last executing test programs:

19.601396354s ago: executing program 2 (id=7206):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f00000005c0)=""/108, 0x6c}], 0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20010000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0), 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x72, &(0x7f0000000440)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "8d0022eb00000000d9dedb35"}}}}}}}, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0x8, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "bcad05faa84c4ef8"}}}}}, 0x2e)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r8, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4405c}, 0x24000810)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
shutdown(r7, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

18.256599426s ago: executing program 2 (id=7215):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000540), &(0x7f0000000740)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x81, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x2, 0xfff3}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

18.122794304s ago: executing program 1 (id=7218):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0xc, 0x17}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000008004500002800000000008490783fffffffac1414aa00000000b40735b6d83140f52cd11d85c0a394baff54c9b6d971c130d101c5887f303ecc2fa6d4acf686df90b748abbb17a9d2d0279f4ef2685f4ec1bef24bda35b01836855dc5a55bfa2639814b8fc02786b1b37cd7efc9e7bcfe995010b1cba13c5abdf4155accd614bed623718e3df2252567d831c05e40ad6f56f1118c3b254a080b50f96d417a4e848704009ffb61f782dd4099bc6c39dc37f95640ed73cb95a8215483b5947f8f28507f30e655f229f89748142304cd48b597f57cafec16ddd834ed341c3305bf5b87212d5cbdb75753ac6097c90d3b99af505ebbbac777", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5404471c9078001c"], 0x2c)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0xad, '\x00', 0x0, r3, 0x0, 0x5, 0x5}, 0x50) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000a00)={@multicast1, @multicast2, <r5=>0x0}, &(0x7f0000000a40)=0xc) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0xd, &(0x7f0000000b00)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r3}, @alu={0x4, 0x0, 0x4, 0x5, 0x4, 0x6, 0x4}], &(0x7f0000000b80)='syzkaller\x00', 0x532, 0x75, &(0x7f0000000bc0)=""/117, 0x41000, 0x0, '\x00', 0x0, @xdp, r3, 0x8, &(0x7f0000000c40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x6, 0x5, 0x2}, 0x10, 0xffffffffffffffff, r4, 0xa, &(0x7f0000000cc0)=[r3], &(0x7f0000000d00)=[{0x0, 0x3, 0xc, 0x6}, {0x5, 0x5, 0xd}, {0x2, 0x5, 0x7}, {0x5, 0x5, 0x0, 0x6}, {0x5, 0x5, 0xb, 0xc}, {0x2, 0x4, 0x6, 0x2}, {0x2, 0x3, 0x0, 0x1}, {0x1, 0x1, 0x5, 0x4}, {0x3, 0x4, 0x2, 0xb}, {0x3, 0x5, 0xe, 0x5}], 0x10, 0x774}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0xa1a, 0x6, 0x9, 0x101, r3, 0x7, '\x00', 0x0, r3, 0x3, 0x4, 0x0, 0xf}, 0x50)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_ext={0x1c, 0x2, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000008c0)='GPL\x00', 0x400, 0xe3, &(0x7f0000000900)=""/227, 0x40f00, 0x66, '\x00', r5, 0x0, r3, 0x8, &(0x7f0000000a80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x7, 0x10, 0x3}, 0x10, 0x4842, r6, 0x4, &(0x7f0000000f00)=[r7, r3, r3, r3, r3, r3], &(0x7f0000000f40)=[{0x5, 0x5, 0x6, 0xc}, {0x4, 0x2, 0xd, 0x1}, {0x4, 0x1, 0x7, 0x2}, {0x5, 0x4, 0xa, 0x6}], 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x72, 0x72, 0x6, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0xa}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @datasec={0x8, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x80000000, 0xfffffffd}, {0x5, 0x3221, 0x5}, {0x5, 0x7, 0x45d7}, {0x1, 0x9, 0x1}, {0x5, 0x4, 0x3}, {0x4, 0x40, 0x4}], "fa66"}]}, {0x0, [0x0, 0x2e, 0x2e, 0xcc4c3554877153d]}}, &(0x7f0000000700)=""/217, 0x92, 0xd9, 0x0, 0x9, 0x10000, @value=r3}, 0x28) (async)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

17.893135781s ago: executing program 2 (id=7220):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "09000960f6d6d3feee6d6b84b345dcf7c680000000526f707833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)

17.741122646s ago: executing program 1 (id=7221):
unshare(0x22020400)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff030000000000000200000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000007000000bf91000000000000b7020000020000008500000084000000b7000000000000009500800000000000f8752a7bd2d01e0b5625c2022726c1c7"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000520001002cbd7000ffdbdf250208000500feff00fc208008000200735e0000000010"], 0x24}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

17.582171969s ago: executing program 0 (id=7223):
r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x98, r7, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x98}}, 0x20040052)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xcf8351a5a2bc78b5}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r10, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r10, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000540)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r13, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'gre0\x00', <r14=>0x0, 0x10, 0x40, 0xc7f, 0x5, {{0xb, 0x4, 0x3, 0x4, 0x2c, 0x66, 0x0, 0xc, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x17, 0xcd, [@remote, @multicast1, @multicast2, @loopback, @private=0xa010102]}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf25090000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="4000018014000200626f6e6430000000000000000000000014000200687372300000000000000000000000001400020070696d72656700000000000000000000300001801400020064766d72703100000000000000000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="300001801400020070696d7265673100000000000000000008000100", @ANYRES32=r14, @ANYBLOB="5eee"], 0xc0}, 0x1, 0x0, 0x0, 0x40004}, 0x20044050)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080))
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000500)=0x41, 0x4)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4810818c}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r13}]}, 0x24}}, 0x850)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000062000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

17.523495604s ago: executing program 2 (id=7224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x25}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8810)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x1)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffc3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x50000000)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, 0x0, 0x4008004)

17.447036144s ago: executing program 1 (id=7225):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1)

17.221116034s ago: executing program 1 (id=7226):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendfile(r7, r8, 0x0, 0xffffffff000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r10, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0)

16.773351565s ago: executing program 3 (id=7227):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100070010000200000008000500", @ANYRES32=r5, @ANYBLOB="0800feff", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

16.004707533s ago: executing program 4 (id=7228):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0xd000000}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

16.000408119s ago: executing program 1 (id=7229):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000003070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080080003400000000228000780090001006c617374000000001800028008000140000003ff0c000240ff"], 0xe8}, 0x1, 0x0, 0x0, 0xc800}, 0x0)

15.984675844s ago: executing program 2 (id=7230):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000540), &(0x7f0000000740)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x81, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x2, 0xfff3}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

15.792023981s ago: executing program 4 (id=7231):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000800)={r2, 0xffffffffffffff1d, "b1c18f70000039ecc1ef1000eb7521e5dc11fbafbe6a56789920b77781b7c5dc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb80"}, &(0x7f00000001c0)=0x41)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x5}, 0x2)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)

15.702802175s ago: executing program 2 (id=7232):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x8000004}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x4}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x9}, {0x7, 0x7}, {0xd, 0x8}, {0x6, 0x6e8ddaf2}, {0x6, 0x10}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x5f, 0x5f, 0x0]}}, 0x0, 0x75, 0x0, 0x1}, 0x28)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @random="40cb6364ba88"})

15.697518941s ago: executing program 3 (id=7233):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000001070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1)
listen(r0, 0x7)

15.57609081s ago: executing program 0 (id=7234):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)

15.410677777s ago: executing program 1 (id=7235):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c050400"], 0x42)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15.383656026s ago: executing program 3 (id=7236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x118)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x4048800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4b8d}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x40000, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10)
getpeername$inet6(r6, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4)

15.236202741s ago: executing program 0 (id=7237):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000cb702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

15.131992481s ago: executing program 0 (id=7238):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x8, 0x6, 0xc, 0x50, 0x2c, 0xc, 0x8, 0xa, 0x8, 0x7, 0x1, 0x66, 0x3, 0xc}, 0xe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)

14.857492637s ago: executing program 4 (id=7239):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r2 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r3=>r2, 0x9, 0x5, 0xa5b})
sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57", 0x15}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

14.733049734s ago: executing program 0 (id=7240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x84, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xfffffffffffffed4, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0x4c080)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x11, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {0x1, 0xffff}, {0x9, 0xe38d0037f0dea5d7}}, [{0x8, 0xb, 0xae6f}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}]}, 0x44}}, 0x20000041)

14.412498239s ago: executing program 3 (id=7241):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x10000000}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

14.373128009s ago: executing program 4 (id=7242):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000540), &(0x7f0000000740)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x81, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x2, 0xfff3}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

14.247979008s ago: executing program 3 (id=7243):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3e8}, 0x1, 0x0, 0x0, 0x40}, 0x4000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000540), &(0x7f0000000740)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x81, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@delqdisc={0x24, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0x2, 0xfff3}, {0xfff3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40001)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

597.935288ms ago: executing program 32 (id=7232):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x8000004}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x4}]}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x9}, {0x7, 0x7}, {0xd, 0x8}, {0x6, 0x6e8ddaf2}, {0x6, 0x10}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x5f, 0x5f, 0x0]}}, 0x0, 0x75, 0x0, 0x1}, 0x28)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @random="40cb6364ba88"})

340.020557ms ago: executing program 0 (id=7245):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000440)="763d04e808620b6a6c6ef273ed8a66d3f408d68a", 0x14)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x7}}, 0x0, 0x0, 0x51, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e22, 0x2b, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000380)=ANY=[@ANYRES16], 0x18}, 0x800)
sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c)
ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000dc0)={&(0x7f0000000300), 0x3, &(0x7f00000007c0)=[{}], &(0x7f0000000d80)})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r5 = accept$alg(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
write$tcp_mem(r6, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48)
sendmmsg$alg(r5, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e05a5de397ee362f573ea834553caa1d", 0x10}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000)
recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)={0x94, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x65}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8010)

258.833433ms ago: executing program 33 (id=7235):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r12, 0xfffffdc8, &(0x7f0000000340)}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c050400"], 0x42)
setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

234.321752ms ago: executing program 3 (id=7247):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="f9ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='erspan0\x00', 0x9, 0x9, 0x4})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r10 = socket$netlink(0x10, 0x3, 0xc)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r11, 0x1000)
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, &(0x7f0000000040)={0x80, 0xde}, 0x2)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000580)="051a0000", 0x4}, {&(0x7f0000000200)="e8ff373b0cdb", 0x6}], 0x3)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c86971bdc3c7e5e3669dceb0c3b040a000000fdf64d0b56daea09be00f385e63827d3c6521f4642a11244491711e59ddf7554ab7d6ecfff80f1b259515c3721cee0949f3b93bf32fe4fc2314e533a97772c8a7c10b1740ddd43f64ec5ab2d5e2f7858f8c4b40f5f5f2abb988df5c0dccea3131c29bae387b006d657c5a511e8095e6fd9bafd0cef8aac59686d6dea3a54a12dec7d100d2b099fc671e839af3db51a1426c933fbd0c55d9d596bec9ef45e", @ANYRES16=r9, @ANYBLOB="01002bbd700000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730002000000"], 0x3c}}, 0x0)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc00000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd7000043500000a0001fd2000"], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

184.564717ms ago: executing program 4 (id=7248):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0xfff2}, {0x3, 0xfff1}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0xb57}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={<r5=>r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0x81}, 0x8)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r3, r3, &(0x7f0000000300)=0x7ff, 0x7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6, r7})

0s ago: executing program 4 (id=7249):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000800)={r2, 0xffffffffffffff1d, "b1c18f70000039ecc1ef1000eb7521e5dc11fbafbe6a56789920b77781b7c5dc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb80"}, &(0x7f00000001c0)=0x41)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002100), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r3)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x5}, 0x2)
connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

