mode
[  714.172570][   T30] audit: type=1804 audit(1785272141.269:71): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5405" name="/newroot/395/cgroup.controllers" dev="tmpfs" ino=2018 res=1 errno=0
[  714.211070][T23932] syzkaller0: entered promiscuous mode
[  714.222427][   T30] audit: type=1800 audit(1785272141.289:72): pid=23934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5405" name="cgroup.controllers" dev="tmpfs" ino=2018 res=0 errno=0
[  714.225923][T23932] syzkaller0: entered allmulticast mode
[  714.456836][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.477993][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.858966][T23972] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  715.365754][T23998] bond12: entered promiscuous mode
[  715.378096][T23998] bond12: entered allmulticast mode
[  715.384491][T23998] 8021q: adding VLAN 0 to HW filter on device bond12
[  715.669967][T24013] xt_connbytes: Forcing CT accounting to be enabled
[  715.693401][T24013] xt_CT: You must specify a L4 protocol and not use inversions on it
[  715.821379][T24020] netlink: 'syz.0.5435': attribute type 3 has an invalid length.
[  715.843426][T24020] netlink: 'syz.0.5435': attribute type 1 has an invalid length.
[  715.870692][T24020] netlink: 'syz.0.5435': attribute type 4 has an invalid length.
[  715.888688][T24020] netlink: 'syz.0.5435': attribute type 4 has an invalid length.
[  716.032392][T24028] netlink: 'syz.2.5437': attribute type 23 has an invalid length.
[  716.273111][T24034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  716.588698][ T5628] Bluetooth: hci3: command 0x0406 tx timeout
[  716.613704][T24049] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  717.228682][   T13] wlan1: Trigger new scan to find an IBSS to join
[  717.330018][T24069] IPv6: Can't replace route, no match found
[  717.946592][T24094] xt_cgroup: invalid path, errno=-2
[  717.958827][T24086] syzkaller0: entered promiscuous mode
[  717.966278][T24086] syzkaller0: entered allmulticast mode
[  718.390770][T24107] netlink: 'syz.1.5463': attribute type 3 has an invalid length.
[  718.399415][T24107] netlink: 'syz.1.5463': attribute type 1 has an invalid length.
[  718.407282][T24107] __nla_validate_parse: 6 callbacks suppressed
[  718.407298][T24107] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5463'.
[  718.594384][T24109] netlink: 'syz.1.5463': attribute type 4 has an invalid length.
[  718.651877][T24110] netlink: 'syz.1.5463': attribute type 4 has an invalid length.
[  719.480538][T23978] Set syz1 is full, maxelem 65536 reached
[  721.240818][ T7259] wlan1: Trigger new scan to find an IBSS to join
[  722.230599][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  722.687589][T24136] syzkaller0: entered promiscuous mode
[  722.700338][T24136] syzkaller0: entered allmulticast mode
[  722.720597][T24101] lo speed is unknown, defaulting to 1000
[  722.750777][T24138] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5473'.
[  722.770169][T24138] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5473'.
[  722.783385][T24138] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5473'.
[  722.854135][T24142] netlink: 'syz.2.5475': attribute type 3 has an invalid length.
[  722.876954][T24142] netlink: 'syz.2.5475': attribute type 1 has an invalid length.
[  722.898921][T24142] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5475'.
[  722.911000][T24143] netlink: 'syz.2.5475': attribute type 4 has an invalid length.
[  722.930323][T24143] netlink: 'syz.2.5475': attribute type 4 has an invalid length.
[  723.112384][T24145] syzkaller0: entered promiscuous mode
[  723.118111][T24145] syzkaller0: entered allmulticast mode
[  723.222340][T24157] netlink: 'syz.3.5480': attribute type 16 has an invalid length.
[  723.237925][T24157] netlink: 'syz.3.5480': attribute type 17 has an invalid length.
[  723.472562][T24164] netlink: 'syz.3.5480': attribute type 10 has an invalid length.
[  726.220253][T24161] bridge_slave_0: left allmulticast mode
[  726.226320][T24161] bridge_slave_0: left promiscuous mode
[  726.243538][T24161] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.258053][T24161] bridge_slave_1: left allmulticast mode
[  726.271854][T24161] bridge_slave_1: left promiscuous mode
[  726.288091][T24161] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.314153][T24161] bond0: (slave bond_slave_0): Releasing backup interface
[  726.327159][T24161] bond0: (slave 
c
@0Ù): Releasing backup interface
[  726.344059][T24161] team0: Port device team_slave_0 removed
[  726.363252][T24161] team0: Port device team_slave_1 removed
[  726.372851][T24161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.382203][T24161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  726.392750][T24161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  726.409030][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5485'.
[  727.489797][T24198] netlink: 'syz.1.5488': attribute type 3 has an invalid length.
[  727.499392][T24198] netlink: 'syz.1.5488': attribute type 1 has an invalid length.
[  727.550957][T24198] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5488'.
[  727.603627][T24198] netlink: 'syz.1.5488': attribute type 4 has an invalid length.
[  727.658573][T24198] netlink: 'syz.1.5488': attribute type 4 has an invalid length.
[  728.177260][T24212] syzkaller0: entered promiscuous mode
[  728.199602][T24212] syzkaller0: entered allmulticast mode
[  728.526139][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.545927][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.565976][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.586137][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.609193][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.629933][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.639901][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5499'.
[  728.674659][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5499'.
[  729.162431][T24251] netlink: 'syz.1.5502': attribute type 3 has an invalid length.
[  729.171274][T24251] netlink: 'syz.1.5502': attribute type 1 has an invalid length.
[  729.264928][T24256] netlink: 'syz.2.5503': attribute type 9 has an invalid length.
[  729.309930][T24257] netlink: 'syz.1.5502': attribute type 4 has an invalid length.
[  729.393383][T24258] netlink: 'syz.1.5502': attribute type 4 has an invalid length.
[  732.958533][T24266] __nla_validate_parse: 8 callbacks suppressed
[  732.958557][T24266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5506'.
[  733.026903][T24266] ip6gre2: entered promiscuous mode
[  733.034214][T24266] ip6gre2: entered allmulticast mode
[  733.171685][T24276] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5509'.
[  733.277509][T24284] FAULT_INJECTION: forcing a failure.
[  733.277509][T24284] name failslab, interval 1, probability 0, space 0, times 0
[  733.333090][T24284] CPU: 0 UID: 0 PID: 24284 Comm: syz.3.5513 Not tainted syzkaller #0 PREEMPT(full) 
[  733.333120][T24284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  733.333132][T24284] Call Trace:
[  733.333141][T24284]  <TASK>
[  733.333150][T24284]  dump_stack_lvl+0xe8/0x150
[  733.333187][T24284]  should_fail_ex+0x40c/0x560
[  733.333219][T24284]  should_failslab+0xa8/0x100
[  733.333251][T24284]  __kmalloc_noprof+0xfe/0x720
[  733.333276][T24284]  ? rcu_is_watching+0x15/0xb0
[  733.333296][T24284]  ? tomoyo_realpath_from_path+0xef/0x640
[  733.333319][T24284]  ? tomoyo_realpath_from_path+0xef/0x640
[  733.333348][T24284]  tomoyo_realpath_from_path+0xef/0x640
[  733.333380][T24284]  ? tomoyo_path_number_perm+0x219/0x5f0
[  733.333410][T24284]  tomoyo_path_number_perm+0x246/0x5f0
[  733.333441][T24284]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  733.333468][T24284]  ? __lock_acquire+0x683/0x2cf0
[  733.333511][T24284]  ? hook_file_ioctl+0x1f0/0x5f0
[  733.333548][T24284]  ? __fget_files+0x2a/0x420
[  733.333577][T24284]  ? __fget_files+0x2a/0x420
[  733.333600][T24284]  ? __fget_files+0x3a2/0x420
[  733.333622][T24284]  ? __fget_files+0x2a/0x420
[  733.333649][T24284]  security_file_ioctl+0xc3/0x2a0
[  733.333679][T24284]  __se_sys_ioctl+0x47/0x170
[  733.333699][T24284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.333719][T24284]  do_syscall_64+0x174/0x580
[  733.333742][T24284]  ? trace_irq_disable+0x3b/0x140
[  733.333767][T24284]  ? clear_bhb_loop+0x40/0x90
[  733.333790][T24284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.333810][T24284] RIP: 0033:0x7f7ef079de99
[  733.333829][T24284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  733.333846][T24284] RSP: 002b:00007f7ef1729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  733.333866][T24284] RAX: ffffffffffffffda RBX: 00007f7ef0a25fa0 RCX: 00007f7ef079de99
[  733.333879][T24284] RDX: 0000000000000000 RSI: 00000000000089ef RDI: 0000000000000003
[  733.333890][T24284] RBP: 00007f7ef1729090 R08: 0000000000000000 R09: 0000000000000000
[  733.333901][T24284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  733.333911][T24284] R13: 00007f7ef0a26038 R14: 00007f7ef0a25fa0 R15: 00007ffd6ad3d048
[  733.333942][T24284]  </TASK>
[  733.333962][T24284] ERROR: Out of memory at tomoyo_realpath_from_path.
[  733.346231][T24289] syz_tun: entered allmulticast mode
[  733.651558][T24286] syz_tun: left allmulticast mode
[  733.699645][T24301] netlink: 328 bytes leftover after parsing attributes in process `syz.3.5517'.
[  733.936187][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5518'.
[  733.980689][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5518'.
