last executing test programs:

10m41.53509978s ago: executing program 0 (id=9681):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

10m29.469922419s ago: executing program 0 (id=9690):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000)

10m27.813167243s ago: executing program 3 (id=9693):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123482, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x8000, 0x0, r2, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000004c0)='G', 0x1, 0x40, &(0x7f00000005c0)={0x11, 0x18, r5, 0x1, 0x6}, 0x14)

10m26.248522315s ago: executing program 0 (id=9696):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x6, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000)
write$cgroup_devices(r2, 0x0, 0x6)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040))
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

10m25.991116789s ago: executing program 3 (id=9698):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
writev(r0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffff40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

10m23.879711727s ago: executing program 4 (id=9703):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)

10m23.599826335s ago: executing program 1 (id=9704):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xb, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0x66, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7ffe, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x8000101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x4d2, 0x0, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0xd303}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3d}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0)

10m22.435258007s ago: executing program 3 (id=9705):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

10m21.983719836s ago: executing program 2 (id=9706):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1a000, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket(0x200000000000011, 0x2, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
close(0x4)

10m21.803421574s ago: executing program 0 (id=9707):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100006fa1625a0a00f2318d01"], 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x81}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7f}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44005}, 0x20008080)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50)

10m21.473969324s ago: executing program 4 (id=9708):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d538906dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

10m21.307929451s ago: executing program 1 (id=9709):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r0, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x15, 0x5c, 0x67, 0x0, 0x6, 0x11, 0x0, @local, @empty}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "615929421e06c3e74ce3e054a077fd19cfd314b18df4fe12", "bccd605d3028483bd2adaf37455d1e3148f215a4412be1a95097aa4a38fc2f4d"}}}}, 0x66)

10m21.243071937s ago: executing program 3 (id=9710):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0xe8e, &(0x7f0000001600)={@multicast, @multicast, @void, {@ipv4={0x800, @generic={{0x20, 0x4, 0x3, 0x0, 0xe80, 0x68, 0x0, 0x0, 0x84, 0x0, @multicast1, @multicast2, {[@generic={0x94, 0x7, "e685529c47"}, @ssrr={0x89, 0x1b, 0x43, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102, @loopback, @multicast2]}, @lsrr={0x83, 0x1b, 0xf9, [@private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010101, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}]}, @timestamp_addr={0x44, 0xc, 0x3f, 0x1, 0xb, [{@remote, 0xfffeffff}]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x0, [{@broadcast, 0x9}]}, @rr={0x7, 0x7, 0x97, [@private=0xa010101]}, @lsrr={0x83, 0xf, 0x18, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "576995b4c00a2c0751c8887f633e70af557828f2f370a15d9a75445fd41adf8920cebe4fb53a91f65a2d027939fc27217139cc8bf8d6c3fbfa878be08ba34b6c4db92bd1553ffdca1ccebe650a2d157cf4ff854f1270f81a2f7680c2f4196014ed5e001af0c2d10f9d5fc185b81161c92adf4938839c9308808a2e5b830ce3e9e8e5a6644b526bc2e8e4fcec53097e3732704595edaa275e56ae052f10d7a776a920292736fb64238b4d0343ad8f532e5cad66891f06248f10a35677e55c9af220f6551e1673f95de973a483a1711e97d8c8a9fb54f67e758a5cf7e0a88b31256457303f3864dc00138fa2e4c08c688330505eb4f39bd778292ba46bd7084389afd052b69fc91cdb7553c4a9ed6a4d574271833343495fc083c4c025120d30b609e8c484d3b3137f5394600387ece0aecc06d39f88b038dfe656caebd11fa6ca72a175b38585e5724103c7e906bc47453fcdff4a0782cda69e86fa6c1a45d2867354415a509a82a691dd230df2c45030ca6cfd416b909abb2651a096e3d0480a4a58a953eae5e46e5199a3d931839380e27a7cd080107539f7833fecd2f9c1c69a2e88fdd3221fddf981c7e0e8d3d8855d527fc7a65d33aacfe05abe260b3768d5612aa37e90b7e4ed6a17ef5df30722f43a067b093021f8ea5e3ecd85310df1110c8f71079e3a00a223870e013bb7b8767c41dd6a2094dbf93f034ddbd3872027cc6ec1dd3d060b6ac3378cd1514ef8bb2228b58020ce8278208aaa9e9cafdb5b34b7f6bb88324e2d90966a181ad116237d6cbb2d1d98f4b2f29a91b60e7ff0c96a005c858c7813a3f1a013d61f64ca03ae0c32e94d2804508088b59e9d339faed581bf55348a1f6e26055eab8af527ff9b4735cbf2f81c1cd53df728d14d71fe89bcb37bfc86f4e829cbda920af1b94317e3a12aade1def5dc792e7c7defe0390d4cd10f7eda9107b6e84a1ae775b6c6207e9b6dcc3d4e547944bcf949e7c6e35d6d7089786dd109906612cf87d461471e99ad401199376f1bc59afc41ddf0079b9f51ce75f30adde74a91d60368406156a17d1c2efc90aea85398e5a8b161d99fa477d8cf442029fd82b0dd2f02e4cd8d568ec702cd17afc13a1de96b446eef10413f29797db7f51ca42c1cbd3387a304300bec39febdab24703ff64940366d53bca51f091eac8454d65b1e1f91af41281ef4f75c04a13e475c771c19a8139a5664abfb05299d571429761febf576113208c409b4f40ee32f4b186bdb40fe10c31f1be8de714bb17dd9c4e409801a77d1284463b3dc6d4ab3149df938d5645ab9ca6827102022e2bdc680ebc3c32fad39585354dd2478170222028fec6ee80b087ace36ef73ce2b788736804a79b233e19fd80023339422aa2749e218921fbaf17184922480ead113f5f71d8fc1bf6a846b206143aeea8d1dd31d8b97ca036fea5475a03b0cf61276883c6bbe2e0fb458674bd50c79130183bba9bc1498d745f731d41e7ee7ba81c6b09811f08e39a9f68c4a704b72681533e9295d2aae4593337637aa263aa0e13333727aad01b6b2ae3126c6b4e517eb88a1b12fa63fb87cafe9fc32fe686f6476d32dc86a126436c30be4ccca87a1bee2bfc812cfc750aac828c44d3b03229e7a9964323df1647b7d7e4d3881d3233d4b0e90d263f94a84772eadd1dcc67f5eebc7ebbc5d03d91267ebb4b64f1470a36a72641e1e6371042ff9ad87dffc939e1d60cd8d84146e83523d46c12e0c90a4686fb008cebc773bef941ad587181cbded84b954d3d1d5379d939c32730375c74b4171740d70fbcdb7567b9e3cd5b6a07567ed05004d9123ed85c141de8a616f573282855384126c21c8f0c342dd82a467968b319176dff6dfa572e6b7b657d64761acd9eee096d449475ac06355504f60c5c02dc56a109c34b09266a6b7e84834cb191b2c0fdb56572609f50ad40f146e387fe1328a0c46d23eb1feff1518309f93bc990cd902747703355e4a817cbe620edb8545566a55dad415fe4bf8af470fb98fad73745fb738229e57562d577713a72daf64123a72a26c250ad57d05c6ba62e30565709e2f7613e7b9e0ed6c85cce19250139474a40cf402627cede0c2ea35cba9ce822431a36d25243279bd0d7d2c53b989e833496334f8ceb2f463d0d18a7df229382c8f0106baac5296e5338dcb2d35373c1e34250aaa58c3b5edb8c378f7da74e959999ebcbcb1b4acb5d9f78eb3cdff05b7f30bfac914f7d6ff2ccbb178a3c3b030d16863389666a1876acb3f7f3c9bad4b1a4069a99e6f4ee36d227d5158f7c9d9faf0aa51cd739cca5ed17137d7493bc334bda2fc166f1dd592d018f593790acf0477a75c2fe5b997dfe038a4ad274683f800c27381d0b297b0a88c6b05348be99ecb127e3c38ecdae27a81333daf29270de85fe9523d6e18df19c5d6d3ef1d8fea5c9e9e247345e27c9ae82b4e18c9a7613b5bdfb14181ac4e4595f36117643f3cccd1423e669e8b5a5c4e68099a32fea1b0f0a5a6f756b7091c0effb6b3d36cab771105d49531524e97bd47daf6034a947bb5bc0ac0c33950a5f2e94b98a9414d2dd3928a5557540a1891067beee26dabd7e47deabd44501e48a79681897740a78826d0502c1394edb084064c7599e8cd640495ab9adc68d2ab3cb38dac967a0270bb08e67326ee58d5108251a689ecc780b2eb2f57d40c219153f78a5c5ba7e4fdae663ff3f1c13d285b4986095800aea9e98d14e53c90df418d11928dbe1acc405b83d6d72101f77668b9317044271e4e5d7924f421340fae939c5f4c8a807e34f255f3274c82871898a6085dfc6361290d9d9d3a8c75810f568238271a3e1e6570b92933bd3f0f5c201a39b782ba1911e2cf8e3615e69b14ecfcdc7df9ea36c44e48fcd44fcecab049bd64c9ee460f189d1cda529af70db07bc2ad4b9432c1a7636f9cf82c4906313743fde00c4d4d4230350e7735193f40e43ad4fe13131019fc09b0647b52ce4b9c612069bcc1a4db80f482458fe466782e772f84a229e9d31fb0e8427f0ff69ed971ebcacacaa00d1b13cc9b60deb2d1cceaf63bff238a833d63a0dc0dae04af4421f690134fb3dfc6c25d16f31d8deea1ff0c373a2a6911e180f4b66da65b1ec0caac40d8d85b36e9f9f224ba8e2475c7c0b1fa493f17c8a02becc1be7f0680e56be69b10be3e203009c411fcde539f0d2c1f132d00db09863c8357d16b56b9b303aa7eaa123fe1d8f28adcca6ee89bc8264ec4a120852c8f1e077a11f7601c4829ab05a407d395ada1856aed2ee890861dad8158d8a2aeb6c18f20341691f6dcc9db77f2f56d1c8615b01ea57b8e9b25995b621f491a1f846e9bad0390768da9eed507fcb5c301bea300061b846edc4b5214f3d66838b5e05589b397dd7b23c0086d33cf36a49f902a71ab7cd0b5e988240a950b18f8739fa56923ef6af743d747d8d8a8aafa6e002721e52d2cf6ac46c5aa6ed0bbd7daaf17ee71aae1ce11f4ed75a61f078e6da78d1bd11f405298d24d7743badb49163fd06d1813136434f819663ae711bfc9b4cf83c1cee010597770c74243f5bbec876ffcb5d33a07afe994367813dbaac5979a22bfe7b1ace4cb4691689877529a64afc9abdec2e45054f99793ebc06fe3a6b41228af20a5f4b9a8763686233cc6eaa1c9d1ed744780368f7ba9e5ba02af4b53fb1c95b626e87814f0f5b5115bded6b0486e5eb4d7afb65e51de1c395bfcee13a5b1949ea5628a856ccff1337a1249bb7850d4e634b89aaf1c0239e580d5d2bba724aba58ef6e66e54016590dd080f2d239ef48301ed2c860417e3585a28a9ae1d9e3d2fabdc7dab46ececb9c3f678b08c9c37fb78930d662f672f749658ce315c7e55105afc89247217cf09dbae1e8fd09ae015de2b0abe17420e5be8642a0b6bcdf7c6e4301fee54665d7294fc2c54ab906fd290557a6e00db92f6d482aee485f0d36028a8aef5cb70a27ced8c468b508f6643cf6dae78866a40f3ad3c9457d4833a0237ab1105f4e1d20388100e9276d1a8b5a08b60a04387f5c4446ccfafb2c6b0401454ad56a2a8aac0c388ecceabcd87eb70daec22929b08f5f333d0608c13dc46509fd50523f2fea265ea1bf68db6a8f4bbed8c368b11d6c4c927b4cf25657ebc76bbd6473074dbdc94379762dbdc3b3d9b6ac0c1e647f7d3ac641dc04cc819831e278687e82360fd77df97445c212fb3bd54cb53b243a1b0bb829a78b7a721a6d8c3e5225a05cf682a76ae58e5f45cd1341a05f757414e73a96cd8903a4d6b95fe66501453235a06ce880a932f5b38ef09bb78f7c7fd1157e195244e3ad9bd667ed61a25ddd1966ad084999c5630d1a2721d96249bea7831ea941a615c6fcfb9dba2bb26bb4145890aec0c016fe8969e372fc47840dbf291cc3de0915444b1b90f18fc27e3867cb0b1cbdccb648600b8effde8e4cfb68454865b220e8e927e34d03b207e8a2b125a8f58e3990c6bd6c097a4996c980fb26e850b9f2e1f3cd64ee97595036c1134128bb4c97da012d9c53dad4b51f1152edd8bdf8a927e70926226137fb0b79c5952b28315662eaa7df132d585d766055cbbfa66f23cf5f0c0d41547da3722a4761bc2043d12c88b8e555e7372012594eb503efc31567d9199eac81a895af8bdd22c7cb89afc2e2fd06d822bec552c367bb52f773628326c8ae4cc8767bee4b4b7d54e5946b0ea71d435f98b3d498c0c462cc29fb6f61aac402b9efb42093c6af354e00924eafc3d85aee5e660d368c99c2eee34f878cf67ae7acf561e18de9d4d868ef9928c22c316410e8a87fc03757d51335fb062bb38e628619ef3b454723372e1cce7739ef5d54ea27fb3a7e8ca1fc09724afb71d476d0d6ca9aa8d4d6a123b7e949e15ffc7f277da4915d98a61d6797f5a637c435152ee1aea04eefa9bd6f26577ae355f065c023c1335114cbf914c8683e3a27a0af1cd9008daa9c965a7c2a6165c80f29ee57bc2a27d6549f8693f4377d463784747051135bba37600707f87d55e0d32b9ce345588dc6fa1f0917f919978e6c448b2ef9409b3d5788c34f3"}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20200030180c20000000800450f83f52fa100e03e1ea071c2cb000111907800000000000000004e210000001090f911f17461786224000000"], 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x40)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r4)
sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x80)
r5 = gettid()
write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x6, 0x5, 0x1ffff}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10m21.048275236s ago: executing program 4 (id=9711):
socket(0x2b, 0x80000, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080)
ioctl(r0, 0x8b27, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
syz_emit_ethernet(0x145, &(0x7f0000000640)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @random="7ee3d5da9735", @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8035, 0x7}}, {@ipv6={0x86dd, @generic={0x7, 0x6, "38a37c", 0x107, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x6}, @remote, {[@hopopts={0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x6c, 0x0, 0x2, 0x0, 0x0, 0x3, 0x68}, @srh={0x65, 0x6, 0x4, 0x3, 0x3, 0x28, 0xce, [@local, @local, @mcast2]}, @fragment={0x32, 0x0, 0x2, 0x0, 0x0, 0xe, 0x66}, @routing={0x2b, 0x6, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @mcast2]}], "6dda49438499947ee719bba073feb93e2bdbb47366fa7667756ff1a479355a5f4c5e359d7be180fe2df820e096b45f3ace69785c463e6bc0f248d8e6463902a97c714237952d4cf40f65e30230f50313aadc1a3dccdb2920201912a11c063e63a27149c12472fa6f905aadbf812745"}}}}}, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r3}, 0x14)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

10m20.368530476s ago: executing program 2 (id=9712):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = epoll_create1(0x80000)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
epoll_pwait(r3, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0)
epoll_pwait(r3, 0x0, 0x0, 0xffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000011c0)={0x2000000c})
unshare(0x20000400)
r5 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
close(0x3)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c030000", @ANYBLOB="000423010000ffdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="08000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000090428bd030000000000fc660000", @ANYRES32=0x0, @ANYBLOB="05840000008000001c0012800b00010062726964676500000c00028006002700010000001400030062726964676530000000000000000000"], 0x50}}, 0x40)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
write$nci(r6, 0x0, 0x0)
write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1}, 0x4)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=ANY=[@ANYRES16=r11, @ANYRESDEC=r6, @ANYRESDEC=r11, @ANYRES16=r7], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x20006801)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r11, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000200)=""/197, 0xc5})
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000"], 0x1c}}, 0x0)

10m19.962584506s ago: executing program 1 (id=9713):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000080)

10m19.900879151s ago: executing program 3 (id=9714):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001040)={'ipvlan1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{<r2=>0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x4400, &(0x7f00000002c0)={@_ha_fsid={[0x10, 0x3]}, {0x6, 0x8772, 0x2, 0x3ff80000000}}, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4}, {[0x5, 0x8, 0xffffffff, 0x2]}, 0x7, 0x0, 0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x4040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c805}, 0x8000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r2}, &(0x7f00000008c0), 0x0}, 0x20)
ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000002180)={&(0x7f0000001a00)={0xa, 0x4e20, 0x8, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB], 0x28}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004090)

10m19.596507886s ago: executing program 0 (id=9715):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10)
write(r1, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)

10m19.469052054s ago: executing program 4 (id=9716):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x40}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

10m18.70323524s ago: executing program 0 (id=9717):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

10m18.486335842s ago: executing program 3 (id=9718):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0xa)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a)
syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0)

10m18.46497581s ago: executing program 2 (id=9719):
syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x0, 0xfffd, {0x5, 0x4, 0x0, 0x4, 0x4, 0x66, 0x3, 0x0, 0x32, 0x4, @multicast2, @remote}}}}}}, 0x0)