th: MGMT ver 1.23
[  403.092214][T24589] syzkaller1: entered promiscuous mode
[  403.100659][T24589] syzkaller1: entered allmulticast mode
[  403.142161][T24589] xt_CONNSECMARK: invalid mode: 254
[  403.728854][T24620] vlan2: entered promiscuous mode
[  404.056230][T24636] netlink: 'syz.0.6499': attribute type 1 has an invalid length.
[  404.077342][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  404.088248][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  404.111478][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6499'.
[  404.135680][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6499'.
[  404.152135][T24636] gretap1: entered allmulticast mode
[  404.279938][T24643] syzkaller1: entered promiscuous mode
[  404.293192][T24643] syzkaller1: entered allmulticast mode
[  404.348933][T24653] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6506'.
[  404.359054][T24654] xt_CONNSECMARK: invalid mode: 254
[  404.710498][T24664] x_tables: duplicate underflow at hook 3
[  404.766636][T24664] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.812364][T24664] bridge_slave_0 (unregistering): left allmulticast mode
[  404.874908][T24664] bridge_slave_0 (unregistering): left promiscuous mode
[  404.910126][T24664] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.974836][T24667] macvtap1: entered allmulticast mode
[  405.022658][T24667] dummy0: entered allmulticast mode
[  405.052688][T24667] dummy0: entered promiscuous mode
[  405.080342][T24667] dummy0: left allmulticast mode
[  405.128876][ T5717] dummy0: left promiscuous mode
[  405.912387][T24700] netlink: 'syz.1.6522': attribute type 89 has an invalid length.
[  405.916486][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6521'.
[  405.981603][T24698] xt_hashlimit: size too large, truncated to 1048576
[  406.131685][T24711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6526'.
[  406.165265][T24604] net_ratelimit: 346 callbacks suppressed
[  406.165280][T24604] Set syz1 is full, maxelem 65536 reached
[  406.339925][T24728] FAULT_INJECTION: forcing a failure.
[  406.339925][T24728] name failslab, interval 1, probability 0, space 0, times 0
[  406.353376][T24728] CPU: 1 UID: 0 PID: 24728 Comm: syz.0.6530 Not tainted syzkaller #0 PREEMPT(full) 
[  406.353399][T24728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  406.353409][T24728] Call Trace:
[  406.353416][T24728]  <TASK>
[  406.353423][T24728]  dump_stack_lvl+0xe8/0x150
[  406.353446][T24728]  should_fail_ex+0x40c/0x560
[  406.353465][T24728]  should_failslab+0xa8/0x100
[  406.353486][T24728]  __kmalloc_noprof+0xe8/0x750
[  406.353506][T24728]  ? dev_prep_valid_name+0x1bc/0x640
[  406.353525][T24728]  dev_prep_valid_name+0x1bc/0x640
[  406.353543][T24728]  ? __pfx_dev_prep_valid_name+0x10/0x10
[  406.353560][T24728]  ? __raw_spin_lock_init+0x45/0x100
[  406.353579][T24728]  ? __raw_spin_lock_init+0x45/0x100
[  406.353598][T24728]  register_netdevice+0x530/0x1eb0
[  406.353613][T24728]  ? trace_kmalloc+0x2a/0xf0
[  406.353632][T24728]  ? __kvmalloc_node_noprof+0x53d/0x890
[  406.353652][T24728]  ? alloc_netdev_mqs+0xd00/0x1270
[  406.353667][T24728]  ? __pfx_register_netdevice+0x10/0x10
[  406.353680][T24728]  ? __kvmalloc_node_noprof+0x38b/0x890
[  406.353703][T24728]  ? validate_linkmsg+0x765/0x950
[  406.353723][T24728]  br_dev_newlink+0x6a/0x150
[  406.353750][T24728]  ? rtnl_newlink_create+0x2fd/0xb00
[  406.353770][T24728]  ? __pfx_br_dev_newlink+0x10/0x10
[  406.353787][T24728]  rtnl_newlink_create+0x310/0xb00
[  406.353811][T24728]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  406.353832][T24728]  ? __pfx___mutex_lock+0x10/0x10
[  406.353856][T24728]  ? ns_capable+0x89/0xe0
[  406.353876][T24728]  rtnl_newlink+0x167f/0x1bd0
[  406.353901][T24728]  ? __pfx_rtnl_newlink+0x10/0x10
[  406.353919][T24728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.353948][T24728]  ? rcu_is_watching+0x15/0xb0
[  406.353965][T24728]  ? trace_irq_enable+0x3b/0x140
[  406.353987][T24728]  ? nlmon_xmit+0xb0/0x100
[  406.354005][T24728]  ? kmem_cache_free+0x182/0x650
[  406.354029][T24728]  ? dev_hard_start_xmit+0x7c7/0x830
[  406.354066][T24728]  ? __dev_queue_xmit+0x29b/0x37f0
[  406.354081][T24728]  ? __dev_queue_xmit+0x29b/0x37f0
[  406.354096][T24728]  ? rcu_is_watching+0x15/0xb0
[  406.354111][T24728]  ? __dev_queue_xmit+0x29b/0x37f0
[  406.354125][T24728]  ? trace_irq_enable+0x3b/0x140
[  406.354144][T24728]  ? __dev_queue_xmit+0x29b/0x37f0
[  406.354158][T24728]  ? __dev_queue_xmit+0x29b/0x37f0
[  406.354171][T24728]  ? __local_bh_enable_ip+0xd0/0x130
[  406.354191][T24728]  ? __dev_queue_xmit+0x29b/0x37f0
[  406.354211][T24728]  ? __pfx_rtnl_newlink+0x10/0x10
[  406.354229][T24728]  ? lock_release+0x4b/0x3c0
[  406.354249][T24728]  ? bpf_lsm_capable+0x9/0x20
[  406.354264][T24728]  ? security_capable+0x7e/0x2c0
[  406.354288][T24728]  ? __pfx_rtnl_newlink+0x10/0x10
[  406.354306][T24728]  rtnetlink_rcv_msg+0x802/0xc00
[  406.354326][T24728]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  406.354344][T24728]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  406.354362][T24728]  ? ref_tracker_free+0x689/0x830
[  406.354382][T24728]  ? __pfx_ref_tracker_free+0x10/0x10
[  406.354403][T24728]  netlink_rcv_skb+0x226/0x4a0
[  406.354425][T24728]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  406.354445][T24728]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  406.354471][T24728]  ? netlink_deliver_tap+0x2e/0x1b0
[  406.354494][T24728]  netlink_unicast+0x7bb/0x940
[  406.354518][T24728]  netlink_sendmsg+0x813/0xb40
[  406.354542][T24728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.354565][T24728]  ? aa_sock_msg_perm+0xf1/0x1b0
[  406.354581][T24728]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  406.354600][T24728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.354621][T24728]  ____sys_sendmsg+0x9b9/0xa20
[  406.354646][T24728]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.354667][T24728]  ? lock_release+0x4b/0x3c0
[  406.354685][T24728]  ? import_iovec+0x73/0xa0
[  406.354703][T24728]  ___sys_sendmsg+0x2a5/0x360
[  406.354721][T24728]  ? rcu_is_watching+0x15/0xb0
[  406.354734][T24728]  ? get_pid_task+0x20/0x1f0
[  406.354748][T24728]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.354767][T24728]  ? rcu_is_watching+0x15/0xb0
[  406.354793][T24728]  ? __fget_files+0x2a/0x420
[  406.354809][T24728]  ? __fget_files+0x3a2/0x420
[  406.354830][T24728]  __x64_sys_sendmsg+0x1b1/0x290
[  406.354852][T24728]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  406.354879][T24728]  ? rcu_is_watching+0x15/0xb0
[  406.354895][T24728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.354912][T24728]  do_syscall_64+0x174/0x580
[  406.354931][T24728]  ? trace_irq_disable+0x3b/0x140
[  406.354949][T24728]  ? clear_bhb_loop+0x40/0x90
[  406.354965][T24728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.354981][T24728] RIP: 0033:0x7f9755d9ce59
[  406.354996][T24728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.355011][T24728] RSP: 002b:00007f9756b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.355030][T24728] RAX: ffffffffffffffda RBX: 00007f9756015fa0 RCX: 00007f9755d9ce59
[  406.355042][T24728] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  406.355061][T24728] RBP: 00007f9756b85090 R08: 0000000000000000 R09: 0000000000000000
[  406.355072][T24728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  406.355082][T24728] R13: 00007f9756016038 R14: 00007f9756015fa0 R15: 00007fffff151328
[  406.355101][T24728]  </TASK>
[  406.358321][T24729] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6529'.
[  406.520516][T24732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6533'.
[  406.635446][T24747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6537'.
[  407.158944][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'.
[  407.578528][T24793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6553'.
[  407.604456][T24799] tipc: Failed to remove unknown binding: 66,1,1/0:3180514155/3180514157
[  407.629163][T24799] tipc: Failed to remove unknown binding: 66,1,1/0:3180514155/3180514157
[  407.647886][T24799] tipc: Failed to remove unknown binding: 66,1,1/0:3180514155/3180514157
[  407.670406][T24799] netlink: 'syz.3.6556': attribute type 10 has an invalid length.
[  407.705913][T24801] vlan2: entered promiscuous mode
[  407.715681][T24801] bridge0: entered promiscuous mode
[  407.744428][T24799] team0: Port device geneve1 added
[  407.750675][T24801] netlink: 'syz.4.6560': attribute type 4 has an invalid length.
[  407.759329][T24806] netlink: 'syz.4.6560': attribute type 4 has an invalid length.
[  408.121474][T24816] xt_hashlimit: size too large, truncated to 1048576
[  408.123394][T24820] bridge_slave_1: left allmulticast mode
[  408.140404][T24820] bridge_slave_1: left promiscuous mode
[  408.155268][T24820] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.172806][T24820] bridge_slave_0: left allmulticast mode
[  408.183927][T24820] bridge_slave_0: left promiscuous mode
[  408.190908][T24820] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.455849][T24839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.484837][T24842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.511695][T24839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.534638][T24842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.571336][T24839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.597453][T24842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.646315][T24839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.671059][T24842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.713877][ T1121] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.725035][ T1121] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.743487][ T1121] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.751918][ T1121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.785139][ T1121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.795842][ T1121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.814027][ T1121] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.831708][ T1121] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.911444][T24857] xt_CT: No such helper "snmp_trap"
[  408.963711][T24862] bridge_slave_1: left allmulticast mode
[  408.971672][T24862] bridge_slave_1: left promiscuous mode
[  408.981932][T24862] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.995017][T24864] xt_hashlimit: size too large, truncated to 1048576
[  409.004568][T24862] bridge_slave_0: left allmulticast mode
[  409.016386][T24862] bridge_slave_0: left promiscuous mode
[  409.030143][T24862] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.159442][T24878] __nla_validate_parse: 9 callbacks suppressed
[  409.159459][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6587'.
[  409.286999][T24883] netlink: 'syz.3.6591': attribute type 1 has an invalid length.
[  409.303792][T24883] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.6591'.
[  409.325275][T24878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6587'.
[  409.374312][T24883] bond2: entered allmulticast mode
[  409.390182][T24888] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.469029][T24888] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.588724][T24888] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.679176][T24888] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.770771][   T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.807334][   T65] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.830973][   T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.838125][T24905] xt_hashlimit: size too large, truncated to 1048576
[  409.863308][ T1108] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.308259][T24927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6604'.
[  410.349739][T24927] syzkaller1: entered promiscuous mode
[  410.361376][T24927] syzkaller1: entered allmulticast mode
[  410.383472][T24927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6604'.
[  410.755296][ T5756] bridge0: entered promiscuous mode
[  410.787603][T24947] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  410.795840][T24948] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  411.208619][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6616'.
[  411.225026][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6616'.
[  411.236048][T24963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.293733][T24963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.339226][T24964] team0: No ports can be present during mode change
[  411.385719][T24974] netlink: 'syz.4.6620': attribute type 1 has an invalid length.
[  411.395694][T24963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.459739][T24976] xt_hashlimit: size too large, truncated to 1048576
[  411.478007][T24963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.428819][T24996] hsr0: entered promiscuous mode
[  412.620101][T25016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6634'.
[  412.662901][T25016] xt_CT: No such helper "snmp_trap"
[  412.729735][T25019] veth0: entered promiscuous mode
[  412.736519][T25018] veth0: left promiscuous mode
[  412.773570][T25027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6639'.
[  412.814105][T25027] xt_CT: No such helper "snmp_trap"
[  412.859605][T25034] geneve2: entered promiscuous mode
[  412.867478][T25036] xt_hashlimit: size too large, truncated to 1048576
[  412.885027][T25034] netlink: 49 bytes leftover after parsing attributes in process `syz.0.6641'.
[  413.219509][T25070] FAULT_INJECTION: forcing a failure.
[  413.219509][T25070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  413.242826][T25070] CPU: 0 UID: 0 PID: 25070 Comm: syz.4.6651 Not tainted syzkaller #0 PREEMPT(full) 
[  413.242851][T25070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  413.242861][T25070] Call Trace:
[  413.242868][T25070]  <TASK>
[  413.242876][T25070]  dump_stack_lvl+0xe8/0x150
[  413.242899][T25070]  should_fail_ex+0x40c/0x560
[  413.242919][T25070]  _copy_from_user+0x2d/0xb0
[  413.242940][T25070]  ___sys_recvmsg+0x173/0x5a0
[  413.242963][T25070]  ? __pfx____sys_recvmsg+0x10/0x10
[  413.242986][T25070]  ? __fget_files+0x2a/0x420
[  413.243002][T25070]  ? rcu_is_watching+0x15/0xb0
[  413.243024][T25070]  ? rcu_is_watching+0x15/0xb0
[  413.243040][T25070]  ? lock_release+0x4b/0x3c0
[  413.243058][T25070]  ? __might_fault+0xcb/0x130
[  413.243077][T25070]  do_recvmmsg+0x31a/0x7f0
[  413.243099][T25070]  ? __pfx_do_recvmmsg+0x10/0x10
[  413.243123][T25070]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  413.243144][T25070]  ? __fget_files+0x3a2/0x420
[  413.243165][T25070]  __x64_sys_recvmmsg+0x198/0x250
[  413.243187][T25070]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  413.243210][T25070]  ? rcu_is_watching+0x15/0xb0
[  413.243226][T25070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.243243][T25070]  do_syscall_64+0x174/0x580
[  413.243261][T25070]  ? trace_irq_disable+0x3b/0x140
[  413.243281][T25070]  ? clear_bhb_loop+0x40/0x90
[  413.243297][T25070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.243313][T25070] RIP: 0033:0x7f865919ce59
[  413.243328][T25070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.243342][T25070] RSP: 002b:00007f865a0dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  413.243360][T25070] RAX: ffffffffffffffda RBX: 00007f8659415fa0 RCX: 00007f865919ce59
[  413.243371][T25070] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003
[  413.243383][T25070] RBP: 00007f865a0dd090 R08: 0000000000000000 R09: 0000000000000000
[  413.243392][T25070] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002
[  413.243402][T25070] R13: 00007f8659416038 R14: 00007f8659415fa0 R15: 00007ffc6995ec78
[  413.243421][T25070]  </TASK>
[  413.639474][T25088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.672700][T25088] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.778529][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.813498][T25098] x_tables: duplicate underflow at hook 1
[  413.825045][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.902289][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.963077][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.345637][T25147] netlink: 'syz.4.6680': attribute type 1 has an invalid length.
[  414.390766][T25147] 8021q: adding VLAN 0 to HW filter on device bond6
[  414.404408][T25155] __nla_validate_parse: 7 callbacks suppressed
[  414.404425][T25155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6683'.
[  414.433261][T25157] 8021q: adding VLAN 0 to HW filter on device bond6
[  414.440673][T25157] bond6: (slave gre1): The slave device specified does not support setting the MAC address
[  414.456908][T25157] bond6: (slave gre1): Error -95 calling set_mac_address
[  414.491629][T25147] gretap1: entered promiscuous mode
[  414.528381][T25147] bond6: (slave gretap1): making interface the new active one
[  414.570097][T25162] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6684'.
[  414.592246][T25147] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  414.635388][T25157] macvlan2: entered promiscuous mode
[  414.642891][T25157] macvlan2: entered allmulticast mode
[  414.648972][T25157] bond6: entered promiscuous mode
[  414.655207][T25157] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  414.664653][T25157] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  414.690151][T25157] bond6: left promiscuous mode
[  414.712552][T25169] bridge0: entered promiscuous mode
[  414.722407][T25169] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  414.722407][T25169] Please contact the netfilter-devel mailing list or update your nftables rules.
[  414.881779][T25190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6695'.
[  414.995550][T25196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6698'.
[  415.023402][T25198] xt_hashlimit: size too large, truncated to 1048576
[  415.030761][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6701'.
[  415.129997][T25196] xt_CT: No such helper "snmp_trap"
[  415.313059][T25216] sctp: [Deprecated]: syz.3.6705 (pid 25216) Use of struct sctp_assoc_value in delayed_ack socket option.
[  415.313059][T25216] Use struct sctp_sack_info instead
[  415.438870][T25232] bridge_slave_1: left allmulticast mode
[  415.449624][T25232] bridge_slave_1: left promiscuous mode
[  415.458985][T25232] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.475468][T25232] bridge_slave_0: left allmulticast mode
[  415.484323][T25232] bridge_slave_0: left promiscuous mode
[  415.493398][T25232] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.607854][T25240] syzkaller1: entered promiscuous mode
[  415.614620][T25240] syzkaller1: entered allmulticast mode
[  415.654253][T25246] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6716'.
[  415.720650][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6717'.
[  415.758929][T25250] xt_CT: No such helper "snmp_trap"
[  415.825762][T25257] xt_hashlimit: size too large, truncated to 1048576
[  415.901731][T25268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6724'.
[  415.919621][T25268] xfrm1: entered promiscuous mode
[  415.924844][T25268] xfrm1: entered allmulticast mode
[  415.932906][T25268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6724'.
[  416.198799][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6729'.
[  416.413104][T25284] FAULT_INJECTION: forcing a failure.
[  416.413104][T25284] name failslab, interval 1, probability 0, space 0, times 0
[  416.426516][T25284] CPU: 0 UID: 0 PID: 25284 Comm: syz.4.6730 Not tainted syzkaller #0 PREEMPT(full) 
[  416.426538][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  416.426548][T25284] Call Trace:
[  416.426555][T25284]  <TASK>
[  416.426562][T25284]  dump_stack_lvl+0xe8/0x150
[  416.426585][T25284]  should_fail_ex+0x40c/0x560
[  416.426602][T25284]  should_failslab+0xa8/0x100
[  416.426624][T25284]  ? __kernfs_new_node+0xe6/0x980
[  416.426645][T25284]  kmem_cache_alloc_noprof+0x87/0x650
[  416.426663][T25284]  ? lock_release+0x4b/0x3c0
[  416.426685][T25284]  ? kernfs_root+0x1c/0x230
[  416.426707][T25284]  __kernfs_new_node+0xe6/0x980
[  416.426725][T25284]  ? up_write+0x19f/0x4a0
[  416.426745][T25284]  ? __pfx___kernfs_new_node+0x10/0x10