[  734.014097][T24308] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  734.041811][T24319] syzkaller0: refused to change device tx_queue_len
[  734.081202][T24322] veth0_to_bond: entered allmulticast mode
[  734.150507][T24324] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5525'.
[  734.182065][T24324] : renamed from veth0_to_bond
[  734.335975][T24329] syzkaller0: entered promiscuous mode
[  734.348699][T24329] syzkaller0: entered allmulticast mode
[  734.413691][T24313] lo speed is unknown, defaulting to 1000
[  734.576498][T24340] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  734.605144][T24340] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode
[  734.954862][T24350] bond11: (slave bond0): Releasing backup interface
[  734.975014][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5537'.
[  735.106018][T24362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5539'.
[  735.201233][T24366] syzkaller0: entered promiscuous mode
[  735.211442][T24366] syzkaller0: entered allmulticast mode
[  735.236307][T24365] syzkaller0: entered promiscuous mode
[  735.253467][T24365] syzkaller0: entered allmulticast mode
[  735.276868][T24359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  735.362072][T24358] tipc: Resetting bearer <eth:syzkaller0>
[  735.439726][T24358] tipc: Disabling bearer <eth:syzkaller0>
[  735.705609][T24377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'.
[  735.718057][T24379] syzkaller0: entered promiscuous mode
[  735.730577][T24379] syzkaller0: entered allmulticast mode
[  735.943617][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5550'.
[  736.010276][T24386] ip6gre1: entered promiscuous mode
[  736.045037][T24386] ip6gre1: entered allmulticast mode
[  736.066771][T24393] netlink: 'syz.0.5550': attribute type 6 has an invalid length.
[  736.334150][T24393] batman_adv: batadv0: Removing interface: batadv_slave_0
[  736.652994][T24401] syzkaller0: entered promiscuous mode
[  736.664993][T24401] syzkaller0: entered allmulticast mode
[  736.855353][T24431] IPVS: length: 1152 != 8
[  740.539693][T24442] netlink: 'syz.2.5564': attribute type 15 has an invalid length.
[  740.570093][T24441] bond4: (slave bond0): Releasing backup interface
[  740.588771][T24442] __nla_validate_parse: 3 callbacks suppressed
[  740.588791][T24442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5564'.
[  740.664085][T24448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5568'.
[  740.746077][T24451] FAULT_INJECTION: forcing a failure.
[  740.746077][T24451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.769015][T24451] CPU: 1 UID: 0 PID: 24451 Comm: syz.0.5569 Not tainted syzkaller #0 PREEMPT(full) 
[  740.769045][T24451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  740.769058][T24451] Call Trace:
[  740.769067][T24451]  <TASK>
[  740.769076][T24451]  dump_stack_lvl+0xe8/0x150
[  740.769113][T24451]  should_fail_ex+0x40c/0x560
[  740.769143][T24451]  _copy_from_iter+0x1d3/0x1660
[  740.769174][T24451]  ? unwind_next_frame+0x8f/0x2550
[  740.769200][T24451]  ? __lock_acquire+0x683/0x2cf0
[  740.769228][T24451]  ? __pfx__copy_from_iter+0x10/0x10
[  740.769268][T24451]  tun_get_user+0x50c/0x4370
[  740.769324][T24451]  ? aa_file_perm+0x18b/0x15f0
[  740.769354][T24451]  ? aa_file_perm+0x4ed/0x15f0
[  740.769375][T24451]  ? __pfx_tun_get_user+0x10/0x10
[  740.769405][T24451]  ? __lock_acquire+0x683/0x2cf0
[  740.769433][T24451]  ? kstrtoull+0x12f/0x1d0
[  740.769464][T24451]  ? ref_tracker_alloc+0x341/0x4b0
[  740.769489][T24451]  ? get_pid_task+0x20/0x1f0
[  740.769517][T24451]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  740.769540][T24451]  ? tun_get+0x1c/0x2f0
[  740.769567][T24451]  ? tun_get+0x1c/0x2f0
[  740.769599][T24451]  ? tun_get+0x1c/0x2f0
[  740.769627][T24451]  ? tun_get+0x1c/0x2f0
[  740.769658][T24451]  tun_chr_write_iter+0x113/0x200
[  740.769687][T24451]  vfs_write+0x612/0xba0
[  740.769715][T24451]  ? __pfx_vfs_write+0x10/0x10
[  740.769742][T24451]  ? __fget_files+0x2a/0x420
[  740.769772][T24451]  ksys_write+0x150/0x270
[  740.769792][T24451]  ? __pfx_ksys_write+0x10/0x10
[  740.769816][T24451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.769835][T24451]  do_syscall_64+0x174/0x580
[  740.769858][T24451]  ? trace_irq_disable+0x3b/0x140
[  740.769881][T24451]  ? clear_bhb_loop+0x40/0x90
[  740.769902][T24451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.769918][T24451] RIP: 0033:0x7f475339de99
[  740.769937][T24451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.769954][T24451] RSP: 002b:00007f4754315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  740.769973][T24451] RAX: ffffffffffffffda RBX: 00007f4753625fa0 RCX: 00007f475339de99
[  740.769987][T24451] RDX: 0000000000000108 RSI: 0000200000000040 RDI: 0000000000000003
[  740.769996][T24451] RBP: 00007f4754315090 R08: 0000000000000000 R09: 0000000000000000
[  740.770006][T24451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.770015][T24451] R13: 00007f4753626038 R14: 00007f4753625fa0 R15: 00007ffee9f41a58
[  740.770042][T24451]  </TASK>
[  741.246088][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5568'.
[  741.366159][T24461] openvswitch: netlink: EtherType 0 is less than min 600
[  741.617687][T24444] lo speed is unknown, defaulting to 1000
[  741.726400][T24475] pimreg: entered allmulticast mode
[  742.043672][T24486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5581'.
[  742.073485][T24486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5581'.
[  742.093302][T18835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  742.106815][T18835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  742.119015][T18835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  742.139842][T18835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  742.154408][T18835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  742.860227][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5587'.
[  743.151554][T24523] netlink: 'syz.0.5589': attribute type 1 has an invalid length.
[  743.275780][T24525] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5589'.
[  743.990316][T24523] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  743.991763][T24528] veth0_to_bond: left allmulticast mode
[  744.269471][T18835] Bluetooth: hci4: command tx timeout
[  744.421719][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.757671][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.038259][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.212052][T24488] lo speed is unknown, defaulting to 1000
[  745.275642][T24580] geneve4: entered promiscuous mode
[  745.288581][T24580] geneve4: entered allmulticast mode
[  745.341475][T24580] team0 (unregistering): Port device team_slave_0 removed
[  745.386205][T24580] team0 (unregistering): Port device team_slave_1 removed
[  745.481808][T24583] syzkaller0: entered promiscuous mode
[  745.500634][T24583] syzkaller0: entered allmulticast mode
[  745.994640][   T36] bridge_slave_1: left allmulticast mode
[  746.019031][   T36] bridge_slave_1: left promiscuous mode
[  746.039224][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.090984][   T36] bridge_slave_0: left allmulticast mode
[  746.118150][   T36] bridge_slave_0: left promiscuous mode
[  746.132694][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.336053][T24619] netlink: 'syz.0.5609': attribute type 1 has an invalid length.
[  746.358459][T18835] Bluetooth: hci4: command tx timeout
[  746.406008][T24625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.725401][   T36] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  746.757139][   T36] bond6 (unregistering): (slave bridge2): Releasing backup interface
[  746.812038][   T36] bond7 (unregistering): (slave bond0): Releasing backup interface
[  746.824012][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  746.836423][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  746.846786][   T36] bond0 (unregistering): Released all slaves
[  746.863347][   T36] bond1 (unregistering): Released all slaves
[  746.878260][   T36] bond2 (unregistering): Released all slaves
[  746.897455][   T36] bond3 (unregistering): (slave bond4): Releasing backup interface
[  746.906383][   T36] bond3 (unregistering): Released all slaves
[  746.924858][   T36] bond4 (unregistering): Released all slaves
[  746.939396][   T36] bond5 (unregistering): Released all slaves
[  746.956815][   T36] bond6 (unregistering): Released all slaves
[  746.979559][   T36] bond7 (unregistering): Released all slaves
[  746.998790][T24611] bridge0: entered allmulticast mode
[  747.129448][T24619] 8021q: adding VLAN 0 to HW filter on device bond13
[  747.159741][T24624] bond13: (slave syz_tun): making interface the new active one
[  747.182741][T24624] bond13: (slave syz_tun): Enslaving as an active interface with an up link
[  747.204250][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  747.368281][   T36] tipc: Disabling bearer <udp:syz2>
[  747.377743][   T36] tipc: Disabling bearer <eth:syzkaller0>
[  747.449515][   T36] tipc: Left network mode
[  747.555226][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  747.592918][T24658] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  748.231135][T24488] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.238770][T24488] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.246258][T24488] bridge_slave_0: entered allmulticast mode
[  748.275758][T24488] bridge_slave_0: entered promiscuous mode
[  748.326112][T24488] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.355669][T24488] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.390227][T24488] bridge_slave_1: entered allmulticast mode
[  748.406229][T24694] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5623'.
[  748.419204][T24488] bridge_slave_1: entered promiscuous mode
[  748.435615][T18835] Bluetooth: hci4: command tx timeout
[  748.440996][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5623'.