10m18.06508659s ago: executing program 1 (id=9720):
syz_emit_ethernet(0xae, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0xf9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x20, 0x4, 0x1, 0x3e, 0x6, 0x64, 0x3, 0x0, 0x1d, 0x1ff, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x28, 0x2d, 0x0, 0xf, [0x2, 0x2, 0x80000001, 0x7, 0x2, 0x1, 0x1, 0x7, 0x2]}, @generic={0x94, 0xd, "78cfe6690aab756a96f2ea"}, @rr={0x7, 0xf, 0x2a, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6, 0x2}, @noop, @cipso={0x86, 0x1e, 0x3, [{0x0, 0x9, "0cec270c4c1d6b"}, {0x7, 0xf, "bd5b4dc21ed4a8a35a781ea433"}]}]}}}}}}}, 0x0)

10m17.477855903s ago: executing program 2 (id=9721):
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x6, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x2, 0x7, 0x2, 0x67, 0x6, 0xc, 0x33, 0x7, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp_addr={0x44, 0x4, 0xb8, 0x1, 0x9}]}}}}}}}, 0x0)

10m17.097769879s ago: executing program 1 (id=9722):
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0))
r0 = socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

10m16.951288706s ago: executing program 2 (id=9723):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0xffffffffffffffff, 0x5}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}, 0x0, 0x85ee175c56d0b2e6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

10m16.410585276s ago: executing program 4 (id=9724):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

10m16.383318913s ago: executing program 1 (id=9725):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000680))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x8000000004)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

10m15.897011135s ago: executing program 4 (id=9726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}}}}]}, 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)

10m15.662376884s ago: executing program 2 (id=9727):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x854)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

10m3.106314285s ago: executing program 32 (id=9717):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

10m2.921520462s ago: executing program 33 (id=9718):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0xa)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a)
syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0)

10m1.136461344s ago: executing program 34 (id=9725):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000680))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x8000000004)
pipe(&(0x7f0000000140))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

10m0.640296296s ago: executing program 35 (id=9726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}}}}]}, 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)

9m59.910374334s ago: executing program 36 (id=9727):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x854)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

4.094290177s ago: executing program 7 (id=14520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x9, 0xfffffffffffffffe})
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x40000003, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "00b612e6ff3f8d1d55039e47600ea0db29796bf6c144cd3e348922a64aeff881a389e2316d372ad60fce86c25fdb8c4b6051138bdfd581ea115df03fe52254be6474874a45f103c2ad74b1bc0ea79d909cc106ae451440a0cfba3f8bb4e1cf9ba96a2f700e40d22c044e8168733756d7cd604f2b710b51582d5993307f5848889af681be589ef67367cc933f6b6f27251d088a8442f8b772595449821de0198f87aff72bac262bd1e570f825de245024012ced791673b66cc8b23d253a35ea8cc2efd4d87f940316098196fd5ac75a4f091211ead07bef63aa948590132e7e671e96ea35ab8a9ab2b05ca9a4c6b3f28262f91f05305e56b1a2d0f3fdc06aa085"}]}}]}, 0x170}}, 0x24040004)

3.763143431s ago: executing program 7 (id=14523):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2d6d656d6f72792067a0db3f5e0805a8c277816ca5aa846cf7696c64388c392cc68271dff243b820b755084446d42f09bc51fba1760884997d2ce1c3f102c156f6f1747421a7f5132dacf55b364aad099832a0cb5077a5f439fd35852f5f9a20019379d407edf46dfe"], 0x8)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblcr\x00', 0x0, 0x80005, 0x6f}, 0x2c)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000300)={r2, &(0x7f0000000200)='[\x00', 0x400, &(0x7f0000000240)={@align, {0x80, 0x6, 0x1000000, 0xe0}}, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x5})
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

3.624897525s ago: executing program 9 (id=14524):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

3.188933845s ago: executing program 9 (id=14527):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'virt_wifi0\x00', @multicast})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0)

2.632010354s ago: executing program 9 (id=14531):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc0c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x99}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281", 0xab}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000015c0)="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", 0xdf1}], 0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

2.631572037s ago: executing program 7 (id=14532):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

2.535192726s ago: executing program 5 (id=14533):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000050000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0)

2.333116721s ago: executing program 7 (id=14534):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000f00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "80528bbfa8def3b38bff91d0c5"}]}, @NFT_MSG_NEWSET={0x178, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc2}, @NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x944}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x210}, 0x1, 0x0, 0x0, 0x76ccf512d83dc18f}, 0x20000000)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x17)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x1010, r4, 0x4786d000)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0)
listen(r4, 0x100)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x5, 0x7d6, [0x0, 0x200000000400, 0x2000000006f6, 0x200000000844], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x2, 0x9100, 'veth0_vlan\x00', 'veth0_macvtap\x00', 'caif0\x00', 'veth0_to_batadv\x00', @local, [0xff, 0xff, 0xff, 0xff], @link_local, [0x0, 0x0, 0xff, 0x0, 0xff], 0x116, 0x296, 0x2c6, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 0x6, 0x29, 0x8, 0x44, 0x4e24, 0x4e21, 0x4e22, 0x4e20}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x52, 'system_u:object_r:tmpfs_t:s0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffff4, 'syz0\x00', {0x7}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x8, 0x88a2, 'pim6reg\x00', 'lo\x00', 'pimreg\x00', 'nr0\x00', @local, [0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x400, 0x216a, 0x2, 0x1, 0x0, "64bb6e0447f2f5359995bdbc29db33770287c5a28e70c4e52d0035a360291b57983eb72749d741448500caa3be8021a72c324d25384ec3403080bf014f5b8151"}}}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x0, 0x200, 'hsr0\x00', 'vxcan1\x00', 'ipvlan1\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf6, 0x126, 0x176, [@realm={{'realm\x00', 0x0, 0x10}, {{0x0, 0x81}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x898f}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}], @common=@log={'log\x00', 0x28, {{0xf, "376987de887eca1076a4f96f3d0ce5d0ffcc7cc2211dde746f6b04d44569", 0x1}}}}, {0x9, 0x18, 0xdada, 'erspan0\x00', 'macsec0\x00', 'ipvlan1\x00', 'veth1_to_bond\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xee, 0x11e, [], [@common=@mark={'mark\x00', 0x10, {{0x2ae5696f0eb42011, 0xfffffffffffffffd}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x5, 0x4b, {0x5}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x5, 0x2, 0x6001, 'dvmrp0\x00', 'veth1_to_hsr\x00', 'gre0\x00', 'veth0_to_bridge\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x74006abfccd9c3dc, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3ff}}}}]}]}, 0x84e)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0)

2.169243252s ago: executing program 5 (id=14536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r1)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x50}, 0x1, 0x0, 0x0, 0x5000}, 0x10000)

2.118930506s ago: executing program 8 (id=14537):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x5802, 0x294, 0x0, 0x294, 0x2d8, 0x325, 0x378, 0x2d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff009001], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0x32, 0xfd, 0x0, 0x59}, 0x0, 0x128, 0x190, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x8, 0x3, 0x1, 0x5, 0x5, 0x0, 0x2513097a, 0x0, 0x18}, {0x8000}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)

1.715262079s ago: executing program 8 (id=14538):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0xfc2, 0x3ff}, 0x50) (fail_nth: 67)

1.705207112s ago: executing program 7 (id=14539):
r0 = socket$inet(0x10, 0x3, 0x6)
getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8000, 0x4, 0x4, 0x80000001}, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x1, @mcast2, 0x6}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x800]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0x0, 0xd}, {0x1, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x24044834)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)="93d90400000300b5b5", 0x9}], 0x1)

1.704904553s ago: executing program 5 (id=14540):
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x30, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x5, 0x4, 0x1, 0x6, 0xa338, 0x64, 0xa604, 0xff, 0x4, 0xf97, @empty=0x300, @empty}}}}}}, 0x0)

1.412967685s ago: executing program 5 (id=14542):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r1 = socket(0x2b, 0x1, 0x1)
ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000500)="558a20a713edeeca6b9f72587c1a8b7dd2db291a26558445158dae9144e4710aec6668d9c91aa458e0c7078a1d6a1460f071b201c60d0ac09e59ca0c496c5ed7b4c556cf1faf42f3d83aa022ac783aa8e33c53b90367278864acb5a748a3c25a927dade31eb8a2707b0ff3a9b592a5eb4267c2f0")
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000600)=0x1, 0x43)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) (async, rerun: 64)
sendmsg$OSF_MSG_ADD(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x81, 0xce, 0x5, 0xe79, 0x9, 0x8]}, &(0x7f00000004c0)=0x78) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="e60c0000e005bb9f8db5cae3825368045b72c9e1c49d", @ANYRES64=r2], 0x20}}, 0x0)
clock_gettime(0x7, &(0x7f0000000000)) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, 0x5d) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000240)=""/209, &(0x7f0000000340)=0xd1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0) (async, rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4], 0x48) (rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={'wg0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async)
recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000480), 0x1}, 0x3a}], 0x400000000000159, 0x142, 0x0) (async)
socket(0xa, 0x3, 0x10) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x10}, 0x27)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x6}, 0x4) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) (async)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xa, 0xc}, {0x0, 0xb}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2804}, 0x0) (async)
setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x37}, @loopback, r9}, 0xc)

1.412545483s ago: executing program 8 (id=14543):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x8, 0x400, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="d8", 0x1}], 0x1}, 0x20000885)

1.296267251s ago: executing program 6 (id=14544):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000ffff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)

1.283023825s ago: executing program 9 (id=14545):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0xfc2, 0x3ff}, 0x50) (fail_nth: 78)

1.063922141s ago: executing program 6 (id=14546):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000060000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0)

919.573912ms ago: executing program 7 (id=14547):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000040)="6574683000000000000000000000000001000000")
ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000")
ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00')
bind$x25(r0, &(0x7f0000000080), 0x12)
connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480200, 0x0)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000043054ed801650066000009219078000000000a0101017f0000010a010100640101006401010200000000e000000164010100071ba3ac1414bbac1414aaac1e0101ac14143cac1414bbac1414aa442c3833e00000020000000400000000000006e5ac1e01010000000dffffffff00000001ac1414bb000000099404010083133d640101006401010200000000ac1414bb442405600000000e80000001fffffffd00000040000001ff0000004d0000250b0000000001004e234e2204419078ac56e97a0417e918bfc2f60b38a6e81ebe6e38d6d0cf66b2b84ddbd855f10e809433337321971f743fb70dbeca1b12eefd4e3605249195d0cff48a27eabb72deb50c32c707eb29b592eb5a57fea00fea9609ea21af25309ac74cdbf717ee14a259a645f5a45fe02a6da048ac93c80082aa0f5d337c015c6e961a64730d08c2684bf2e608cfc2cd8da0bda3c650f09e1ed6bc32bb7f19424f9bb9c1335f046d8f237a0ad31e00000000"], 0x169)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080003"], 0x2c}}, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r7, @ANYBLOB="080002007f00000108000400ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
syz_emit_ethernet(0x66, &(0x7f0000000f80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[@dstopts={0x87}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0)

919.065121ms ago: executing program 8 (id=14548):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a300000000014"], 0x68}}, 0x0)

825.602485ms ago: executing program 9 (id=14549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

730.302554ms ago: executing program 6 (id=14550):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @random="a63e70d2e92d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback={0x1000000}, [@fragment={0x33, 0x0, 0xc, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)

640.943977ms ago: executing program 8 (id=14551):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
read(r3, &(0x7f00000003c0)=""/132, 0x84) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x54, r4, 0xc11, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ea3a6b20b6686083583b055ebb"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8804}, 0x40800) (async)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async, rerun: 32)
r6 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0x0, 0x0) (async)
ioctl(r6, 0x6, 0x0) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0)

440.316874ms ago: executing program 8 (id=14552):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r0, r0, 0x0, 0xa)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x42)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000e5ffffff0000180090bade9a010069703665727370616e000900000000000000010a572ff8921e675827ae96e53b0e9606eaa7c1ba75933abd778d6030cb2f8caec1"], 0x44}}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x10000, 0x7fff, 0x100, 0xa, 0x3, 0xffffffff, 0x0, 0x5}})

439.496591ms ago: executing program 5 (id=14553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff01fffc0005000700000000000800090000000400060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)

404.517163ms ago: executing program 9 (id=14554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
write(r1, &(0x7f0000000140)="00008847d100582a", 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r7, 0x29, 0x10, 0x0, &(0x7f0000000280))
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f00000002c0)=0x14d9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0\x00', <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa80, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800ffffffff00000000000004000000000000000000000a2b0e72f6dd1da100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0xffe0}, {0xb, 0xd}, {0x3, 0xf}}, ["", "", "", "", "", ""]}, 0x24}}, 0x0)

381.199979ms ago: executing program 6 (id=14555):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000150081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

108.121993ms ago: executing program 6 (id=14556):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x4, 0x1, 0xbf22}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x4, 0x1, 0xbf22}, 0x50)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x84, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto(r3, &(0x7f0000000300)="42d101b5372cff6ddd5f6c8c5dbf19392193fd7324b0ac4bb0fbb3d0997426f35d6a4cce63faf187e42a2f8fa106248f5a99dc98438e674fd5e3d0322b56035bc5dc6bb11d62f3d7bb95370a1e3cf2c06f6d931d", 0x54, 0x10, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x0, 0x1, 0x2, 0x3}}, 0x80)
sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0)

30.092606ms ago: executing program 6 (id=14557):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x18, 0x5, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000000})

0s ago: executing program 5 (id=14558):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
poll(&(0x7f00000001c0)=[{r0, 0x2}, {r1, 0x1102}], 0x2, 0xc511)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x25dfdbfb, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000)

kernel console output (not intermixed with test programs):