[  416.426762][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.426777][T25284]  ? kernfs_root+0x1c/0x230
[  416.426794][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.426809][T25284]  ? kernfs_root+0x1c/0x230
[  416.426827][T25284]  ? lock_release+0x4b/0x3c0
[  416.426846][T25284]  ? sysfs_create_dir_ns+0x12f/0x2a0
[  416.426865][T25284]  ? kernfs_root+0x1c/0x230
[  416.426882][T25284]  ? kernfs_root+0x1c/0x230
[  416.426902][T25284]  kernfs_new_node+0xea/0x140
[  416.426923][T25284]  __kernfs_create_file+0x4b/0x2e0
[  416.426940][T25284]  sysfs_add_file_mode_ns+0x237/0x300
[  416.426960][T25284]  sysfs_create_file_ns+0x12b/0x1b0
[  416.426977][T25284]  ? lock_release+0x4b/0x3c0
[  416.426997][T25284]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  416.427016][T25284]  ? device_create_file+0xf4/0x1b0
[  416.427033][T25284]  device_add+0x432/0xb80
[  416.427050][T25284]  netdev_register_kobject+0x178/0x310
[  416.427069][T25284]  register_netdevice+0x1433/0x1eb0
[  416.427091][T25284]  ? __pfx_register_netdevice+0x10/0x10
[  416.427113][T25284]  ? __kvmalloc_node_noprof+0x38b/0x890
[  416.427140][T25284]  br_dev_newlink+0x6a/0x150
[  416.427156][T25284]  ? rtnl_newlink_create+0x2fd/0xb00
[  416.427175][T25284]  ? __pfx_br_dev_newlink+0x10/0x10
[  416.427190][T25284]  rtnl_newlink_create+0x310/0xb00
[  416.427211][T25284]  ? __mutex_lock+0x5d4/0x1550
[  416.427232][T25284]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  416.427252][T25284]  ? __pfx___mutex_lock+0x10/0x10
[  416.427270][T25284]  ? ns_capable+0x89/0xe0
[  416.427287][T25284]  rtnl_newlink+0x167f/0x1bd0
[  416.427307][T25284]  ? __pfx_rtnl_newlink+0x10/0x10
[  416.427322][T25284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.427345][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.427357][T25284]  ? trace_irq_enable+0x3b/0x140
[  416.427375][T25284]  ? nlmon_xmit+0xb0/0x100
[  416.427389][T25284]  ? kmem_cache_free+0x182/0x650
[  416.427408][T25284]  ? dev_hard_start_xmit+0x7c7/0x830
[  416.427426][T25284]  ? __dev_queue_xmit+0x29b/0x37f0
[  416.427438][T25284]  ? __dev_queue_xmit+0x29b/0x37f0
[  416.427450][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.427462][T25284]  ? __dev_queue_xmit+0x29b/0x37f0
[  416.427473][T25284]  ? trace_irq_enable+0x3b/0x140
[  416.427488][T25284]  ? __dev_queue_xmit+0x29b/0x37f0
[  416.427499][T25284]  ? __dev_queue_xmit+0x29b/0x37f0
[  416.427510][T25284]  ? __local_bh_enable_ip+0xd0/0x130
[  416.427525][T25284]  ? __dev_queue_xmit+0x29b/0x37f0
[  416.427541][T25284]  ? __pfx_rtnl_newlink+0x10/0x10
[  416.427555][T25284]  ? lock_release+0x4b/0x3c0
[  416.427571][T25284]  ? bpf_lsm_capable+0x9/0x20
[  416.427582][T25284]  ? security_capable+0x7e/0x2c0
[  416.427603][T25284]  ? __pfx_rtnl_newlink+0x10/0x10
[  416.427620][T25284]  rtnetlink_rcv_msg+0x802/0xc00
[  416.427637][T25284]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  416.427651][T25284]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  416.427666][T25284]  ? ref_tracker_free+0x689/0x830
[  416.427681][T25284]  ? __pfx_ref_tracker_free+0x10/0x10
[  416.427698][T25284]  netlink_rcv_skb+0x226/0x4a0
[  416.427715][T25284]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  416.427731][T25284]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  416.427752][T25284]  ? netlink_deliver_tap+0x2e/0x1b0
[  416.427771][T25284]  netlink_unicast+0x7bb/0x940
[  416.427789][T25284]  netlink_sendmsg+0x813/0xb40
[  416.427809][T25284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.427827][T25284]  ? aa_sock_msg_perm+0xf1/0x1b0
[  416.427841][T25284]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  416.427856][T25284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.427874][T25284]  ____sys_sendmsg+0x9b9/0xa20
[  416.427894][T25284]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.427912][T25284]  ? lock_release+0x4b/0x3c0
[  416.427929][T25284]  ? import_iovec+0x73/0xa0
[  416.427946][T25284]  ___sys_sendmsg+0x2a5/0x360
[  416.427962][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.427974][T25284]  ? get_pid_task+0x20/0x1f0
[  416.427987][T25284]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.428005][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.428025][T25284]  ? __fget_files+0x2a/0x420
[  416.428038][T25284]  ? __fget_files+0x3a2/0x420
[  416.428055][T25284]  __x64_sys_sendmsg+0x1b1/0x290
[  416.428072][T25284]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  416.428093][T25284]  ? rcu_is_watching+0x15/0xb0
[  416.428112][T25284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.428125][T25284]  do_syscall_64+0x174/0x580
[  416.428140][T25284]  ? trace_irq_disable+0x3b/0x140
[  416.428156][T25284]  ? clear_bhb_loop+0x40/0x90
[  416.428169][T25284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.428182][T25284] RIP: 0033:0x7f865919ce59
[  416.428194][T25284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.428205][T25284] RSP: 002b:00007f865a0dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.428220][T25284] RAX: ffffffffffffffda RBX: 00007f8659415fa0 RCX: 00007f865919ce59
[  416.428229][T25284] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  416.428238][T25284] RBP: 00007f865a0dd090 R08: 0000000000000000 R09: 0000000000000000
[  416.428246][T25284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  416.428254][T25284] R13: 00007f8659416038 R14: 00007f8659415fa0 R15: 00007ffc6995ec78
[  416.428268][T25284]  </TASK>
[  417.044660][T25288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.078668][T25290] team0: No ports can be present during mode change
[  417.086461][T25292] xt_CT: No such helper "snmp_trap"
[  417.175979][T25288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.237000][T25310] netlink: 'syz.3.6741': attribute type 3 has an invalid length.
[  417.322925][T25288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.393746][T25288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.473729][T25334] xt_CT: No such helper "snmp_trap"
[  417.492731][ T1108] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.513783][ T1108] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.559384][ T1108] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.568414][ T1108] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.846318][T25374] sctp: [Deprecated]: syz.2.6753 (pid 25374) Use of int in max_burst socket option.
[  417.846318][T25374] Use struct sctp_assoc_value instead
[  419.447130][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  420.218557][T25308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  420.227402][T25321] __nla_validate_parse: 6 callbacks suppressed
[  420.228000][T25321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6741'.
[  420.600143][ T5732] IPVS: starting estimator thread 0...
[  420.614997][T25401] sctp: [Deprecated]: syz.0.6758 (pid 25401) Use of int in max_burst socket option.
[  420.614997][T25401] Use struct sctp_assoc_value instead
[  420.719846][T25419] IPVS: using max 60 ests per chain, 144000 per kthread
[  420.748278][T25426] IPVS: rr: FWM 3 0x00000003 - no destination available
[  420.762955][T25425] netlink: 'syz.4.6766': attribute type 1 has an invalid length.
[  420.777973][T25427] sctp: [Deprecated]: syz.2.6764 (pid 25427) Use of int in max_burst socket option.
[  420.777973][T25427] Use struct sctp_assoc_value instead
[  420.884784][T25425] 8021q: adding VLAN 0 to HW filter on device bond7
[  421.357605][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  421.434821][T25439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6771'.
[  421.603874][T25446] bridge0: port 1(batadv1) entered blocking state
[  421.617970][T25446] bridge0: port 1(batadv1) entered disabled state
[  421.628177][T25446] batadv1: entered allmulticast mode
[  421.638690][T25446] batadv1: entered promiscuous mode
[  421.722136][T25454] netlink: 'syz.0.6777': attribute type 12 has an invalid length.
[  421.914910][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6777'.
[  421.981499][T25458] macsec0: entered promiscuous mode
[  422.119328][   T65] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  422.128675][   T65] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  422.208719][T25453] macsec0: left promiscuous mode
[  422.840879][T25514] netlink: 'syz.0.6798': attribute type 1 has an invalid length.
[  422.905893][T25514] 8021q: adding VLAN 0 to HW filter on device bond4
[  422.945674][T25517] vlan3: entered allmulticast mode
[  422.976983][T25517] veth0_to_bond: entered allmulticast mode
[  423.234765][T25528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6803'.
[  423.329852][T25528] xt_CT: No such helper "snmp_trap"
[  423.424418][T25525] sit0: entered promiscuous mode
[  423.443304][T25525] netlink: 'syz.0.6801': attribute type 1 has an invalid length.
[  423.452080][T25525] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6801'.
[  423.567607][T25546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6807'.
[  423.721186][T25562] netlink: 'syz.1.6814': attribute type 2 has an invalid length.
[  423.736565][T25562] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6814'.
[  423.775395][T25564] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6816'.
[  423.790623][T25565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6813'.
[  423.949119][T25565] veth3: entered allmulticast mode
[  423.961018][T25565] bond5: (slave veth3): Enslaving as an active interface with an up link
[  423.995280][T25561] bond5 (unregistering): (slave veth3): Releasing backup interface
[  424.026087][T25561] bond5 (unregistering): Released all slaves
[  424.042716][T25582] netlink: 'syz.3.6823': attribute type 12 has an invalid length.
[  424.051583][T25581] netlink: 'syz.4.6822': attribute type 12 has an invalid length.
[  424.242527][T25591] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.255246][T25593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6822'.
[  424.265273][T25589] macsec0: entered promiscuous mode
[  424.335397][T25579] macsec0: left promiscuous mode
[  424.349362][T25582] macsec0: entered promiscuous mode
[  424.358228][T25591] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.387962][T25580] macsec0: left promiscuous mode
[  424.428183][T25591] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.460771][T25600] FAULT_INJECTION: forcing a failure.
[  424.460771][T25600] name failslab, interval 1, probability 0, space 0, times 0
[  424.473935][T25600] CPU: 0 UID: 0 PID: 25600 Comm: syz.4.6829 Not tainted syzkaller #0 PREEMPT(full) 
[  424.473959][T25600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  424.473972][T25600] Call Trace:
[  424.473982][T25600]  <TASK>
[  424.473990][T25600]  dump_stack_lvl+0xe8/0x150
[  424.474012][T25600]  should_fail_ex+0x40c/0x560
[  424.474031][T25600]  should_failslab+0xa8/0x100
[  424.474052][T25600]  ? __kernfs_new_node+0xe6/0x980
[  424.474072][T25600]  kmem_cache_alloc_noprof+0x87/0x650
[  424.474092][T25600]  ? lock_acquire+0x5f/0x350
[  424.474116][T25600]  __kernfs_new_node+0xe6/0x980
[  424.474137][T25600]  ? kernfs_root+0x1c/0x230
[  424.474156][T25600]  ? __pfx___kernfs_new_node+0x10/0x10
[  424.474175][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.474192][T25600]  ? kernfs_root+0x1c/0x230
[  424.474208][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.474223][T25600]  ? kernfs_root+0x1c/0x230
[  424.474239][T25600]  ? lock_release+0x4b/0x3c0
[  424.474259][T25600]  ? kernfs_root+0x1c/0x230
[  424.474276][T25600]  ? kernfs_root+0x1c/0x230
[  424.474295][T25600]  kernfs_new_node+0xea/0x140
[  424.474316][T25600]  __kernfs_create_file+0x4b/0x2e0
[  424.474337][T25600]  sysfs_add_file_mode_ns+0x237/0x300
[  424.474357][T25600]  internal_create_group+0x679/0x1180
[  424.474379][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.474395][T25600]  ? lock_release+0x4b/0x3c0
[  424.474413][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.474436][T25600]  ? kernfs_root+0x1c/0x230
[  424.474453][T25600]  ? __pfx_internal_create_group+0x10/0x10
[  424.474473][T25600]  ? up_write+0x19f/0x4a0
[  424.474491][T25600]  sysfs_create_groups+0x59/0x120
[  424.474511][T25600]  device_add_attrs+0xde/0x600
[  424.474529][T25600]  ? __pfx_device_add_attrs+0x10/0x10
[  424.474546][T25600]  ? device_add_class_symlinks+0x21f/0x240
[  424.474564][T25600]  device_add+0x488/0xb80
[  424.474580][T25600]  netdev_register_kobject+0x178/0x310
[  424.474600][T25600]  register_netdevice+0x1433/0x1eb0
[  424.474621][T25600]  ? __pfx_register_netdevice+0x10/0x10
[  424.474636][T25600]  ? __kvmalloc_node_noprof+0x38b/0x890
[  424.474663][T25600]  br_dev_newlink+0x6a/0x150
[  424.474679][T25600]  ? rtnl_newlink_create+0x2fd/0xb00
[  424.474700][T25600]  ? __pfx_br_dev_newlink+0x10/0x10
[  424.474717][T25600]  rtnl_newlink_create+0x310/0xb00
[  424.474742][T25600]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  424.474765][T25600]  ? __pfx___mutex_lock+0x10/0x10
[  424.474788][T25600]  ? ns_capable+0x89/0xe0
[  424.474810][T25600]  rtnl_newlink+0x167f/0x1bd0
[  424.474835][T25600]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.474854][T25600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.474882][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.474898][T25600]  ? trace_irq_enable+0x3b/0x140
[  424.474921][T25600]  ? nlmon_xmit+0xb0/0x100
[  424.474938][T25600]  ? kmem_cache_free+0x182/0x650
[  424.474962][T25600]  ? dev_hard_start_xmit+0x7c7/0x830
[  424.474984][T25600]  ? __dev_queue_xmit+0x29b/0x37f0
[  424.474999][T25600]  ? __dev_queue_xmit+0x29b/0x37f0
[  424.475013][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.475028][T25600]  ? __dev_queue_xmit+0x29b/0x37f0
[  424.475042][T25600]  ? trace_irq_enable+0x3b/0x140
[  424.475061][T25600]  ? __dev_queue_xmit+0x29b/0x37f0
[  424.475074][T25600]  ? __dev_queue_xmit+0x29b/0x37f0
[  424.475088][T25600]  ? __local_bh_enable_ip+0xd0/0x130
[  424.475107][T25600]  ? __dev_queue_xmit+0x29b/0x37f0
[  424.475127][T25600]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.475145][T25600]  ? lock_release+0x4b/0x3c0
[  424.475165][T25600]  ? bpf_lsm_capable+0x9/0x20
[  424.475179][T25600]  ? security_capable+0x7e/0x2c0
[  424.475203][T25600]  ? __pfx_rtnl_newlink+0x10/0x10
[  424.475221][T25600]  rtnetlink_rcv_msg+0x802/0xc00
[  424.475242][T25600]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  424.475260][T25600]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.475279][T25600]  ? ref_tracker_free+0x689/0x830
[  424.475296][T25600]  ? __pfx_ref_tracker_free+0x10/0x10
[  424.475316][T25600]  netlink_rcv_skb+0x226/0x4a0
[  424.475338][T25600]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  424.475357][T25600]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  424.475383][T25600]  ? netlink_deliver_tap+0x2e/0x1b0
[  424.475405][T25600]  netlink_unicast+0x7bb/0x940
[  424.475434][T25600]  netlink_sendmsg+0x813/0xb40
[  424.475458][T25600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.475480][T25600]  ? aa_sock_msg_perm+0xf1/0x1b0
[  424.475497][T25600]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  424.475516][T25600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  424.475538][T25600]  ____sys_sendmsg+0x9b9/0xa20
[  424.475564][T25600]  ? __pfx_____sys_sendmsg+0x10/0x10
[  424.475585][T25600]  ? lock_release+0x4b/0x3c0
[  424.475608][T25600]  ? import_iovec+0x73/0xa0
[  424.475628][T25600]  ___sys_sendmsg+0x2a5/0x360
[  424.475648][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.475663][T25600]  ? get_pid_task+0x20/0x1f0
[  424.475678][T25600]  ? __pfx____sys_sendmsg+0x10/0x10
[  424.475698][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.475723][T25600]  ? __fget_files+0x2a/0x420
[  424.475740][T25600]  ? __fget_files+0x3a2/0x420
[  424.475760][T25600]  __x64_sys_sendmsg+0x1b1/0x290
[  424.475781][T25600]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  424.475805][T25600]  ? rcu_is_watching+0x15/0xb0
[  424.475820][T25600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.475836][T25600]  do_syscall_64+0x174/0x580
[  424.475854][T25600]  ? trace_irq_disable+0x3b/0x140
[  424.475873][T25600]  ? clear_bhb_loop+0x40/0x90
[  424.475890][T25600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.475904][T25600] RIP: 0033:0x7f865919ce59
[  424.475919][T25600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.475932][T25600] RSP: 002b:00007f865a0dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.475950][T25600] RAX: ffffffffffffffda RBX: 00007f8659415fa0 RCX: 00007f865919ce59
[  424.475962][T25600] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  424.475973][T25600] RBP: 00007f865a0dd090 R08: 0000000000000000 R09: 0000000000000000
[  424.475982][T25600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  424.475992][T25600] R13: 00007f8659416038 R14: 00007f8659415fa0 R15: 00007ffc6995ec78
[  424.476009][T25600]  </TASK>
[  425.062692][    C0] ip6_tunnel: ip6gre9 xmit: Local address not yet configured!
[  425.083802][T25591] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.098522][T25602] netlink: 'syz.3.6828': attribute type 12 has an invalid length.
[  425.216553][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.270205][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.299770][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.346527][ T1121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.429222][ T5625] block nbd2: Receive control failed (result -32)
[  425.594337][T25622] bridge_slave_1: left allmulticast mode
[  425.609667][T25622] bridge_slave_1: left promiscuous mode
[  425.640074][T25622] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.702221][T25622] bridge_slave_0: left allmulticast mode
[  425.716800][T25622] bridge_slave_0: left promiscuous mode
[  425.727437][T25622] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.788751][T25630] __nla_validate_parse: 1 callbacks suppressed
[  425.788769][T25630] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6840'.
[  425.841560][T25625] netlink: 'syz.0.6838': attribute type 12 has an invalid length.
[  425.956437][T25625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6838'.
[  426.345500][T25662] syzkaller1: entered promiscuous mode
[  426.366312][T25662] syzkaller1: entered allmulticast mode
[  426.389128][T25668] x_tables: duplicate underflow at hook 3
[  426.415542][T25666] FAULT_INJECTION: forcing a failure.
[  426.415542][T25666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  426.429031][T25662] xt_CONNSECMARK: invalid mode: 254
[  426.464827][T25666] CPU: 1 UID: 0 PID: 25666 Comm: syz.2.6857 Not tainted syzkaller #0 PREEMPT(full) 
[  426.464851][T25666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  426.464860][T25666] Call Trace:
[  426.464866][T25666]  <TASK>
[  426.464873][T25666]  dump_stack_lvl+0xe8/0x150
[  426.464896][T25666]  should_fail_ex+0x40c/0x560
[  426.464915][T25666]  _copy_from_user+0x2d/0xb0
[  426.464935][T25666]  ___sys_recvmsg+0x173/0x5a0
[  426.464960][T25666]  ? __pfx____sys_recvmsg+0x10/0x10
[  426.464983][T25666]  ? __fget_files+0x2a/0x420
[  426.465000][T25666]  ? rcu_is_watching+0x15/0xb0
[  426.465023][T25666]  ? rcu_is_watching+0x15/0xb0
[  426.465039][T25666]  ? lock_release+0x4b/0x3c0
[  426.465061][T25666]  ? __might_fault+0xcb/0x130
[  426.465080][T25666]  do_recvmmsg+0x31a/0x7f0
[  426.465103][T25666]  ? __pfx_do_recvmmsg+0x10/0x10
[  426.465129][T25666]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  426.465151][T25666]  ? __fget_files+0x3a2/0x420
[  426.465171][T25666]  __x64_sys_recvmmsg+0x198/0x250
[  426.465194][T25666]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  426.465217][T25666]  ? rcu_is_watching+0x15/0xb0
[  426.465232][T25666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.465248][T25666]  do_syscall_64+0x174/0x580
[  426.465267][T25666]  ? trace_irq_disable+0x3b/0x140
[  426.465288][T25666]  ? clear_bhb_loop+0x40/0x90
[  426.465306][T25666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.465321][T25666] RIP: 0033:0x7f9e0419ce59
[  426.465336][T25666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.465349][T25666] RSP: 002b:00007f9e023f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  426.465365][T25666] RAX: ffffffffffffffda RBX: 00007f9e04415fa0 RCX: 00007f9e0419ce59
[  426.465377][T25666] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003