[  748.577432][T24488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  748.612551][T24488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  748.934947][T24488] team0: Port device team_slave_0 added
[  749.012147][T24720] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  749.050806][T24488] team0: Port device team_slave_1 added
[  749.249828][T24717] smbdirect: ib_dev[syz0] renamed to [syz2]
[  749.286407][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  749.337873][T24488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  749.362722][T24488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  749.415232][T24488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  749.439780][T24488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.481427][T24488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  749.543088][T24488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.794075][T24488] hsr_slave_0: entered promiscuous mode
[  749.813975][T24488] hsr_slave_1: entered promiscuous mode
[  749.910528][T24752] netlink: 'syz.1.5637': attribute type 8 has an invalid length.
[  750.383080][T24767] syzkaller0: entered promiscuous mode
[  750.405395][T24767] syzkaller0: entered allmulticast mode
[  750.509365][T18835] Bluetooth: hci4: command tx timeout
[  750.602371][T24785] netlink: 'syz.4.5642': attribute type 2 has an invalid length.
[  754.347870][T24781] syzkaller0: entered promiscuous mode
[  754.353806][T24781] syzkaller0: entered allmulticast mode
[  754.361460][T24793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5644'.
[  758.324789][   T36] hsr_slave_0: left promiscuous mode
[  758.330890][   T36] hsr_slave_1: left promiscuous mode
[  758.336994][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  758.345269][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  758.495129][   T36] team0 (unregistering): Port device team_slave_1 removed
[  758.518240][   T36] team0 (unregistering): Port device team_slave_0 removed
[  758.645224][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  759.045461][T24831] syzkaller0: entered promiscuous mode
[  759.051367][T24831] syzkaller0: entered allmulticast mode
[  759.101050][T24838] netlink: 424 bytes leftover after parsing attributes in process `syz.0.5653'.
[  759.211054][T24842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5654'.
[  759.253983][   T36] IPVS: stop unused estimator thread 0...
[  759.830757][T24848] syzkaller0: entered promiscuous mode
[  759.836453][T24848] syzkaller0: entered allmulticast mode
[  759.960097][T24871] netlink: 'syz.1.5658': attribute type 1 has an invalid length.
[  760.043568][T24873] FAULT_INJECTION: forcing a failure.
[  760.043568][T24873] name failslab, interval 1, probability 0, space 0, times 0
[  760.093862][T24873] CPU: 1 UID: 0 PID: 24873 Comm: syz.3.5659 Not tainted syzkaller #0 PREEMPT(full) 
[  760.093891][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  760.093903][T24873] Call Trace:
[  760.093912][T24873]  <TASK>
[  760.093921][T24873]  dump_stack_lvl+0xe8/0x150
[  760.093958][T24873]  should_fail_ex+0x40c/0x560
[  760.094002][T24873]  should_failslab+0xa8/0x100
[  760.094034][T24873]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  760.094060][T24873]  ? security_inode_alloc+0x39/0x310
[  760.094083][T24873]  ? security_inode_alloc+0x39/0x310
[  760.094109][T24873]  security_inode_alloc+0x39/0x310
[  760.094131][T24873]  inode_init_always_gfp+0x97e/0xd30
[  760.094160][T24873]  ? __pfx_proc_alloc_inode+0x10/0x10
[  760.094188][T24873]  alloc_inode+0x82/0x1b0
[  760.094213][T24873]  new_inode+0x1f/0x170
[  760.094235][T24873]  ? proc_pid_make_inode+0x19/0x130
[  760.094258][T24873]  proc_pid_make_inode+0x21/0x130
[  760.094282][T24873]  proc_ns_dir_lookup+0x697/0x7c0
[  760.094363][T24873]  path_openat+0x111f/0x3830
[  760.094416][T24873]  do_file_open+0x23e/0x4a0
[  760.094441][T24873]  ? __pfx_do_file_open+0x10/0x10
[  760.094468][T24873]  ? __pfx_kfree_link+0x10/0x10
[  760.094504][T24873]  ? _raw_spin_unlock+0x28/0x50
[  760.094525][T24873]  ? alloc_fd+0x651/0x6c0
[  760.094559][T24873]  do_sys_openat2+0x115/0x200
[  760.094587][T24873]  ? __pfx_do_sys_openat2+0x10/0x10
[  760.094612][T24873]  ? ksys_write+0x242/0x270
[  760.094632][T24873]  ? __pfx_ksys_write+0x10/0x10
[  760.094654][T24873]  __x64_sys_openat+0x138/0x170
[  760.094682][T24873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.094702][T24873]  do_syscall_64+0x174/0x580
[  760.094724][T24873]  ? trace_irq_disable+0x3b/0x140
[  760.094752][T24873]  ? clear_bhb_loop+0x40/0x90
[  760.094774][T24873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.094793][T24873] RIP: 0033:0x7f7ef075e6ce
[  760.094812][T24873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  760.094828][T24873] RSP: 002b:00007f7ef1728f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  760.094851][T24873] RAX: ffffffffffffffda RBX: 00007f7ef17296c0 RCX: 00007f7ef075e6ce
[  760.094863][T24873] RDX: 0000000000000000 RSI: 00007f7ef08335ea RDI: ffffffffffffff9c
[  760.094875][T24873] RBP: 00007f7ef1729090 R08: 0000000000000000 R09: 0000000000000000
[  760.094885][T24873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  760.094895][T24873] R13: 00007f7ef0a26038 R14: 00007f7ef0a25fa0 R15: 00007ffd6ad3d048
[  760.094922][T24873]  </TASK>
[  765.995519][T24942] netlink: 'syz.1.5670': attribute type 12 has an invalid length.
[  766.002495][T24945] FAULT_INJECTION: forcing a failure.
[  766.002495][T24945] name failslab, interval 1, probability 0, space 0, times 0
[  766.014803][T24942] netlink: 'syz.1.5670': attribute type 29 has an invalid length.
[  766.038931][T24945] CPU: 0 UID: 0 PID: 24945 Comm: syz.3.5671 Not tainted syzkaller #0 PREEMPT(full) 
[  766.038963][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  766.038975][T24945] Call Trace:
[  766.038983][T24945]  <TASK>
[  766.038993][T24945]  dump_stack_lvl+0xe8/0x150
[  766.039037][T24945]  should_fail_ex+0x40c/0x560
[  766.039067][T24945]  should_failslab+0xa8/0x100
[  766.039099][T24945]  __kmalloc_cache_noprof+0xa8/0x660
[  766.039128][T24945]  ? genl_start+0x1c9/0x6d0
[  766.039155][T24945]  ? genl_start+0x1c9/0x6d0
[  766.039188][T24945]  genl_start+0x1c9/0x6d0
[  766.039223][T24945]  __netlink_dump_start+0x442/0x7b0
[  766.039253][T24945]  genl_family_rcv_msg_dumpit+0x213/0x310
[  766.039286][T24945]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  766.039313][T24945]  ? genl_get_cmd+0x82f/0x960
[  766.039345][T24945]  ? __pfx_genl_start+0x10/0x10
[  766.039369][T24945]  ? __pfx_genl_dumpit+0x10/0x10
[  766.039402][T24945]  ? __pfx_genl_done+0x10/0x10
[  766.039426][T24945]  ? __lock_acquire+0x683/0x2cf0
[  766.039461][T24945]  genl_rcv_msg+0x5e1/0x7a0
[  766.039491][T24945]  ? __pfx_genl_rcv_msg+0x10/0x10
[  766.039515][T24945]  ? __pfx_batadv_netlink_dump_hardif+0x10/0x10
[  766.039637][T24945]  netlink_rcv_skb+0x226/0x4a0
[  766.039658][T24945]  ? __pfx_genl_rcv_msg+0x10/0x10
[  766.039684][T24945]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  766.039703][T24942] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5670'.
[  766.039717][T24945]  ? down_read+0x2be/0x330
[  766.039745][T24945]  genl_rcv+0x28/0x40
[  766.039764][T24945]  netlink_unicast+0x7bb/0x940
[  766.039792][T24945]  netlink_sendmsg+0x813/0xb40
[  766.039824][T24945]  ? __pfx_netlink_sendmsg+0x10/0x10
[  766.039850][T24945]  ? aa_sock_msg_perm+0xf1/0x1b0
[  766.039879][T24945]  ? __pfx_netlink_sendmsg+0x10/0x10
[  766.039899][T24945]  sock_sendmsg_nosec+0x13a/0x180
[  766.039930][T24945]  ____sys_sendmsg+0x54e/0x850
[  766.039958][T24945]  ? __pfx_____sys_sendmsg+0x10/0x10
[  766.039989][T24945]  ? import_iovec+0x73/0xa0
[  766.040020][T24945]  ___sys_sendmsg+0x2a5/0x360
[  766.040040][T24945]  ? __lock_acquire+0x683/0x2cf0
[  766.040069][T24945]  ? __pfx____sys_sendmsg+0x10/0x10
[  766.040125][T24945]  ? __fget_files+0x2a/0x420
[  766.040150][T24945]  ? __fget_files+0x3a2/0x420
[  766.040185][T24945]  __x64_sys_sendmsg+0x1b1/0x290
[  766.040210][T24945]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  766.040252][T24945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.040273][T24945]  do_syscall_64+0x174/0x580
[  766.040294][T24945]  ? trace_irq_disable+0x3b/0x140
[  766.040320][T24945]  ? clear_bhb_loop+0x40/0x90
[  766.040342][T24945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.040361][T24945] RIP: 0033:0x7f7ef079de99
[  766.040388][T24945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  766.040404][T24945] RSP: 002b:00007f7ef1729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  766.040425][T24945] RAX: ffffffffffffffda RBX: 00007f7ef0a25fa0 RCX: 00007f7ef079de99
[  766.040439][T24945] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  766.040452][T24945] RBP: 00007f7ef1729090 R08: 0000000000000000 R09: 0000000000000000
[  766.040463][T24945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  766.040475][T24945] R13: 00007f7ef0a26038 R14: 00007f7ef0a25fa0 R15: 00007ffd6ad3d048
[  766.040505][T24945]  </TASK>
[  766.418860][T24942] netlink: 'syz.1.5670': attribute type 2 has an invalid length.