 1748.237764][ T6189]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1748.237828][ T6189]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1748.237906][ T6189]  netlink_unicast+0x7bd/0x940
[ 1748.238000][ T6189]  netlink_sendmsg+0x813/0xb40
[ 1748.238103][ T6189]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1748.238190][ T6189]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1748.238324][ T6189]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1748.238386][ T6189]  sock_sendmsg_nosec+0x13a/0x180
[ 1748.238464][ T6189]  ____sys_sendmsg+0x54e/0x850
[ 1748.238541][ T6189]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1748.238629][ T6189]  ? import_iovec+0x73/0xa0
[ 1748.238751][ T6189]  ___sys_sendmsg+0x2a5/0x360
[ 1748.238807][ T6189]  ? __lock_acquire+0x6df/0x2e50
[ 1748.238879][ T6189]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1748.239038][ T6189]  ? __fget_files+0x2a/0x420
[ 1748.239121][ T6189]  ? __fget_files+0x3a2/0x420
[ 1748.239220][ T6189]  __x64_sys_sendmsg+0x1b1/0x290
[ 1748.239292][ T6189]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1748.239410][ T6189]  do_syscall_64+0x166/0x520
[ 1748.239480][ T6189]  ? trace_irq_disable+0x3b/0x140
[ 1748.239542][ T6189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.239600][ T6189]  ? clear_bhb_loop+0x70/0xc0
[ 1748.239677][ T6189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1748.239733][ T6189] RIP: 0033:0x7f45eed9e159
[ 1748.239795][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1748.239848][ T6189] RSP: 002b:00007f45efc52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1748.239912][ T6189] RAX: ffffffffffffffda RBX: 00007f45ef025fa0 RCX: 00007f45eed9e159
[ 1748.239956][ T6189] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1748.239998][ T6189] RBP: 00007f45efc52090 R08: 0000000000000000 R09: 0000000000000000
[ 1748.240039][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1748.240089][ T6189] R13: 00007f45ef026038 R14: 00007f45ef025fa0 R15: 00007fff90abf9e8
[ 1748.240186][ T6189]  </TASK>
[ 1748.909443][ T6196] xt_TCPMSS: Only works on TCP SYN packets
[ 1749.317549][ T6215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1749.457351][ T6223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1749.457397][ T6223] IPv6: NLM_F_CREATE should be set when creating new route
[ 1749.537718][ T6227] netlink: 'syz.8.12867': attribute type 1 has an invalid length.
[ 1749.711820][ T6239] netlink: 'syz.6.12868': attribute type 17 has an invalid length.
[ 1749.720114][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12868'.
[ 1749.729395][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12868'.
[ 1750.008630][ T6254] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000
[ 1750.023346][ T6242] bond9: option all_slaves_active: invalid value (222)
[ 1750.044733][ T6242] bond9 (unregistering): Released all slaves
[ 1750.319335][ T6260] netlink: 'syz.6.12876': attribute type 1 has an invalid length.
[ 1750.327670][ T6260] netlink: 216 bytes leftover after parsing attributes in process `syz.6.12876'.
[ 1750.338187][ T6262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1750.346732][ T6262] FAULT_INJECTION: forcing a failure.
[ 1750.346732][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1750.360377][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.7.12878 Not tainted syzkaller #0 PREEMPT(full) 
[ 1750.360410][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1750.360424][ T6262] Call Trace:
[ 1750.360434][ T6262]  <TASK>
[ 1750.360444][ T6262]  dump_stack_lvl+0xe8/0x150
[ 1750.360484][ T6262]  should_fail_ex+0x410/0x560
[ 1750.360524][ T6262]  _copy_to_user+0x31/0xb0
[ 1750.360551][ T6262]  simple_read_from_buffer+0xe1/0x170
[ 1750.360593][ T6262]  proc_fail_nth_read+0x1bb/0x230
[ 1750.360628][ T6262]  ? common_file_perm+0x20e/0x2b0
[ 1750.360669][ T6262]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1750.360708][ T6262]  ? rw_verify_area+0x24a/0x4c0
[ 1750.360742][ T6262]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1750.360773][ T6262]  vfs_read+0x213/0xa80
[ 1750.360809][ T6262]  ? __pfx___mutex_lock+0x10/0x10
[ 1750.360841][ T6262]  ? __pfx_vfs_read+0x10/0x10
[ 1750.360874][ T6262]  ? __fget_files+0x2a/0x420
[ 1750.360908][ T6262]  ? __fget_files+0x3a2/0x420
[ 1750.360936][ T6262]  ? __fget_files+0x2a/0x420
[ 1750.360973][ T6262]  ksys_read+0x150/0x270
[ 1750.361007][ T6262]  ? __pfx_ksys_read+0x10/0x10
[ 1750.361048][ T6262]  do_syscall_64+0x166/0x520
[ 1750.361077][ T6262]  ? trace_irq_disable+0x3b/0x140
[ 1750.361100][ T6262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1750.361124][ T6262]  ? clear_bhb_loop+0x70/0xc0
[ 1750.361152][ T6262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1750.361176][ T6262] RIP: 0033:0x7faa02d5e98e
[ 1750.361198][ T6262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1750.361225][ T6262] RSP: 002b:00007faa03d21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1750.361250][ T6262] RAX: ffffffffffffffda RBX: 00007faa03d226c0 RCX: 00007faa02d5e98e
[ 1750.361268][ T6262] RDX: 000000000000000f RSI: 00007faa03d220a0 RDI: 0000000000000005
[ 1750.361287][ T6262] RBP: 00007faa03d22090 R08: 0000000000000000 R09: 0000000000000000
[ 1750.361303][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1750.361317][ T6262] R13: 00007faa03026038 R14: 00007faa03025fa0 R15: 00007fff3ff88258
[ 1750.361361][ T6262]  </TASK>
[ 1750.602871][ T6260] bridge6: entered promiscuous mode
[ 1750.608299][ T6260] bridge6: entered allmulticast mode
[ 1750.718632][ T6264] bridge7: entered promiscuous mode
[ 1750.718690][ T6264] bridge7: entered allmulticast mode
[ 1750.738993][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12877'.
[ 1750.860491][ T6278] netlink: 'syz.7.12880': attribute type 1 has an invalid length.
[ 1750.912587][ T6278] bond6: entered promiscuous mode
[ 1750.918325][ T6278] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1750.979196][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12884'.
[ 1751.011615][ T6280] netlink: 'syz.8.12884': attribute type 1 has an invalid length.
[ 1751.032540][ T6278] macvtap3: entered allmulticast mode
[ 1751.069415][ T6282] macvtap4: entered allmulticast mode
[ 1751.083967][ T6289] FAULT_INJECTION: forcing a failure.
[ 1751.083967][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1751.084032][ T6289] CPU: 0 UID: 0 PID: 6289 Comm: syz.6.12886 Not tainted syzkaller #0 PREEMPT(full) 
[ 1751.084059][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1751.084073][ T6289] Call Trace:
[ 1751.084083][ T6289]  <TASK>
[ 1751.084094][ T6289]  dump_stack_lvl+0xe8/0x150
[ 1751.084133][ T6289]  should_fail_ex+0x410/0x560
[ 1751.084171][ T6289]  _copy_from_user+0x2d/0xb0
[ 1751.084206][ T6289]  ___sys_sendmsg+0x1c6/0x360
[ 1751.084230][ T6289]  ? __lock_acquire+0x6df/0x2e50
[ 1751.084259][ T6289]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1751.084319][ T6289]  ? __fget_files+0x2a/0x420
[ 1751.084349][ T6289]  ? __fget_files+0x3a2/0x420
[ 1751.084391][ T6289]  __x64_sys_sendmsg+0x1b1/0x290
[ 1751.084417][ T6289]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1751.084463][ T6289]  do_syscall_64+0x166/0x520
[ 1751.084497][ T6289]  ? trace_irq_disable+0x3b/0x140
[ 1751.084519][ T6289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1751.084544][ T6289]  ? clear_bhb_loop+0x70/0xc0
[ 1751.084572][ T6289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1751.084596][ T6289] RIP: 0033:0x7f91e259e159
[ 1751.084617][ T6289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1751.084637][ T6289] RSP: 002b:00007f91e3514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1751.084662][ T6289] RAX: ffffffffffffffda RBX: 00007f91e2825fa0 RCX: 00007f91e259e159
[ 1751.084681][ T6289] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1751.084695][ T6289] RBP: 00007f91e3514090 R08: 0000000000000000 R09: 0000000000000000
[ 1751.084711][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1751.084724][ T6289] R13: 00007f91e2826038 R14: 00007f91e2825fa0 R15: 00007ffc55043728
[ 1751.084760][ T6289]  </TASK>
[ 1751.396229][ T6278] bridge8: entered promiscuous mode
[ 1751.406383][ T6278] bond6: (slave bridge8): Enslaving as an active interface with an up link
[ 1751.436400][ T6297] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12889'.
[ 1751.714002][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12891'.
[ 1752.081853][ T6326] FAULT_INJECTION: forcing a failure.
[ 1752.081853][ T6326] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1752.098504][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.8.12899 Not tainted syzkaller #0 PREEMPT(full) 
[ 1752.098537][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1752.098551][ T6326] Call Trace:
[ 1752.098561][ T6326]  <TASK>
[ 1752.098572][ T6326]  dump_stack_lvl+0xe8/0x150
[ 1752.098611][ T6326]  should_fail_ex+0x410/0x560
[ 1752.098650][ T6326]  _copy_from_user+0x2d/0xb0
[ 1752.098675][ T6326]  ___sys_sendmsg+0x1c6/0x360
[ 1752.098698][ T6326]  ? __lock_acquire+0x6df/0x2e50
[ 1752.098726][ T6326]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1752.098784][ T6326]  ? __fget_files+0x2a/0x420
[ 1752.098813][ T6326]  ? __fget_files+0x3a2/0x420
[ 1752.098855][ T6326]  __x64_sys_sendmsg+0x1b1/0x290
[ 1752.098881][ T6326]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1752.098927][ T6326]  do_syscall_64+0x166/0x520
[ 1752.098957][ T6326]  ? trace_irq_disable+0x3b/0x140
[ 1752.098978][ T6326]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1752.099002][ T6326]  ? clear_bhb_loop+0x70/0xc0
[ 1752.099030][ T6326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1752.099054][ T6326] RIP: 0033:0x7f6cd059e159
[ 1752.099075][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1752.099094][ T6326] RSP: 002b:00007f6cce7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1752.099117][ T6326] RAX: ffffffffffffffda RBX: 00007f6cd0825fa0 RCX: 00007f6cd059e159
[ 1752.099134][ T6326] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[ 1752.099150][ T6326] RBP: 00007f6cce7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1752.099164][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1752.099178][ T6326] R13: 00007f6cd0826038 R14: 00007f6cd0825fa0 R15: 00007ffe66117e58
[ 1752.099223][ T6326]  </TASK>
[ 1752.494012][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12900'.
[ 1752.504694][ T6336] netlink: 'syz.9.12904': attribute type 26 has an invalid length.
[ 1752.835729][ T6351] netlink: 'syz.8.12909': attribute type 10 has an invalid length.
[ 1752.909937][ T6351] 8021q: adding VLAN 0 to HW filter on device team0
[ 1752.930344][ T6351] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1753.057952][ T6359] FAULT_INJECTION: forcing a failure.
[ 1753.057952][ T6359] name failslab, interval 1, probability 0, space 0, times 0
[ 1753.071314][ T6359] CPU: 1 UID: 0 PID: 6359 Comm: syz.5.12914 Not tainted syzkaller #0 PREEMPT(full) 
[ 1753.071347][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1753.071362][ T6359] Call Trace:
[ 1753.071372][ T6359]  <TASK>
[ 1753.071382][ T6359]  dump_stack_lvl+0xe8/0x150
[ 1753.071421][ T6359]  should_fail_ex+0x410/0x560
[ 1753.071457][ T6359]  ? __alloc_skb+0x1db/0x7a0
[ 1753.071489][ T6359]  should_failslab+0xa8/0x100
[ 1753.071518][ T6359]  ? __alloc_skb+0x1db/0x7a0
[ 1753.071547][ T6359]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1753.071581][ T6359]  ? __alloc_skb+0x18d/0x7a0
[ 1753.071614][ T6359]  ? __alloc_skb+0x1db/0x7a0
[ 1753.071652][ T6359]  __alloc_skb+0x1db/0x7a0
[ 1753.071687][ T6359]  netlink_sendmsg+0x5d4/0xb40
[ 1753.071726][ T6359]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1753.071759][ T6359]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1753.071796][ T6359]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1753.071821][ T6359]  sock_sendmsg_nosec+0x13a/0x180
[ 1753.071853][ T6359]  ____sys_sendmsg+0x54e/0x850
[ 1753.071882][ T6359]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1753.071914][ T6359]  ? import_iovec+0x73/0xa0
[ 1753.071953][ T6359]  ___sys_sendmsg+0x2a5/0x360
[ 1753.071975][ T6359]  ? __lock_acquire+0x6df/0x2e50
[ 1753.072003][ T6359]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1753.072063][ T6359]  ? __fget_files+0x2a/0x420
[ 1753.072095][ T6359]  ? __fget_files+0x3a2/0x420
[ 1753.072134][ T6359]  __x64_sys_sendmsg+0x1b1/0x290
[ 1753.072160][ T6359]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1753.072211][ T6359]  do_syscall_64+0x166/0x520
[ 1753.072241][ T6359]  ? trace_irq_disable+0x3b/0x140
[ 1753.072262][ T6359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.072286][ T6359]  ? clear_bhb_loop+0x70/0xc0
[ 1753.072315][ T6359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.072339][ T6359] RIP: 0033:0x7f45eed9e159
[ 1753.072361][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1753.072382][ T6359] RSP: 002b:00007f45efc52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1753.072409][ T6359] RAX: ffffffffffffffda RBX: 00007f45ef025fa0 RCX: 00007f45eed9e159
[ 1753.072426][ T6359] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[ 1753.072442][ T6359] RBP: 00007f45efc52090 R08: 0000000000000000 R09: 0000000000000000
[ 1753.072458][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1753.072472][ T6359] R13: 00007f45ef026038 R14: 00007f45ef025fa0 R15: 00007fff90abf9e8
[ 1753.072508][ T6359]  </TASK>
[ 1753.431476][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12913'.
[ 1753.528593][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12915'.
[ 1753.615012][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12917'.
[ 1753.703630][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12919'.
[ 1753.911245][ T6366] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1754.236785][ T6361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1754.433466][ T6400] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1754.444373][ T6400] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1754.492763][ T6409] netlink: 'syz.6.12928': attribute type 1 has an invalid length.
[ 1754.624760][ T6417] netlink: Invalid conntrack timeout
[ 1754.630302][ T6417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1754.685384][ T6409] bond8: entered promiscuous mode
[ 1754.694823][ T6409] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1754.729240][ T6411] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1754.742164][ T6411] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address
[ 1754.742191][ T6411] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[ 1755.781625][ T6400] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1755.781693][ T6400] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1755.856891][ T6436] syzkaller0: mtu less than device minimum
[ 1755.958472][ T6434] __nla_validate_parse: 6 callbacks suppressed
[ 1755.958531][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12933'.
[ 1755.958691][ T6434] openvswitch: netlink: Missing key (keys=c0, expected=100)
[ 1755.975056][ T6434] netlink: 'syz.5.12933': attribute type 32 has an invalid length.
[ 1755.975088][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12933'.
[ 1756.022975][ T6400] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1756.033253][ T6400] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1756.159720][ T6434] bond5: option coupled_control: invalid value (192)
[ 1756.171492][ T6434] bond5 (unregistering): Released all slaves
[ 1756.414420][ T6454] FAULT_INJECTION: forcing a failure.
[ 1756.414420][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1756.414478][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.6.12938 Not tainted syzkaller #0 PREEMPT(full) 
[ 1756.414505][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1756.414520][ T6454] Call Trace:
[ 1756.414530][ T6454]  <TASK>
[ 1756.414540][ T6454]  dump_stack_lvl+0xe8/0x150
[ 1756.414579][ T6454]  should_fail_ex+0x410/0x560
[ 1756.414618][ T6454]  _copy_from_iter+0x1d3/0x1660
[ 1756.414653][ T6454]  ? __alloc_skb+0x27a/0x7a0
[ 1756.414688][ T6454]  ? __alloc_skb+0x27a/0x7a0
[ 1756.414721][ T6454]  ? __alloc_skb+0x27a/0x7a0
[ 1756.414754][ T6454]  ? __pfx__copy_from_iter+0x10/0x10
[ 1756.414784][ T6454]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1756.414817][ T6454]  ? __alloc_skb+0x27a/0x7a0
[ 1756.414846][ T6454]  ? __alloc_skb+0x27a/0x7a0
[ 1756.414884][ T6454]  ? netlink_sendmsg+0x650/0xb40
[ 1756.414910][ T6454]  ? skb_put+0x112/0x210
[ 1756.414946][ T6454]  netlink_sendmsg+0x6c0/0xb40
[ 1756.414982][ T6454]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1756.415017][ T6454]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1756.415052][ T6454]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1756.415081][ T6454]  sock_sendmsg_nosec+0x13a/0x180
[ 1756.415112][ T6454]  ____sys_sendmsg+0x54e/0x850
[ 1756.415141][ T6454]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1756.415174][ T6454]  ? import_iovec+0x73/0xa0
[ 1756.415213][ T6454]  ___sys_sendmsg+0x2a5/0x360
[ 1756.415235][ T6454]  ? __lock_acquire+0x6df/0x2e50
[ 1756.415263][ T6454]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1756.415324][ T6454]  ? __fget_files+0x2a/0x420
[ 1756.415358][ T6454]  ? __fget_files+0x3a2/0x420
[ 1756.415400][ T6454]  __x64_sys_sendmsg+0x1b1/0x290
[ 1756.415426][ T6454]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1756.415473][ T6454]  do_syscall_64+0x166/0x520
[ 1756.415503][ T6454]  ? trace_irq_disable+0x3b/0x140
[ 1756.415525][ T6454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1756.415549][ T6454]  ? clear_bhb_loop+0x70/0xc0
[ 1756.415576][ T6454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1756.415600][ T6454] RIP: 0033:0x7f91e259e159
[ 1756.415622][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1756.415643][ T6454] RSP: 002b:00007f91e3514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1756.415669][ T6454] RAX: ffffffffffffffda RBX: 00007f91e2825fa0 RCX: 00007f91e259e159
[ 1756.415686][ T6454] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000003
[ 1756.415701][ T6454] RBP: 00007f91e3514090 R08: 0000000000000000 R09: 0000000000000000
[ 1756.415716][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1756.415731][ T6454] R13: 00007f91e2826038 R14: 00007f91e2825fa0 R15: 00007ffc55043728
[ 1756.415766][ T6454]  </TASK>
[ 1756.723299][ T6400] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1756.723360][ T6400] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1757.089307][T13261] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1757.089371][T13261] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1757.109767][T13261] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1757.109824][T13261] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1757.114828][T25772] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1757.114932][T25772] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1757.223267][T13260] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1757.223335][T13260] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1757.495295][ T6493] smc: net device lo erased user defined pnetid SYZ0