[  426.465388][T25666] RBP: 00007f9e023f6090 R08: 0000000000000000 R09: 0000000000000000
[  426.465398][T25666] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002
[  426.465408][T25666] R13: 00007f9e04416038 R14: 00007f9e04415fa0 R15: 00007ffe855693d8
[  426.465427][T25666]  </TASK>
[  426.744219][T25684] FAULT_INJECTION: forcing a failure.
[  426.744219][T25684] name failslab, interval 1, probability 0, space 0, times 0
[  426.757114][T25684] CPU: 1 UID: 0 PID: 25684 Comm: syz.0.6861 Not tainted syzkaller #0 PREEMPT(full) 
[  426.757136][T25684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  426.757146][T25684] Call Trace:
[  426.757153][T25684]  <TASK>
[  426.757159][T25684]  dump_stack_lvl+0xe8/0x150
[  426.757181][T25684]  should_fail_ex+0x40c/0x560
[  426.757201][T25684]  should_failslab+0xa8/0x100
[  426.757221][T25684]  ? __kernfs_new_node+0xe6/0x980
[  426.757242][T25684]  kmem_cache_alloc_noprof+0x87/0x650
[  426.757261][T25684]  ? lock_acquire+0x5f/0x350
[  426.757284][T25684]  __kernfs_new_node+0xe6/0x980
[  426.757305][T25684]  ? kernfs_root+0x1c/0x230
[  426.757324][T25684]  ? __pfx___kernfs_new_node+0x10/0x10
[  426.757343][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.757359][T25684]  ? kernfs_root+0x1c/0x230
[  426.757377][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.757389][T25684]  ? kernfs_root+0x1c/0x230
[  426.757405][T25684]  ? lock_release+0x4b/0x3c0
[  426.757425][T25684]  ? kernfs_root+0x1c/0x230
[  426.757441][T25684]  ? kernfs_root+0x1c/0x230
[  426.757459][T25684]  kernfs_new_node+0xea/0x140
[  426.757480][T25684]  __kernfs_create_file+0x4b/0x2e0
[  426.757501][T25684]  sysfs_add_file_mode_ns+0x237/0x300
[  426.757519][T25684]  internal_create_group+0x679/0x1180
[  426.757541][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.757554][T25684]  ? lock_release+0x4b/0x3c0
[  426.757571][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.757586][T25684]  ? kernfs_root+0x1c/0x230
[  426.757602][T25684]  ? __pfx_internal_create_group+0x10/0x10
[  426.757622][T25684]  ? up_write+0x19f/0x4a0
[  426.757641][T25684]  sysfs_create_groups+0x59/0x120
[  426.757661][T25684]  device_add_attrs+0xde/0x600
[  426.757679][T25684]  ? __pfx_device_add_attrs+0x10/0x10
[  426.757702][T25684]  ? device_add_class_symlinks+0x21f/0x240
[  426.757719][T25684]  device_add+0x488/0xb80
[  426.757735][T25684]  netdev_register_kobject+0x178/0x310
[  426.757755][T25684]  register_netdevice+0x1433/0x1eb0
[  426.757776][T25684]  ? __pfx_register_netdevice+0x10/0x10
[  426.757797][T25684]  ? __kvmalloc_node_noprof+0x38b/0x890
[  426.757823][T25684]  br_dev_newlink+0x6a/0x150
[  426.757840][T25684]  ? rtnl_newlink_create+0x2fd/0xb00
[  426.757860][T25684]  ? __pfx_br_dev_newlink+0x10/0x10
[  426.757877][T25684]  rtnl_newlink_create+0x310/0xb00
[  426.757900][T25684]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  426.757920][T25684]  ? __pfx___mutex_lock+0x10/0x10
[  426.757943][T25684]  ? ns_capable+0x89/0xe0
[  426.757961][T25684]  rtnl_newlink+0x167f/0x1bd0
[  426.757983][T25684]  ? __pfx_rtnl_newlink+0x10/0x10
[  426.758001][T25684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.758031][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.758046][T25684]  ? trace_irq_enable+0x3b/0x140
[  426.758066][T25684]  ? nlmon_xmit+0xb0/0x100
[  426.758083][T25684]  ? kmem_cache_free+0x182/0x650
[  426.758107][T25684]  ? dev_hard_start_xmit+0x7c7/0x830
[  426.758129][T25684]  ? __dev_queue_xmit+0x29b/0x37f0
[  426.758143][T25684]  ? __dev_queue_xmit+0x29b/0x37f0
[  426.758156][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.758170][T25684]  ? __dev_queue_xmit+0x29b/0x37f0
[  426.758183][T25684]  ? trace_irq_enable+0x3b/0x140
[  426.758200][T25684]  ? __dev_queue_xmit+0x29b/0x37f0
[  426.758214][T25684]  ? __dev_queue_xmit+0x29b/0x37f0
[  426.758227][T25684]  ? __local_bh_enable_ip+0xd0/0x130
[  426.758245][T25684]  ? __dev_queue_xmit+0x29b/0x37f0
[  426.758264][T25684]  ? __pfx_rtnl_newlink+0x10/0x10
[  426.758282][T25684]  ? lock_release+0x4b/0x3c0
[  426.758301][T25684]  ? bpf_lsm_capable+0x9/0x20
[  426.758316][T25684]  ? security_capable+0x7e/0x2c0
[  426.758340][T25684]  ? __pfx_rtnl_newlink+0x10/0x10
[  426.758358][T25684]  rtnetlink_rcv_msg+0x802/0xc00
[  426.758378][T25684]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  426.758402][T25684]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  426.758420][T25684]  ? ref_tracker_free+0x689/0x830
[  426.758438][T25684]  ? __pfx_ref_tracker_free+0x10/0x10
[  426.758459][T25684]  netlink_rcv_skb+0x226/0x4a0
[  426.758481][T25684]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  426.758500][T25684]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  426.758526][T25684]  ? netlink_deliver_tap+0x2e/0x1b0
[  426.758549][T25684]  netlink_unicast+0x7bb/0x940
[  426.758572][T25684]  netlink_sendmsg+0x813/0xb40
[  426.758596][T25684]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.758618][T25684]  ? aa_sock_msg_perm+0xf1/0x1b0
[  426.758634][T25684]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  426.758651][T25684]  ? __pfx_netlink_sendmsg+0x10/0x10
[  426.758672][T25684]  ____sys_sendmsg+0x9b9/0xa20
[  426.758696][T25684]  ? __pfx_____sys_sendmsg+0x10/0x10
[  426.758717][T25684]  ? lock_release+0x4b/0x3c0
[  426.758738][T25684]  ? import_iovec+0x73/0xa0
[  426.758759][T25684]  ___sys_sendmsg+0x2a5/0x360
[  426.758778][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.758801][T25684]  ? get_pid_task+0x20/0x1f0
[  426.758817][T25684]  ? __pfx____sys_sendmsg+0x10/0x10
[  426.758838][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.758864][T25684]  ? __fget_files+0x2a/0x420
[  426.758880][T25684]  ? __fget_files+0x3a2/0x420
[  426.758900][T25684]  __x64_sys_sendmsg+0x1b1/0x290
[  426.758921][T25684]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  426.758947][T25684]  ? rcu_is_watching+0x15/0xb0
[  426.758962][T25684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.758979][T25684]  do_syscall_64+0x174/0x580
[  426.758998][T25684]  ? trace_irq_disable+0x3b/0x140
[  426.759017][T25684]  ? clear_bhb_loop+0x40/0x90
[  426.759034][T25684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.759049][T25684] RIP: 0033:0x7f9755d9ce59
[  426.759064][T25684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.759078][T25684] RSP: 002b:00007f9756b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.759096][T25684] RAX: ffffffffffffffda RBX: 00007f9756015fa0 RCX: 00007f9755d9ce59
[  426.759107][T25684] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  426.759118][T25684] RBP: 00007f9756b85090 R08: 0000000000000000 R09: 0000000000000000
[  426.759128][T25684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  426.759138][T25684] R13: 00007f9756016038 R14: 00007f9756015fa0 R15: 00007fffff151328
[  426.759156][T25684]  </TASK>
[  427.363062][T25686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6862'.
[  427.381713][T25687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6862'.
[  427.431804][   T29] audit: type=1804 audit(1781747121.170:12): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6863" name="/newroot/131/memory.events" dev="tmpfs" ino=690 res=1 errno=0
[  427.439144][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6863'.
[  427.453925][   T29] audit: type=1800 audit(1781747121.170:13): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.453957][   T29] audit: type=1800 audit(1781747121.170:14): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.453984][   T29] audit: type=1800 audit(1781747121.170:15): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.454010][   T29] audit: type=1800 audit(1781747121.170:16): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.454037][   T29] audit: type=1800 audit(1781747121.170:17): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.454062][   T29] audit: type=1800 audit(1781747121.170:18): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.454088][   T29] audit: type=1800 audit(1781747121.170:19): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.454113][   T29] audit: type=1800 audit(1781747121.170:20): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.454138][   T29] audit: type=1800 audit(1781747121.170:21): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6863" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0
[  427.557767][T25698] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6865'.
[  429.363015][T25668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  429.981447][T25752] netlink: 'syz.2.6874': attribute type 12 has an invalid length.
[  430.611628][T25783] netlink: 'syz.0.6885': attribute type 1 has an invalid length.
[  430.626766][T25783] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6885'.
[  430.651494][T25780] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6883'.
[  430.674302][T25789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6884'.
[  430.816313][T25798] syzkaller1: entered promiscuous mode
[  430.825538][T25798] syzkaller1: entered allmulticast mode
[  430.849416][T25798] xt_CONNSECMARK: invalid mode: 254
[  430.862032][T25802] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.945658][T25802] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.962621][T25810] netlink: 'syz.0.6894': attribute type 12 has an invalid length.
[  431.022716][T25802] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.050922][T25806] tipc: Invalid UDP bearer configuration
[  431.050958][T25806] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  431.068957][T25819] netlink: 'syz.4.6896': attribute type 12 has an invalid length.
[  431.122332][T25802] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.251016][   T65] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.269921][   T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.284090][   T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.311951][   T65] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.388417][T25823] tipc: Can't bind to reserved service type 0
[  431.416265][T25825] FAULT_INJECTION: forcing a failure.
[  431.416265][T25825] name failslab, interval 1, probability 0, space 0, times 0
[  431.455922][T25825] CPU: 0 UID: 0 PID: 25825 Comm: syz.1.6898 Not tainted syzkaller #0 PREEMPT(full) 
[  431.455946][T25825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  431.455956][T25825] Call Trace:
[  431.455962][T25825]  <TASK>
[  431.455970][T25825]  dump_stack_lvl+0xe8/0x150
[  431.455992][T25825]  should_fail_ex+0x40c/0x560
[  431.456012][T25825]  should_failslab+0xa8/0x100
[  431.456034][T25825]  ? __kernfs_new_node+0xe6/0x980
[  431.456054][T25825]  kmem_cache_alloc_noprof+0x87/0x650
[  431.456075][T25825]  ? lock_acquire+0x5f/0x350
[  431.456098][T25825]  __kernfs_new_node+0xe6/0x980
[  431.456119][T25825]  ? kernfs_root+0x1c/0x230
[  431.456139][T25825]  ? __pfx___kernfs_new_node+0x10/0x10
[  431.456157][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.456174][T25825]  ? kernfs_root+0x1c/0x230
[  431.456192][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.456206][T25825]  ? kernfs_root+0x1c/0x230
[  431.456224][T25825]  ? lock_release+0x4b/0x3c0
[  431.456246][T25825]  ? kernfs_root+0x1c/0x230
[  431.456262][T25825]  ? kernfs_root+0x1c/0x230
[  431.456282][T25825]  kernfs_new_node+0xea/0x140
[  431.456304][T25825]  __kernfs_create_file+0x4b/0x2e0
[  431.456322][T25825]  sysfs_add_file_mode_ns+0x237/0x300
[  431.456342][T25825]  internal_create_group+0x679/0x1180
[  431.456365][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.456381][T25825]  ? lock_release+0x4b/0x3c0
[  431.456400][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.456415][T25825]  ? kernfs_root+0x1c/0x230
[  431.456434][T25825]  ? __pfx_internal_create_group+0x10/0x10
[  431.456454][T25825]  ? up_write+0x19f/0x4a0
[  431.456473][T25825]  sysfs_create_groups+0x59/0x120
[  431.456494][T25825]  device_add_attrs+0xde/0x600
[  431.456512][T25825]  ? __pfx_device_add_attrs+0x10/0x10
[  431.456528][T25825]  ? device_add_class_symlinks+0x21f/0x240
[  431.456545][T25825]  device_add+0x488/0xb80
[  431.456564][T25825]  netdev_register_kobject+0x178/0x310
[  431.456584][T25825]  register_netdevice+0x1433/0x1eb0
[  431.456605][T25825]  ? __pfx_register_netdevice+0x10/0x10
[  431.456618][T25825]  ? __kvmalloc_node_noprof+0x38b/0x890
[  431.456644][T25825]  br_dev_newlink+0x6a/0x150
[  431.456660][T25825]  ? rtnl_newlink_create+0x2fd/0xb00
[  431.456679][T25825]  ? __pfx_br_dev_newlink+0x10/0x10
[  431.456695][T25825]  rtnl_newlink_create+0x310/0xb00
[  431.456717][T25825]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  431.456737][T25825]  ? __pfx___mutex_lock+0x10/0x10
[  431.456759][T25825]  ? ns_capable+0x89/0xe0
[  431.456779][T25825]  rtnl_newlink+0x167f/0x1bd0
[  431.456805][T25825]  ? __pfx_rtnl_newlink+0x10/0x10
[  431.456822][T25825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.456850][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.456866][T25825]  ? trace_irq_enable+0x3b/0x140
[  431.456887][T25825]  ? nlmon_xmit+0xb0/0x100
[  431.456913][T25825]  ? kmem_cache_free+0x182/0x650
[  431.456938][T25825]  ? dev_hard_start_xmit+0x7c7/0x830
[  431.456959][T25825]  ? __dev_queue_xmit+0x29b/0x37f0
[  431.456974][T25825]  ? __dev_queue_xmit+0x29b/0x37f0
[  431.456988][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.457003][T25825]  ? __dev_queue_xmit+0x29b/0x37f0
[  431.457015][T25825]  ? trace_irq_enable+0x3b/0x140
[  431.457033][T25825]  ? __dev_queue_xmit+0x29b/0x37f0
[  431.457047][T25825]  ? __dev_queue_xmit+0x29b/0x37f0
[  431.457060][T25825]  ? __local_bh_enable_ip+0xd0/0x130
[  431.457078][T25825]  ? __dev_queue_xmit+0x29b/0x37f0
[  431.457097][T25825]  ? __pfx_rtnl_newlink+0x10/0x10
[  431.457114][T25825]  ? lock_release+0x4b/0x3c0
[  431.457133][T25825]  ? bpf_lsm_capable+0x9/0x20
[  431.457147][T25825]  ? security_capable+0x7e/0x2c0
[  431.457171][T25825]  ? __pfx_rtnl_newlink+0x10/0x10
[  431.457189][T25825]  rtnetlink_rcv_msg+0x802/0xc00
[  431.457210][T25825]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  431.457229][T25825]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  431.457246][T25825]  ? ref_tracker_free+0x689/0x830
[  431.457265][T25825]  ? __pfx_ref_tracker_free+0x10/0x10
[  431.457286][T25825]  netlink_rcv_skb+0x226/0x4a0
[  431.457309][T25825]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  431.457328][T25825]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  431.457354][T25825]  ? netlink_deliver_tap+0x2e/0x1b0
[  431.457377][T25825]  netlink_unicast+0x7bb/0x940
[  431.457399][T25825]  netlink_sendmsg+0x813/0xb40
[  431.457425][T25825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.457447][T25825]  ? aa_sock_msg_perm+0xf1/0x1b0
[  431.457463][T25825]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  431.457480][T25825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.457501][T25825]  ____sys_sendmsg+0x9b9/0xa20
[  431.457524][T25825]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.457545][T25825]  ? lock_release+0x4b/0x3c0
[  431.457565][T25825]  ? import_iovec+0x73/0xa0
[  431.457585][T25825]  ___sys_sendmsg+0x2a5/0x360
[  431.457604][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.457618][T25825]  ? get_pid_task+0x20/0x1f0
[  431.457634][T25825]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.457657][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.457681][T25825]  ? __fget_files+0x2a/0x420
[  431.457698][T25825]  ? __fget_files+0x3a2/0x420
[  431.457718][T25825]  __x64_sys_sendmsg+0x1b1/0x290
[  431.457740][T25825]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.457766][T25825]  ? rcu_is_watching+0x15/0xb0
[  431.457782][T25825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.457797][T25825]  do_syscall_64+0x174/0x580
[  431.457816][T25825]  ? trace_irq_disable+0x3b/0x140
[  431.457835][T25825]  ? clear_bhb_loop+0x40/0x90
[  431.457852][T25825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.457868][T25825] RIP: 0033:0x7f64a0d9ce59
[  431.457883][T25825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.457905][T25825] RSP: 002b:00007f64a1c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.457923][T25825] RAX: ffffffffffffffda RBX: 00007f64a1015fa0 RCX: 00007f64a0d9ce59
[  431.457935][T25825] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  431.457946][T25825] RBP: 00007f64a1c55090 R08: 0000000000000000 R09: 0000000000000000
[  431.457957][T25825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  431.457966][T25825] R13: 00007f64a1016038 R14: 00007f64a1015fa0 R15: 00007ffea043ba38
[  431.457984][T25825]  </TASK>
[  432.113010][T25834] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6902'.
[  432.266538][T25851] netlink: 'syz.4.6907': attribute type 12 has an invalid length.
[  432.455020][T25858] netlink: 'syz.1.6909': attribute type 58 has an invalid length.
[  432.472264][T25858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6909'.
[  432.588340][T25862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6910'.
[  432.659309][T25866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6912'.
[  432.741663][T25866] xt_CT: No such helper "snmp_trap"
[  432.759552][T25869] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6913'.
[  432.891777][T25881] FAULT_INJECTION: forcing a failure.
[  432.891777][T25881] name failslab, interval 1, probability 0, space 0, times 0
[  432.912490][T25881] CPU: 0 UID: 0 PID: 25881 Comm: syz.2.6917 Not tainted syzkaller #0 PREEMPT(full) 
[  432.912514][T25881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  432.912524][T25881] Call Trace:
[  432.912531][T25881]  <TASK>
[  432.912538][T25881]  dump_stack_lvl+0xe8/0x150
[  432.912560][T25881]  should_fail_ex+0x40c/0x560
[  432.912579][T25881]  should_failslab+0xa8/0x100
[  432.912601][T25881]  ? __kernfs_new_node+0xe6/0x980
[  432.912622][T25881]  kmem_cache_alloc_noprof+0x87/0x650
[  432.912641][T25881]  ? lock_acquire+0x5f/0x350
[  432.912665][T25881]  __kernfs_new_node+0xe6/0x980
[  432.912685][T25881]  ? kernfs_root+0x1c/0x230
[  432.912703][T25881]  ? __pfx___kernfs_new_node+0x10/0x10
[  432.912720][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.912736][T25881]  ? kernfs_root+0x1c/0x230
[  432.912753][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.912767][T25881]  ? kernfs_root+0x1c/0x230
[  432.912784][T25881]  ? lock_release+0x4b/0x3c0
[  432.912806][T25881]  ? kernfs_root+0x1c/0x230
[  432.912822][T25881]  ? kernfs_root+0x1c/0x230
[  432.912841][T25881]  kernfs_new_node+0xea/0x140
[  432.912861][T25881]  __kernfs_create_file+0x4b/0x2e0
[  432.912878][T25881]  sysfs_add_file_mode_ns+0x237/0x300
[  432.912897][T25881]  internal_create_group+0x679/0x1180
[  432.912919][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.912935][T25881]  ? lock_release+0x4b/0x3c0
[  432.912954][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.912967][T25881]  ? kernfs_root+0x1c/0x230
[  432.912985][T25881]  ? __pfx_internal_create_group+0x10/0x10
[  432.913004][T25881]  ? up_write+0x19f/0x4a0
[  432.913022][T25881]  sysfs_create_groups+0x59/0x120
[  432.913042][T25881]  device_add_attrs+0xde/0x600
[  432.913060][T25881]  ? __pfx_device_add_attrs+0x10/0x10
[  432.913077][T25881]  ? device_add_class_symlinks+0x21f/0x240
[  432.913092][T25881]  device_add+0x488/0xb80
[  432.913108][T25881]  netdev_register_kobject+0x178/0x310
[  432.913127][T25881]  register_netdevice+0x1433/0x1eb0
[  432.913150][T25881]  ? __pfx_register_netdevice+0x10/0x10
[  432.913173][T25881]  ? __kvmalloc_node_noprof+0x38b/0x890
[  432.913198][T25881]  br_dev_newlink+0x6a/0x150
[  432.913215][T25881]  ? rtnl_newlink_create+0x2fd/0xb00
[  432.913236][T25881]  ? __pfx_br_dev_newlink+0x10/0x10
[  432.913251][T25881]  rtnl_newlink_create+0x310/0xb00
[  432.913273][T25881]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  432.913294][T25881]  ? __pfx___mutex_lock+0x10/0x10
[  432.913317][T25881]  ? ns_capable+0x89/0xe0
[  432.913338][T25881]  rtnl_newlink+0x167f/0x1bd0
[  432.913363][T25881]  ? __pfx_rtnl_newlink+0x10/0x10
[  432.913380][T25881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.913409][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.913424][T25881]  ? trace_irq_enable+0x3b/0x140
[  432.913445][T25881]  ? nlmon_xmit+0xb0/0x100
[  432.913462][T25881]  ? kmem_cache_free+0x182/0x650