[  767.261444][T24978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5678'.
[  767.294689][T24978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5678'.
[  767.683081][T24991] netlink: 'syz.4.5682': attribute type 1 has an invalid length.
[  767.723375][T24991] netlink: 'syz.4.5682': attribute type 3 has an invalid length.
[  767.763861][T24991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5682'.
[  767.783488][T24488] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  767.824274][T24488] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  767.856089][T24488] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  767.876168][T24488] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  767.911450][T24488] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  767.955385][T24488] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  767.976567][T24488] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  768.000789][T24488] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  768.020945][T25005] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5686'.
[  768.064558][T25005] 0ªX¹¦À: renamed from batadv0
[  768.081895][T25005] 0ªX¹¦À: entered allmulticast mode
[  768.106604][T25005] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[  768.129858][T25005] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  768.678669][T25024] syzkaller0: entered promiscuous mode
[  768.696899][T25024] syzkaller0: entered allmulticast mode
[  769.043605][T25049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5693'.
[  769.092079][T25049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5693'.
[  769.149556][T24488] 8021q: adding VLAN 0 to HW filter on device bond0
[  769.280761][T24488] 8021q: adding VLAN 0 to HW filter on device team0
[  769.322295][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.329516][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  769.388741][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.395990][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  769.783454][T25071] netlink: 'syz.3.5699': attribute type 1 has an invalid length.
[  769.858116][T25071] 8021q: adding VLAN 0 to HW filter on device bond8
[  769.883824][T25085] FAULT_INJECTION: forcing a failure.
[  769.883824][T25085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  769.897394][T25085] CPU: 0 UID: 0 PID: 25085 Comm: syz.4.5701 Not tainted syzkaller #0 PREEMPT(full) 
[  769.897420][T25085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  769.897431][T25085] Call Trace:
[  769.897439][T25085]  <TASK>
[  769.897448][T25085]  dump_stack_lvl+0xe8/0x150
[  769.897484][T25085]  should_fail_ex+0x40c/0x560
[  769.897514][T25085]  _copy_from_user+0x2d/0xb0
[  769.897534][T25085]  ___sys_recvmsg+0x173/0x5a0
[  769.897558][T25085]  ? ktime_get_ts64+0xa9/0x410
[  769.897589][T25085]  ? __pfx____sys_recvmsg+0x10/0x10
[  769.897617][T25085]  ? ktime_get_ts64+0xa9/0x410
[  769.897666][T25085]  do_recvmmsg+0x31a/0x7f0
[  769.897697][T25085]  ? __pfx_do_recvmmsg+0x10/0x10
[  769.897732][T25085]  ? get_timespec64+0x119/0x1b0
[  769.897758][T25085]  ? __pfx_get_timespec64+0x10/0x10
[  769.897796][T25085]  __x64_sys_recvmmsg+0x1b7/0x250
[  769.897822][T25085]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  769.897854][T25085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.897875][T25085]  do_syscall_64+0x174/0x580
[  769.897899][T25085]  ? trace_irq_disable+0x3b/0x140
[  769.897925][T25085]  ? clear_bhb_loop+0x40/0x90
[  769.897949][T25085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.897968][T25085] RIP: 0033:0x7f1772b9de99
[  769.897987][T25085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.898004][T25085] RSP: 002b:00007f1773aa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  769.898023][T25085] RAX: ffffffffffffffda RBX: 00007f1772e25fa0 RCX: 00007f1772b9de99
[  769.898037][T25085] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  769.898050][T25085] RBP: 00007f1773aa3090 R08: 0000200000003700 R09: 0000000000000000
[  769.898063][T25085] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002
[  769.898075][T25085] R13: 00007f1772e26038 R14: 00007f1772e25fa0 R15: 00007ffdbc9b0fa8
[  769.898107][T25085]  </TASK>
[  770.672951][T25109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5706'.
[  770.721622][T25109] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5706'.
[  771.027453][T24488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.182899][T24488] veth0_vlan: entered promiscuous mode
[  771.221508][T24488] veth1_vlan: entered promiscuous mode
[  771.322581][T24488] veth0_macvtap: entered promiscuous mode
[  771.357667][T24488] veth1_macvtap: entered promiscuous mode
[  771.444217][T24488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  771.522622][T25108] lo speed is unknown, defaulting to 1000
[  771.535037][T24488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  771.586403][ T7266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  771.618729][ T7266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  771.638948][ T7266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  771.681146][ T7266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.918069][ T7266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.942612][ T7266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.014799][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  772.042246][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  772.298246][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5716'.
[  772.553427][T25159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5719'.
[  772.619156][T25136] lo speed is unknown, defaulting to 1000
[  772.773811][T25166] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  772.935304][T25163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5721'.
[  772.970785][T25168] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5723'.
[  773.119118][T25176] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5726'.
[  773.173686][T25172] syz_tun: entered allmulticast mode
[  773.287983][T25178] syzkaller0: entered promiscuous mode
[  773.296646][T25178] syzkaller0: entered allmulticast mode
[  773.416350][   T36] IPVS: starting estimator thread 0...
[  773.445404][T25178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  773.457991][T25171] syz_tun: left allmulticast mode
[  773.493015][T25178] tipc: Resetting bearer <eth:syzkaller0>
[  773.557166][T25186] IPVS: using max 30 ests per chain, 72000 per kthread
[  773.946130][T25173] tipc: Resetting bearer <eth:syzkaller0>
[  774.003641][T25173] tipc: Disabling bearer <eth:syzkaller0>
[  774.031141][T25205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5732'.
[  774.082823][T25207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5732'.
[  774.385627][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5734'.
[  774.489157][T25220] netlink: 'syz.4.5737': attribute type 4 has an invalid length.
[  774.703576][T25235] x_tables: ip_tables: icmp match: only valid for protocol 1
[  774.826609][T25245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5745'.
[  774.837489][T25245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5745'.
[  775.142659][T25255] netlink: 'syz.3.5749': attribute type 4 has an invalid length.
[  775.517219][T25261] FAULT_INJECTION: forcing a failure.
[  775.517219][T25261] name failslab, interval 1, probability 0, space 0, times 0
[  775.530496][T25261] CPU: 0 UID: 0 PID: 25261 Comm: syz.3.5751 Not tainted syzkaller #0 PREEMPT(full) 
[  775.530525][T25261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  775.530537][T25261] Call Trace:
[  775.530545][T25261]  <TASK>
[  775.530554][T25261]  dump_stack_lvl+0xe8/0x150
[  775.530592][T25261]  should_fail_ex+0x40c/0x560
[  775.530623][T25261]  should_failslab+0xa8/0x100
[  775.530654][T25261]  __kmalloc_cache_noprof+0xa8/0x660
[  775.530680][T25261]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  775.530703][T25261]  ? __kmalloc_cache_noprof+0x150/0x660
[  775.530727][T25261]  ? sctp_add_bind_addr+0x8c/0x370
[  775.530745][T25261]  ? sctp_add_bind_addr+0x8c/0x370
[  775.530772][T25261]  sctp_add_bind_addr+0x8c/0x370
[  775.530796][T25261]  sctp_copy_local_addr_list+0x31a/0x4e0
[  775.530819][T25261]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  775.530840][T25261]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  775.530866][T25261]  ? sctp_v4_is_any+0x35/0x60
[  775.530885][T25261]  ? sctp_copy_one_addr+0x93/0x360
[  775.530910][T25261]  sctp_bind_addr_copy+0xb3/0x3c0
[  775.530930][T25261]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  775.530962][T25261]  sctp_connect_new_asoc+0x2ff/0x6b0
[  775.530990][T25261]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  775.531016][T25261]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  775.531040][T25261]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  775.531063][T25261]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  775.531086][T25261]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  775.531109][T25261]  ? security_sctp_bind_connect+0x7e/0x2c0
[  775.531141][T25261]  sctp_sendmsg+0x159b/0x2d00
[  775.531179][T25261]  ? __pfx_sctp_sendmsg+0x10/0x10
[  775.531209][T25261]  ? aa_sk_perm+0x6d5/0x900
[  775.531234][T25261]  ? __might_fault+0xaf/0x130
[  775.531261][T25261]  ? sock_rps_record_flow+0x19/0x350
[  775.531286][T25261]  ? inet_sendmsg+0x298/0x320
[  775.531307][T25261]  ? __pfx_inet_sendmsg+0x10/0x10
[  775.531337][T25261]  sock_sendmsg_nosec+0x10e/0x180
[  775.531369][T25261]  __sys_sendto+0x408/0x5a0
[  775.531388][T25261]  ? ksys_write+0x1e6/0x270
[  775.531410][T25261]  ? __pfx___sys_sendto+0x10/0x10
[  775.531434][T25261]  ? __mutex_unlock_slowpath+0x731/0x900
[  775.531491][T25261]  ? __pfx_ksys_write+0x10/0x10
[  775.531515][T25261]  __x64_sys_sendto+0xde/0x100
[  775.531536][T25261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.531557][T25261]  do_syscall_64+0x174/0x580
[  775.531580][T25261]  ? trace_irq_disable+0x3b/0x140
[  775.531604][T25261]  ? clear_bhb_loop+0x40/0x90
[  775.531627][T25261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.531646][T25261] RIP: 0033:0x7f7ef079de99
[  775.531664][T25261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.531681][T25261] RSP: 002b:00007f7ef1708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  775.531701][T25261] RAX: ffffffffffffffda RBX: 00007f7ef0a26090 RCX: 00007f7ef079de99
[  775.531716][T25261] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003
[  775.531728][T25261] RBP: 00007f7ef1708090 R08: 0000200000000000 R09: 0000000000000010
[  775.531741][T25261] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002
[  775.531754][T25261] R13: 00007f7ef0a26128 R14: 00007f7ef0a26090 R15: 00007ffd6ad3d048
[  775.531786][T25261]  </TASK>
[  776.900568][T25200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  777.301997][T25284] FAULT_INJECTION: forcing a failure.