[ 1757.552729][ T6493] smc: smcd device lo erased user defined pnetid SYZ0
[ 1757.618401][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12957'.
[ 1757.654102][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1757.654248][ T6500] bridge0: port 2(bridge_slave_1) entered listening state
[ 1757.654556][ T6500] bridge0: port 1(
1�x9�) entered blocking state
[ 1757.654692][ T6500] bridge0: port 1(
1�x9�) entered listening state
[ 1757.752715][ T6500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1757.827963][ T6499] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1757.927949][ T6503] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1757.944139][ T6510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1757.996895][ T6508] syzkaller0: mtu less than device minimum
[ 1759.097813][ T6550] x_tables: unsorted entry at hook 1
[ 1759.406076][ T6563] xt_check_target_common: 1 callbacks suppressed
[ 1759.406207][ T6563] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1759.849002][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12987'.
[ 1760.358909][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12997'.
[ 1760.446579][ T6618] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.12997'.
[ 1760.446640][ T6618] openvswitch: netlink: Message has 512 unknown bytes.
[ 1760.646668][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13002'.
[ 1760.747305][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13003'.
[ 1760.757711][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13003'.
[ 1761.130023][ T6637] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1761.331697][ T6643] veth1_to_hsr: left allmulticast mode
[ 1761.357136][ T6643] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1761.373260][ T6645] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1761.604698][ T6661] gretap0: entered promiscuous mode
[ 1761.604874][ T6661] vlan4: entered promiscuous mode
[ 1761.701708][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13015'.
[ 1762.164401][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13024'.
[ 1762.181387][ T6687] bond0: invalid NS target :: specified for addition
[ 1762.181441][ T6687] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[ 1762.201620][ T6687] x_tables: duplicate underflow at hook 2
[ 1762.223780][ T6692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1762.540777][ T6711] bridge_slave_1: entered promiscuous mode
[ 1762.861719][ T6720] bond9: option arp_all_targets: invalid value (18446744073709551613)
[ 1763.011370][ T6720] bond9 (unregistering): Released all slaves
[ 1763.612836][ T6755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1763.653623][ T6751] syzkaller0: MTU too low for tipc bearer
[ 1763.653673][ T6751] tipc: Disabling bearer <eth:syzkaller0>
[ 1763.798864][ T6761] netlink: 'syz.9.13042': attribute type 7 has an invalid length.
[ 1763.798911][ T6761] netlink: 140 bytes leftover after parsing attributes in process `syz.9.13042'.
[ 1764.138877][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13044'.
[ 1764.681909][ T6805] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1764.755692][ T6809] netlink: 72 bytes leftover after parsing attributes in process `syz.5.13055'.
[ 1764.761311][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13053'.
[ 1764.761429][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13053'.
[ 1764.850041][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13056'.
[ 1764.866815][ T6808] bond0: Caught tx_queue_len zero misconfig
[ 1764.866934][ T6808] netlink: 6 bytes leftover after parsing attributes in process `syz.8.13056'.
[ 1765.289111][ T6824] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1765.389237][ T6827] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1765.400374][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13066'.
[ 1765.615368][ T6845] syz_tun: entered promiscuous mode
[ 1766.185470][ T6880] netlink: 'syz.9.13074': attribute type 2 has an invalid length.
[ 1766.961559][ T6914] SET target dimension over the limit!
[ 1767.811138][ T6945] __nla_validate_parse: 1 callbacks suppressed
[ 1767.819378][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13098'.
[ 1768.560274][ T6976] netlink: 72 bytes leftover after parsing attributes in process `syz.8.13108'.
[ 1768.560334][ T6976] netlink: 72 bytes leftover after parsing attributes in process `syz.8.13108'.
[ 1768.605013][ T6975] bridge0: port 3(syz_tun) entered disabled state
[ 1768.607657][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1768.609307][ T6975] bridge0: port 1(
1�x9�) entered disabled state
[ 1768.647937][ T6975] bridge0: entered promiscuous mode
[ 1768.797599][ T6984] netlink: 116 bytes leftover after parsing attributes in process `syz.9.13113'.
[ 1768.845728][ T6984] team0: Device gtp2 is up. Set it down before adding it as a team port
[ 1768.868509][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 60 seconds
[ 1768.877774][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 60 seconds
[ 1768.877869][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 60 seconds
[ 1768.877954][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 60 seconds
[ 1769.201505][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13118'.
[ 1769.239866][ T7011] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1769.468703][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13124'.
[ 1769.479656][ T7005] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1769.561480][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13126'.
[ 1769.803668][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13131'.
[ 1769.804396][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13131'.
[ 1769.989051][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13137'.
[ 1770.046050][ T7040] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1770.046412][ T7040] syzkaller1: linktype set to 823
[ 1770.170951][ T7052] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 !
[ 1770.655226][ T7074] netlink: 'syz.8.13146': attribute type 6 has an invalid length.
[ 1770.655270][ T7074] netlink: 'syz.8.13146': attribute type 5 has an invalid length.
[ 1770.685496][ T7074] lo: Caught tx_queue_len zero misconfig
[ 1770.957276][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1770.982695][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1771.064905][ T7098] netlink: 'syz.8.13155': attribute type 62 has an invalid length.
[ 1771.072999][ T7098] xt_IDLETIMER: label is empty or not nul-terminated
[ 1771.874374][ T7137] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1772.553396][ T7181] netlink: 'syz.8.13177': attribute type 1 has an invalid length.
[ 1773.024667][ T7197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1773.440419][ T7220] xt_cgroup: no path or classid specified
[ 1773.441787][ T7221] xt_cgroup: no path or classid specified
[ 1773.539355][ T7223] __nla_validate_parse: 15 callbacks suppressed
[ 1773.539418][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13189'.
[ 1773.640849][ T7229] syzkaller0: entered promiscuous mode
[ 1773.640901][ T7229] syzkaller0: entered allmulticast mode
[ 1773.689761][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13190'.
[ 1773.689843][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13190'.
[ 1773.771308][ T7231] netlink: 'syz.7.13192': attribute type 23 has an invalid length.
[ 1773.871989][ T7241] smc: net device team0 applied user defined pnetid SYZ2
[ 1774.299069][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13202'.
[ 1774.349402][ T7260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1774.349468][ T7260] IPv6: NLM_F_CREATE should be set when creating new route
[ 1774.539666][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13206'.
[ 1774.588661][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13208'.
[ 1774.598550][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13207'.
[ 1774.663344][ T7269] 8021q: adding VLAN 0 to HW filter on device team1
[ 1774.920358][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13211'.
[ 1774.967932][ T7269] pim6reg: entered allmulticast mode
[ 1775.013804][ T7285] pim6reg: left allmulticast mode
[ 1776.171866][ T7312] netlink: 'syz.6.13219': attribute type 1 has an invalid length.
[ 1776.171926][ T7312] netlink: 'syz.6.13219': attribute type 2 has an invalid length.
[ 1777.002652][ T7328] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1777.486983][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13229'.
[ 1777.487044][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13229'.
[ 1778.268010][ T7366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1778.316437][ T7366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1778.864198][ T7379] __nla_validate_parse: 1 callbacks suppressed
[ 1778.872324][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13245'.
[ 1778.889176][ T7379] netlink: 'syz.8.13245': attribute type 10 has an invalid length.
[ 1778.907219][ T7379] syz_tun: left allmulticast mode
[ 1778.914728][ T7379] bridge0: port 3(syz_tun) entered disabled state
[ 1778.947158][ T7379] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1778.993210][ T7376] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1779.498873][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1779.499026][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1779.499487][ T7386] bridge0: port 1(
1�x9�) entered blocking state
[ 1779.499616][ T7386] bridge0: port 1(
1�x9�) entered forwarding state
[ 1779.881055][ T7386] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1779.948362][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13248'.
[ 1779.958833][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13248'.
[ 1780.324422][T21273] tipc: Node number set to 868813570
[ 1780.352826][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13251'.
[ 1780.492669][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13252'.
[ 1780.610202][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13252'.
[ 1781.051556][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1781.106215][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1781.316533][ T7433] netlink: 36 bytes leftover after parsing attributes in process `syz.9.13258'.
[ 1781.411658][ T7436] 8021q: VLANs not supported on syzkaller0
[ 1781.463702][ T7436] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1781.963584][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13264'.
[ 1781.963826][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13264'.
[ 1782.683579][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13271'.
[ 1783.003864][ T7475] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1783.421904][ T7498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1783.421950][ T7498] IPv6: NLM_F_CREATE should be set when creating new route
[ 1783.807945][ T7504] bond0: entered promiscuous mode
[ 1783.817944][ T7504] 0�X��D��: entered promiscuous mode
[ 1783.829448][ T7504] debugfs: 'hsr1' already exists in 'hsr'
[ 1783.839387][ T7504] Cannot create hsr debugfs directory
[ 1783.846687][ T7504] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1784.223942][ T7529] __nla_validate_parse: 3 callbacks suppressed
[ 1784.230983][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13286'.
[ 1785.057071][ T7541] 8021q: VLANs not supported on syzkaller0
[ 1785.931504][ T7480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1786.439425][ T7554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1786.539491][ T7562] netlink: 'syz.9.13300': attribute type 12 has an invalid length.
[ 1786.555050][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13300'.
[ 1786.670017][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13298'.
[ 1786.704975][ T7571] netlink: 'syz.8.13296': attribute type 16 has an invalid length.
[ 1786.715727][ T7571] netlink: 'syz.8.13296': attribute type 3 has an invalid length.
[ 1786.726755][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13296'.
[ 1787.271724][   T31] audit: type=1804 audit(1787965564.160:14): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.13302" name="/newroot/690/cgroup.controllers" dev="tmpfs" ino=3537 res=1 errno=0
[ 1787.315721][   T31] audit: type=1800 audit(1787965564.210:15): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.13302" name="cgroup.controllers" dev="tmpfs" ino=3537 res=0 errno=0
[ 1788.046234][    C1] bridge0: port 1(
1�x9�) entered learning state
[ 1788.046883][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[ 1789.130175][ T7604] netlink: 'syz.6.13307': attribute type 2 has an invalid length.
[ 1789.759032][ T7590] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1791.194287][ T7612] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1791.205222][ T7611] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13308'.
[ 1791.425133][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13311'.
[ 1792.429787][ T7618] veth1_to_bond: entered allmulticast mode
[ 1792.438100][ T7618] veth1_to_bond: left allmulticast mode
[ 1792.709479][ T7623] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1792.736823][ T7623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1792.736874][ T7623] IPv6: NLM_F_CREATE should be set when creating new route
[ 1793.020813][ T7637] netlink: 'syz.8.13318': attribute type 39 has an invalid length.
[ 1793.114323][ T7633] netlink: 'syz.9.13317': attribute type 1 has an invalid length.
[ 1793.114845][ T7633] netlink: 'syz.9.13317': attribute type 4 has an invalid length.
[ 1793.114896][ T7633] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.13317'.
[ 1793.123370][ T7643] netlink: 'syz.8.13318': attribute type 39 has an invalid length.
[ 1793.851009][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13322'.
[ 1793.990268][ T7659] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[ 1794.099294][ T7664] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1794.649034][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13329'.
[ 1794.840207][ T7693] x_tables: duplicate underflow at hook 1
[ 1794.980364][ T7696] netlink: 'syz.8.13332': attribute type 28 has an invalid length.
[ 1794.988927][ T7696] netlink: 'syz.8.13332': attribute type 3 has an invalid length.
[ 1794.997137][ T7696] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13332'.
[ 1795.641507][ T7715] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13338'.
[ 1795.755226][ T7718] netlink: 'syz.7.13339': attribute type 1 has an invalid length.
[ 1795.897397][ T7718] bond7: entered promiscuous mode
[ 1795.908670][ T7718] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1796.218933][ T7726] bond7: (slave bridge13): making interface the new active one
[ 1796.219182][ T7726] bridge13: entered promiscuous mode
[ 1796.255776][ T7726] bond7: (slave bridge13): Enslaving as an active interface with an up link
[ 1796.263566][ T7723] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1796.676900][ T7738] netlink: 'syz.8.13342': attribute type 1 has an invalid length.
[ 1796.688287][ T7738] netlink: 232 bytes leftover after parsing attributes in process `syz.8.13342'.
[ 1796.688359][ T7738] netlink: 'syz.8.13342': attribute type 1 has an invalid length.
[ 1797.088431][ T7747] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1797.140174][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13347'.
[ 1797.556007][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13351'.
[ 1797.578335][ T7758] hsr_slave_0: left promiscuous mode
[ 1797.623314][ T7758] hsr_slave_1: left promiscuous mode
[ 1798.168252][ T7774] netlink: 'syz.7.13356': attribute type 4 has an invalid length.
[ 1798.168811][ T7774] netlink: 17 bytes leftover after parsing attributes in process `syz.7.13356'.
[ 1798.661418][ T7786] netlink: 'syz.7.13360': attribute type 1 has an invalid length.
[ 1798.909297][ T7786] bond8: entered promiscuous mode
[ 1798.921157][ T7786] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1798.934934][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 90 seconds
[ 1798.935184][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 90 seconds
[ 1798.935217][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 90 seconds
[ 1798.935340][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 90 seconds
[ 1799.068707][ T7786] bond8: (slave bridge15): making interface the new active one
[ 1799.080702][ T7786] bridge15: entered promiscuous mode
[ 1799.096398][ T7786] bond8: (slave bridge15): Enslaving as an active interface with an up link
[ 1799.527230][ T7797] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13363'.
[ 1799.530283][ T7797] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13363'.
[ 1799.769157][ T7802] netlink: 252 bytes leftover after parsing attributes in process `syz.9.13364'.
[ 1799.834132][ T7777] netlink: 'syz.6.13358': attribute type 5 has an invalid length.
[ 1799.834678][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13358'.
[ 1800.608936][ T7828] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1800.648236][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13368'.
[ 1800.678557][ T7829] netlink: 'syz.6.13372': attribute type 1 has an invalid length.
[ 1800.851544][ T7829] bond9: entered promiscuous mode
[ 1800.852307][ T7829] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1800.876909][ T7836] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[ 1800.895704][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13373'.
[ 1801.216141][ T7829] bond9: (slave bridge13): making interface the new active one
[ 1801.225830][ T7829] bridge13: entered promiscuous mode
[ 1801.238588][ T7829] bond9: (slave bridge13): Enslaving as an active interface with an up link
[ 1802.122382][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1802.529394][ T7881] __nla_validate_parse: 4 callbacks suppressed
[ 1802.529631][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13387'.
[ 1802.609903][ T7880] netlink: 'syz.6.13385': attribute type 10 has an invalid length.
[ 1803.276746][ T7891] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1803.335290][ T7901] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[ 1804.214673][ T7920] netlink: 'syz.5.13399': attribute type 13 has an invalid length.
[ 1804.405846][ T7920] 0�X��D��: refused to change device tx_queue_len
[ 1804.409773][ T7920] A link change request failed with some changes committed already. Interface 
00�X��D�� may have been left with an inconsistent configuration, please check.
[ 1804.624211][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13400'.
[ 1804.700426][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13401'.
[ 1804.841843][ T7936] netlink: 'syz.5.13404': attribute type 1 has an invalid length.
[ 1805.179998][ T7936] bond5: entered promiscuous mode
[ 1805.188849][ T7936] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1805.306771][ T7936] bond5: (slave bridge7): making interface the new active one