[  432.913484][T25881]  ? dev_hard_start_xmit+0x7c7/0x830
[  432.913506][T25881]  ? __dev_queue_xmit+0x29b/0x37f0
[  432.913521][T25881]  ? __dev_queue_xmit+0x29b/0x37f0
[  432.913534][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.913549][T25881]  ? __dev_queue_xmit+0x29b/0x37f0
[  432.913562][T25881]  ? trace_irq_enable+0x3b/0x140
[  432.913580][T25881]  ? __dev_queue_xmit+0x29b/0x37f0
[  432.913593][T25881]  ? __dev_queue_xmit+0x29b/0x37f0
[  432.913606][T25881]  ? __local_bh_enable_ip+0xd0/0x130
[  432.913625][T25881]  ? __dev_queue_xmit+0x29b/0x37f0
[  432.913644][T25881]  ? __pfx_rtnl_newlink+0x10/0x10
[  432.913660][T25881]  ? lock_release+0x4b/0x3c0
[  432.913678][T25881]  ? bpf_lsm_capable+0x9/0x20
[  432.913691][T25881]  ? security_capable+0x7e/0x2c0
[  432.913714][T25881]  ? __pfx_rtnl_newlink+0x10/0x10
[  432.913731][T25881]  rtnetlink_rcv_msg+0x802/0xc00
[  432.913749][T25881]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  432.913766][T25881]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  432.913782][T25881]  ? ref_tracker_free+0x689/0x830
[  432.913808][T25881]  ? __pfx_ref_tracker_free+0x10/0x10
[  432.913828][T25881]  netlink_rcv_skb+0x226/0x4a0
[  432.913850][T25881]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  432.913870][T25881]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  432.913895][T25881]  ? netlink_deliver_tap+0x2e/0x1b0
[  432.913916][T25881]  netlink_unicast+0x7bb/0x940
[  432.913940][T25881]  netlink_sendmsg+0x813/0xb40
[  432.913964][T25881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.913987][T25881]  ? aa_sock_msg_perm+0xf1/0x1b0
[  432.914003][T25881]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  432.914021][T25881]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.914042][T25881]  ____sys_sendmsg+0x9b9/0xa20
[  432.914067][T25881]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.914089][T25881]  ? lock_release+0x4b/0x3c0
[  432.914111][T25881]  ? import_iovec+0x73/0xa0
[  432.914132][T25881]  ___sys_sendmsg+0x2a5/0x360
[  432.914158][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.914173][T25881]  ? get_pid_task+0x20/0x1f0
[  432.914189][T25881]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.914211][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.914237][T25881]  ? __fget_files+0x2a/0x420
[  432.914254][T25881]  ? __fget_files+0x3a2/0x420
[  432.914274][T25881]  __x64_sys_sendmsg+0x1b1/0x290
[  432.914295][T25881]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  432.914321][T25881]  ? rcu_is_watching+0x15/0xb0
[  432.914337][T25881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.914353][T25881]  do_syscall_64+0x174/0x580
[  432.914373][T25881]  ? trace_irq_disable+0x3b/0x140
[  432.914393][T25881]  ? clear_bhb_loop+0x40/0x90
[  432.914409][T25881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.914425][T25881] RIP: 0033:0x7f9e0419ce59
[  432.914441][T25881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  432.914454][T25881] RSP: 002b:00007f9e023f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  432.914473][T25881] RAX: ffffffffffffffda RBX: 00007f9e04415fa0 RCX: 00007f9e0419ce59
[  432.914485][T25881] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  432.914495][T25881] RBP: 00007f9e023f6090 R08: 0000000000000000 R09: 0000000000000000
[  432.914505][T25881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  432.914515][T25881] R13: 00007f9e04416038 R14: 00007f9e04415fa0 R15: 00007ffe855693d8
[  432.914532][T25881]  </TASK>
[  433.530702][T25883] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.551752][T25887] netlink: 'syz.2.6920': attribute type 178 has an invalid length.
[  433.603742][T25883] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.635650][T25891] netlink: 'syz.2.6921': attribute type 49 has an invalid length.
[  433.647839][T25894] netlink: 'syz.3.6922': attribute type 12 has an invalid length.
[  433.652923][T25898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6923'.
[  433.679128][T25883] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.780072][T25883] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.876659][ T1121] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.921491][T25910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6929'.
[  433.930892][   T65] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  433.958130][   T65] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  433.971587][   T65] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.026186][T25920] FAULT_INJECTION: forcing a failure.
[  434.026186][T25920] name failslab, interval 1, probability 0, space 0, times 0
[  434.039583][T25920] CPU: 0 UID: 0 PID: 25920 Comm: syz.2.6932 Not tainted syzkaller #0 PREEMPT(full) 
[  434.039606][T25920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  434.039615][T25920] Call Trace:
[  434.039622][T25920]  <TASK>
[  434.039629][T25920]  dump_stack_lvl+0xe8/0x150
[  434.039651][T25920]  should_fail_ex+0x40c/0x560
[  434.039670][T25920]  should_failslab+0xa8/0x100
[  434.039691][T25920]  __kmalloc_cache_noprof+0x88/0x660
[  434.039711][T25920]  ? __pfx_dev_set_name+0x10/0x10
[  434.039731][T25920]  ? device_add+0xb6/0xb80
[  434.039747][T25920]  device_add+0xb6/0xb80
[  434.039761][T25920]  ? netdev_register_kobject+0x170/0x310
[  434.039780][T25920]  netdev_register_kobject+0x178/0x310
[  434.039798][T25920]  register_netdevice+0x1433/0x1eb0
[  434.039819][T25920]  ? __pfx_register_netdevice+0x10/0x10
[  434.039833][T25920]  ? __kvmalloc_node_noprof+0x38b/0x890
[  434.039859][T25920]  br_dev_newlink+0x6a/0x150
[  434.039875][T25920]  ? rtnl_newlink_create+0x2fd/0xb00
[  434.039895][T25920]  ? __pfx_br_dev_newlink+0x10/0x10
[  434.039911][T25920]  rtnl_newlink_create+0x310/0xb00
[  434.039935][T25920]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  434.039957][T25920]  ? __pfx___mutex_lock+0x10/0x10
[  434.039981][T25920]  ? ns_capable+0x89/0xe0
[  434.040001][T25920]  rtnl_newlink+0x167f/0x1bd0
[  434.040026][T25920]  ? __pfx_rtnl_newlink+0x10/0x10
[  434.040043][T25920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.040072][T25920]  ? rcu_is_watching+0x15/0xb0
[  434.040088][T25920]  ? trace_irq_enable+0x3b/0x140
[  434.040117][T25920]  ? nlmon_xmit+0xb0/0x100
[  434.040135][T25920]  ? kmem_cache_free+0x182/0x650
[  434.040159][T25920]  ? dev_hard_start_xmit+0x7c7/0x830
[  434.040180][T25920]  ? __dev_queue_xmit+0x29b/0x37f0
[  434.040196][T25920]  ? __dev_queue_xmit+0x29b/0x37f0
[  434.040210][T25920]  ? rcu_is_watching+0x15/0xb0
[  434.040224][T25920]  ? __dev_queue_xmit+0x29b/0x37f0
[  434.040237][T25920]  ? trace_irq_enable+0x3b/0x140
[  434.040256][T25920]  ? __dev_queue_xmit+0x29b/0x37f0
[  434.040272][T25920]  ? __dev_queue_xmit+0x29b/0x37f0
[  434.040285][T25920]  ? __local_bh_enable_ip+0xd0/0x130
[  434.040304][T25920]  ? __dev_queue_xmit+0x29b/0x37f0
[  434.040323][T25920]  ? __pfx_rtnl_newlink+0x10/0x10
[  434.040341][T25920]  ? lock_release+0x4b/0x3c0
[  434.040360][T25920]  ? bpf_lsm_capable+0x9/0x20
[  434.040374][T25920]  ? security_capable+0x7e/0x2c0
[  434.040397][T25920]  ? __pfx_rtnl_newlink+0x10/0x10
[  434.040415][T25920]  rtnetlink_rcv_msg+0x802/0xc00
[  434.040435][T25920]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  434.040453][T25920]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  434.040470][T25920]  ? ref_tracker_free+0x689/0x830
[  434.040490][T25920]  ? __pfx_ref_tracker_free+0x10/0x10
[  434.040510][T25920]  netlink_rcv_skb+0x226/0x4a0
[  434.040532][T25920]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  434.040551][T25920]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  434.040576][T25920]  ? netlink_deliver_tap+0x2e/0x1b0
[  434.040598][T25920]  netlink_unicast+0x7bb/0x940
[  434.040621][T25920]  netlink_sendmsg+0x813/0xb40
[  434.040646][T25920]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.040668][T25920]  ? aa_sock_msg_perm+0xf1/0x1b0
[  434.040683][T25920]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  434.040700][T25920]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.040721][T25920]  ____sys_sendmsg+0x9b9/0xa20
[  434.040745][T25920]  ? __pfx_____sys_sendmsg+0x10/0x10
[  434.040766][T25920]  ? lock_release+0x4b/0x3c0
[  434.040787][T25920]  ? import_iovec+0x73/0xa0
[  434.040806][T25920]  ___sys_sendmsg+0x2a5/0x360
[  434.040826][T25920]  ? rcu_is_watching+0x15/0xb0
[  434.040840][T25920]  ? get_pid_task+0x20/0x1f0
[  434.040855][T25920]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.040877][T25920]  ? rcu_is_watching+0x15/0xb0
[  434.040901][T25920]  ? __fget_files+0x2a/0x420
[  434.040918][T25920]  ? __fget_files+0x3a2/0x420
[  434.040938][T25920]  __x64_sys_sendmsg+0x1b1/0x290
[  434.040960][T25920]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  434.040985][T25920]  ? rcu_is_watching+0x15/0xb0
[  434.041001][T25920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.041016][T25920]  do_syscall_64+0x174/0x580
[  434.041034][T25920]  ? trace_irq_disable+0x3b/0x140
[  434.041053][T25920]  ? clear_bhb_loop+0x40/0x90
[  434.041069][T25920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.041085][T25920] RIP: 0033:0x7f9e0419ce59
[  434.041106][T25920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.041119][T25920] RSP: 002b:00007f9e023f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.041137][T25920] RAX: ffffffffffffffda RBX: 00007f9e04415fa0 RCX: 00007f9e0419ce59
[  434.041149][T25920] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  434.041160][T25920] RBP: 00007f9e023f6090 R08: 0000000000000000 R09: 0000000000000000
[  434.041170][T25920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  434.041179][T25920] R13: 00007f9e04416038 R14: 00007f9e04415fa0 R15: 00007ffe855693d8
[  434.041197][T25920]  </TASK>
[  434.656326][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'.
[  434.694968][T25936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6938'.
[  434.698599][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6937'.
[  434.796928][    C0] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  434.853723][T25944] FAULT_INJECTION: forcing a failure.
[  434.853723][T25944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.867135][T25944] CPU: 0 UID: 0 PID: 25944 Comm: syz.0.6941 Not tainted syzkaller #0 PREEMPT(full) 
[  434.867157][T25944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  434.867168][T25944] Call Trace:
[  434.867175][T25944]  <TASK>
[  434.867181][T25944]  dump_stack_lvl+0xe8/0x150
[  434.867204][T25944]  should_fail_ex+0x40c/0x560
[  434.867224][T25944]  _copy_from_user+0x2d/0xb0
[  434.867244][T25944]  ___sys_recvmsg+0x173/0x5a0
[  434.867268][T25944]  ? __pfx____sys_recvmsg+0x10/0x10
[  434.867289][T25944]  ? __fget_files+0x2a/0x420
[  434.867305][T25944]  ? rcu_is_watching+0x15/0xb0
[  434.867325][T25944]  ? rcu_is_watching+0x15/0xb0
[  434.867339][T25944]  ? lock_release+0x4b/0x3c0
[  434.867361][T25944]  ? __might_fault+0xcb/0x130
[  434.867380][T25944]  do_recvmmsg+0x31a/0x7f0
[  434.867403][T25944]  ? __pfx_do_recvmmsg+0x10/0x10
[  434.867424][T25944]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  434.867441][T25944]  ? __fget_files+0x3a2/0x420
[  434.867456][T25944]  __x64_sys_recvmmsg+0x198/0x250
[  434.867474][T25944]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  434.867492][T25944]  ? rcu_is_watching+0x15/0xb0
[  434.867507][T25944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.867520][T25944]  do_syscall_64+0x174/0x580
[  434.867536][T25944]  ? trace_irq_disable+0x3b/0x140
[  434.867552][T25944]  ? clear_bhb_loop+0x40/0x90
[  434.867566][T25944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.867577][T25944] RIP: 0033:0x7f9755d9ce59
[  434.867590][T25944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.867601][T25944] RSP: 002b:00007f9756b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  434.867615][T25944] RAX: ffffffffffffffda RBX: 00007f9756015fa0 RCX: 00007f9755d9ce59
[  434.867624][T25944] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003
[  434.867633][T25944] RBP: 00007f9756b85090 R08: 0000000000000000 R09: 0000000000000000
[  434.867641][T25944] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002
[  434.867649][T25944] R13: 00007f9756016038 R14: 00007f9756015fa0 R15: 00007fffff151328
[  434.867663][T25944]  </TASK>
[  435.549837][T25949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.568515][T25949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.649038][   T53] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.665682][   T53] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.727016][   T53] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.763124][   T53] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.021358][T25990] bond1: left promiscuous mode
[  436.308800][T26009] FAULT_INJECTION: forcing a failure.
[  436.308800][T26009] name failslab, interval 1, probability 0, space 0, times 0
[  436.321636][T26009] CPU: 1 UID: 0 PID: 26009 Comm: syz.4.6963 Not tainted syzkaller #0 PREEMPT(full) 
[  436.321653][T26009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  436.321660][T26009] Call Trace:
[  436.321664][T26009]  <TASK>
[  436.321669][T26009]  dump_stack_lvl+0xe8/0x150
[  436.321684][T26009]  should_fail_ex+0x40c/0x560
[  436.321696][T26009]  should_failslab+0xa8/0x100
[  436.321710][T26009]  ? __kernfs_new_node+0xe6/0x980
[  436.321723][T26009]  kmem_cache_alloc_noprof+0x87/0x650
[  436.321736][T26009]  ? lock_acquire+0x5f/0x350
[  436.321750][T26009]  __kernfs_new_node+0xe6/0x980
[  436.321763][T26009]  ? kernfs_root+0x1c/0x230
[  436.321774][T26009]  ? __pfx___kernfs_new_node+0x10/0x10
[  436.321785][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.321795][T26009]  ? kernfs_root+0x1c/0x230
[  436.321806][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.321814][T26009]  ? kernfs_root+0x1c/0x230
[  436.321824][T26009]  ? lock_release+0x4b/0x3c0
[  436.321837][T26009]  ? kernfs_root+0x1c/0x230
[  436.321847][T26009]  ? kernfs_root+0x1c/0x230
[  436.321859][T26009]  kernfs_new_node+0xea/0x140
[  436.321871][T26009]  __kernfs_create_file+0x4b/0x2e0
[  436.321880][T26009]  sysfs_add_file_mode_ns+0x237/0x300
[  436.321892][T26009]  internal_create_group+0x679/0x1180
[  436.321904][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.321913][T26009]  ? lock_release+0x4b/0x3c0
[  436.321926][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.321936][T26009]  ? kernfs_root+0x1c/0x230
[  436.321947][T26009]  ? __pfx_internal_create_group+0x10/0x10
[  436.321959][T26009]  ? up_write+0x19f/0x4a0
[  436.321970][T26009]  sysfs_create_groups+0x59/0x120
[  436.321981][T26009]  device_add_attrs+0xde/0x600
[  436.321992][T26009]  ? __pfx_device_add_attrs+0x10/0x10
[  436.322001][T26009]  ? device_add_class_symlinks+0x21f/0x240
[  436.322011][T26009]  device_add+0x488/0xb80
[  436.322020][T26009]  netdev_register_kobject+0x178/0x310
[  436.322032][T26009]  register_netdevice+0x1433/0x1eb0
[  436.322044][T26009]  ? __pfx_register_netdevice+0x10/0x10
[  436.322052][T26009]  ? __kvmalloc_node_noprof+0x38b/0x890
[  436.322068][T26009]  br_dev_newlink+0x6a/0x150
[  436.322078][T26009]  ? rtnl_newlink_create+0x2fd/0xb00
[  436.322092][T26009]  ? __pfx_br_dev_newlink+0x10/0x10
[  436.322101][T26009]  rtnl_newlink_create+0x310/0xb00
[  436.322116][T26009]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  436.322129][T26009]  ? __pfx___mutex_lock+0x10/0x10
[  436.322144][T26009]  ? ns_capable+0x89/0xe0
[  436.322157][T26009]  rtnl_newlink+0x167f/0x1bd0
[  436.322172][T26009]  ? __pfx_rtnl_newlink+0x10/0x10
[  436.322182][T26009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.322198][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.322207][T26009]  ? trace_irq_enable+0x3b/0x140
[  436.322221][T26009]  ? nlmon_xmit+0xb0/0x100
[  436.322232][T26009]  ? kmem_cache_free+0x182/0x650
[  436.322246][T26009]  ? dev_hard_start_xmit+0x7c7/0x830
[  436.322260][T26009]  ? __dev_queue_xmit+0x29b/0x37f0
[  436.322269][T26009]  ? __dev_queue_xmit+0x29b/0x37f0
[  436.322277][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.322285][T26009]  ? __dev_queue_xmit+0x29b/0x37f0
[  436.322293][T26009]  ? trace_irq_enable+0x3b/0x140
[  436.322304][T26009]  ? __dev_queue_xmit+0x29b/0x37f0
[  436.322312][T26009]  ? __dev_queue_xmit+0x29b/0x37f0
[  436.322320][T26009]  ? __local_bh_enable_ip+0xd0/0x130
[  436.322332][T26009]  ? __dev_queue_xmit+0x29b/0x37f0
[  436.322343][T26009]  ? __pfx_rtnl_newlink+0x10/0x10
[  436.322354][T26009]  ? lock_release+0x4b/0x3c0
[  436.322365][T26009]  ? bpf_lsm_capable+0x9/0x20
[  436.322374][T26009]  ? security_capable+0x7e/0x2c0
[  436.322389][T26009]  ? __pfx_rtnl_newlink+0x10/0x10
[  436.322400][T26009]  rtnetlink_rcv_msg+0x802/0xc00
[  436.322412][T26009]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  436.322430][T26009]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  436.322441][T26009]  ? ref_tracker_free+0x689/0x830
[  436.322452][T26009]  ? __pfx_ref_tracker_free+0x10/0x10
[  436.322464][T26009]  netlink_rcv_skb+0x226/0x4a0
[  436.322478][T26009]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  436.322490][T26009]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.322506][T26009]  ? netlink_deliver_tap+0x2e/0x1b0
[  436.322525][T26009]  netlink_unicast+0x7bb/0x940
[  436.322547][T26009]  netlink_sendmsg+0x813/0xb40
[  436.322571][T26009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.322593][T26009]  ? aa_sock_msg_perm+0xf1/0x1b0
[  436.322609][T26009]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.322623][T26009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.322637][T26009]  ____sys_sendmsg+0x9b9/0xa20
[  436.322652][T26009]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.322666][T26009]  ? lock_release+0x4b/0x3c0
[  436.322679][T26009]  ? import_iovec+0x73/0xa0
[  436.322692][T26009]  ___sys_sendmsg+0x2a5/0x360
[  436.322704][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.322713][T26009]  ? get_pid_task+0x20/0x1f0
[  436.322722][T26009]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.322735][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.322750][T26009]  ? __fget_files+0x2a/0x420
[  436.322760][T26009]  ? __fget_files+0x3a2/0x420
[  436.322772][T26009]  __x64_sys_sendmsg+0x1b1/0x290
[  436.322785][T26009]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  436.322801][T26009]  ? rcu_is_watching+0x15/0xb0
[  436.322810][T26009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.322819][T26009]  do_syscall_64+0x174/0x580
[  436.322831][T26009]  ? trace_irq_disable+0x3b/0x140
[  436.322843][T26009]  ? clear_bhb_loop+0x40/0x90
[  436.322853][T26009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.322862][T26009] RIP: 0033:0x7f865919ce59
[  436.322872][T26009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.322883][T26009] RSP: 002b:00007f865a0dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.322894][T26009] RAX: ffffffffffffffda RBX: 00007f8659415fa0 RCX: 00007f865919ce59
[  436.322901][T26009] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  436.322907][T26009] RBP: 00007f865a0dd090 R08: 0000000000000000 R09: 0000000000000000
[  436.322913][T26009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  436.322919][T26009] R13: 00007f8659416038 R14: 00007f8659415fa0 R15: 00007ffc6995ec78
[  436.322932][T26009]  </TASK>
[  437.033967][T26014] syzkaller1: entered promiscuous mode
[  437.046520][T26014] syzkaller1: entered allmulticast mode
[  437.099636][T26014] xt_CONNSECMARK: invalid mode: 254
[  437.140240][T26026] tunl0: Caught tx_queue_len zero misconfig
[  437.170164][T26031] netlink: 'syz.2.6973': attribute type 12 has an invalid length.
[  437.224822][T26035] FAULT_INJECTION: forcing a failure.
[  437.224822][T26035] name failslab, interval 1, probability 0, space 0, times 0
[  437.237743][T26035] CPU: 1 UID: 0 PID: 26035 Comm: syz.0.6975 Not tainted syzkaller #0 PREEMPT(full) 
[  437.237767][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  437.237777][T26035] Call Trace:
[  437.237783][T26035]  <TASK>
[  437.237790][T26035]  dump_stack_lvl+0xe8/0x150
[  437.237813][T26035]  should_fail_ex+0x40c/0x560
[  437.237832][T26035]  should_failslab+0xa8/0x100
[  437.237854][T26035]  ? __kernfs_new_node+0xe6/0x980
[  437.237875][T26035]  kmem_cache_alloc_noprof+0x87/0x650