[  777.301997][T25284] name failslab, interval 1, probability 0, space 0, times 0
[  777.318366][T25284] CPU: 0 UID: 0 PID: 25284 Comm: syz.0.5761 Not tainted syzkaller #0 PREEMPT(full) 
[  777.318393][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  777.318404][T25284] Call Trace:
[  777.318413][T25284]  <TASK>
[  777.318420][T25284]  dump_stack_lvl+0xe8/0x150
[  777.318455][T25284]  should_fail_ex+0x40c/0x560
[  777.318484][T25284]  should_failslab+0xa8/0x100
[  777.318516][T25284]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  777.318541][T25284]  ? radix_tree_node_alloc+0x7e/0x3a0
[  777.318564][T25284]  ? radix_tree_node_alloc+0x7e/0x3a0
[  777.318587][T25284]  radix_tree_node_alloc+0x7e/0x3a0
[  777.318611][T25284]  idr_get_free+0x28f/0xa10
[  777.318642][T25284]  idr_alloc_u32+0x18a/0x330
[  777.318672][T25284]  ? __pfx_idr_alloc_u32+0x10/0x10
[  777.318699][T25284]  ? net_generic+0x1e/0x240
[  777.318846][T25284]  ? l2tp_tunnel_register+0x140/0x1570
[  777.318871][T25284]  l2tp_tunnel_register+0x15a/0x1570
[  777.318905][T25284]  ? __pfx_l2tp_tunnel_register+0x10/0x10
[  777.318929][T25284]  ? do_raw_spin_lock+0x12b/0x2f0
[  777.318952][T25284]  ? pcpu_alloc+0x10/0x310
[  777.319054][T25284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  777.319078][T25284]  ? lockdep_hardirqs_on+0x7a/0x110
[  777.319102][T25284]  ? l2tp_tunnel_create+0x249/0x3e0
[  777.319122][T25284]  ? l2tp_tunnel_create+0x2d3/0x3e0
[  777.319145][T25284]  pppol2tp_connect+0x8e3/0x18b0
[  777.319175][T25284]  ? aa_sk_perm+0x6d5/0x900
[  777.319193][T25284]  ? __pfx_pppol2tp_connect+0x10/0x10
[  777.319220][T25284]  ? __pfx_aa_sk_perm+0x10/0x10
[  777.319247][T25284]  ? bpf_lsm_socket_connect+0x9/0x20
[  777.319271][T25284]  __sys_connect+0x323/0x460
[  777.319294][T25284]  ? __pfx___sys_connect+0x10/0x10
[  777.319319][T25284]  ? __pfx_ksys_write+0x10/0x10
[  777.319342][T25284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.319361][T25284]  __x64_sys_connect+0x7a/0x90
[  777.319381][T25284]  do_syscall_64+0x174/0x580
[  777.319402][T25284]  ? trace_irq_disable+0x3b/0x140
[  777.319426][T25284]  ? clear_bhb_loop+0x40/0x90
[  777.319445][T25284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.319462][T25284] RIP: 0033:0x7f475339de99
[  777.319481][T25284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.319498][T25284] RSP: 002b:00007f4754315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  777.319520][T25284] RAX: ffffffffffffffda RBX: 00007f4753625fa0 RCX: 00007f475339de99
[  777.319534][T25284] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000005
[  777.319546][T25284] RBP: 00007f4754315090 R08: 0000000000000000 R09: 0000000000000000
[  777.319557][T25284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  777.319568][T25284] R13: 00007f4753626038 R14: 00007f4753625fa0 R15: 00007ffee9f41a58
[  777.319596][T25284]  </TASK>
[  777.724966][T25276] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.732753][T25276] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.922010][T25276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  777.936196][T25276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  778.173454][T25280] __nla_validate_parse: 3 callbacks suppressed
[  778.173470][T25280] netlink: 279 bytes leftover after parsing attributes in process `syz.2.5758'.
[  778.214022][T25280] veth0_to_bond: default FDB implementation only supports local addresses
[  778.258226][T25289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5758'.
[  778.283308][ T7266] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.293691][ T7266] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.316004][ T7266] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.325311][ T7266] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  778.548712][T25318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5771'.
[  778.581532][T25318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5771'.
[  778.609831][T25323] netlink: zone id is out of range
[  778.615959][T25323] netlink: zone id is out of range
[  778.626342][T25323] netlink: zone id is out of range
[  778.714567][T25326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5773'.
[  778.928121][T25339] FAULT_INJECTION: forcing a failure.
[  778.928121][T25339] name failslab, interval 1, probability 0, space 0, times 0
[  778.944191][T25339] CPU: 1 UID: 0 PID: 25339 Comm: syz.0.5777 Not tainted syzkaller #0 PREEMPT(full) 
[  778.944222][T25339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  778.944234][T25339] Call Trace:
[  778.944243][T25339]  <TASK>
[  778.944251][T25339]  dump_stack_lvl+0xe8/0x150
[  778.944289][T25339]  should_fail_ex+0x40c/0x560
[  778.944320][T25339]  should_failslab+0xa8/0x100
[  778.944351][T25339]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  778.944377][T25339]  ? local_lock_release+0x9c/0x160
[  778.944400][T25339]  ? __alloc_skb+0x1d7/0x7a0
[  778.944415][T25339]  ? __alloc_skb+0x1d7/0x7a0
[  778.944439][T25339]  __alloc_skb+0x1d7/0x7a0
[  778.944461][T25339]  netlink_ack+0x136/0xb30
[  778.944484][T25339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  778.944511][T25339]  ? __pfx_devlink_nl_post_doit_parent_dev_optional+0x10/0x10
[  778.944676][T25339]  netlink_rcv_skb+0x2a4/0x4a0
[  778.944699][T25339]  ? __pfx_genl_rcv_msg+0x10/0x10
[  778.944726][T25339]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  778.944761][T25339]  ? down_read+0x2be/0x330
[  778.944791][T25339]  genl_rcv+0x28/0x40
[  778.944815][T25339]  netlink_unicast+0x7bb/0x940
[  778.944846][T25339]  netlink_sendmsg+0x813/0xb40
[  778.944879][T25339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  778.944906][T25339]  ? aa_sock_msg_perm+0xf1/0x1b0
[  778.944937][T25339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  778.944958][T25339]  sock_sendmsg_nosec+0x13a/0x180
[  778.944985][T25339]  ____sys_sendmsg+0x54e/0x850
[  778.945013][T25339]  ? __pfx_____sys_sendmsg+0x10/0x10
[  778.945043][T25339]  ? import_iovec+0x73/0xa0
[  778.945077][T25339]  ___sys_sendmsg+0x2a5/0x360
[  778.945098][T25339]  ? __lock_acquire+0x683/0x2cf0
[  778.945138][T25339]  ? __pfx____sys_sendmsg+0x10/0x10
[  778.945199][T25339]  ? __fget_files+0x2a/0x420
[  778.945226][T25339]  ? __fget_files+0x3a2/0x420
[  778.945261][T25339]  __x64_sys_sendmsg+0x1b1/0x290
[  778.945293][T25339]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  778.945329][T25339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.945350][T25339]  do_syscall_64+0x174/0x580
[  778.945374][T25339]  ? trace_irq_disable+0x3b/0x140
[  778.945398][T25339]  ? clear_bhb_loop+0x40/0x90
[  778.945423][T25339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.945447][T25339] RIP: 0033:0x7f475339de99
[  778.945468][T25339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.945484][T25339] RSP: 002b:00007f4754315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  778.945506][T25339] RAX: ffffffffffffffda RBX: 00007f4753625fa0 RCX: 00007f475339de99
[  778.945520][T25339] RDX: 0000000000000000 RSI: 00002000000032c0 RDI: 0000000000000003
[  778.945533][T25339] RBP: 00007f4754315090 R08: 0000000000000000 R09: 0000000000000000
[  778.945545][T25339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.945557][T25339] R13: 00007f4753626038 R14: 00007f4753625fa0 R15: 00007ffee9f41a58
[  778.945588][T25339]  </TASK>
[  779.367166][T25340] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  779.509400][T25351] FAULT_INJECTION: forcing a failure.