[ 1805.318021][ T7936] bridge7: entered promiscuous mode
[ 1805.319517][ T7936] bond5: (slave bridge7): Enslaving as an active interface with an up link
[ 1805.574492][ T7953] vlan4: entered promiscuous mode
[ 1805.687116][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13413'.
[ 1805.973113][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13415'.
[ 1806.633133][ T7985] FAULT_INJECTION: forcing a failure.
[ 1806.633133][ T7985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1806.633190][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.5.13422 Not tainted syzkaller #0 PREEMPT(full) 
[ 1806.633216][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1806.633231][ T7985] Call Trace:
[ 1806.633240][ T7985]  <TASK>
[ 1806.633250][ T7985]  dump_stack_lvl+0xe8/0x150
[ 1806.633289][ T7985]  should_fail_ex+0x410/0x560
[ 1806.633331][ T7985]  _copy_from_user+0x2d/0xb0
[ 1806.633356][ T7985]  ___sys_sendmsg+0x1c6/0x360
[ 1806.633379][ T7985]  ? __lock_acquire+0x6df/0x2e50
[ 1806.633407][ T7985]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1806.633475][ T7985]  ? __fget_files+0x2a/0x420
[ 1806.633505][ T7985]  ? __fget_files+0x3a2/0x420
[ 1806.633545][ T7985]  __x64_sys_sendmsg+0x1b1/0x290
[ 1806.633572][ T7985]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1806.633618][ T7985]  do_syscall_64+0x166/0x520
[ 1806.633647][ T7985]  ? trace_irq_disable+0x3b/0x140
[ 1806.633669][ T7985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1806.633693][ T7985]  ? clear_bhb_loop+0x70/0xc0
[ 1806.633722][ T7985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1806.633746][ T7985] RIP: 0033:0x7f45eed9e159
[ 1806.633767][ T7985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1806.633788][ T7985] RSP: 002b:00007f45efc52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1806.633813][ T7985] RAX: ffffffffffffffda RBX: 00007f45ef025fa0 RCX: 00007f45eed9e159
[ 1806.633830][ T7985] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[ 1806.633845][ T7985] RBP: 00007f45efc52090 R08: 0000000000000000 R09: 0000000000000000
[ 1806.633860][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1806.633875][ T7985] R13: 00007f45ef026038 R14: 00007f45ef025fa0 R15: 00007fff90abf9e8
[ 1806.633911][ T7985]  </TASK>
[ 1806.971365][ T7987] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1807.532304][ T8007] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13430'.
[ 1808.322662][ T8012] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1809.107896][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13439'.
[ 1809.244069][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13440'.
[ 1809.717163][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13444'.
[ 1809.763094][ T8056] openvswitch: netlink: Unknown VXLAN extension attribute 0
[ 1810.239150][ T8060] netlink: 156 bytes leftover after parsing attributes in process `syz.7.13448'.
[ 1810.290116][ T8070] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[ 1812.325375][ T8117] rdma_op ffff88803415e238 conn xmit_rdma 0000000000000000
[ 1812.363149][    C1] openvswitch: cpu_id mismatch with handler threads
[ 1813.331683][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13472'.
[ 1815.539060][ T8186] syzkaller0: entered promiscuous mode
[ 1815.539110][ T8186] syzkaller0: entered allmulticast mode
[ 1816.320585][ T8220] netlink: 'syz.6.13497': attribute type 6 has an invalid length.
[ 1816.330653][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13497'.
[ 1816.442127][ T8221] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[ 1816.651832][ T8227] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001
[ 1816.855006][ T8230] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1817.011427][ T8240] netlink: 'syz.8.13504': attribute type 1 has an invalid length.
[ 1817.219969][ T8240] bond9: entered promiscuous mode
[ 1817.226088][ T8240] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1817.263036][ T8242] bond9: (slave bridge14): making interface the new active one
[ 1817.274571][ T8242] bridge14: entered promiscuous mode
[ 1817.286695][ T8242] bond9: (slave bridge14): Enslaving as an active interface with an up link
[ 1817.526640][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13511'.
[ 1817.801803][ T8258] netlink: 'syz.7.13513': attribute type 1 has an invalid length.
[ 1817.835626][ T8258] netlink: 84 bytes leftover after parsing attributes in process `syz.7.13513'.
[ 1818.096255][ T8266] syzkaller0: entered promiscuous mode
[ 1818.097186][ T8266] syzkaller0: entered allmulticast mode
[ 1818.122214][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1818.122260][    C1] bridge0: topology change detected, propagating
[ 1818.122509][    C1] bridge0: port 1(
1�x9�) entered forwarding state
[ 1818.122533][    C1] bridge0: topology change detected, propagating
[ 1818.198648][ T8272] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13518'.
[ 1818.308913][ T8280] netlink: 'syz.6.13522': attribute type 1 has an invalid length.
[ 1818.391919][ T8283] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[ 1818.402610][ T8283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1818.566983][ T8280] bond10: entered promiscuous mode
[ 1818.567484][ T8280] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1818.871191][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13521'.
[ 1818.883675][ T8289] bond10: (slave bridge14): making interface the new active one
[ 1818.884133][ T8289] bridge14: entered promiscuous mode
[ 1818.895145][ T8289] bond10: (slave bridge14): Enslaving as an active interface with an up link
[ 1819.088267][ T8302] x_tables: duplicate underflow at hook 1
[ 1819.829070][ T8330] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13530'.
[ 1820.124067][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13532'.
[ 1820.183483][ T8340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13533'.
[ 1820.539843][ T8347] netlink: 27 bytes leftover after parsing attributes in process `syz.7.13537'.
[ 1821.324918][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13546'.
[ 1821.500300][ T8370] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13549'.
[ 1821.806472][ T8383] 8021q: VLANs not supported on syzkaller0
[ 1822.149811][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13558'.
[ 1822.150063][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13558'.
[ 1822.183442][ T8391] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1822.572690][ T8391] syzkaller0: mtu less than device minimum
[ 1823.361829][ T8427] 8021q: VLANs not supported on syzkaller0
[ 1823.421811][ T8426] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13571'.
[ 1823.785768][ T8441] netlink: 'syz.7.13575': attribute type 1 has an invalid length.
[ 1823.927740][ T8441] bond9: entered promiscuous mode
[ 1823.935248][ T8441] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1824.110365][ T8441] bond9: (slave bridge18): making interface the new active one
[ 1824.110413][ T8441] bridge18: entered promiscuous mode
[ 1824.132499][ T8441] bond9: (slave bridge18): Enslaving as an active interface with an up link
[ 1824.729737][ T8455] FAULT_INJECTION: forcing a failure.
[ 1824.729737][ T8455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1824.729799][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.6.13579 Not tainted syzkaller #0 PREEMPT(full) 
[ 1824.729826][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1824.729842][ T8455] Call Trace:
[ 1824.729852][ T8455]  <TASK>
[ 1824.729863][ T8455]  dump_stack_lvl+0xe8/0x150
[ 1824.729908][ T8455]  should_fail_ex+0x410/0x560
[ 1824.729950][ T8455]  _copy_to_user+0x31/0xb0
[ 1824.729977][ T8455]  simple_read_from_buffer+0xe1/0x170
[ 1824.730017][ T8455]  proc_fail_nth_read+0x1bb/0x230
[ 1824.730051][ T8455]  ? common_file_perm+0x20e/0x2b0
[ 1824.730092][ T8455]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1824.730131][ T8455]  ? rw_verify_area+0x24a/0x4c0
[ 1824.730169][ T8455]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1824.730204][ T8455]  vfs_read+0x213/0xa80
[ 1824.730244][ T8455]  ? __pfx___mutex_lock+0x10/0x10
[ 1824.730280][ T8455]  ? __pfx_vfs_read+0x10/0x10
[ 1824.730315][ T8455]  ? __fget_files+0x2a/0x420
[ 1824.730350][ T8455]  ? __fget_files+0x3a2/0x420
[ 1824.730379][ T8455]  ? __fget_files+0x2a/0x420
[ 1824.730420][ T8455]  ksys_read+0x150/0x270
[ 1824.730469][ T8455]  ? __pfx_ksys_read+0x10/0x10
[ 1824.730504][ T8455]  ? __pfx_sock_ioctl+0x10/0x10
[ 1824.730545][ T8455]  do_syscall_64+0x166/0x520
[ 1824.730576][ T8455]  ? trace_irq_disable+0x3b/0x140
[ 1824.730601][ T8455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1824.730626][ T8455]  ? clear_bhb_loop+0x70/0xc0
[ 1824.730656][ T8455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1824.730681][ T8455] RIP: 0033:0x7f91e255e98e
[ 1824.730703][ T8455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1824.730724][ T8455] RSP: 002b:00007f91e3513fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1824.730751][ T8455] RAX: ffffffffffffffda RBX: 00007f91e35146c0 RCX: 00007f91e255e98e
[ 1824.730769][ T8455] RDX: 000000000000000f RSI: 00007f91e35140a0 RDI: 0000000000000007
[ 1824.730785][ T8455] RBP: 00007f91e3514090 R08: 0000000000000000 R09: 0000000000000000
[ 1824.730801][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1824.730816][ T8455] R13: 00007f91e2826038 R14: 00007f91e2825fa0 R15: 00007ffc55043728
[ 1824.730854][ T8455]  </TASK>
[ 1825.208996][ T8462] FAULT_INJECTION: forcing a failure.
[ 1825.208996][ T8462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1825.223964][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.7.13580 Not tainted syzkaller #0 PREEMPT(full) 
[ 1825.223997][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1825.224013][ T8462] Call Trace:
[ 1825.224024][ T8462]  <TASK>
[ 1825.224035][ T8462]  dump_stack_lvl+0xe8/0x150
[ 1825.224080][ T8462]  should_fail_ex+0x410/0x560
[ 1825.224120][ T8462]  _copy_to_user+0x31/0xb0
[ 1825.224148][ T8462]  simple_read_from_buffer+0xe1/0x170
[ 1825.224187][ T8462]  proc_fail_nth_read+0x1bb/0x230
[ 1825.224221][ T8462]  ? common_file_perm+0x20e/0x2b0
[ 1825.224261][ T8462]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1825.224301][ T8462]  ? rw_verify_area+0x24a/0x4c0
[ 1825.224338][ T8462]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1825.224372][ T8462]  vfs_read+0x213/0xa80
[ 1825.224411][ T8462]  ? __pfx___mutex_lock+0x10/0x10
[ 1825.224445][ T8462]  ? __pfx_vfs_read+0x10/0x10
[ 1825.224481][ T8462]  ? __fget_files+0x2a/0x420
[ 1825.224516][ T8462]  ? __fget_files+0x3a2/0x420
[ 1825.224546][ T8462]  ? __fget_files+0x2a/0x420
[ 1825.224586][ T8462]  ksys_read+0x150/0x270
[ 1825.224622][ T8462]  ? __pfx_ksys_read+0x10/0x10
[ 1825.224669][ T8462]  do_syscall_64+0x166/0x520
[ 1825.224700][ T8462]  ? trace_irq_disable+0x3b/0x140
[ 1825.224723][ T8462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1825.224749][ T8462]  ? clear_bhb_loop+0x70/0xc0
[ 1825.224778][ T8462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1825.224802][ T8462] RIP: 0033:0x7faa02d5e98e
[ 1825.224825][ T8462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1825.224846][ T8462] RSP: 002b:00007faa03d21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1825.224871][ T8462] RAX: ffffffffffffffda RBX: 00007faa03d226c0 RCX: 00007faa02d5e98e
[ 1825.224890][ T8462] RDX: 000000000000000f RSI: 00007faa03d220a0 RDI: 0000000000000005
[ 1825.224913][ T8462] RBP: 00007faa03d22090 R08: 0000000000000000 R09: 0000000000000000
[ 1825.224929][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1825.224942][ T8462] R13: 00007faa03026038 R14: 00007faa03025fa0 R15: 00007fff3ff88258
[ 1825.224979][ T8462]  </TASK>
[ 1825.562962][ T8463] openvswitch: netlink: EtherType 300 is less than min 600
[ 1826.439777][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13590'.
[ 1827.445830][ T8508] FAULT_INJECTION: forcing a failure.
[ 1827.445830][ T8508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1827.445889][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.9.13597 Not tainted syzkaller #0 PREEMPT(full) 
[ 1827.445918][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1827.445933][ T8508] Call Trace:
[ 1827.445944][ T8508]  <TASK>
[ 1827.445955][ T8508]  dump_stack_lvl+0xe8/0x150
[ 1827.445995][ T8508]  should_fail_ex+0x410/0x560
[ 1827.446035][ T8508]  _copy_to_user+0x31/0xb0
[ 1827.446062][ T8508]  simple_read_from_buffer+0xe1/0x170
[ 1827.446100][ T8508]  proc_fail_nth_read+0x1bb/0x230
[ 1827.446135][ T8508]  ? common_file_perm+0x20e/0x2b0
[ 1827.446175][ T8508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1827.446215][ T8508]  ? rw_verify_area+0x24a/0x4c0
[ 1827.446250][ T8508]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1827.446293][ T8508]  vfs_read+0x213/0xa80
[ 1827.446333][ T8508]  ? __pfx___mutex_lock+0x10/0x10
[ 1827.446367][ T8508]  ? __pfx_vfs_read+0x10/0x10
[ 1827.446403][ T8508]  ? __fget_files+0x2a/0x420
[ 1827.446439][ T8508]  ? __fget_files+0x3a2/0x420
[ 1827.446468][ T8508]  ? __fget_files+0x2a/0x420
[ 1827.446510][ T8508]  ksys_read+0x150/0x270
[ 1827.446547][ T8508]  ? __pfx_ksys_read+0x10/0x10
[ 1827.446593][ T8508]  do_syscall_64+0x166/0x520
[ 1827.446628][ T8508]  ? trace_irq_disable+0x3b/0x140
[ 1827.446651][ T8508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1827.446676][ T8508]  ? clear_bhb_loop+0x70/0xc0
[ 1827.446706][ T8508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1827.446730][ T8508] RIP: 0033:0x7fb50735e98e
[ 1827.446752][ T8508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1827.446774][ T8508] RSP: 002b:00007fb508217fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1827.446801][ T8508] RAX: ffffffffffffffda RBX: 00007fb5082186c0 RCX: 00007fb50735e98e
[ 1827.446819][ T8508] RDX: 000000000000000f RSI: 00007fb5082180a0 RDI: 0000000000000004
[ 1827.446835][ T8508] RBP: 00007fb508218090 R08: 0000000000000000 R09: 0000000000000000
[ 1827.446850][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1827.446865][ T8508] R13: 00007fb507626038 R14: 00007fb507625fa0 R15: 00007fffd3cc9b88
[ 1827.446903][ T8508]  </TASK>
[ 1827.800092][ T8507] netlink: 48 bytes leftover after parsing attributes in process `syz.7.13596'.
[ 1828.437674][ T8531] netlink: 'syz.7.13602': attribute type 2 has an invalid length.
[ 1828.666083][ T8531] : entered promiscuous mode
[ 1829.006381][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 120 seconds
[ 1829.006951][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 120 seconds
[ 1829.007039][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 120 seconds
[ 1829.007125][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 120 seconds
[ 1829.061249][ T8525] workqueue: Failed to create a rescuer kthread for wq "nfc14_nci_tx_wq": -EINTR
[ 1829.519103][ T8590] netlink: 80 bytes leftover after parsing attributes in process `syz.9.13606'.
[ 1830.053757][ T8595] FAULT_INJECTION: forcing a failure.
[ 1830.053757][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1830.054005][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.9.13608 Not tainted syzkaller #0 PREEMPT(full) 
[ 1830.054033][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1830.054047][ T8595] Call Trace:
[ 1830.054058][ T8595]  <TASK>
[ 1830.054068][ T8595]  dump_stack_lvl+0xe8/0x150
[ 1830.054107][ T8595]  should_fail_ex+0x410/0x560
[ 1830.054146][ T8595]  _copy_to_user+0x31/0xb0
[ 1830.054172][ T8595]  simple_read_from_buffer+0xe1/0x170
[ 1830.054210][ T8595]  proc_fail_nth_read+0x1bb/0x230
[ 1830.054243][ T8595]  ? common_file_perm+0x20e/0x2b0
[ 1830.054282][ T8595]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1830.054320][ T8595]  ? rw_verify_area+0x24a/0x4c0
[ 1830.054355][ T8595]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1830.054389][ T8595]  vfs_read+0x213/0xa80
[ 1830.054426][ T8595]  ? __pfx___mutex_lock+0x10/0x10
[ 1830.054460][ T8595]  ? __pfx_vfs_read+0x10/0x10
[ 1830.054494][ T8595]  ? __fget_files+0x2a/0x420
[ 1830.054528][ T8595]  ? __fget_files+0x3a2/0x420
[ 1830.054555][ T8595]  ? __fget_files+0x2a/0x420
[ 1830.054603][ T8595]  ksys_read+0x150/0x270
[ 1830.054638][ T8595]  ? __pfx_ksys_read+0x10/0x10
[ 1830.054684][ T8595]  do_syscall_64+0x166/0x520
[ 1830.054713][ T8595]  ? trace_irq_disable+0x3b/0x140
[ 1830.054736][ T8595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1830.054760][ T8595]  ? clear_bhb_loop+0x70/0xc0
[ 1830.054793][ T8595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1830.054816][ T8595] RIP: 0033:0x7fb50735e98e
[ 1830.054838][ T8595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1830.054859][ T8595] RSP: 002b:00007fb508217fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1830.054909][ T8595] RAX: ffffffffffffffda RBX: 00007fb5082186c0 RCX: 00007fb50735e98e
[ 1830.054926][ T8595] RDX: 000000000000000f RSI: 00007fb5082180a0 RDI: 0000000000000004
[ 1830.054940][ T8595] RBP: 00007fb508218090 R08: 0000000000000000 R09: 0000000000000000
[ 1830.054954][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1830.054967][ T8595] R13: 00007fb507626038 R14: 00007fb507625fa0 R15: 00007fffd3cc9b88
[ 1830.055004][ T8595]  </TASK>
[ 1830.548873][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13610'.
[ 1831.092783][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13614'.
[ 1831.163310][ T8610] FAULT_INJECTION: forcing a failure.
[ 1831.163310][ T8610] name failslab, interval 1, probability 0, space 0, times 0
[ 1831.163562][ T8610] CPU: 1 UID: 0 PID: 8610 Comm: syz.6.13615 Not tainted syzkaller #0 PREEMPT(full) 
[ 1831.163589][ T8610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1831.163603][ T8610] Call Trace:
[ 1831.163612][ T8610]  <TASK>
[ 1831.163623][ T8610]  dump_stack_lvl+0xe8/0x150
[ 1831.163661][ T8610]  should_fail_ex+0x410/0x560
[ 1831.163696][ T8610]  ? __alloc_skb+0x1db/0x7a0
[ 1831.163727][ T8610]  should_failslab+0xa8/0x100
[ 1831.163754][ T8610]  ? __alloc_skb+0x1db/0x7a0
[ 1831.163782][ T8610]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1831.163825][ T8610]  ? __alloc_skb+0x18d/0x7a0
[ 1831.163856][ T8610]  ? __alloc_skb+0x1db/0x7a0
[ 1831.163893][ T8610]  __alloc_skb+0x1db/0x7a0
[ 1831.163927][ T8610]  netlink_sendmsg+0x5d4/0xb40
[ 1831.163964][ T8610]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1831.163998][ T8610]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1831.164031][ T8610]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1831.164055][ T8610]  sock_sendmsg_nosec+0x13a/0x180
[ 1831.164086][ T8610]  ____sys_sendmsg+0x54e/0x850
[ 1831.164113][ T8610]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1831.164144][ T8610]  ? import_iovec+0x73/0xa0
[ 1831.164182][ T8610]  ___sys_sendmsg+0x2a5/0x360
[ 1831.164203][ T8610]  ? __lock_acquire+0x6df/0x2e50
[ 1831.164230][ T8610]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1831.164288][ T8610]  ? __fget_files+0x2a/0x420
[ 1831.164318][ T8610]  ? __fget_files+0x3a2/0x420