[  437.237894][T26035]  ? lock_acquire+0x5f/0x350
[  437.237919][T26035]  __kernfs_new_node+0xe6/0x980
[  437.237940][T26035]  ? kernfs_root+0x1c/0x230
[  437.237959][T26035]  ? __pfx___kernfs_new_node+0x10/0x10
[  437.237977][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.237993][T26035]  ? kernfs_root+0x1c/0x230
[  437.238011][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.238026][T26035]  ? kernfs_root+0x1c/0x230
[  437.238043][T26035]  ? lock_release+0x4b/0x3c0
[  437.238064][T26035]  ? kernfs_root+0x1c/0x230
[  437.238080][T26035]  ? kernfs_root+0x1c/0x230
[  437.238098][T26035]  kernfs_new_node+0xea/0x140
[  437.238119][T26035]  __kernfs_create_file+0x4b/0x2e0
[  437.238136][T26035]  sysfs_add_file_mode_ns+0x237/0x300
[  437.238156][T26035]  internal_create_group+0x679/0x1180
[  437.238178][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.238194][T26035]  ? lock_release+0x4b/0x3c0
[  437.238213][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.238227][T26035]  ? kernfs_root+0x1c/0x230
[  437.238243][T26035]  ? __pfx_internal_create_group+0x10/0x10
[  437.238263][T26035]  ? up_write+0x19f/0x4a0
[  437.238281][T26035]  sysfs_create_groups+0x59/0x120
[  437.238301][T26035]  device_add_attrs+0xde/0x600
[  437.238320][T26035]  ? __pfx_device_add_attrs+0x10/0x10
[  437.238335][T26035]  ? device_add_class_symlinks+0x21f/0x240
[  437.238353][T26035]  device_add+0x488/0xb80
[  437.238368][T26035]  netdev_register_kobject+0x178/0x310
[  437.238388][T26035]  register_netdevice+0x1433/0x1eb0
[  437.238417][T26035]  ? __pfx_register_netdevice+0x10/0x10
[  437.238429][T26035]  ? __kvmalloc_node_noprof+0x38b/0x890
[  437.238455][T26035]  br_dev_newlink+0x6a/0x150
[  437.238471][T26035]  ? rtnl_newlink_create+0x2fd/0xb00
[  437.238491][T26035]  ? __pfx_br_dev_newlink+0x10/0x10
[  437.238507][T26035]  rtnl_newlink_create+0x310/0xb00
[  437.238530][T26035]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  437.238552][T26035]  ? __pfx___mutex_lock+0x10/0x10
[  437.238577][T26035]  ? ns_capable+0x89/0xe0
[  437.238598][T26035]  rtnl_newlink+0x167f/0x1bd0
[  437.238623][T26035]  ? __pfx_rtnl_newlink+0x10/0x10
[  437.238640][T26035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.238666][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.238682][T26035]  ? trace_irq_enable+0x3b/0x140
[  437.238704][T26035]  ? nlmon_xmit+0xb0/0x100
[  437.238721][T26035]  ? kmem_cache_free+0x182/0x650
[  437.238746][T26035]  ? dev_hard_start_xmit+0x7c7/0x830
[  437.238768][T26035]  ? __dev_queue_xmit+0x29b/0x37f0
[  437.238783][T26035]  ? __dev_queue_xmit+0x29b/0x37f0
[  437.238798][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.238813][T26035]  ? __dev_queue_xmit+0x29b/0x37f0
[  437.238827][T26035]  ? trace_irq_enable+0x3b/0x140
[  437.238845][T26035]  ? __dev_queue_xmit+0x29b/0x37f0
[  437.238859][T26035]  ? __dev_queue_xmit+0x29b/0x37f0
[  437.238872][T26035]  ? __local_bh_enable_ip+0xd0/0x130
[  437.238891][T26035]  ? __dev_queue_xmit+0x29b/0x37f0
[  437.238910][T26035]  ? __pfx_rtnl_newlink+0x10/0x10
[  437.238928][T26035]  ? lock_release+0x4b/0x3c0
[  437.238947][T26035]  ? bpf_lsm_capable+0x9/0x20
[  437.238962][T26035]  ? security_capable+0x7e/0x2c0
[  437.238985][T26035]  ? __pfx_rtnl_newlink+0x10/0x10
[  437.239002][T26035]  rtnetlink_rcv_msg+0x802/0xc00
[  437.239022][T26035]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  437.239041][T26035]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  437.239060][T26035]  ? ref_tracker_free+0x689/0x830
[  437.239078][T26035]  ? __pfx_ref_tracker_free+0x10/0x10
[  437.239100][T26035]  netlink_rcv_skb+0x226/0x4a0
[  437.239122][T26035]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  437.239142][T26035]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.239168][T26035]  ? netlink_deliver_tap+0x2e/0x1b0
[  437.239190][T26035]  netlink_unicast+0x7bb/0x940
[  437.239213][T26035]  netlink_sendmsg+0x813/0xb40
[  437.239237][T26035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.239259][T26035]  ? aa_sock_msg_perm+0xf1/0x1b0
[  437.239274][T26035]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.239293][T26035]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.239314][T26035]  ____sys_sendmsg+0x9b9/0xa20
[  437.239339][T26035]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.239362][T26035]  ? lock_release+0x4b/0x3c0
[  437.239383][T26035]  ? import_iovec+0x73/0xa0
[  437.239412][T26035]  ___sys_sendmsg+0x2a5/0x360
[  437.239431][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.239444][T26035]  ? get_pid_task+0x20/0x1f0
[  437.239458][T26035]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.239479][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.239503][T26035]  ? __fget_files+0x2a/0x420
[  437.239519][T26035]  ? __fget_files+0x3a2/0x420
[  437.239537][T26035]  __x64_sys_sendmsg+0x1b1/0x290
[  437.239557][T26035]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.239583][T26035]  ? rcu_is_watching+0x15/0xb0
[  437.239598][T26035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.239613][T26035]  do_syscall_64+0x174/0x580
[  437.239631][T26035]  ? trace_irq_disable+0x3b/0x140
[  437.239650][T26035]  ? clear_bhb_loop+0x40/0x90
[  437.239666][T26035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.239680][T26035] RIP: 0033:0x7f9755d9ce59
[  437.239694][T26035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.239707][T26035] RSP: 002b:00007f9756b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.239723][T26035] RAX: ffffffffffffffda RBX: 00007f9756015fa0 RCX: 00007f9755d9ce59
[  437.239733][T26035] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  437.239742][T26035] RBP: 00007f9756b85090 R08: 0000000000000000 R09: 0000000000000000
[  437.239751][T26035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  437.239760][T26035] R13: 00007f9756016038 R14: 00007f9756015fa0 R15: 00007fffff151328
[  437.239777][T26035]  </TASK>
[  437.933427][T26038] __nla_validate_parse: 7 callbacks suppressed
[  437.933447][T26038] netlink: 34 bytes leftover after parsing attributes in process `syz.4.6976'.
[  437.955992][T26045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6978'.
[  438.077284][T26045] xt_CT: No such helper "snmp_trap"
[  438.128988][T26055] syzkaller0: entered promiscuous mode
[  438.134508][T26055] syzkaller0: entered allmulticast mode
[  438.255383][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6986'.
[  438.323624][T26065] xt_cgroup: path and classid specified
[  438.358924][T26073] xt_CT: You must specify a L4 protocol and not use inversions on it
[  438.399647][T26075] netlink: 'syz.4.6992': attribute type 12 has an invalid length.
[  438.485385][T26072] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  438.596418][T26086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6993'.
[  438.754176][T26097] batadv1: left allmulticast mode
[  438.767688][T26097] batadv1: left promiscuous mode
[  438.778928][T26097] bridge0: port 1(batadv1) entered disabled state
[  438.790635][T26097] bridge_slave_1: left allmulticast mode
[  438.801854][T26097] bridge_slave_1: left promiscuous mode
[  438.808352][T26097] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.934114][T26102] syzkaller1: entered promiscuous mode
[  438.945123][T26102] syzkaller1: entered allmulticast mode
[  438.992106][T26111] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7002'.
[  439.061881][T26110] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  439.077715][T26118] netlink: 'syz.0.7006': attribute type 1 has an invalid length.
[  439.152851][T26118] 8021q: adding VLAN 0 to HW filter on device bond5
[  439.164455][T26126] vlan3: entered allmulticast mode
[  439.174978][T26120] netlink: 'syz.4.7007': attribute type 12 has an invalid length.
[  439.262300][T26131] xt_hashlimit: size too large, truncated to 1048576
[  439.322498][T26133] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  439.361295][T26139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7013'.
[  439.466299][T26143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7014'.
[  439.600187][T26154] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7020'.
[  439.632750][T26154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7020'.
[  439.634184][T26161] xt_ipcomp: unknown flags 1D
[  439.651558][T26154] netlink: 'syz.1.7020': attribute type 3 has an invalid length.
[  439.660815][T26154] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7020'.
[  439.717729][T26164] netlink: ct family unspecified
[  439.751677][T26164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.913924][T26180] netlink: 'syz.1.7029': attribute type 1 has an invalid length.
[  439.950778][T26180] 8021q: adding VLAN 0 to HW filter on device bond1
[  439.962393][T26152] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  439.993176][T26180] bond1: (slave macvlan0): Enslaving as an active interface with a down link
[  440.125848][T26201] netlink: 'syz.0.7033': attribute type 1 has an invalid length.
[  440.145915][T26201] 8021q: adding VLAN 0 to HW filter on device bond6
[  440.170760][T26201] bond6: (slave veth5): Enslaving as an active interface with a down link
[  440.188283][T26201] bond6 (unregistering): (slave veth5): Releasing active interface
[  440.200356][T26201] bond6 (unregistering): Released all slaves
[  440.318532][T26214] x_tables: duplicate underflow at hook 1
[  440.395548][T26221] FAULT_INJECTION: forcing a failure.
[  440.395548][T26221] name failslab, interval 1, probability 0, space 0, times 0
[  440.411159][T26221] CPU: 1 UID: 0 PID: 26221 Comm: syz.1.7042 Not tainted syzkaller #0 PREEMPT(full) 
[  440.411181][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  440.411191][T26221] Call Trace:
[  440.411197][T26221]  <TASK>
[  440.411205][T26221]  dump_stack_lvl+0xe8/0x150
[  440.411226][T26221]  should_fail_ex+0x40c/0x560
[  440.411246][T26221]  should_failslab+0xa8/0x100
[  440.411267][T26221]  ? __kernfs_new_node+0xe6/0x980
[  440.411288][T26221]  kmem_cache_alloc_noprof+0x87/0x650
[  440.411308][T26221]  ? lock_acquire+0x5f/0x350
[  440.411331][T26221]  __kernfs_new_node+0xe6/0x980
[  440.411353][T26221]  ? kernfs_root+0x1c/0x230
[  440.411371][T26221]  ? __pfx___kernfs_new_node+0x10/0x10
[  440.411390][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.411406][T26221]  ? kernfs_root+0x1c/0x230
[  440.411424][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.411439][T26221]  ? kernfs_root+0x1c/0x230
[  440.411457][T26221]  ? lock_release+0x4b/0x3c0
[  440.411478][T26221]  ? kernfs_root+0x1c/0x230
[  440.411496][T26221]  ? kernfs_root+0x1c/0x230
[  440.411516][T26221]  kernfs_new_node+0xea/0x140
[  440.411537][T26221]  __kernfs_create_file+0x4b/0x2e0
[  440.411555][T26221]  sysfs_add_file_mode_ns+0x237/0x300
[  440.411575][T26221]  internal_create_group+0x679/0x1180
[  440.411598][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.411621][T26221]  ? lock_release+0x4b/0x3c0
[  440.411640][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.411655][T26221]  ? kernfs_root+0x1c/0x230
[  440.411673][T26221]  ? __pfx_internal_create_group+0x10/0x10
[  440.411693][T26221]  ? up_write+0x19f/0x4a0
[  440.411712][T26221]  sysfs_create_groups+0x59/0x120
[  440.411731][T26221]  device_add_attrs+0xde/0x600
[  440.411749][T26221]  ? __pfx_device_add_attrs+0x10/0x10
[  440.411767][T26221]  ? device_add_class_symlinks+0x21f/0x240
[  440.411784][T26221]  device_add+0x488/0xb80
[  440.411801][T26221]  netdev_register_kobject+0x178/0x310
[  440.411821][T26221]  register_netdevice+0x1433/0x1eb0
[  440.411842][T26221]  ? __pfx_register_netdevice+0x10/0x10
[  440.411857][T26221]  ? __kvmalloc_node_noprof+0x38b/0x890
[  440.411884][T26221]  br_dev_newlink+0x6a/0x150
[  440.411901][T26221]  ? rtnl_newlink_create+0x2fd/0xb00
[  440.411922][T26221]  ? __pfx_br_dev_newlink+0x10/0x10
[  440.411939][T26221]  rtnl_newlink_create+0x310/0xb00
[  440.411964][T26221]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  440.411986][T26221]  ? __pfx___mutex_lock+0x10/0x10
[  440.412013][T26221]  ? ns_capable+0x89/0xe0
[  440.412033][T26221]  rtnl_newlink+0x167f/0x1bd0
[  440.412059][T26221]  ? __pfx_rtnl_newlink+0x10/0x10
[  440.412077][T26221]  ? unwind_next_frame+0x8f/0x2550
[  440.412094][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412111][T26221]  ? is_bpf_text_address+0x26/0x2b0
[  440.412134][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412150][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412166][T26221]  ? lock_release+0x4b/0x3c0
[  440.412186][T26221]  ? lock_release+0x4b/0x3c0
[  440.412208][T26221]  ? is_bpf_text_address+0x292/0x2b0
[  440.412229][T26221]  ? is_bpf_text_address+0x26/0x2b0
[  440.412251][T26221]  ? unwind_next_frame+0x8f/0x2550
[  440.412267][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412286][T26221]  ? is_bpf_text_address+0x26/0x2b0
[  440.412306][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412323][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412338][T26221]  ? lock_release+0x4b/0x3c0
[  440.412358][T26221]  ? lock_release+0x4b/0x3c0
[  440.412380][T26221]  ? is_bpf_text_address+0x292/0x2b0
[  440.412401][T26221]  ? is_bpf_text_address+0x26/0x2b0
[  440.412423][T26221]  ? kernel_text_address+0xa5/0xe0
[  440.412440][T26221]  ? __kernel_text_address+0xd/0x30
[  440.412456][T26221]  ? unwind_get_return_address+0x4d/0x90
[  440.412473][T26221]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  440.412494][T26221]  ? arch_stack_walk+0xfb/0x150
[  440.412519][T26221]  ? __pfx_rtnl_newlink+0x10/0x10
[  440.412537][T26221]  ? lock_release+0x4b/0x3c0
[  440.412556][T26221]  ? bpf_lsm_capable+0x9/0x20
[  440.412570][T26221]  ? security_capable+0x7e/0x2c0
[  440.412594][T26221]  ? __pfx_rtnl_newlink+0x10/0x10
[  440.412619][T26221]  rtnetlink_rcv_msg+0x802/0xc00
[  440.412637][T26221]  ? kasan_save_track+0x3e/0x80
[  440.412658][T26221]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  440.412677][T26221]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  440.412697][T26221]  ? __netlink_lookup+0xc6/0x8b0
[  440.412712][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.412731][T26221]  netlink_rcv_skb+0x226/0x4a0
[  440.412753][T26221]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  440.412774][T26221]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  440.412798][T26221]  ? net_generic+0x1e/0x240
[  440.412815][T26221]  ? net_generic+0x1e/0x240
[  440.412833][T26221]  ? netlink_deliver_tap+0x2e/0x1b0
[  440.412856][T26221]  netlink_unicast+0x7bb/0x940
[  440.412879][T26221]  netlink_sendmsg+0x813/0xb40
[  440.412904][T26221]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.412926][T26221]  ? aa_sock_msg_perm+0xf1/0x1b0
[  440.412943][T26221]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  440.412961][T26221]  ? __pfx_netlink_sendmsg+0x10/0x10
[  440.412983][T26221]  ____sys_sendmsg+0x9b9/0xa20
[  440.413007][T26221]  ? __pfx_____sys_sendmsg+0x10/0x10
[  440.413029][T26221]  ? lock_release+0x4b/0x3c0
[  440.413050][T26221]  ? import_iovec+0x73/0xa0
[  440.413071][T26221]  ___sys_sendmsg+0x2a5/0x360
[  440.413091][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.413106][T26221]  ? get_pid_task+0x20/0x1f0
[  440.413121][T26221]  ? __pfx____sys_sendmsg+0x10/0x10
[  440.413144][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.413170][T26221]  ? __fget_files+0x2a/0x420
[  440.413187][T26221]  ? __fget_files+0x3a2/0x420
[  440.413208][T26221]  __x64_sys_sendmsg+0x1b1/0x290
[  440.413229][T26221]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  440.413256][T26221]  ? rcu_is_watching+0x15/0xb0
[  440.413272][T26221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.413289][T26221]  do_syscall_64+0x174/0x580
[  440.413308][T26221]  ? trace_irq_disable+0x3b/0x140
[  440.413328][T26221]  ? clear_bhb_loop+0x40/0x90
[  440.413345][T26221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.413361][T26221] RIP: 0033:0x7f64a0d9ce59
[  440.413377][T26221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.413390][T26221] RSP: 002b:00007f64a1c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.413409][T26221] RAX: ffffffffffffffda RBX: 00007f64a1015fa0 RCX: 00007f64a0d9ce59
[  440.413421][T26221] RDX: 0c31fe084736598c RSI: 0000200000000200 RDI: 0000000000000003
[  440.413432][T26221] RBP: 00007f64a1c55090 R08: 0000000000000000 R09: 0000000000000000
[  440.413443][T26221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  440.413453][T26221] R13: 00007f64a1016038 R14: 00007f64a1015fa0 R15: 00007ffea043ba38
[  440.413472][T26221]  </TASK>
[  441.103859][T26223] FAULT_INJECTION: forcing a failure.
[  441.103859][T26223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.123271][T26223] CPU: 1 UID: 0 PID: 26223 Comm: syz.0.7041 Not tainted syzkaller #0 PREEMPT(full) 
[  441.123297][T26223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  441.123306][T26223] Call Trace:
[  441.123313][T26223]  <TASK>
[  441.123320][T26223]  dump_stack_lvl+0xe8/0x150
[  441.123342][T26223]  should_fail_ex+0x40c/0x560
[  441.123360][T26223]  _copy_from_user+0x2d/0xb0
[  441.123380][T26223]  ___sys_recvmsg+0x173/0x5a0
[  441.123403][T26223]  ? __pfx____sys_recvmsg+0x10/0x10
[  441.123425][T26223]  ? __fget_files+0x2a/0x420
[  441.123441][T26223]  ? rcu_is_watching+0x15/0xb0
[  441.123463][T26223]  ? rcu_is_watching+0x15/0xb0
[  441.123477][T26223]  ? lock_release+0x4b/0x3c0
[  441.123496][T26223]  ? __might_fault+0xcb/0x130
[  441.123513][T26223]  do_recvmmsg+0x31a/0x7f0
[  441.123535][T26223]  ? __pfx_do_recvmmsg+0x10/0x10
[  441.123568][T26223]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  441.123587][T26223]  ? __fget_files+0x3a2/0x420
[  441.123606][T26223]  __x64_sys_recvmmsg+0x198/0x250
[  441.123640][T26223]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  441.123667][T26223]  ? rcu_is_watching+0x15/0xb0
[  441.123683][T26223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.123699][T26223]  do_syscall_64+0x174/0x580
[  441.123718][T26223]  ? trace_irq_disable+0x3b/0x140
[  441.123738][T26223]  ? clear_bhb_loop+0x40/0x90
[  441.123754][T26223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.123770][T26223] RIP: 0033:0x7f9755d9ce59
[  441.123785][T26223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.123798][T26223] RSP: 002b:00007f9756b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  441.123816][T26223] RAX: ffffffffffffffda RBX: 00007f9756015fa0 RCX: 00007f9755d9ce59
[  441.123827][T26223] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003
[  441.123838][T26223] RBP: 00007f9756b85090 R08: 0000000000000000 R09: 0000000000000000
[  441.123849][T26223] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002
[  441.123859][T26223] R13: 00007f9756016038 R14: 00007f9756015fa0 R15: 00007fffff151328
[  441.123877][T26223]  </TASK>
[  441.455782][T26242] openvswitch: netlink: Flow key attr not present in new flow.
[  441.466410][T26244] netlink: 'syz.3.7047': attribute type 13 has an invalid length.
[  441.475903][T26244] netlink: 'syz.3.7047': attribute type 17 has an invalid length.
[  441.699941][T26244] hsr0: left promiscuous mode
[  441.717549][T26259] sctp: [Deprecated]: syz.1.7053 (pid 26259) Use of int in max_burst socket option.
[  441.717549][T26259] Use struct sctp_assoc_value instead
[  441.814665][T26244] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  442.358923][T26293] syzkaller1: entered promiscuous mode
[  442.370522][T26293] syzkaller1: entered allmulticast mode
[  442.396352][T26293] xt_CONNSECMARK: invalid mode: 254
[  443.021756][T26347] netlink: zone id is out of range
[  443.026340][T26344] __nla_validate_parse: 10 callbacks suppressed
[  443.026365][T26344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7092'.
[  443.036774][T26347] netlink: zone id is out of range
[  443.043566][ T9670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.053325][T26347] netlink: zone id is out of range
[  443.064304][T26334] veth0_macvtap: Caught tx_queue_len zero misconfig
[  443.077827][T26347] netlink: zone id is out of range
[  443.141816][T26344] team0: Port device team_slave_0 removed
[  443.348550][T26354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7096'.
[  443.489814][T26367] xt_hashlimit: size too large, truncated to 1048576
[  443.728177][T26382] netlink: 'syz.0.7106': attribute type 8 has an invalid length.