[  779.509400][T25351] name failslab, interval 1, probability 0, space 0, times 0
[  779.536948][T25351] CPU: 1 UID: 0 PID: 25351 Comm: syz.1.5778 Not tainted syzkaller #0 PREEMPT(full) 
[  779.536976][T25351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  779.536987][T25351] Call Trace:
[  779.536995][T25351]  <TASK>
[  779.537002][T25351]  dump_stack_lvl+0xe8/0x150
[  779.537036][T25351]  should_fail_ex+0x40c/0x560
[  779.537062][T25351]  should_failslab+0xa8/0x100
[  779.537089][T25351]  __kmalloc_cache_noprof+0xa8/0x660
[  779.537113][T25351]  ? uprobe_register+0x1a8/0x930
[  779.537131][T25351]  ? uprobe_register+0x1a8/0x930
[  779.537154][T25351]  uprobe_register+0x1a8/0x930
[  779.537170][T25351]  ? bpf_uprobe_multi_link_attach+0xe0a/0x11b0
[  779.537199][T25351]  bpf_uprobe_multi_link_attach+0xe0a/0x11b0
[  779.537234][T25351]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  779.537255][T25351]  ? __fget_files+0x2a/0x420
[  779.537279][T25351]  ? __fget_files+0x2a/0x420
[  779.537300][T25351]  ? __fget_files+0x2a/0x420
[  779.537323][T25351]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  779.537344][T25351]  link_create+0x621/0x850
[  779.537372][T25351]  __sys_bpf+0x760/0xd90
[  779.537401][T25351]  ? __pfx___sys_bpf+0x10/0x10
[  779.537431][T25351]  ? __fget_files+0x2a/0x420
[  779.537467][T25351]  ? ksys_write+0x242/0x270
[  779.537485][T25351]  ? __pfx_ksys_write+0x10/0x10
[  779.537505][T25351]  __x64_sys_bpf+0xba/0xd0
[  779.537558][T25351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.537577][T25351]  do_syscall_64+0x174/0x580
[  779.537597][T25351]  ? trace_irq_disable+0x3b/0x140
[  779.537617][T25351]  ? clear_bhb_loop+0x40/0x90
[  779.537638][T25351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.537654][T25351] RIP: 0033:0x7f5ceb19de99
[  779.537671][T25351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  779.537686][T25351] RSP: 002b:00007f5cebffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  779.537705][T25351] RAX: ffffffffffffffda RBX: 00007f5ceb425fa0 RCX: 00007f5ceb19de99
[  779.537717][T25351] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[  779.537727][T25351] RBP: 00007f5cebffb090 R08: 0000000000000000 R09: 0000000000000000
[  779.537737][T25351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  779.537747][T25351] R13: 00007f5ceb426038 R14: 00007f5ceb425fa0 R15: 00007ffeb308f7e8
[  779.537773][T25351]  </TASK>
[  779.910720][T25357] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  779.963822][T25363] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  779.991623][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5785'.
[  780.046233][T25362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5785'.
[  780.301771][T25380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5792'.
[  780.438008][T25383] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5793'.
[  780.747022][T25394] netlink: 'syz.3.5797': attribute type 2 has an invalid length.
[  780.825816][T25399] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5799'.
[  781.084699][T25406] syzkaller0: entered promiscuous mode
[  781.098626][T25406] syzkaller0: entered allmulticast mode
[  781.445722][T25427] netlink: 'syz.1.5806': attribute type 3 has an invalid length.
[  782.224032][T25436] FAULT_INJECTION: forcing a failure.
[  782.224032][T25436] name failslab, interval 1, probability 0, space 0, times 0
[  782.259259][T25436] CPU: 1 UID: 0 PID: 25436 Comm: syz.3.5809 Not tainted syzkaller #0 PREEMPT(full) 
[  782.259287][T25436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  782.259298][T25436] Call Trace:
[  782.259307][T25436]  <TASK>
[  782.259315][T25436]  dump_stack_lvl+0xe8/0x150
[  782.259355][T25436]  should_fail_ex+0x40c/0x560
[  782.259388][T25436]  should_failslab+0xa8/0x100
[  782.259422][T25436]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  782.259448][T25436]  ? local_lock_release+0x9c/0x160
[  782.259473][T25436]  ? __alloc_skb+0x1d7/0x7a0
[  782.259490][T25436]  ? __alloc_skb+0x1d7/0x7a0
[  782.259515][T25436]  __alloc_skb+0x1d7/0x7a0
[  782.259538][T25436]  alloc_skb_with_frags+0xc6/0x760
[  782.259570][T25436]  sock_alloc_send_pskb+0x878/0x990
[  782.259612][T25436]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  782.259634][T25436]  ? kasan_quarantine_put+0xbb/0x1f0
[  782.259659][T25436]  ? lockdep_hardirqs_on+0x7a/0x110
[  782.259690][T25436]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  782.259717][T25436]  ? kmem_cache_free+0x182/0x650
[  782.259744][T25436]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  782.259774][T25436]  unix_dgram_sendmsg+0x4da/0x17b0
[  782.259800][T25436]  ? __lock_acquire+0x683/0x2cf0
[  782.259841][T25436]  ? __lock_acquire+0x683/0x2cf0
[  782.259865][T25436]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  782.259894][T25436]  ? aa_sock_msg_perm+0xda/0x1b0
[  782.259919][T25436]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  782.259946][T25436]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  782.259970][T25436]  sock_sendmsg_nosec+0x13a/0x180
[  782.260005][T25436]  ____sys_sendmsg+0x54e/0x850
[  782.260033][T25436]  ? __pfx_____sys_sendmsg+0x10/0x10
[  782.260064][T25436]  ? import_iovec+0x73/0xa0
[  782.260103][T25436]  ___sys_sendmsg+0x2a5/0x360
[  782.260125][T25436]  ? __lock_acquire+0x683/0x2cf0
[  782.260154][T25436]  ? __pfx____sys_sendmsg+0x10/0x10
[  782.260175][T25436]  ? __lock_acquire+0x683/0x2cf0
[  782.260210][T25436]  ? kstrtouint+0x6e/0xe0
[  782.260273][T25436]  __sys_sendmmsg+0x273/0x4d0
[  782.260301][T25436]  ? __pfx___sys_sendmmsg+0x10/0x10
[  782.260332][T25436]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  782.260371][T25436]  ? ksys_write+0x242/0x270
[  782.260393][T25436]  ? __pfx_ksys_write+0x10/0x10
[  782.260419][T25436]  __x64_sys_sendmmsg+0xa0/0xc0
[  782.260441][T25436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.260463][T25436]  do_syscall_64+0x174/0x580
[  782.260484][T25436]  ? trace_irq_disable+0x3b/0x140
[  782.260509][T25436]  ? clear_bhb_loop+0x40/0x90
[  782.260533][T25436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.260551][T25436] RIP: 0033:0x7f7ef079de99
[  782.260569][T25436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.260586][T25436] RSP: 002b:00007f7ef1729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  782.260606][T25436] RAX: ffffffffffffffda RBX: 00007f7ef0a25fa0 RCX: 00007f7ef079de99
[  782.260620][T25436] RDX: 04000000000002cf RSI: 00002000000002c0 RDI: 0000000000000003
[  782.260633][T25436] RBP: 00007f7ef1729090 R08: 0000000000000000 R09: 0000000000000000
[  782.260645][T25436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  782.260657][T25436] R13: 00007f7ef0a26038 R14: 00007f7ef0a25fa0 R15: 00007ffd6ad3d048
[  782.260687][T25436]  </TASK>
[  782.867776][   T76] nci: nci_rx_work: unknown MT 0x1
[  783.207400][T25477] syzkaller1: entered promiscuous mode
[  783.235718][T25477] syzkaller1: entered allmulticast mode
[  783.723186][T25508] syzkaller0: entered promiscuous mode
[  783.728927][T25508] syzkaller0: entered allmulticast mode
[  785.654774][T25440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  785.846428][T25511] bridge0: port 4(macvlan0) entered blocking state
[  785.856657][T25511] bridge0: port 4(macvlan0) entered disabled state
[  785.871136][T25511] macvlan0: entered allmulticast mode
[  785.880414][T25511] macvlan0: entered promiscuous mode
[  785.912496][T25514] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  785.940431][T25519] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  785.990092][T25511] veth1_vlan: entered allmulticast mode
[  786.112642][T25531] netlink: 'syz.4.5840': attribute type 3 has an invalid length.
[  786.145464][T25531] openvswitch: netlink: Message has 5920 unknown bytes.
[  786.157601][T25531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  786.360499][T25537] __nla_validate_parse: 4 callbacks suppressed
[  786.360521][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5842'.
[  786.376350][T25537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5842'.
[  787.004766][T25565] syzkaller0: entered promiscuous mode
[  787.021253][T25565] syzkaller0: entered allmulticast mode
[  787.242920][ T7253] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  787.261992][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5858'.
[  787.302904][T25576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  787.307454][T25589] netlink: 'syz.3.5858': attribute type 10 has an invalid length.
[  787.390990][T25593] netlink: 'syz.0.5860': attribute type 1 has an invalid length.
[  787.391073][T25589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5858'.
[  787.401626][T25593] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5860'.
[  787.492094][T25589] geneve3: entered promiscuous mode
[  787.530912][T25589] geneve3: entered allmulticast mode
[  787.635460][T25603] netlink: 'syz.1.5864': attribute type 1 has an invalid length.
[  787.735613][T25603] 8021q: adding VLAN 0 to HW filter on device bond11
[  787.828748][T25601] bond11: (slave geneve4): making interface the new active one
[  787.882125][T25601] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  787.930691][   T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  787.956657][   T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  787.996019][   T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  788.046599][   T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  788.357642][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  788.384882][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  788.394708][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  788.414413][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  788.422446][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  788.750142][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5880'.