[ 1831.164357][ T8610]  __x64_sys_sendmsg+0x1b1/0x290
[ 1831.164382][ T8610]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1831.164426][ T8610]  do_syscall_64+0x166/0x520
[ 1831.164456][ T8610]  ? trace_irq_disable+0x3b/0x140
[ 1831.164477][ T8610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1831.164499][ T8610]  ? clear_bhb_loop+0x70/0xc0
[ 1831.164527][ T8610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1831.164548][ T8610] RIP: 0033:0x7f91e259e159
[ 1831.164570][ T8610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1831.164588][ T8610] RSP: 002b:00007f91e3514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1831.164613][ T8610] RAX: ffffffffffffffda RBX: 00007f91e2825fa0 RCX: 00007f91e259e159
[ 1831.164629][ T8610] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1831.164644][ T8610] RBP: 00007f91e3514090 R08: 0000000000000000 R09: 0000000000000000
[ 1831.164658][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1831.164671][ T8610] R13: 00007f91e2826038 R14: 00007f91e2825fa0 R15: 00007ffc55043728
[ 1831.164705][ T8610]  </TASK>
[ 1832.044916][ T8627] xt_nat: multiple ranges no longer supported
[ 1832.084888][ T8627] netlink: 'syz.5.13620': attribute type 2 has an invalid length.
[ 1832.439177][ T8636] tunl0: entered promiscuous mode
[ 1832.551962][ T8636] netlink: 'syz.7.13623': attribute type 3 has an invalid length.
[ 1832.552080][ T8636] netlink: 9 bytes leftover after parsing attributes in process `syz.7.13623'.
[ 1832.668730][ T8644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13627'.
[ 1833.386098][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13631'.
[ 1833.849456][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1833.911223][ T8670] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1834.145954][ T8679] netlink: 'syz.8.13639': attribute type 1 has an invalid length.
[ 1834.305299][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1834.425658][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1834.601960][ T8677] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1834.735513][ T8682] bond10: (slave gretap1): making interface the new active one
[ 1834.757696][ T8682] bond10: (slave gretap1): Enslaving as an active interface with an up link
[ 1835.331409][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13648'.
[ 1835.486878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1835.646154][ T8720] netlink: 'syz.7.13651': attribute type 10 has an invalid length.
[ 1835.787080][ T8725] syzkaller1: entered promiscuous mode
[ 1835.793144][ T8725] syzkaller1: entered allmulticast mode
[ 1836.519563][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13658'.
[ 1836.519623][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13658'.
[ 1837.155902][ T8742] team0: Device xfrm0 is of different type
[ 1837.455368][ T8753] netlink: 'syz.5.13666': attribute type 1 has an invalid length.
[ 1837.669886][ T8753] bond6: entered promiscuous mode
[ 1837.680982][ T8753] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1837.795206][ T8755] macvtap3: entered allmulticast mode
[ 1837.952824][ T8762] bond6: (slave bridge9): making interface the new active one
[ 1837.961738][ T8762] bridge9: entered promiscuous mode
[ 1837.986118][ T8762] bond6: (slave bridge9): Enslaving as an active interface with an up link
[ 1838.613299][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13673'.
[ 1838.613550][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13673'.
[ 1838.968252][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13676'.
[ 1839.733021][ T8798] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[ 1840.346912][ T8820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13686'.
[ 1842.141298][ T8861] FAULT_INJECTION: forcing a failure.
[ 1842.141298][ T8861] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1842.141367][ T8861] CPU: 0 UID: 0 PID: 8861 Comm: syz.8.13698 Not tainted syzkaller #0 PREEMPT(full) 
[ 1842.141392][ T8861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1842.141467][ T8861] Call Trace:
[ 1842.141490][ T8861]  <TASK>
[ 1842.141528][ T8861]  dump_stack_lvl+0xe8/0x150
[ 1842.141679][ T8861]  should_fail_ex+0x410/0x560
[ 1842.141777][ T8861]  _copy_from_user+0x2d/0xb0
[ 1842.141840][ T8861]  ___sys_sendmsg+0x1c6/0x360
[ 1842.141889][ T8861]  ? __lock_acquire+0x6df/0x2e50
[ 1842.141965][ T8861]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1842.142115][ T8861]  ? __fget_files+0x2a/0x420
[ 1842.142190][ T8861]  ? __fget_files+0x3a2/0x420
[ 1842.142295][ T8861]  __x64_sys_sendmsg+0x1b1/0x290
[ 1842.142375][ T8861]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1842.142483][ T8861]  do_syscall_64+0x166/0x520
[ 1842.142570][ T8861]  ? trace_irq_disable+0x3b/0x140
[ 1842.142632][ T8861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1842.142690][ T8861]  ? clear_bhb_loop+0x70/0xc0
[ 1842.142764][ T8861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1842.142828][ T8861] RIP: 0033:0x7f6cd059e159
[ 1842.142879][ T8861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1842.142946][ T8861] RSP: 002b:00007f6cce7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1842.143026][ T8861] RAX: ffffffffffffffda RBX: 00007f6cd0825fa0 RCX: 00007f6cd059e159
[ 1842.143071][ T8861] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[ 1842.143113][ T8861] RBP: 00007f6cce7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1842.143147][ T8861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1842.143187][ T8861] R13: 00007f6cd0826038 R14: 00007f6cd0825fa0 R15: 00007ffe66117e58
[ 1842.143283][ T8861]  </TASK>
[ 1842.585871][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13699'.
[ 1842.686501][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13701'.
[ 1842.686579][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13701'.
[ 1842.845211][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13703'.
[ 1843.638275][ T8907] FAULT_INJECTION: forcing a failure.
[ 1843.638275][ T8907] name failslab, interval 1, probability 0, space 0, times 0
[ 1843.638365][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.5.13713 Not tainted syzkaller #0 PREEMPT(full) 
[ 1843.638395][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1843.638410][ T8907] Call Trace:
[ 1843.638445][ T8907]  <TASK>
[ 1843.638484][ T8907]  dump_stack_lvl+0xe8/0x150
[ 1843.638608][ T8907]  should_fail_ex+0x410/0x560
[ 1843.638744][ T8907]  ? __alloc_skb+0x1db/0x7a0
[ 1843.638835][ T8907]  should_failslab+0xa8/0x100
[ 1843.638910][ T8907]  ? __alloc_skb+0x1db/0x7a0
[ 1843.638983][ T8907]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1843.639067][ T8907]  ? __alloc_skb+0x18d/0x7a0
[ 1843.639149][ T8907]  ? __alloc_skb+0x1db/0x7a0
[ 1843.639250][ T8907]  __alloc_skb+0x1db/0x7a0
[ 1843.639331][ T8907]  netlink_sendmsg+0x5d4/0xb40
[ 1843.639426][ T8907]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1843.639515][ T8907]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1843.639608][ T8907]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1843.639673][ T8907]  sock_sendmsg_nosec+0x13a/0x180
[ 1843.639767][ T8907]  ____sys_sendmsg+0x54e/0x850
[ 1843.639841][ T8907]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1843.639933][ T8907]  ? import_iovec+0x73/0xa0
[ 1843.640049][ T8907]  ___sys_sendmsg+0x2a5/0x360
[ 1843.640103][ T8907]  ? __lock_acquire+0x6df/0x2e50
[ 1843.640176][ T8907]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1843.640315][ T8907]  ? __fget_files+0x2a/0x420
[ 1843.640388][ T8907]  ? __fget_files+0x3a2/0x420
[ 1843.640484][ T8907]  __x64_sys_sendmsg+0x1b1/0x290
[ 1843.640555][ T8907]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1843.640670][ T8907]  do_syscall_64+0x166/0x520
[ 1843.640746][ T8907]  ? trace_irq_disable+0x3b/0x140
[ 1843.640815][ T8907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1843.640877][ T8907]  ? clear_bhb_loop+0x70/0xc0
[ 1843.640949][ T8907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1843.641003][ T8907] RIP: 0033:0x7f45eed9e159
[ 1843.641064][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1843.641115][ T8907] RSP: 002b:00007f45efc52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1843.641179][ T8907] RAX: ffffffffffffffda RBX: 00007f45ef025fa0 RCX: 00007f45eed9e159
[ 1843.641223][ T8907] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[ 1843.641257][ T8907] RBP: 00007f45efc52090 R08: 0000000000000000 R09: 0000000000000000
[ 1843.641293][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1843.641340][ T8907] R13: 00007f45ef026038 R14: 00007f45ef025fa0 R15: 00007fff90abf9e8
[ 1843.641447][ T8907]  </TASK>
[ 1844.280230][ T8915] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13717'.
[ 1844.280302][ T8915] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13717'.
[ 1844.513841][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13719'.
[ 1844.874275][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13720'.
[ 1844.957978][ T8943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1845.631646][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13726'.
[ 1845.683715][ T8950] macsec1: entered promiscuous mode
[ 1845.683942][ T8950] bridge0: entered promiscuous mode
[ 1845.703384][ T8950] macsec1: entered allmulticast mode
[ 1845.708991][ T8950] bridge0: entered allmulticast mode
[ 1845.737848][ T8950] bridge0: left allmulticast mode
[ 1845.947135][T28627] bridge0: left promiscuous mode
[ 1846.338810][ T8967] netlink: 104 bytes leftover after parsing attributes in process `syz.9.13732'.
[ 1846.409336][ T8970] netlink: 'syz.7.13733': attribute type 12 has an invalid length.
[ 1847.183547][ T8993] netlink: 'syz.5.13744': attribute type 1 has an invalid length.
[ 1847.223751][ T8993] openvswitch: netlink: Missing key (keys=c0, expected=500)
[ 1847.325617][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13746'.
[ 1847.475376][ T9002] veth0_to_hsr: entered promiscuous mode
[ 1847.475432][ T9002] veth0_to_hsr: entered allmulticast mode
[ 1848.873489][ T9041] xt_nat: multiple ranges no longer supported
[ 1849.693559][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13774'.
[ 1850.100641][ T9082] netlink: 6 bytes leftover after parsing attributes in process `syz.9.13776'.
[ 1850.557922][ T9096] netlink: 192 bytes leftover after parsing attributes in process `syz.5.13782'.
[ 1851.531371][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13789'.
[ 1851.745830][ T9139] geneve0: entered allmulticast mode
[ 1851.846265][ T9139] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13793'.
[ 1851.847139][ T9139] syzkaller0: left promiscuous mode
[ 1851.847193][ T9139] syzkaller0: left allmulticast mode
[ 1852.905162][ T9168] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1852.962891][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13802'.
[ 1855.031625][ T9224] netlink: 'syz.7.13821': attribute type 15 has an invalid length.
[ 1855.031684][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13821'.
[ 1855.238336][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13825'.
[ 1855.508429][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13827'.
[ 1855.553509][ T9240] x_tables: unsorted underflow at hook 2
[ 1855.830293][ T9252] unsupported nla_type 291
[ 1855.852006][ T9251] netlink: 'syz.8.13830': attribute type 21 has an invalid length.
[ 1855.853258][ T9251] netlink: 'syz.8.13830': attribute type 22 has an invalid length.
[ 1855.853281][ T9251] netlink: 'syz.8.13830': attribute type 23 has an invalid length.
[ 1855.853324][ T9251] netlink: 'syz.8.13830': attribute type 25 has an invalid length.
[ 1855.853389][ T9251] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13830'.
[ 1855.937685][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13830'.
[ 1856.008303][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13830'.
[ 1856.036153][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13830'.
[ 1856.356785][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13836'.
[ 1856.657727][ T9274] netlink: 7204 bytes leftover after parsing attributes in process `syz.6.13838'.
[ 1856.670857][ T9272] netlink: 7204 bytes leftover after parsing attributes in process `syz.6.13838'.
[ 1856.702485][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1856.989746][ T9282] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1856.989851][ T9282] gretap0: entered promiscuous mode
[ 1856.989895][ T9282] gretap0: entered allmulticast mode
[ 1858.038457][ T9322] netlink: 'syz.5.13853': attribute type 27 has an invalid length.
[ 1859.087417][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 150 seconds
[ 1859.088026][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 150 seconds
[ 1859.088137][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 150 seconds
[ 1859.088227][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 150 seconds
[ 1859.314613][ T9362] netlink: 'syz.9.13871': attribute type 83 has an invalid length.
[ 1859.776889][ T9373] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1860.508418][ T9392] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[ 1861.021803][ T9426] __nla_validate_parse: 12 callbacks suppressed
[ 1861.028808][ T9426] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13890'.
[ 1861.591075][ T9440] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13895'.
[ 1861.609342][ T9444] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1861.627538][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.631194][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.662244][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.671297][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.687002][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.697144][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.703509][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.716904][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13897'.
[ 1861.856029][ T9446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1863.658635][ T9502] netlink: 'syz.6.13916': attribute type 1 has an invalid length.
[ 1864.000702][ T9516] netlink: 'syz.5.13919': attribute type 1 has an invalid length.
[ 1864.011661][ T9516] netlink: 'syz.5.13919': attribute type 1 has an invalid length.
[ 1864.063262][ T9507] bridge15: entered promiscuous mode
[ 1864.399463][ T9525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1865.145018][ T9557] tipc: Can't add remote ip to TIPC UDP multicast bearer
[ 1865.298241][ T9561] netlink: 'syz.9.13931': attribute type 1 has an invalid length.
[ 1866.584755][ T9601] tipc: Can't add remote ip to TIPC UDP multicast bearer
[ 1866.594037][ T9601] FAULT_INJECTION: forcing a failure.
[ 1866.594037][ T9601] name failslab, interval 1, probability 0, space 0, times 0
[ 1866.594285][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.7.13945 Not tainted syzkaller #0 PREEMPT(full) 
[ 1866.594314][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1866.594329][ T9601] Call Trace:
[ 1866.594339][ T9601]  <TASK>
[ 1866.594349][ T9601]  dump_stack_lvl+0xe8/0x150
[ 1866.594387][ T9601]  should_fail_ex+0x410/0x560
[ 1866.594426][ T9601]  should_failslab+0xa8/0x100
[ 1866.594453][ T9601]  ? skb_clone+0x212/0x3a0
[ 1866.594475][ T9601]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1866.594509][ T9601]  ? skb_clone+0x212/0x3a0
[ 1866.594538][ T9601]  skb_clone+0x212/0x3a0
[ 1866.594564][ T9601]  __netlink_deliver_tap+0x413/0x860
[ 1866.594602][ T9601]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1866.594630][ T9601]  netlink_deliver_tap+0x19c/0x1b0
[ 1866.594657][ T9601]  netlink_sendskb+0x68/0x140
[ 1866.594705][ T9601]  netlink_rcv_skb+0x2a4/0x4a0
[ 1866.594732][ T9601]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1866.594766][ T9601]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1866.594809][ T9601]  ? down_read+0x2be/0x330
[ 1866.594847][ T9601]  genl_rcv+0x28/0x40
[ 1866.594876][ T9601]  netlink_unicast+0x7bd/0x940
[ 1866.594910][ T9601]  netlink_sendmsg+0x813/0xb40
[ 1866.594945][ T9601]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1866.594981][ T9601]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1866.595017][ T9601]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1866.595042][ T9601]  sock_sendmsg_nosec+0x13a/0x180
[ 1866.595076][ T9601]  ____sys_sendmsg+0x54e/0x850
[ 1866.595104][ T9601]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1866.595140][ T9601]  ? import_iovec+0x73/0xa0
[ 1866.595178][ T9601]  ___sys_sendmsg+0x2a5/0x360
[ 1866.595199][ T9601]  ? __lock_acquire+0x6df/0x2e50
[ 1866.595226][ T9601]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1866.595289][ T9601]  ? __fget_files+0x2a/0x420
[ 1866.595318][ T9601]  ? __fget_files+0x3a2/0x420
[ 1866.595359][ T9601]  __x64_sys_sendmsg+0x1b1/0x290
[ 1866.595386][ T9601]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1866.595434][ T9601]  do_syscall_64+0x166/0x520
[ 1866.595463][ T9601]  ? trace_irq_disable+0x3b/0x140
[ 1866.595484][ T9601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1866.595509][ T9601]  ? clear_bhb_loop+0x70/0xc0
[ 1866.595538][ T9601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1866.595559][ T9601] RIP: 0033:0x7faa02d9e159
[ 1866.595581][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1866.595601][ T9601] RSP: 002b:00007faa03d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1866.595626][ T9601] RAX: ffffffffffffffda RBX: 00007faa03025fa0 RCX: 00007faa02d9e159
[ 1866.595644][ T9601] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1866.595660][ T9601] RBP: 00007faa03d22090 R08: 0000000000000000 R09: 0000000000000000
[ 1866.595683][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1866.595697][ T9601] R13: 00007faa03026038 R14: 00007faa03025fa0 R15: 00007fff3ff88258
[ 1866.595735][ T9601]  </TASK>
[ 1867.680686][ T9615] __nla_validate_parse: 32 callbacks suppressed
[ 1867.680750][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13951'.
[ 1868.066665][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1868.252107][ T9621] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1868.502359][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13956'.
[ 1868.557908][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1868.579705][ T9626] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1869.305361][ T9658] sit0: Caught tx_queue_len zero misconfig
[ 1869.323646][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1869.356883][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13962'.
[ 1869.865405][ T9673] netlink: 332 bytes leftover after parsing attributes in process `syz.5.13969'.
[ 1870.396235][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13973'.
[ 1870.799002][ T9700] netlink: 'syz.7.13976': attribute type 1 has an invalid length.
[ 1870.799047][ T9700] netlink: 224 bytes leftover after parsing attributes in process `syz.7.13976'.
[ 1871.143840][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13978'.