[  443.764994][T26383] sctp: [Deprecated]: syz.2.7104 (pid 26383) Use of int in max_burst socket option.
[  443.764994][T26383] Use struct sctp_assoc_value instead
[  444.070203][T26394] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  444.281017][T26411] netlink: 'syz.1.7109': attribute type 1 has an invalid length.
[  444.323774][T26394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7109'.
[  444.439317][T26417] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.471867][T26418] netlink: 'syz.0.7115': attribute type 1 has an invalid length.
[  444.496829][T26418] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7115'.
[  444.508927][T26418] netlink: 'syz.0.7115': attribute type 1 has an invalid length.
[  444.520307][T26417] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.525539][T26418] netlink: 638 bytes leftover after parsing attributes in process `syz.0.7115'.
[  444.560378][T26418] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7115'.
[  444.625162][T26417] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.647815][T26425] xt_hashlimit: size too large, truncated to 1048576
[  444.690220][T26417] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.863782][   T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.911154][   T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.985605][   T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.054316][   T65] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.173366][T26458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7125'.
[  445.216608][T26458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7125'.
[  445.238404][T26463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7125'.
[  445.293631][T26463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7125'.
[  445.297976][ T9665] net_ratelimit: 967 callbacks suppressed
[  445.298003][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.559208][T26480] xt_hashlimit: size too large, truncated to 1048576
[  445.580853][T26486] netlink: 'syz.3.7133': attribute type 1 has an invalid length.
[  445.676894][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.685630][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.731577][T26486] 8021q: adding VLAN 0 to HW filter on device bond3
[  445.788860][T26494] vlan2: entered allmulticast mode
[  445.807733][T26492] netlink: 'syz.0.7137': attribute type 21 has an invalid length.
[  445.878941][T26492] netlink: 'syz.0.7137': attribute type 4 has an invalid length.
[  445.900891][T26492] netlink: 'syz.0.7137': attribute type 3 has an invalid length.
[  446.116180][T26520] xt_CT: No such helper "snmp_trap"
[  446.157365][ T9670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.248927][T26535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.257789][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.325063][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.618183][T26553] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.697717][T26553] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.782252][T26553] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.851984][T26559] xt_CT: No such helper "snmp_trap"
[  446.862316][T26553] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.889680][T26565] netlink: 'syz.4.7164': attribute type 1 has an invalid length.
[  446.960869][ T9670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.964908][T26565] 8021q: adding VLAN 0 to HW filter on device bond8
[  447.000973][T26569] vlan2: entered allmulticast mode
[  447.166026][   T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.226239][   T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.283019][   T65] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.341799][   T65] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.387098][T26581] netlink: 'syz.1.7169': attribute type 12 has an invalid length.
[  447.599089][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.148788][T26604] bridge_slave_1: entered allmulticast mode
[  448.211565][T26603] FAULT_INJECTION: forcing a failure.
[  448.211565][T26603] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.358882][T26603] CPU: 0 UID: 0 PID: 26603 Comm: syz.3.7177 Not tainted syzkaller #0 PREEMPT(full) 
[  448.358908][T26603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  448.358918][T26603] Call Trace:
[  448.358927][T26603]  <TASK>
[  448.358935][T26603]  dump_stack_lvl+0xe8/0x150
[  448.358959][T26603]  should_fail_ex+0x40c/0x560
[  448.358979][T26603]  _copy_from_user+0x2d/0xb0
[  448.359000][T26603]  ___sys_recvmsg+0x173/0x5a0
[  448.359025][T26603]  ? __pfx____sys_recvmsg+0x10/0x10
[  448.359050][T26603]  ? __fget_files+0x2a/0x420
[  448.359067][T26603]  ? rcu_is_watching+0x15/0xb0
[  448.359089][T26603]  ? rcu_is_watching+0x15/0xb0
[  448.359104][T26603]  ? lock_release+0x4b/0x3c0
[  448.359127][T26603]  ? __might_fault+0xcb/0x130
[  448.359147][T26603]  do_recvmmsg+0x31a/0x7f0
[  448.359172][T26603]  ? __pfx_do_recvmmsg+0x10/0x10
[  448.359198][T26603]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  448.359220][T26603]  ? __fget_files+0x3a2/0x420
[  448.359241][T26603]  __x64_sys_recvmmsg+0x198/0x250
[  448.359264][T26603]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  448.359289][T26603]  ? rcu_is_watching+0x15/0xb0
[  448.359306][T26603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.359330][T26603]  do_syscall_64+0x174/0x580
[  448.359350][T26603]  ? trace_irq_disable+0x3b/0x140
[  448.359370][T26603]  ? clear_bhb_loop+0x40/0x90
[  448.359389][T26603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.359405][T26603] RIP: 0033:0x7f038859ce59
[  448.359421][T26603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.359435][T26603] RSP: 002b:00007f03867f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  448.359454][T26603] RAX: ffffffffffffffda RBX: 00007f0388815fa0 RCX: 00007f038859ce59
[  448.359466][T26603] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003
[  448.359478][T26603] RBP: 00007f03867f6090 R08: 0000000000000000 R09: 0000000000000000
[  448.359489][T26603] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002
[  448.359500][T26603] R13: 00007f0388816038 R14: 00007f0388815fa0 R15: 00007ffc42003118
[  448.359518][T26603]  </TASK>
[  448.364854][T26617] __nla_validate_parse: 6 callbacks suppressed
[  448.364870][T26617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7181'.
[  449.196902][ T9676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.156945][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  450.164841][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  450.394107][T26628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.402700][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.459527][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.951173][   T65] tipc: Resetting bearer <eth:syzkaller0>
[  451.052877][T26654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7193'.
[  451.122456][T26652] validate_nla: 1 callbacks suppressed
[  451.122473][T26652] netlink: 'syz.3.7192': attribute type 1 has an invalid length.
[  451.146842][T26652] nbd: couldn't find device at index -427251215
[  451.273825][T26664] netlink: 'syz.4.7193': attribute type 10 has an invalid length.
[  451.339618][T26669] netlink: 'syz.4.7193': attribute type 10 has an invalid length.
[  451.726737][   T65] gretap0 (unregistering): left allmulticast mode
[  451.940916][   T65] bond1 (unregistering): (slave bridge0): Releasing backup interface
[  451.965860][   T65] tipc: Disabling bearer <eth:syzkaller0>
[  452.008307][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.024081][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.039213][   T65] bond0 (unregistering): Released all slaves
[  452.049155][   T65] bond1 (unregistering): Released all slaves
[  452.068899][   T65] bond2 (unregistering): (slave bond3): Releasing backup interface
[  452.085166][   T65] bond2 (unregistering): Released all slaves
[  452.097397][   T65] bond3 (unregistering): Released all slaves
[  452.117480][   T65] bond4 (unregistering): (slave bond5): Releasing backup interface
[  452.134018][   T65] bond4 (unregistering): Released all slaves
[  452.147361][   T65] bond5 (unregistering): Released all slaves
[  452.194444][   T65] bond6 (unregistering): (slave bond7): Releasing backup interface
[  452.209242][   T65] bond6 (unregistering): Released all slaves
[  452.228739][   T65] bond7 (unregistering): Released all slaves
[  452.237645][ T9669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.250107][   T65] bond8 (unregistering): Released all slaves
[  452.269610][   T65] bond9 (unregistering): (slave bond10): Releasing backup interface
[  452.285934][   T65] bond9 (unregistering): Released all slaves
[  452.298644][   T65] bond10 (unregistering): Released all slaves
[  452.316807][   T65] bond11 (unregistering): Released all slaves
[  452.338628][   T65] bond12 (unregistering): (slave bond13): Releasing backup interface
[  452.355125][   T65] bond12 (unregistering): Released all slaves
[  452.371558][   T65] bond13 (unregistering): Released all slaves
[  452.392589][   T65] bond14 (unregistering): Released all slaves
[  452.404738][   T65] bond15 (unregistering): Released all slaves
[  452.416510][   T65] bond16 (unregistering): Released all slaves
[  452.431964][   T65] bond17 (unregistering): Released all slaves
[  452.446410][   T65] bond18 (unregistering): Released all slaves
[  452.466664][   T65] bond19 (unregistering): (slave bond20): Releasing backup interface
[  452.483401][   T65] bond19 (unregistering): Released all slaves
[  452.495172][   T65] bond20 (unregistering): Released all slaves
[  452.507296][   T65] bond21 (unregistering): Released all slaves
[  452.519259][   T65] bond22 (unregistering): Released all slaves
[  452.636637][T26664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.653267][T26664] team0: Port device netdevsim1 added
[  452.713581][T26669] team0: Port device netdevsim1 removed
[  452.725741][T26669] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.740315][T26669] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  452.891546][T26695] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.910097][T26704] netlink: 'syz.2.7206': attribute type 1 has an invalid length.
[  452.941347][T26695] 8021q: adding VLAN 0 to HW filter on device team0
[  452.978722][T26695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.078128][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.110641][T26695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.146972][T26695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.185840][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.208672][T26695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  453.248022][T26695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.259924][T26714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.286786][T26724] sctp: [Deprecated]: syz.3.7209 (pid 26724) Use of int in max_burst socket option.
[  453.286786][T26724] Use struct sctp_assoc_value instead
[  453.308902][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.317899][T26695] veth0_vlan: left promiscuous mode
[  453.323924][T26695] veth0_vlan: entered promiscuous mode
[  453.337558][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.357712][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.374628][T26695] veth1_macvtap: left promiscuous mode
[  453.395856][T26695] veth0_macvtap: left promiscuous mode
[  453.421723][T26695] veth0_macvtap: entered promiscuous mode
[  453.446466][T26695] veth1_macvtap: entered promiscuous mode
[  453.498259][T26695] 8021q: adding VLAN 0 to HW filter on device eth0
[  453.519152][T26695] 8021q: adding VLAN 0 to HW filter on device eth1
[  453.551793][T26695] 8021q: adding VLAN 0 to HW filter on device eth2
[  453.568924][T26695] 8021q: adding VLAN 0 to HW filter on device eth3
[  453.598544][T26709] netlink: 'syz.4.7208': attribute type 2 has an invalid length.
[  453.608107][   T65] tipc: Disabling bearer <udp:syz2>
[  453.621343][T26709] netlink: 'syz.4.7208': attribute type 1 has an invalid length.
[  453.638495][   T65] tipc: Left network mode
[  453.674568][T26709] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7208'.
[  453.764792][T26712] netlink: 'syz.4.7208': attribute type 2 has an invalid length.
[  453.804889][   T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.828732][T26712] netlink: 'syz.4.7208': attribute type 1 has an invalid length.
[  453.844668][   T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.879266][T26712] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7208'.
[  453.891850][ T1121] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  453.960922][   T65] IPVS: stopping master sync thread 12825 ...
[  453.984240][   T65] IPVS: stopping backup sync thread 13443 ...
[  454.007056][T14922] bond1: (slave macvlan0): link status definitely up, 10000 Mbps full duplex
[  454.025903][T14922] bond1: (slave macvlan0): making interface the new active one
[  454.066465][T14922] bond1: active interface up!
[  454.091166][   T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.143255][   T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.371771][T26737] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.7215'.
[  454.760811][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7222'.
[  454.784064][T26764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7221'.
[  454.824151][T26765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7222'.
[  454.902236][T26769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7222'.
[  454.978976][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7222'.
[  455.031978][T26765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7222'.
[  455.078496][   T65] hsr_slave_0: left promiscuous mode
[  455.109332][   T65] hsr_slave_1: left promiscuous mode
[  455.141403][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.175104][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.245853][T26782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7223'.
[  455.272154][   T65] veth1_macvtap: left promiscuous mode
[  455.277960][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  455.285633][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  455.341660][   T65] veth0_vlan: left promiscuous mode
[  455.676052][T26793] netlink: 'syz.3.7227': attribute type 1 has an invalid length.
[  456.299155][T26773] team_slave_1: Caught tx_queue_len zero misconfig
[  456.354737][T26770] hsr0: entered promiscuous mode
[  456.433309][T26793] 8021q: adding VLAN 0 to HW filter on device bond4
[  456.569560][T26795] vlan2: entered allmulticast mode
[  456.909375][T26817] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.002755][T26820] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  457.073888][T26817] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.214536][T26830] syzkaller1: entered promiscuous mode
[  457.239287][T26830] syzkaller1: entered allmulticast mode
[  457.404289][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.445452][T26832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.461577][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.498133][   T65] IPVS: stop unused estimator thread 0...
[  457.504124][T26830] xt_CONNSECMARK: invalid mode: 254
[  457.618411][T26845] xt_hashlimit: size too large, truncated to 1048576
[  457.642545][T26817] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.842293][    C1] net_ratelimit: 7 callbacks suppressed
[  457.842319][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.856836][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.917062][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  458.480545][  T496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.489392][ T9669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.498344][ T9670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.515371][ T9670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.118012][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.126517][T14922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.397188][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  461.250454][ T9665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.340255][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.258571][    C1] sched: DL replenish lagged too much
[  464.237391][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.878276][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.886810][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.516846][    C0] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  465.527003][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  467.277252][ T9676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.917260][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.999243][T14922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.008340][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.019908][ T9676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.045460][ T9676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.902974][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  471.912192][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  471.922612][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  471.936095][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  471.943613][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  472.012570][T26817] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.354267][ T5631] Bluetooth: hci0: command tx timeout
[  480.848359][ T5631] Bluetooth: hci0: command tx timeout
[  480.890500][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  481.237956][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.667677][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.162212][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.170915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.847352][ T5631] Bluetooth: hci0: command tx timeout
[  486.003080][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  486.010757][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  486.107455][ T5631] Bluetooth: hci0: command tx timeout
[  489.506431][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.118429][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.124069][    C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  495.081280][ T5631] Bluetooth: hci4: command 0x0406 tx timeout
[  510.318221][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  516.724703][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  526.962052][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  532.079500][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.088171][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.150893][T12794] Bluetooth: hci5: command tx timeout
[  547.897304][ T5628] Bluetooth: hci3: command tx timeout
[  552.123105][T12794] Bluetooth: hci1: command 0x0406 tx timeout
[  552.238770][ T5628] Bluetooth: hci2: command 0x0406 tx timeout
[  558.458074][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.037737][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  583.278955][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  593.816644][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  593.823607][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P26908/1:b..l P26907/1:b..l
[  593.832832][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=98737, q=1354 ncpus=2)
[  593.840648][    C0] task:syz.3.7247      state:R  running task     stack:23016 pid:26907 tgid:26899 ppid:23723  task_flags:0x400140 flags:0x00080003
[  593.854138][    C0] Call Trace:
[  593.857420][    C0]  <TASK>
[  593.860353][    C0]  __schedule+0x17d9/0x56c0
[  593.864865][    C0]  ? unwind_next_frame+0x8f/0x2550
[  593.869980][    C0]  ? rcu_is_watching+0x15/0xb0
[  593.874748][    C0]  ? deref_stack_reg+0x18e/0x220
[  593.879697][    C0]  ? __pfx___schedule+0x10/0x10
[  593.884549][    C0]  ? netlink_rcv_skb+0x226/0x4a0
[  593.889502][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  593.895668][    C0]  ? rcu_is_watching+0x15/0xb0
[  593.900437][    C0]  preempt_schedule_irq+0x4d/0xa0
[  593.905468][    C0]  irqentry_exit+0x14f/0x8f0
[  593.910066][    C0]  ? trace_irq_disable+0x3b/0x140