[  788.803027][T15403] bond13: (slave syz_tun): Releasing active interface
[  789.056398][T25668] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.5886'.
[  789.545808][T25689] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5893'.
[  789.566057][T25689] openvswitch: netlink: Message has 512 unknown bytes.
[  789.588008][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5893'.
[  789.724988][T25693] netlink: 'syz.1.5894': attribute type 12 has an invalid length.
[  789.762904][T25693] netlink: 'syz.1.5894': attribute type 29 has an invalid length.
[  789.809641][T25693] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5894'.
[  789.848220][T25693] netlink: 'syz.1.5894': attribute type 2 has an invalid length.
[  789.873196][T25633] lo speed is unknown, defaulting to 1000
[  789.890352][T25696] FAULT_INJECTION: forcing a failure.
[  789.890352][T25696] name failslab, interval 1, probability 0, space 0, times 0
[  789.928438][T25696] CPU: 1 UID: 0 PID: 25696 Comm: syz.4.5895 Not tainted syzkaller #0 PREEMPT(full) 
[  789.928466][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  789.928478][T25696] Call Trace:
[  789.928486][T25696]  <TASK>
[  789.928494][T25696]  dump_stack_lvl+0xe8/0x150
[  789.928528][T25696]  should_fail_ex+0x40c/0x560
[  789.928558][T25696]  should_failslab+0xa8/0x100
[  789.928588][T25696]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  789.928613][T25696]  ? skb_clone+0x212/0x3a0
[  789.928635][T25696]  ? skb_clone+0x212/0x3a0
[  789.928663][T25696]  skb_clone+0x212/0x3a0
[  789.928689][T25696]  __netlink_deliver_tap+0x413/0x860
[  789.928726][T25696]  ? netlink_deliver_tap+0x2e/0x1b0
[  789.928750][T25696]  netlink_deliver_tap+0x19c/0x1b0
[  789.928772][T25696]  netlink_sendskb+0x68/0x140
[  789.928793][T25696]  nfnetlink_rcv+0x260c/0x28c0
[  789.928841][T25696]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  789.928876][T25696]  ? ref_tracker_free+0x689/0x830
[  789.928926][T25696]  ? skb_clone+0x246/0x3a0
[  789.928952][T25696]  ? __netlink_deliver_tap+0x811/0x860
[  789.928981][T25696]  ? netlink_deliver_tap+0x2e/0x1b0
[  789.929004][T25696]  ? netlink_deliver_tap+0x2e/0x1b0
[  789.929031][T25696]  netlink_unicast+0x7bb/0x940
[  789.929057][T25696]  netlink_sendmsg+0x813/0xb40
[  789.929089][T25696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  789.929116][T25696]  ? aa_sock_msg_perm+0xf1/0x1b0
[  789.929143][T25696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  789.929165][T25696]  sock_sendmsg_nosec+0x13a/0x180
[  789.929194][T25696]  ____sys_sendmsg+0x54e/0x850
[  789.929220][T25696]  ? __pfx_____sys_sendmsg+0x10/0x10
[  789.929248][T25696]  ? import_iovec+0x73/0xa0
[  789.929339][T25696]  ___sys_sendmsg+0x2a5/0x360
[  789.929360][T25696]  ? __lock_acquire+0x683/0x2cf0
[  789.929391][T25696]  ? __pfx____sys_sendmsg+0x10/0x10
[  789.929448][T25696]  ? __fget_files+0x2a/0x420
[  789.929475][T25696]  ? __fget_files+0x3a2/0x420
[  789.929510][T25696]  __x64_sys_sendmsg+0x1b1/0x290
[  789.929535][T25696]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  789.929575][T25696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.929596][T25696]  do_syscall_64+0x174/0x580
[  789.929619][T25696]  ? trace_irq_disable+0x3b/0x140
[  789.929643][T25696]  ? clear_bhb_loop+0x40/0x90
[  789.929667][T25696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.929686][T25696] RIP: 0033:0x7f1772b9de99
[  789.929704][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  789.929722][T25696] RSP: 002b:00007f1773aa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  789.929742][T25696] RAX: ffffffffffffffda RBX: 00007f1772e25fa0 RCX: 00007f1772b9de99
[  789.929756][T25696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  789.929768][T25696] RBP: 00007f1773aa3090 R08: 0000000000000000 R09: 0000000000000000
[  789.929780][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  789.929792][T25696] R13: 00007f1772e26038 R14: 00007f1772e25fa0 R15: 00007ffdbc9b0fa8
[  789.929823][T25696]  </TASK>
[  790.508793][T18835] Bluetooth: hci5: command tx timeout
[  790.764484][T25725] netlink: 'syz.4.5904': attribute type 7 has an invalid length.
[  790.775527][T25726] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  791.447233][T25633] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.465551][T25633] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.479547][T25633] bridge_slave_0: entered allmulticast mode
[  791.487549][T25633] bridge_slave_0: entered promiscuous mode
[  791.498900][T25633] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.510752][T25768] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  791.519478][T25633] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.526743][T25768] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  791.536111][T25633] bridge_slave_1: entered allmulticast mode
[  791.544591][T25633] bridge_slave_1: entered promiscuous mode
[  791.554775][T25768] __nla_validate_parse: 2 callbacks suppressed
[  791.554802][T25768] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5917'.
[  791.672691][T25764] syzkaller0: entered promiscuous mode
[  791.678842][T25764] syzkaller0: entered allmulticast mode
[  791.783090][T25780] openvswitch: netlink: Message has 13072 unknown bytes.
[  791.796235][T25780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.593923][T18835] Bluetooth: hci5: command tx timeout
[  794.668957][T18835] Bluetooth: hci5: command tx timeout
[  795.031365][T25779] ------------[ cut here ]------------
[  795.039494][T25633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  795.049913][T25779] !chanctx_conf
[  795.049951][T25779] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.4.5919/25779
[  795.064344][T25779] Modules linked in:
[  795.069046][T25779] CPU: 0 UID: 0 PID: 25779 Comm: syz.4.5919 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  795.078595][T25779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  795.088979][T25779] RIP: 0010:rate_control_rate_init+0x5a6/0x630
[  795.096679][T25779] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 06 32 84 f6 90 0f 0b 90 eb e1 e8 fb 31 84 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00
[  795.116785][T25779] RSP: 0018:ffffc9000e87efe8 EFLAGS: 00010287
[  795.123560][T25779] RAX: ffffffff8b42cf85 RBX: ffff88807e0f0050 RCX: 0000000000080000
[  795.131973][T25779] RDX: ffffc9000d731000 RSI: 00000000000003c5 RDI: 00000000000003c6
[  795.140026][T25779] RBP: dffffc0000000000 R08: ffffffff8b42caf7 R09: 0000000000000000
[  795.148026][T25779] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b42caf7
[  795.156158][T25779] R13: ffff888049730f40 R14: 0000000000000001 R15: 0000000000000000
[  795.164252][T25779] FS:  00007f1773a826c0(0000) GS:ffff888124f53000(0000) knlGS:0000000000000000
[  795.173496][T25779] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  795.180349][T25779] CR2: 00007f5cebfb99a0 CR3: 0000000035606000 CR4: 00000000003526f0
[  795.188416][T25779] Call Trace:
[  795.191736][T25779]  <TASK>
[  795.194786][T25779]  rate_control_rate_init_all_links+0xf4/0x190
[  795.201046][T25779]  sta_apply_auth_flags+0x1bc/0x430
[  795.206426][T25779]  sta_apply_parameters+0x1291/0x1b50
[  795.211964][T25779]  ieee80211_add_station+0x3de/0x700
[  795.217303][T25779]  rdev_add_station+0xfc/0x290
[  795.222257][T25779]  nl80211_new_station+0x1b4e/0x1fd0
[  795.227610][T25779]  ? trace_contention_end+0x3d/0x140
[  795.233150][T25779]  ? __pfx_nl80211_new_station+0x10/0x10
[  795.238884][T25779]  ? __rtnl_unlock+0xc8/0xf0
[  795.243560][T25779]  ? nl80211_pre_doit+0x53d/0x890
[  795.248685][T25779]  genl_family_rcv_msg_doit+0x233/0x340
[  795.254304][T25779]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  795.260545][T25779]  ? bpf_lsm_capable+0x9/0x20
[  795.265610][T25779]  ? security_capable+0x7e/0x2c0
[  795.270719][T25779]  genl_rcv_msg+0x614/0x7a0
[  795.275304][T25779]  ? __pfx_genl_rcv_msg+0x10/0x10
[  795.280614][T25779]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  795.286038][T25779]  ? __pfx_nl80211_new_station+0x10/0x10
[  795.291773][T25779]  ? __pfx_nl80211_post_doit+0x10/0x10
[  795.297286][T25779]  ? __pfx_ref_tracker_free+0x10/0x10
[  795.302880][T25779]  netlink_rcv_skb+0x226/0x4a0
[  795.307725][T25779]  ? __pfx_genl_rcv_msg+0x10/0x10