[ 1871.599548][ T9722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13981'.
[ 1872.247288][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13989'.
[ 1872.320524][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13991'.
[ 1872.917885][ T9771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1873.077934][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13996'.
[ 1874.051763][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14007'.
[ 1874.628763][ T9823] netlink: 71 bytes leftover after parsing attributes in process `syz.5.14014'.
[ 1874.735225][ T9828] netlink: 'syz.9.14015': attribute type 12 has an invalid length.
[ 1875.599246][ T9858] tipc: Can't add remote ip to TIPC UDP multicast bearer
[ 1875.719114][ T9864] batadv_slave_1: entered allmulticast mode
[ 1875.732752][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14027'.
[ 1875.784589][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14028'.
[ 1875.836522][ T9861] ������: renamed from vlan1 (while UP)
[ 1876.632944][ T9893] tipc: Can't add remote ip to TIPC UDP multicast bearer
[ 1877.841226][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14045'.
[ 1877.973336][ T9937] FAULT_INJECTION: forcing a failure.
[ 1877.973336][ T9937] name failslab, interval 1, probability 0, space 0, times 0
[ 1877.973395][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.6.14047 Not tainted syzkaller #0 PREEMPT(full) 
[ 1877.973425][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1877.973444][ T9937] Call Trace:
[ 1877.973454][ T9937]  <TASK>
[ 1877.973465][ T9937]  dump_stack_lvl+0xe8/0x150
[ 1877.973506][ T9937]  should_fail_ex+0x410/0x560
[ 1877.973544][ T9937]  ? __alloc_skb+0x1db/0x7a0
[ 1877.973578][ T9937]  should_failslab+0xa8/0x100
[ 1877.973609][ T9937]  ? __alloc_skb+0x1db/0x7a0
[ 1877.973641][ T9937]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1877.973676][ T9937]  ? __alloc_skb+0x18d/0x7a0
[ 1877.973719][ T9937]  ? __alloc_skb+0x1db/0x7a0
[ 1877.973758][ T9937]  __alloc_skb+0x1db/0x7a0
[ 1877.973795][ T9937]  netlink_sendmsg+0x5d4/0xb40
[ 1877.973834][ T9937]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1877.973871][ T9937]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1877.973908][ T9937]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1877.973935][ T9937]  sock_sendmsg_nosec+0x13a/0x180
[ 1877.974008][ T9937]  ____sys_sendmsg+0x54e/0x850
[ 1877.974038][ T9937]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1877.974072][ T9937]  ? import_iovec+0x73/0xa0
[ 1877.974115][ T9937]  ___sys_sendmsg+0x2a5/0x360
[ 1877.974138][ T9937]  ? __lock_acquire+0x6df/0x2e50
[ 1877.974167][ T9937]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1877.974228][ T9937]  ? __fget_files+0x2a/0x420
[ 1877.974258][ T9937]  ? __fget_files+0x3a2/0x420
[ 1877.974300][ T9937]  __x64_sys_sendmsg+0x1b1/0x290
[ 1877.974328][ T9937]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1877.974375][ T9937]  do_syscall_64+0x166/0x520
[ 1877.974407][ T9937]  ? trace_irq_disable+0x3b/0x140
[ 1877.974430][ T9937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1877.974455][ T9937]  ? clear_bhb_loop+0x70/0xc0
[ 1877.974485][ T9937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1877.974509][ T9937] RIP: 0033:0x7f91e259e159
[ 1877.974531][ T9937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1877.974552][ T9937] RSP: 002b:00007f91e3514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1877.974578][ T9937] RAX: ffffffffffffffda RBX: 00007f91e2825fa0 RCX: 00007f91e259e159
[ 1877.974596][ T9937] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1877.974612][ T9937] RBP: 00007f91e3514090 R08: 0000000000000000 R09: 0000000000000000
[ 1877.974627][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1877.974642][ T9937] R13: 00007f91e2826038 R14: 00007f91e2825fa0 R15: 00007ffc55043728
[ 1877.974679][ T9937]  </TASK>
[ 1878.794101][ T9952] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[ 1878.904390][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14050'.
[ 1878.999345][ T9958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14050'.
[ 1879.014040][ T9958] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14050'.
[ 1879.030563][ T9957] x_tables: unsorted underflow at hook 1
[ 1879.039530][ T9958] netlink: 'syz.6.14050': attribute type 29 has an invalid length.
[ 1879.095193][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14050'.
[ 1879.119307][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14050'.
[ 1879.208430][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14052'.
[ 1879.709408][ T9971] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14056'.
[ 1879.709459][ T9971] netlink: 10 bytes leftover after parsing attributes in process `syz.7.14056'.
[ 1879.941898][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14058'.
[ 1880.050164][ T9974] bridge: RTM_NEWNEIGH with invalid state 0x20
[ 1880.224926][ T9984] FAULT_INJECTION: forcing a failure.
[ 1880.224926][ T9984] name failslab, interval 1, probability 0, space 0, times 0
[ 1880.238236][ T9984] CPU: 0 UID: 0 PID: 9984 Comm: syz.5.14061 Not tainted syzkaller #0 PREEMPT(full) 
[ 1880.238264][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1880.238277][ T9984] Call Trace:
[ 1880.238285][ T9984]  <TASK>
[ 1880.238294][ T9984]  dump_stack_lvl+0xe8/0x150
[ 1880.238327][ T9984]  should_fail_ex+0x410/0x560
[ 1880.238360][ T9984]  should_failslab+0xa8/0x100
[ 1880.238383][ T9984]  ? skb_clone+0x212/0x3a0
[ 1880.238404][ T9984]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1880.238437][ T9984]  ? skb_clone+0x212/0x3a0
[ 1880.238464][ T9984]  skb_clone+0x212/0x3a0
[ 1880.238489][ T9984]  __netlink_deliver_tap+0x413/0x860
[ 1880.238520][ T9984]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1880.238541][ T9984]  netlink_deliver_tap+0x19c/0x1b0
[ 1880.238576][ T9984]  netlink_unicast+0x781/0x940
[ 1880.238605][ T9984]  netlink_sendmsg+0x813/0xb40
[ 1880.238636][ T9984]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1880.238668][ T9984]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1880.238698][ T9984]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1880.238723][ T9984]  sock_sendmsg_nosec+0x13a/0x180
[ 1880.238756][ T9984]  ____sys_sendmsg+0x54e/0x850
[ 1880.238786][ T9984]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1880.238822][ T9984]  ? import_iovec+0x73/0xa0
[ 1880.238863][ T9984]  ___sys_sendmsg+0x2a5/0x360
[ 1880.238892][ T9984]  ? __lock_acquire+0x6df/0x2e50
[ 1880.238923][ T9984]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1880.238988][ T9984]  ? __fget_files+0x2a/0x420
[ 1880.239017][ T9984]  ? __fget_files+0x3a2/0x420
[ 1880.239060][ T9984]  __x64_sys_sendmsg+0x1b1/0x290
[ 1880.239089][ T9984]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1880.239139][ T9984]  do_syscall_64+0x166/0x520
[ 1880.239170][ T9984]  ? trace_irq_disable+0x3b/0x140
[ 1880.239193][ T9984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1880.239217][ T9984]  ? clear_bhb_loop+0x70/0xc0
[ 1880.239247][ T9984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1880.239271][ T9984] RIP: 0033:0x7f45eed9e159
[ 1880.239294][ T9984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1880.239315][ T9984] RSP: 002b:00007f45efc52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1880.239341][ T9984] RAX: ffffffffffffffda RBX: 00007f45ef025fa0 RCX: 00007f45eed9e159
[ 1880.239360][ T9984] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1880.239376][ T9984] RBP: 00007f45efc52090 R08: 0000000000000000 R09: 0000000000000000
[ 1880.239391][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1880.239405][ T9984] R13: 00007f45ef026038 R14: 00007f45ef025fa0 R15: 00007fff90abf9e8
[ 1880.239439][ T9984]  </TASK>
[ 1880.597103][ T9971] netlink: 10 bytes leftover after parsing attributes in process `syz.7.14056'.
[ 1880.631536][T31101] block nbd64: NBD_DISCONNECT
[ 1881.071836][ T9993] sctp: [Deprecated]: syz.5.14063 (pid 9993) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1881.071836][ T9993] Use struct sctp_sack_info instead
[ 1881.306276][T31101] udevd[31101]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1881.938010][T10024] FAULT_INJECTION: forcing a failure.
[ 1881.938010][T10024] name failslab, interval 1, probability 0, space 0, times 0
[ 1881.951303][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.9.14072 Not tainted syzkaller #0 PREEMPT(full) 
[ 1881.951337][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1881.951352][T10024] Call Trace:
[ 1881.951363][T10024]  <TASK>
[ 1881.951374][T10024]  dump_stack_lvl+0xe8/0x150
[ 1881.951425][T10024]  should_fail_ex+0x410/0x560
[ 1881.951465][T10024]  should_failslab+0xa8/0x100
[ 1881.951494][T10024]  ? skb_clone+0x212/0x3a0
[ 1881.951519][T10024]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1881.951562][T10024]  ? skb_clone+0x212/0x3a0
[ 1881.951594][T10024]  skb_clone+0x212/0x3a0
[ 1881.951622][T10024]  __netlink_deliver_tap+0x413/0x860
[ 1881.951663][T10024]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1881.951693][T10024]  netlink_deliver_tap+0x19c/0x1b0
[ 1881.951722][T10024]  netlink_unicast+0x781/0x940
[ 1881.951759][T10024]  netlink_sendmsg+0x813/0xb40
[ 1881.951797][T10024]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1881.951834][T10024]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1881.951872][T10024]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1881.951897][T10024]  sock_sendmsg_nosec+0x13a/0x180
[ 1881.951932][T10024]  ____sys_sendmsg+0x54e/0x850
[ 1881.951962][T10024]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1881.951997][T10024]  ? import_iovec+0x73/0xa0
[ 1881.952037][T10024]  ___sys_sendmsg+0x2a5/0x360
[ 1881.952059][T10024]  ? __lock_acquire+0x6df/0x2e50
[ 1881.952087][T10024]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1881.952148][T10024]  ? __fget_files+0x2a/0x420
[ 1881.952177][T10024]  ? __fget_files+0x3a2/0x420
[ 1881.952217][T10024]  __x64_sys_sendmsg+0x1b1/0x290
[ 1881.952243][T10024]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1881.952289][T10024]  do_syscall_64+0x166/0x520
[ 1881.952319][T10024]  ? trace_irq_disable+0x3b/0x140
[ 1881.952340][T10024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.952365][T10024]  ? clear_bhb_loop+0x70/0xc0
[ 1881.952400][T10024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.952423][T10024] RIP: 0033:0x7fb50739e159
[ 1881.952444][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1881.952464][T10024] RSP: 002b:00007fb508218028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1881.952489][T10024] RAX: ffffffffffffffda RBX: 00007fb507625fa0 RCX: 00007fb50739e159
[ 1881.952505][T10024] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1881.952521][T10024] RBP: 00007fb508218090 R08: 0000000000000000 R09: 0000000000000000
[ 1881.952535][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1881.952549][T10024] R13: 00007fb507626038 R14: 00007fb507625fa0 R15: 00007fffd3cc9b88
[ 1881.952585][T10024]  </TASK>
[ 1882.257663][T10028] netlink: 'syz.5.14074': attribute type 3 has an invalid length.
[ 1883.298499][T10046] netlink: 'syz.8.14080': attribute type 27 has an invalid length.
[ 1883.330967][T10047] tipc: Trying to set illegal importance in message
[ 1883.727363][T10062] FAULT_INJECTION: forcing a failure.
[ 1883.727363][T10062] name failslab, interval 1, probability 0, space 0, times 0
[ 1883.744802][T10062] CPU: 0 UID: 0 PID: 10062 Comm: syz.9.14086 Not tainted syzkaller #0 PREEMPT(full) 
[ 1883.744837][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1883.744852][T10062] Call Trace:
[ 1883.744862][T10062]  <TASK>
[ 1883.744873][T10062]  dump_stack_lvl+0xe8/0x150
[ 1883.744914][T10062]  should_fail_ex+0x410/0x560
[ 1883.744955][T10062]  should_failslab+0xa8/0x100
[ 1883.744986][T10062]  __kmalloc_noprof+0xfe/0x720
[ 1883.745023][T10062]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1883.745059][T10062]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1883.745103][T10062]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1883.745147][T10062]  genl_family_rcv_msg_doit+0xda/0x340
[ 1883.745189][T10062]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1883.745232][T10062]  ? apparmor_capable+0x126/0x170
[ 1883.745261][T10062]  ? bpf_lsm_capable+0x9/0x20
[ 1883.745295][T10062]  ? security_capable+0x7e/0x2c0
[ 1883.745335][T10062]  genl_rcv_msg+0x614/0x7a0
[ 1883.745373][T10062]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1883.745405][T10062]  ? __pfx_tipc_nl_bearer_add+0x10/0x10
[ 1883.745441][T10062]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1883.745487][T10062]  netlink_rcv_skb+0x226/0x4a0
[ 1883.745514][T10062]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1883.745546][T10062]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1883.745591][T10062]  ? down_read+0x2be/0x330
[ 1883.745628][T10062]  genl_rcv+0x28/0x40
[ 1883.745656][T10062]  netlink_unicast+0x7bd/0x940
[ 1883.745692][T10062]  netlink_sendmsg+0x813/0xb40
[ 1883.745737][T10062]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1883.745775][T10062]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1883.745811][T10062]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1883.745836][T10062]  sock_sendmsg_nosec+0x13a/0x180
[ 1883.745870][T10062]  ____sys_sendmsg+0x54e/0x850
[ 1883.745900][T10062]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1883.745935][T10062]  ? import_iovec+0x73/0xa0
[ 1883.745975][T10062]  ___sys_sendmsg+0x2a5/0x360
[ 1883.745997][T10062]  ? __lock_acquire+0x6df/0x2e50
[ 1883.746026][T10062]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1883.746089][T10062]  ? __fget_files+0x2a/0x420
[ 1883.746118][T10062]  ? __fget_files+0x3a2/0x420
[ 1883.746159][T10062]  __x64_sys_sendmsg+0x1b1/0x290
[ 1883.746186][T10062]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1883.746231][T10062]  do_syscall_64+0x166/0x520
[ 1883.746260][T10062]  ? trace_irq_disable+0x3b/0x140
[ 1883.746283][T10062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1883.746307][T10062]  ? clear_bhb_loop+0x70/0xc0
[ 1883.746335][T10062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1883.746357][T10062] RIP: 0033:0x7fb50739e159
[ 1883.746380][T10062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1883.746400][T10062] RSP: 002b:00007fb508218028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1883.746425][T10062] RAX: ffffffffffffffda RBX: 00007fb507625fa0 RCX: 00007fb50739e159
[ 1883.746442][T10062] RDX: 000000002400c000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1883.746457][T10062] RBP: 00007fb508218090 R08: 0000000000000000 R09: 0000000000000000
[ 1883.746470][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1883.746485][T10062] R13: 00007fb507626038 R14: 00007fb507625fa0 R15: 00007fffd3cc9b88
[ 1883.746521][T10062]  </TASK>
[ 1884.158504][T10066] __nla_validate_parse: 5 callbacks suppressed
[ 1884.165633][T10066] netlink: 244 bytes leftover after parsing attributes in process `syz.5.14085'.
[ 1884.245446][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14085'.
[ 1884.440734][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14088'.
[ 1884.725826][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14091'.
[ 1884.880065][T10089] netlink: NAT attribute has 8 unknown bytes
[ 1884.883830][T10089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1884.988501][T10101] netlink: NAT attribute has 8 unknown bytes
[ 1884.995160][T10101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1885.318665][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14094'.
[ 1886.664137][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14106'.
[ 1886.689265][T10158] netlink: Unknown nat attribute (0)
[ 1886.689320][T10158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1887.549651][T10179] netlink: 'syz.9.14112': attribute type 1 has an invalid length.
[ 1887.549698][T10179] netlink: 'syz.9.14112': attribute type 4 has an invalid length.
[ 1887.549734][T10179] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.14112'.
[ 1887.703434][T10188] netlink: 'syz.8.14114': attribute type 1 has an invalid length.
[ 1887.750806][T10191] netlink: 'syz.5.14113': attribute type 1 has an invalid length.
[ 1887.911342][T10188] bond11: entered promiscuous mode
[ 1887.918398][T10188] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1887.993767][T10192] bond8: (slave geneve2): making interface the new active one
[ 1888.005207][T10192] bond8: (slave geneve2): Enslaving as an active interface with an up link
[ 1888.044351][T25543] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1888.044444][T25543] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1888.044503][T25543] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1888.054485][   T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1888.178666][T10194] macvtap4: entered allmulticast mode
[ 1888.228967][T10196] macvtap5: entered allmulticast mode
[ 1888.278425][T10199] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[ 1888.714307][T10215] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[ 1889.019422][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14123'.
[ 1889.169736][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 180 seconds
[ 1889.169962][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 180 seconds
[ 1889.170174][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 180 seconds
[ 1889.170384][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 180 seconds
[ 1889.771747][T10249] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14128'.
[ 1889.781478][T10249] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14128'.
[ 1890.919423][T10272] IPVS: sh: TCP 127.0.0.1:21 - no destination available
[ 1891.032969][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14143'.
[ 1891.876359][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14142'.
[ 1891.876406][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14142'.
[ 1891.899466][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14142'.
[ 1891.911999][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14142'.
[ 1892.030847][T10316] FAULT_INJECTION: forcing a failure.
[ 1892.030847][T10316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1892.045115][T10316] CPU: 0 UID: 0 PID: 10316 Comm: syz.9.14151 Not tainted syzkaller #0 PREEMPT(full) 
[ 1892.045148][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1892.045163][T10316] Call Trace:
[ 1892.045176][T10316]  <TASK>
[ 1892.045187][T10316]  dump_stack_lvl+0xe8/0x150
[ 1892.045229][T10316]  should_fail_ex+0x410/0x560
[ 1892.045270][T10316]  _copy_from_iter+0x1d3/0x1660
[ 1892.045304][T10316]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1892.045335][T10316]  ? __pfx_policy_nodemask+0x10/0x10
[ 1892.045365][T10316]  ? lock_acquire+0x115/0x350
[ 1892.045389][T10316]  ? __pfx__copy_from_iter+0x10/0x10
[ 1892.045425][T10316]  ? alloc_pages_mpol+0x256/0x390
[ 1892.045464][T10316]  copy_page_from_iter+0x219/0x2d0