[  593.915098][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  593.921080][    C0] RIP: 0010:rcu_is_watching+0x4/0xb0
[  593.926378][    C0] Code: 95 8e e8 2f 1a 44 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 41 56 53 65 ff 05 40 56 8f 11 e8 fb f7 fc 09 89 c3 83 f8 08
[  593.945983][    C0] RSP: 0018:ffffc9000523ec68 EFLAGS: 00000293
[  593.952053][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  593.960021][    C0] RDX: ffffc900129dd000 RSI: ffffffff823b091e RDI: ffffffff8e959a20
[  593.967992][    C0] RBP: ffff88801f96d774 R08: ffff88801f96d737 R09: 1ffff11003f2dae6
[  593.975962][    C0] R10: dffffc0000000000 R11: ffffed1003f2dae7 R12: 000000000009c915
[  593.983934][    C0] R13: ffffffff823b091e R14: ffffffff8e959a20 R15: ffff88801f96d780
[  593.991906][    C0]  ? __update_page_owner_free_handle+0x2e/0x470
[  593.998159][    C0]  ? __update_page_owner_free_handle+0x2e/0x470
[  594.004407][    C0]  ? __kasan_kmalloc+0x22/0xb0
[  594.009177][    C0]  lock_release+0x4b/0x3c0
[  594.013597][    C0]  ? kmemdup_noprof+0x2b/0x70
[  594.018269][    C0]  ? pkcs7_sig_note_signature+0x35/0x130
[  594.023907][    C0]  ? asn1_ber_decoder+0xed5/0x2590
[  594.029018][    C0]  ? rcu_read_lock_held+0xa/0x50
[  594.033960][    C0]  ? __update_page_owner_free_handle+0x2e/0x470
[  594.040207][    C0]  __update_page_owner_free_handle+0x456/0x470
[  594.046363][    C0]  ? __update_page_owner_free_handle+0x2e/0x470
[  594.052611][    C0]  __reset_page_owner+0x85/0x1f0
[  594.057560][    C0]  __free_frozen_pages+0xc0d/0xd20
[  594.062680][    C0]  __slab_free+0x274/0x2c0
[  594.067104][    C0]  qlist_free_all+0x99/0x100
[  594.071699][    C0]  kasan_quarantine_reduce+0x148/0x160
[  594.077163][    C0]  __kasan_kmalloc+0x22/0xb0
[  594.081758][    C0]  __kmalloc_node_track_caller_noprof+0x4d7/0x7b0
[  594.088180][    C0]  ? pkcs7_sig_note_signature+0x35/0x130
[  594.093833][    C0]  ? __kmalloc_node_track_caller_noprof+0x346/0x7b0
[  594.100428][    C0]  kmemdup_noprof+0x2b/0x70
[  594.104933][    C0]  pkcs7_sig_note_signature+0x35/0x130
[  594.110401][    C0]  asn1_ber_decoder+0xed5/0x2590
[  594.115354][    C0]  ? __pfx_asn1_ber_decoder+0x10/0x10
[  594.120736][    C0]  ? remove_pfn_range_from_zone+0x930/0xb80
[  594.126628][    C0]  ? pkcs7_parse_message+0x15d/0x640
[  594.131918][    C0]  ? __kmalloc_cache_noprof+0x157/0x660
[  594.137475][    C0]  pkcs7_parse_message+0x24d/0x640
[  594.142594][    C0]  verify_pkcs7_signature+0x30/0x90
[  594.147803][    C0]  valid_regdb+0x1ea/0x5e0
[  594.152223][    C0]  ? __pfx__request_firmware+0x10/0x10
[  594.157691][    C0]  ? __pfx_valid_regdb+0x10/0x10
[  594.162642][    C0]  ? __pfx_netdev_run_todo+0x10/0x10
[  594.167928][    C0]  reg_reload_regdb+0xee/0x490
[  594.172693][    C0]  ? __nla_parse+0x40/0x60
[  594.177110][    C0]  ? __pfx_reg_reload_regdb+0x10/0x10
[  594.182486][    C0]  ? nl80211_pre_doit+0x53d/0x890
[  594.187518][    C0]  genl_family_rcv_msg_doit+0x233/0x340
[  594.193076][    C0]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  594.199153][    C0]  ? bpf_lsm_capable+0x9/0x20
[  594.203827][    C0]  ? security_capable+0x7e/0x2c0
[  594.208774][    C0]  genl_rcv_msg+0x614/0x7a0
[  594.213280][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  594.218315][    C0]  ? ref_tracker_free+0x689/0x830
[  594.223339][    C0]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  594.228706][    C0]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  594.234426][    C0]  ? __pfx_nl80211_post_doit+0x10/0x10
[  594.239885][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  594.245265][    C0]  netlink_rcv_skb+0x226/0x4a0
[  594.250039][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  594.255069][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  594.260363][    C0]  ? down_read+0x2be/0x330
[  594.264789][    C0]  genl_rcv+0x28/0x40
[  594.268770][    C0]  netlink_unicast+0x7bb/0x940
[  594.273546][    C0]  netlink_sendmsg+0x813/0xb40
[  594.278321][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.283611][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[  594.288552][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  594.293839][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.299132][    C0]  ____sys_sendmsg+0x9b9/0xa20
[  594.303908][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  594.309203][    C0]  ? lock_release+0x4b/0x3c0
[  594.313802][    C0]  ? import_iovec+0x73/0xa0
[  594.318313][    C0]  ___sys_sendmsg+0x2a5/0x360
[  594.322999][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  594.328205][    C0]  ? futex_wake+0x51b/0x5f0
[  594.332729][    C0]  ? __fget_files+0x2a/0x420
[  594.337319][    C0]  ? __fget_files+0x3a2/0x420
[  594.342000][    C0]  __x64_sys_sendmsg+0x1b1/0x290
[  594.346944][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  594.352415][    C0]  ? rcu_is_watching+0x15/0xb0
[  594.357179][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.363244][    C0]  do_syscall_64+0x174/0x580
[  594.367837][    C0]  ? trace_irq_disable+0x3b/0x140
[  594.372866][    C0]  ? clear_bhb_loop+0x40/0x90
[  594.377541][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.383433][    C0] RIP: 0033:0x7f038859ce59
[  594.387845][    C0] RSP: 002b:00007f03867d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  594.396254][    C0] RAX: ffffffffffffffda RBX: 00007f0388816090 RCX: 00007f038859ce59
[  594.404222][    C0] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000005
[  594.412191][    C0] RBP: 00007f0388632d6f R08: 0000000000000000 R09: 0000000000000000
[  594.420160][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  594.428128][    C0] R13: 00007f0388816128 R14: 00007f0388816090 R15: 00007ffc42003118
[  594.436103][    C0]  </TASK>
[  594.439117][    C0] task:syz.0.7245      state:X  running task     stack:25360 pid:26908 tgid:26895 ppid:0      task_flags:0x40044c flags:0x00080002
[  594.452603][    C0] Call Trace:
[  594.455937][    C0]  <TASK>
[  594.458868][    C0]  __schedule+0x17d9/0x56c0
[  594.463388][    C0]  ? __css_rstat_updated+0x235/0x540
[  594.468678][    C0]  ? __css_rstat_updated+0x235/0x540
[  594.473966][    C0]  ? __pfx___schedule+0x10/0x10
[  594.478819][    C0]  ? __pfx___css_rstat_updated+0x10/0x10
[  594.484460][    C0]  preempt_schedule_irq+0x4d/0xa0
[  594.489523][    C0]  irqentry_exit+0x14f/0x8f0
[  594.494140][    C0]  ? trace_irq_disable+0x3b/0x140
[  594.499173][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  594.505154][    C0] RIP: 0010:__memcg_kmem_uncharge_page+0x17d/0x370
[  594.511661][    C0] Code: 10 74 08 4c 89 e7 e8 d2 cd f7 ff 4d 8b 24 24 49 8d 54 24 4c 48 89 d5 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 <84> c0 75 44 f6 02 01 75 5c 49 8d 7c 24 10 e8 40 d7 00 00 84 c0 75
[  594.531268][    C0] RSP: 0018:ffffc9000540fab0 EFLAGS: 00000a03
[  594.537338][    C0] RAX: 0000000000000000 RBX: ffff88802c9a8080 RCX: 0000000080000001
[  594.545306][    C0] RDX: ffff88802c47374c RSI: ffffffff8c291100 RDI: ffffffff8c2910c0
[  594.553278][    C0] RBP: 1ffff1100588e6e9 R08: 0000000000000000 R09: 0000000000000000
[  594.561248][    C0] R10: dffffc0000000000 R11: ffffed10038dc4b9 R12: ffff88802c473700
[  594.569217][    C0] R13: 1ffff11005935012 R14: ffffffff82397c27 R15: 1ffffffff2062940
[  594.577190][    C0]  ? __memcg_kmem_uncharge_page+0x97/0x370
[  594.583014][    C0]  do_exit+0x18d3/0x2360
[  594.587261][    C0]  ? __pfx_do_exit+0x10/0x10
[  594.591855][    C0]  ? rcu_is_watching+0x15/0xb0
[  594.596624][    C0]  do_group_exit+0x22d/0x2f0
[  594.601214][    C0]  ? trace_irq_enable+0x3b/0x140
[  594.606159][    C0]  get_signal+0x121b/0x12c0
[  594.610673][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  594.616227][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  594.622393][    C0]  ? rcu_is_watching+0x15/0xb0
[  594.627159][    C0]  exit_to_user_mode_loop+0x104/0x730
[  594.632538][    C0]  ? rcu_is_watching+0x15/0xb0
[  594.637300][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.643366][    C0]  do_syscall_64+0x353/0x580
[  594.647960][    C0]  ? trace_irq_disable+0x3b/0x140
[  594.652987][    C0]  ? clear_bhb_loop+0x40/0x90
[  594.657662][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.663556][    C0] RIP: 0033:0x7f9755d9ce59
[  594.667972][    C0] RSP: 002b:00007f9753fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  594.676389][    C0] RAX: fffffffffffffe00 RBX: 00007f9756016180 RCX: 00007f9755d9ce59
[  594.684361][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  594.692331][    C0] RBP: 00007f9755e32d6f R08: 0000200000000380 R09: 000000000000001c
[  594.700298][    C0] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  594.708270][    C0] R13: 00007f9756016218 R14: 00007f9756016180 R15: 00007fffff151328
[  594.716247][    C0]  </TASK>
[  594.719271][    C0] rcu: rcu_preempt kthread starved for 10140 jiffies! g98737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  594.730456][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  594.740419][    C0] rcu: RCU grace-period kthread stack dump:
[  594.746298][    C0] task:rcu_preempt     state:R  running task     stack:28120 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  594.759784][    C0] Call Trace:
[  594.763060][    C0]  <TASK>
[  594.765988][    C0]  __schedule+0x17d9/0x56c0
[  594.770513][    C0]  ? __pfx___schedule+0x10/0x10
[  594.775366][    C0]  ? schedule+0x90/0x360
[  594.779609][    C0]  ? rcu_is_watching+0x15/0xb0
[  594.784381][    C0]  ? lock_release+0x4b/0x3c0
[  594.788979][    C0]  schedule+0x164/0x360
[  594.793136][    C0]  schedule_timeout+0x152/0x2c0
[  594.797989][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  594.803359][    C0]  ? __pfx_process_timeout+0x10/0x10
[  594.808647][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  594.814454][    C0]  ? prepare_to_swait_event+0x322/0x350
[  594.820014][    C0]  rcu_gp_fqs_loop+0x30c/0x11f0
[  594.824886][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  594.831047][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  594.836366][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  594.841572][    C0]  ? trace_irq_enable+0x3b/0x140
[  594.846522][    C0]  rcu_gp_kthread+0x9e/0x2b0
[  594.851121][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  594.856329][    C0]  ? __kthread_parkme+0x71/0x1f0
[  594.861276][    C0]  ? __kthread_parkme+0x196/0x1f0
[  594.866310][    C0]  kthread+0x388/0x470
[  594.870376][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  594.875578][    C0]  ? __pfx_kthread+0x10/0x10
[  594.880169][    C0]  ret_from_fork+0x514/0xb70
[  594.884762][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  594.889875][    C0]  ? __switch_to+0xc89/0x1420
[  594.894560][    C0]  ? __pfx_kthread+0x10/0x10
[  594.899149][    C0]  ret_from_fork_asm+0x1a/0x30
[  594.903925][    C0]  </TASK>
[  594.906947][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  594.913280][    C0] Sending NMI from CPU 0 to CPUs 1:
[  594.918495][    C1] NMI backtrace for cpu 1
[  594.918511][    C1] CPU: 1 UID: 0 PID: 5628 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  594.918529][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  594.918540][    C1] Workqueue: hci0 hci_conn_timeout
[  594.918564][    C1] RIP: 0010:unwind_next_frame+0x11f/0x2550
[  594.918586][    C1] Code: 6c 24 38 48 89 5c 24 40 49 8d 5e 50 48 89 d8 48 c1 e8 03 48 89 44 24 28 42 80 3c 20 00 74 08 48 89 df e8 14 a8 ba 00 48 8b 1b <48> 85 db 74 24 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6
[  594.918600][    C1] RSP: 0018:ffffc90000a07f00 EFLAGS: 00000246
[  594.918613][    C1] RAX: 1ffff92000140fff RBX: 0000000000000000 RCX: 0000000080000103
[  594.918625][    C1] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0
[  594.918636][    C1] RBP: 1ffff92000140ffc R08: 0000000000000000 R09: 0000000000000000
[  594.918646][    C1] R10: ffffc90000a07ff8 R11: ffffffff81b10630 R12: dffffc0000000000
[  594.918659][    C1] R13: ffffffff8176a21f R14: ffffc90000a07fa8 R15: 1ffff92000140ff5
[  594.918671][    C1] FS:  0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000
[  594.918685][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  594.918695][    C1] CR2: 000000110c2d49fb CR3: 0000000077d8e000 CR4: 00000000003526f0
[  594.918710][    C1] Call Trace:
[  594.918716][    C1]  <IRQ>
[  594.918725][    C1]  ? __free_frozen_pages+0x744/0xd20
[  594.918747][    C1]  ? unwind_next_frame+0x8f/0x2550
[  594.918765][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  594.918787][    C1]  arch_stack_walk+0x11b/0x150
[  594.918807][    C1]  ? __free_frozen_pages+0x744/0xd20
[  594.918828][    C1]  stack_trace_save+0xa9/0x100
[  594.918848][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  594.918867][    C1]  ? kfree+0x1c5/0x640
[  594.918885][    C1]  ? nft_synproxy_do_eval+0x3d1/0x550
[  594.918903][    C1]  ? nft_do_chain+0x48d/0x1b10
[  594.918922][    C1]  ? nft_do_chain_inet+0x360/0x4b0
[  594.918940][    C1]  ? nf_hook_slow+0xc5/0x220
[  594.918955][    C1]  ? NF_HOOK+0x21f/0x3c0
[  594.918979][    C1]  ? ip6_input+0x16a/0x270
[  594.918997][    C1]  ? NF_HOOK+0x336/0x3c0
[  594.919013][    C1]  ? process_backlog+0x774/0x1860
[  594.919032][    C1]  ? net_rx_action+0x61d/0xf50
[  594.919050][    C1]  ? handle_softirqs+0x225/0x840
[  594.919070][    C1]  kasan_save_track+0x3e/0x80
[  594.919089][    C1]  ? kasan_save_track+0x3e/0x80
[  594.919107][    C1]  ? kasan_save_free_info+0x40/0x50
[  594.919123][    C1]  ? __kasan_slab_free+0x5c/0x80
[  594.919142][    C1]  ? kmem_cache_free+0x182/0x650
[  594.919162][    C1]  ? nft_synproxy_eval_v6+0x383/0x530
[  594.919179][    C1]  ? nft_synproxy_do_eval+0x3d1/0x550
[  594.919196][    C1]  ? nft_do_chain+0x48d/0x1b10
[  594.919214][    C1]  ? nft_do_chain_inet+0x360/0x4b0
[  594.919231][    C1]  ? nf_hook_slow+0xc5/0x220
[  594.919245][    C1]  ? NF_HOOK+0x21f/0x3c0
[  594.919262][    C1]  ? ip6_input+0x16a/0x270
[  594.919280][    C1]  ? NF_HOOK+0x336/0x3c0
[  594.919297][    C1]  ? process_backlog+0x774/0x1860
[  594.919314][    C1]  ? __napi_poll+0xaa/0x330
[  594.919330][    C1]  ? net_rx_action+0x61d/0xf50
[  594.919347][    C1]  ? handle_softirqs+0x225/0x840
[  594.919366][    C1]  ? __irq_exit_rcu+0xca/0x220
[  594.919383][    C1]  ? irq_exit_rcu+0x9/0x30
[  594.919401][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  594.919420][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  594.919437][    C1]  ? __list_add_valid_or_report+0x44/0x130
[  594.919452][    C1]  ? free_frozen_page_commit+0xf2/0x11d0
[  594.919472][    C1]  ? __free_frozen_pages+0x744/0xd20
[  594.919504][    C1]  ? nft_synproxy_eval_v6+0x383/0x530
[  594.919521][    C1]  kasan_save_free_info+0x40/0x50
[  594.919537][    C1]  __kasan_slab_free+0x5c/0x80
[  594.919557][    C1]  kmem_cache_free+0x182/0x650
[  594.919580][    C1]  nft_synproxy_eval_v6+0x383/0x530
[  594.919600][    C1]  ? __pfx_nft_synproxy_eval_v6+0x10/0x10
[  594.919618][    C1]  ? __ip_vs_conn_in_get+0x2db/0x10f0
[  594.919638][    C1]  ? nf_ip_checksum+0x13c/0x510
[  594.919658][    C1]  nft_synproxy_do_eval+0x3d1/0x550
[  594.919675][    C1]  ? __ip_vs_service_find+0x1c0/0x8d0
[  594.919692][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  594.919712][    C1]  ? rcu_is_watching+0x15/0xb0
[  594.919727][    C1]  ? __ip_vs_service_find+0x1c0/0x8d0
[  594.919742][    C1]  ? trace_irq_enable+0x3b/0x140
[  594.919765][    C1]  nft_do_chain+0x48d/0x1b10
[  594.919789][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  594.919822][    C1]  nft_do_chain_inet+0x360/0x4b0
[  594.919841][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  594.919858][    C1]  ? nf_nat_ipv6_local_in+0x157/0x660
[  594.919883][    C1]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  594.919905][    C1]  ? rcu_is_watching+0x15/0xb0
[  594.919921][    C1]  ? lock_acquire+0x5f/0x350
[  594.919942][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  594.919966][    C1]  nf_hook_slow+0xc5/0x220
[  594.919983][    C1]  NF_HOOK+0x21f/0x3c0
[  594.920002][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  594.920021][    C1]  ? NF_HOOK+0x9e/0x3c0
[  594.920038][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  594.920055][    C1]  ? rcu_is_watching+0x15/0xb0
[  594.920071][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  594.920092][    C1]  ? rcu_is_watching+0x15/0xb0
[  594.920109][    C1]  ip6_input+0x16a/0x270
[  594.920126][    C1]  ? ip6_input+0x23/0x270
[  594.920145][    C1]  NF_HOOK+0x336/0x3c0
[  594.920164][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  594.920182][    C1]  ? NF_HOOK+0x9e/0x3c0
[  594.920203][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  594.920222][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  594.920245][    C1]  process_backlog+0x774/0x1860
[  594.920265][    C1]  ? process_backlog+0x3c3/0x1860
[  594.920289][    C1]  __napi_poll+0xaa/0x330
[  594.920307][    C1]  net_rx_action+0x61d/0xf50
[  594.920330][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  594.920348][    C1]  ? xfrm_dev_backlog+0x24b/0x3c0
[  594.920367][    C1]  ? rcu_is_watching+0x15/0xb0
[  594.920386][    C1]  ? net_tx_action+0xbff/0xc30
[  594.920406][    C1]  handle_softirqs+0x225/0x840
[  594.920426][    C1]  ? __irq_exit_rcu+0xca/0x220
[  594.920448][    C1]  __irq_exit_rcu+0xca/0x220
[  594.920467][    C1]  irq_exit_rcu+0x9/0x30
[  594.920485][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  594.920504][    C1]  </IRQ>
[  594.920509][    C1]  <TASK>
[  594.920516][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  594.920532][    C1] RIP: 0010:__list_add_valid_or_report+0x44/0x130
[  594.920548][    C1] Code: 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 42 80 7c 2d 00 00 <74> 08 4c 89 e7 e8 02 c7 74 fd 4d 39 34 24 75 71 4d 89 f4 49 c1 ec
[  594.920562][    C1] RSP: 0018:ffffc90003b0f7c8 EFLAGS: 00000246
[  594.920575][    C1] RAX: dffffc0000000000 RBX: ffffea0001639bc8 RCX: 0000000000000000
[  594.920586][    C1] RDX: ffffea0001639bc8 RSI: ffff8880b8740f20 RDI: ffffea0000c41d48
[  594.920598][    C1] RBP: 1ffffd40002c737a R08: 0000000000000000 R09: 0000000000000000
[  594.920608][    C1] R10: dffffc0000000000 R11: fffff52000761efc R12: ffffea0001639bd0
[  594.920620][    C1] R13: dffffc0000000000 R14: ffff8880b8740f20 R15: ffffea0000c41d48
[  594.920640][    C1]  free_frozen_page_commit+0xf2/0x11d0
[  594.920664][    C1]  __free_frozen_pages+0x744/0xd20
[  594.920683][    C1]  ? __free_slab+0x172/0x280
[  594.920700][    C1]  __slab_free+0x274/0x2c0
[  594.920721][    C1]  ? qlist_free_all+0x8e/0x100
[  594.920741][    C1]  qlist_free_all+0x99/0x100
[  594.920760][    C1]  kasan_quarantine_reduce+0x148/0x160
[  594.920780][    C1]  __kasan_kmalloc+0x22/0xb0
[  594.920801][    C1]  __kmalloc_cache_noprof+0x318/0x660
[  594.920821][    C1]  ? hci_cmd_sync_submit+0xc4/0x2d0
[  594.920842][    C1]  ? __kmalloc_cache_noprof+0x157/0x660
[  594.920862][    C1]  ? __pfx_abort_conn_sync+0x10/0x10
[  594.920881][    C1]  hci_cmd_sync_submit+0xc4/0x2d0
[  594.920903][    C1]  hci_abort_conn+0x1f5/0x380
[  594.920918][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  594.920937][    C1]  process_scheduled_works+0xa8e/0x14e0
[  594.920972][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  594.920990][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  594.921011][    C1]  ? assign_work+0x3cf/0x5d0
[  594.921031][    C1]  worker_thread+0xa47/0xfb0
[  594.921060][    C1]  kthread+0x388/0x470
[  594.921074][    C1]  ? __pfx_worker_thread+0x10/0x10
[  594.921092][    C1]  ? __pfx_kthread+0x10/0x10
[  594.921106][    C1]  ret_from_fork+0x514/0xb70
[  594.921122][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  594.921137][    C1]  ? __switch_to+0xc89/0x1420
[  594.921158][    C1]  ? __pfx_kthread+0x10/0x10
[  594.921172][    C1]  ret_from_fork_asm+0x1a/0x30
[  594.921195][    C1]  </TASK>
[  595.747146][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.102787][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.638565][    C0] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  598.646168][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  602.048752][T12794] Bluetooth: hci0: command tx timeout
[  602.839190][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.758117][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!