[  795.312912][T25779]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  795.318276][T25779]  ? down_read+0x2be/0x330
[  795.322884][T25779]  genl_rcv+0x28/0x40
[  795.326972][T25779]  netlink_unicast+0x7bb/0x940
[  795.331921][T25779]  netlink_sendmsg+0x813/0xb40
[  795.336757][T25779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  795.342597][T25779]  ? kasan_save_free_info+0x40/0x50
[  795.347841][T25779]  ? aa_sock_msg_perm+0xf1/0x1b0
[  795.352883][T25779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  795.358226][T25779]  sock_sendmsg_nosec+0x13a/0x180
[  795.363376][T25779]  ____sys_sendmsg+0x54e/0x850
[  795.368274][T25779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  795.373803][T25779]  ? import_iovec+0x73/0xa0
[  795.378556][T25779]  ___sys_sendmsg+0x2a5/0x360
[  795.383355][T25779]  ? __lock_acquire+0x683/0x2cf0
[  795.388526][T25779]  ? __pfx____sys_sendmsg+0x10/0x10
[  795.393767][T25779]  ? tomoyo_path_number_perm+0x219/0x5f0
[  795.399515][T25779]  ? __fget_files+0x2a/0x420
[  795.404223][T25779]  ? __fget_files+0x3a2/0x420
[  795.409507][T25779]  __x64_sys_sendmsg+0x1b1/0x290
[  795.414629][T25779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  795.420211][T25779]  ? kfree+0x4d/0x640
[  795.424222][T25779]  ? __pfx_kcov_ioctl+0x10/0x10
[  795.429190][T25779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.435368][T25779]  do_syscall_64+0x174/0x580
[  795.440223][T25779]  ? trace_irq_disable+0x3b/0x140
[  795.445373][T25779]  ? clear_bhb_loop+0x40/0x90
[  795.450112][T25779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.456032][T25779] RIP: 0033:0x7f1772b9de99
[  795.460519][T25779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.480540][T25779] RSP: 002b:00007f1773a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  795.489205][T25779] RAX: ffffffffffffffda RBX: 00007f1772e26090 RCX: 00007f1772b9de99
[  795.497198][T25779] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  795.505731][T25779] RBP: 00007f1772c33eaf R08: 0000000000000000 R09: 0000000000000000
[  795.513817][T25779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  795.521854][T25779] R13: 00007f1772e26128 R14: 00007f1772e26090 R15: 00007ffdbc9b0fa8
[  795.530134][T25779]  </TASK>
[  795.533221][T25779] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  795.540688][T25779] CPU: 0 UID: 0 PID: 25779 Comm: syz.4.5919 Not tainted syzkaller #0 PREEMPT(full) 
[  795.550072][T25779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  795.560431][T25779] Call Trace:
[  795.563736][T25779]  <TASK>
[  795.566783][T25779]  vpanic+0x56c/0xa60
[  795.571014][T25779]  ? __pfx__printk+0x10/0x10
[  795.575719][T25779]  ? __pfx_vpanic+0x10/0x10
[  795.580345][T25779]  ? is_bpf_text_address+0x292/0x2b0
[  795.585729][T25779]  ? is_bpf_text_address+0x26/0x2b0
[  795.590956][T25779]  panic+0xc5/0xd0
[  795.594694][T25779]  ? __pfx_panic+0x10/0x10
[  795.599460][T25779]  __warn+0x315/0x4c0
[  795.603607][T25779]  ? rate_control_rate_init+0x5a6/0x630
[  795.609146][T25779]  ? rate_control_rate_init+0x5a6/0x630
[  795.614857][T25779]  __report_bug+0x276/0x570
[  795.619415][T25779]  ? stack_depot_save_flags+0x33/0x800
[  795.624870][T25779]  ? rate_control_rate_init+0x5a6/0x630
[  795.630412][T25779]  ? __pfx___report_bug+0x10/0x10
[  795.635446][T25779]  ? __lock_acquire+0x683/0x2cf0
[  795.640383][T25779]  ? __lock_acquire+0x683/0x2cf0
[  795.645438][T25779]  ? rate_control_rate_init+0x5a6/0x630
[  795.651153][T25779]  report_bug+0x16a/0x220
[  795.655498][T25779]  ? rate_control_rate_init+0x5a6/0x630
[  795.661034][T25779]  ? rate_control_rate_init+0x5a8/0x630
[  795.666575][T25779]  handle_bug+0x9c/0x200
[  795.670829][T25779]  exc_invalid_op+0x1a/0x50
[  795.675350][T25779]  asm_exc_invalid_op+0x1a/0x20
[  795.680204][T25779] RIP: 0010:rate_control_rate_init+0x5a6/0x630
[  795.686373][T25779] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 06 32 84 f6 90 0f 0b 90 eb e1 e8 fb 31 84 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00
[  795.706071][T25779] RSP: 0018:ffffc9000e87efe8 EFLAGS: 00010287
[  795.712143][T25779] RAX: ffffffff8b42cf85 RBX: ffff88807e0f0050 RCX: 0000000000080000
[  795.720385][T25779] RDX: ffffc9000d731000 RSI: 00000000000003c5 RDI: 00000000000003c6
[  795.728360][T25779] RBP: dffffc0000000000 R08: ffffffff8b42caf7 R09: 0000000000000000
[  795.736361][T25779] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff8b42caf7
[  795.744441][T25779] R13: ffff888049730f40 R14: 0000000000000001 R15: 0000000000000000
[  795.752507][T25779]  ? rate_control_rate_init+0x117/0x630
[  795.758165][T25779]  ? rate_control_rate_init+0x117/0x630
[  795.763712][T25779]  ? rate_control_rate_init+0x5a5/0x630
[  795.769266][T25779]  ? rate_control_rate_init+0x5a5/0x630
[  795.774808][T25779]  rate_control_rate_init_all_links+0xf4/0x190
[  795.781735][T25779]  sta_apply_auth_flags+0x1bc/0x430
[  795.787046][T25779]  sta_apply_parameters+0x1291/0x1b50
[  795.792454][T25779]  ieee80211_add_station+0x3de/0x700
[  795.797753][T25779]  rdev_add_station+0xfc/0x290
[  795.802521][T25779]  nl80211_new_station+0x1b4e/0x1fd0
[  795.807820][T25779]  ? trace_contention_end+0x3d/0x140
[  795.813307][T25779]  ? __pfx_nl80211_new_station+0x10/0x10
[  795.818945][T25779]  ? __rtnl_unlock+0xc8/0xf0
[  795.823560][T25779]  ? nl80211_pre_doit+0x53d/0x890
[  795.828703][T25779]  genl_family_rcv_msg_doit+0x233/0x340
[  795.835065][T25779]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  795.841247][T25779]  ? bpf_lsm_capable+0x9/0x20
[  795.845946][T25779]  ? security_capable+0x7e/0x2c0
[  795.850884][T25779]  genl_rcv_msg+0x614/0x7a0
[  795.855399][T25779]  ? __pfx_genl_rcv_msg+0x10/0x10
[  795.860478][T25779]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  795.865848][T25779]  ? __pfx_nl80211_new_station+0x10/0x10
[  795.871497][T25779]  ? __pfx_nl80211_post_doit+0x10/0x10
[  795.876983][T25779]  ? __pfx_ref_tracker_free+0x10/0x10
[  795.882362][T25779]  netlink_rcv_skb+0x226/0x4a0
[  795.887210][T25779]  ? __pfx_genl_rcv_msg+0x10/0x10
[  795.892232][T25779]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  795.897525][T25779]  ? down_read+0x2be/0x330
[  795.901940][T25779]  genl_rcv+0x28/0x40
[  795.905922][T25779]  netlink_unicast+0x7bb/0x940
[  795.910687][T25779]  netlink_sendmsg+0x813/0xb40
[  795.915680][T25779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  795.921009][T25779]  ? kasan_save_free_info+0x40/0x50
[  795.926314][T25779]  ? aa_sock_msg_perm+0xf1/0x1b0
[  795.931434][T25779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  795.936758][T25779]  sock_sendmsg_nosec+0x13a/0x180
[  795.941939][T25779]  ____sys_sendmsg+0x54e/0x850
[  795.946802][T25779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  795.952354][T25779]  ? import_iovec+0x73/0xa0
[  795.956872][T25779]  ___sys_sendmsg+0x2a5/0x360
[  795.961551][T25779]  ? __lock_acquire+0x683/0x2cf0
[  795.966491][T25779]  ? __pfx____sys_sendmsg+0x10/0x10
[  795.971699][T25779]  ? tomoyo_path_number_perm+0x219/0x5f0
[  795.977705][T25779]  ? __fget_files+0x2a/0x420
[  795.982555][T25779]  ? __fget_files+0x3a2/0x420
[  795.987236][T25779]  __x64_sys_sendmsg+0x1b1/0x290
[  795.992352][T25779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  795.997853][T25779]  ? kfree+0x4d/0x640
[  796.001838][T25779]  ? __pfx_kcov_ioctl+0x10/0x10
[  796.006694][T25779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.012758][T25779]  do_syscall_64+0x174/0x580
[  796.017370][T25779]  ? trace_irq_disable+0x3b/0x140
[  796.022408][T25779]  ? clear_bhb_loop+0x40/0x90
[  796.027081][T25779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.033144][T25779] RIP: 0033:0x7f1772b9de99
[  796.037554][T25779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.057166][T25779] RSP: 002b:00007f1773a82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  796.065574][T25779] RAX: ffffffffffffffda RBX: 00007f1772e26090 RCX: 00007f1772b9de99
[  796.073542][T25779] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  796.081511][T25779] RBP: 00007f1772c33eaf R08: 0000000000000000 R09: 0000000000000000
[  796.089929][T25779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  796.097977][T25779] R13: 00007f1772e26128 R14: 00007f1772e26090 R15: 00007ffdbc9b0fa8
[  796.106142][T25779]  </TASK>
[  796.109501][T25779] Kernel Offset: disabled
[  796.113819][T25779] Rebooting in 86400 seconds..