[ 1892.045503][T10316]  tun_get_user+0x1c16/0x44d0
[ 1892.045537][T10316]  ? tun_get_user+0x70a/0x44d0
[ 1892.045588][T10316]  ? aa_file_perm+0x4ed/0x15f0
[ 1892.045614][T10316]  ? __pfx_tun_get_user+0x10/0x10
[ 1892.045649][T10316]  ? __lock_acquire+0x6df/0x2e50
[ 1892.045688][T10316]  ? ref_tracker_alloc+0x341/0x4b0
[ 1892.045722][T10316]  ? lock_acquire+0x115/0x350
[ 1892.045746][T10316]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1892.045785][T10316]  ? lock_acquire+0x115/0x350
[ 1892.045808][T10316]  ? tun_get+0x1c/0x2f0
[ 1892.045845][T10316]  ? tun_get+0x1c/0x2f0
[ 1892.045876][T10316]  ? tun_get+0x1c/0x2f0
[ 1892.045912][T10316]  tun_chr_write_iter+0x113/0x200
[ 1892.045948][T10316]  vfs_write+0x612/0xba0
[ 1892.045993][T10316]  ? __pfx_vfs_write+0x10/0x10
[ 1892.046046][T10316]  ? __fget_files+0x2a/0x420
[ 1892.046087][T10316]  ksys_write+0x150/0x270
[ 1892.046124][T10316]  ? __pfx_ksys_write+0x10/0x10
[ 1892.046169][T10316]  do_syscall_64+0x166/0x520
[ 1892.046200][T10316]  ? trace_irq_disable+0x3b/0x140
[ 1892.046223][T10316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1892.046248][T10316]  ? clear_bhb_loop+0x70/0xc0
[ 1892.046278][T10316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1892.046302][T10316] RIP: 0033:0x7fb50735e98e
[ 1892.046325][T10316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1892.046347][T10316] RSP: 002b:00007fb508217fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1892.046372][T10316] RAX: ffffffffffffffda RBX: 00007fb5082186c0 RCX: 00007fb50735e98e
[ 1892.046388][T10316] RDX: 000000000000006e RSI: 00002000000003c0 RDI: 00000000000000c8
[ 1892.046402][T10316] RBP: 00007fb508218090 R08: 0000000000000000 R09: 0000000000000000
[ 1892.046416][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1892.046429][T10316] R13: 00007fb507626038 R14: 00007fb507625fa0 R15: 00007fffd3cc9b88
[ 1892.046463][T10316]  </TASK>
[ 1892.389022][T10311] tipc: New replicast peer: 255.255.255.255
[ 1892.398936][T10311] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1892.828365][T10332] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14155'.
[ 1892.828616][T10332] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14155'.
[ 1892.838753][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14155'.
[ 1893.512337][T28755] tipc: Node number set to 1707052310
[ 1895.112812][T10395] FAULT_INJECTION: forcing a failure.
[ 1895.112812][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1895.112870][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.5.14175 Not tainted syzkaller #0 PREEMPT(full) 
[ 1895.112897][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1895.112911][T10395] Call Trace:
[ 1895.112921][T10395]  <TASK>
[ 1895.112931][T10395]  dump_stack_lvl+0xe8/0x150
[ 1895.112970][T10395]  should_fail_ex+0x410/0x560
[ 1895.113009][T10395]  _copy_to_user+0x31/0xb0
[ 1895.113034][T10395]  simple_read_from_buffer+0xe1/0x170
[ 1895.113071][T10395]  proc_fail_nth_read+0x1bb/0x230
[ 1895.113103][T10395]  ? common_file_perm+0x20e/0x2b0
[ 1895.113141][T10395]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1895.113178][T10395]  ? rw_verify_area+0x24a/0x4c0
[ 1895.113211][T10395]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1895.113244][T10395]  vfs_read+0x213/0xa80
[ 1895.113282][T10395]  ? __pfx___mutex_lock+0x10/0x10
[ 1895.113314][T10395]  ? __pfx_vfs_read+0x10/0x10
[ 1895.113347][T10395]  ? __fget_files+0x2a/0x420
[ 1895.113381][T10395]  ? __fget_files+0x3a2/0x420
[ 1895.113410][T10395]  ? __fget_files+0x2a/0x420
[ 1895.113449][T10395]  ksys_read+0x150/0x270
[ 1895.113483][T10395]  ? __pfx_ksys_read+0x10/0x10
[ 1895.113528][T10395]  do_syscall_64+0x166/0x520
[ 1895.113557][T10395]  ? trace_irq_disable+0x3b/0x140
[ 1895.113579][T10395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1895.113602][T10395]  ? clear_bhb_loop+0x70/0xc0
[ 1895.113631][T10395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1895.113654][T10395] RIP: 0033:0x7f45eed5e98e
[ 1895.113675][T10395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1895.113695][T10395] RSP: 002b:00007f45efc51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1895.113725][T10395] RAX: ffffffffffffffda RBX: 00007f45efc526c0 RCX: 00007f45eed5e98e
[ 1895.113749][T10395] RDX: 000000000000000f RSI: 00007f45efc520a0 RDI: 0000000000000004
[ 1895.113762][T10395] RBP: 00007f45efc52090 R08: 0000000000000000 R09: 0000000000000000
[ 1895.113777][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1895.113791][T10395] R13: 00007f45ef026038 R14: 00007f45ef025fa0 R15: 00007fff90abf9e8
[ 1895.113827][T10395]  </TASK>
[ 1895.621880][T10402] FAULT_INJECTION: forcing a failure.
[ 1895.621880][T10402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1895.637001][T10402] CPU: 0 UID: 0 PID: 10402 Comm: syz.8.14176 Not tainted syzkaller #0 PREEMPT(full) 
[ 1895.637036][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1895.637052][T10402] Call Trace:
[ 1895.637062][T10402]  <TASK>
[ 1895.637072][T10402]  dump_stack_lvl+0xe8/0x150
[ 1895.637114][T10402]  should_fail_ex+0x410/0x560
[ 1895.637163][T10402]  _copy_to_user+0x31/0xb0
[ 1895.637190][T10402]  simple_read_from_buffer+0xe1/0x170
[ 1895.637229][T10402]  proc_fail_nth_read+0x1bb/0x230
[ 1895.637264][T10402]  ? common_file_perm+0x20e/0x2b0
[ 1895.637306][T10402]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1895.637347][T10402]  ? rw_verify_area+0x24a/0x4c0
[ 1895.637379][T10402]  ? tun_chr_write_iter+0x18a/0x200
[ 1895.637412][T10402]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1895.637448][T10402]  vfs_read+0x213/0xa80
[ 1895.637487][T10402]  ? __pfx___mutex_lock+0x10/0x10
[ 1895.637522][T10402]  ? __pfx_vfs_read+0x10/0x10
[ 1895.637557][T10402]  ? __fget_files+0x2a/0x420
[ 1895.637593][T10402]  ? __fget_files+0x3a2/0x420
[ 1895.637623][T10402]  ? __fget_files+0x2a/0x420
[ 1895.637664][T10402]  ksys_read+0x150/0x270
[ 1895.637701][T10402]  ? __pfx_ksys_read+0x10/0x10
[ 1895.637747][T10402]  do_syscall_64+0x166/0x520
[ 1895.637779][T10402]  ? trace_irq_disable+0x3b/0x140
[ 1895.637802][T10402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1895.637827][T10402]  ? clear_bhb_loop+0x70/0xc0
[ 1895.637857][T10402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1895.637881][T10402] RIP: 0033:0x7f6cd055e98e
[ 1895.637904][T10402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1895.637925][T10402] RSP: 002b:00007f6cce7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1895.637951][T10402] RAX: ffffffffffffffda RBX: 00007f6cce7f66c0 RCX: 00007f6cd055e98e
[ 1895.637969][T10402] RDX: 000000000000000f RSI: 00007f6cce7f60a0 RDI: 0000000000000006
[ 1895.637985][T10402] RBP: 00007f6cce7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1895.638000][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1895.638015][T10402] R13: 00007f6cd0826038 R14: 00007f6cd0825fa0 R15: 00007ffe66117e58
[ 1895.638053][T10402]  </TASK>
[ 1896.022980][T10357] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1897.055998][T10421] __nla_validate_parse: 2 callbacks suppressed
[ 1897.056053][T10421] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14186'.
[ 1897.561224][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14186'.
[ 1897.561275][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14186'.
[ 1897.561344][T10434] netlink: 'syz.5.14186': attribute type 3 has an invalid length.
[ 1897.747706][T10447] netlink: 'syz.8.14190': attribute type 27 has an invalid length.
[ 1897.769966][T10447] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14190'.
[ 1898.145473][T10456] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14195'.
[ 1898.270270][T10457] netlink: 27 bytes leftover after parsing attributes in process `syz.7.14194'.
[ 1898.499513][T10460] syzkaller0: entered promiscuous mode
[ 1898.499919][T10460] syzkaller0: entered allmulticast mode
[ 1898.515425][T10460] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1898.631599][T10462] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1899.698245][T10496] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[ 1899.721256][T10496] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 1901.386549][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14223'.
[ 1902.185086][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14232'.
[ 1902.894146][T10571] netlink: 72 bytes leftover after parsing attributes in process `syz.7.14238'.
[ 1903.728120][T10597] netlink: 80 bytes leftover after parsing attributes in process `syz.9.14250'.
[ 1903.981025][T10606] netlink: 'syz.5.14249': attribute type 13 has an invalid length.
[ 1903.981071][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14249'.
[ 1903.981861][T10606] netlink: 'syz.5.14249': attribute type 13 has an invalid length.
[ 1903.981888][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14249'.
[ 1904.299965][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14257'.
[ 1904.327558][T10614] netlink: 'syz.6.14255': attribute type 1 has an invalid length.
[ 1904.609837][T10613] syzkaller0: entered promiscuous mode
[ 1904.618362][T10613] syzkaller0: entered allmulticast mode
[ 1904.742803][T10614] bond14: entered promiscuous mode
[ 1904.749510][T10614] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1904.819112][T10624] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1904.830899][T10624] bond14: (slave ipip0): The slave device specified does not support setting the MAC address
[ 1904.830986][T10624] bond14: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[ 1904.900506][T10624] bond14: (slave ipip0): making interface the new active one
[ 1904.908549][T10624] ipip0: entered promiscuous mode
[ 1904.917288][T10624] bond14: (slave ipip0): Enslaving as an active interface with an up link
[ 1905.414782][ T5757] page_pool_release_retry() stalled pool shutdown: id 211, 1 inflight 60 sec
[ 1908.126335][ T4983] udevd[4983]: worker [31143] /devices/virtual/block/nbd4 timeout; kill it
[ 1908.137517][ T4983] udevd[4983]: seq 34164 '/devices/virtual/block/nbd4' killed
[ 1909.743806][T10660] netlink: 'syz.6.14271': attribute type 1 has an invalid length.
[ 1910.069172][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14275'.
[ 1911.741812][T10731] netlink: 72 bytes leftover after parsing attributes in process `syz.5.14293'.
[ 1911.765244][T10730] netlink: 72 bytes leftover after parsing attributes in process `syz.5.14293'.
[ 1912.171050][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14297'.
[ 1913.151439][T10770] bond15: option packets_per_slave: invalid value (18446744073709551615)
[ 1913.160454][T10770] bond15: option packets_per_slave: allowed values 0 - 65535
[ 1913.172655][T10770] bond15 (unregistering): Released all slaves
[ 1913.210167][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14307'.
[ 1913.450563][T10780] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1913.465939][T10776] netlink: 'syz.7.14307': attribute type 3 has an invalid length.
[ 1913.809115][T10791] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14312'.
[ 1913.846114][T10791] netlink: 64 bytes leftover after parsing attributes in process `syz.7.14312'.
[ 1913.847390][T10791] lo: Caught tx_queue_len zero misconfig
[ 1914.184681][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14314'.
[ 1914.445878][T10809] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1914.457558][T10806] netlink: 112 bytes leftover after parsing attributes in process `syz.8.14318'.
[ 1914.477609][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14319'.
[ 1914.477667][T10809] netlink: 'syz.7.14319': attribute type 7 has an invalid length.
[ 1914.477706][T10809] netlink: 'syz.7.14319': attribute type 8 has an invalid length.
[ 1914.532956][T10815] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1914.543459][T10815] netlink: 'syz.7.14319': attribute type 7 has an invalid length.
[ 1914.543498][T10815] netlink: 'syz.7.14319': attribute type 8 has an invalid length.
[ 1915.608277][T10842] netlink: 'syz.9.14329': attribute type 10 has an invalid length.
[ 1915.608686][T10842] veth1_macvtap: left promiscuous mode
[ 1915.741077][T10842] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[ 1915.911185][T10850] netlink: 'syz.7.14332': attribute type 1 has an invalid length.
[ 1915.966588][T10849] SET target dimension over the limit!
[ 1916.080833][T10853] __nla_validate_parse: 4 callbacks suppressed
[ 1916.087765][T10853] netlink: 112 bytes leftover after parsing attributes in process `syz.9.14333'.
[ 1916.189158][T10857] netlink: 'syz.7.14332': attribute type 1 has an invalid length.
[ 1916.220862][T10848] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1916.350681][T10854] veth3: entered promiscuous mode
[ 1916.391930][T10854] bond10: (slave veth3): Enslaving as a backup interface with a down link
[ 1916.436966][T10861] veth5: entered promiscuous mode
[ 1916.448284][T10861] bond10: (slave veth5): Enslaving as a backup interface with a down link
[ 1916.814602][T10864] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1916.857443][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14336'.
[ 1916.877527][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14338'.
[ 1916.957178][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14337'.
[ 1917.019074][T10867] veth0_to_hsr: left allmulticast mode
[ 1917.037991][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14337'.
[ 1917.050465][T10867] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1917.257181][T10879] ip6erspan1: entered promiscuous mode
[ 1917.687371][T10899] netlink: 112 bytes leftover after parsing attributes in process `syz.5.14346'.
[ 1917.801242][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14347'.
[ 1917.916404][T10898] lo: Caught tx_queue_len zero misconfig
[ 1918.333344][T10913] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14349'.
[ 1918.597257][T10923] netlink: 'syz.5.14348': attribute type 1 has an invalid length.
[ 1919.184753][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14354'.
[ 1919.214800][T10939] netlink: 'syz.5.14357': attribute type 8 has an invalid length.
[ 1919.246082][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 210 seconds
[ 1919.246627][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 210 seconds
[ 1919.246715][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 210 seconds
[ 1919.246799][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 210 seconds
[ 1919.406843][T10942] netlink: 112 bytes leftover after parsing attributes in process `syz.6.14358'.
[ 1919.893980][T10954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1920.266973][T10969] netlink: 'syz.6.14366': attribute type 27 has an invalid length.
[ 1920.384155][T10964] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified.
[ 1920.385391][T10964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1920.520534][T10975] netlink: 'syz.7.14370': attribute type 29 has an invalid length.
[ 1920.533739][T10975] netlink: 'syz.7.14370': attribute type 29 has an invalid length.
[ 1921.073783][T10984] netlink: 'syz.5.14374': attribute type 3 has an invalid length.
[ 1921.129115][T10987] netlink: 'syz.8.14375': attribute type 1 has an invalid length.
[ 1921.988583][T11007] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[ 1921.989545][T11008] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[ 1922.470390][T11026] __nla_validate_parse: 5 callbacks suppressed
[ 1922.470875][T11026] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14380'.
[ 1922.673691][T11034] netlink: 112 bytes leftover after parsing attributes in process `syz.7.14385'.
[ 1922.793066][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14380'.
[ 1922.803927][T11007] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1923.090341][T11038] netlink: 'syz.8.14386': attribute type 27 has an invalid length.
[ 1923.245114][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14391'.
[ 1923.255262][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14391'.
[ 1923.266676][T11048] netlink: 'syz.5.14391': attribute type 15 has an invalid length.
[ 1923.668598][T11065] sctp: [Deprecated]: syz.9.14395 (pid 11065) Use of int in max_burst socket option.
[ 1923.668598][T11065] Use struct sctp_assoc_value instead
[ 1923.816749][T11074] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.14398'.
[ 1923.830728][T11074] openvswitch: netlink: Message has 512 unknown bytes.
[ 1923.957516][T11065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1924.025358][T11078] netlink: 9 bytes leftover after parsing attributes in process `syz.7.14397'.
[ 1924.461995][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14403'.
[ 1924.735568][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1924.828780][T11091] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1925.094970][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1925.297364][T11095] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1925.330631][T11104] netlink: 'syz.5.14409': attribute type 27 has an invalid length.
[ 1925.357537][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1925.451249][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14409'.
[ 1926.008701][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14414'.
[ 1927.108470][T11160] netlink: 'syz.6.14425': attribute type 27 has an invalid length.
[ 1928.164620][T11194] __nla_validate_parse: 6 callbacks suppressed
[ 1928.164671][T11194] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14439'.
[ 1929.369235][T11218] syzkaller0: entered promiscuous mode
[ 1929.369309][T11218] syzkaller0: entered allmulticast mode
[ 1929.412267][T11218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1929.568458][T11217] tipc: Resetting bearer <eth:syzkaller0>
[ 1929.689770][T11217] tipc: Disabling bearer <eth:syzkaller0>
[ 1929.866001][T11241] netlink: 'syz.6.14448': attribute type 27 has an invalid length.
[ 1929.911001][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14448'.
[ 1930.008685][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14453'.
[ 1930.508567][   T31] audit: type=1107 audit(1787965707.400:16): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�yI���+p�f
��凡�=ŞN�e2U�Ief،�}ʣ'h��0�(!ijۋ�[�;�;p�&�O:
�3��S���
*c�n%��#EV�0�‰"p�	�V�@�U�@fɻ�S�ƣ����b��JA�om�|vǘL�Ÿ��H�8u�чs/�e�͎Ũv����@����}�|~��uw�A���v�~4���2�B
�n�3;��lI�Rp��j��G\us��ц9á��'
[ 1930.648605][T11259] netlink: 'syz.7.14460': attribute type 10 has an invalid length.
[ 1931.007474][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14462'.
[ 1931.183908][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14462'.
[ 1931.396345][T11280] netlink: 'syz.9.14465': attribute type 1 has an invalid length.
[ 1931.498205][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14467'.
[ 1933.451117][T11331] netlink: 'syz.7.14484': attribute type 27 has an invalid length.
[ 1933.508403][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14484'.
[ 1933.869857][T11341] openvswitch: netlink: Multiple metadata blocks provided
[ 1933.993867][T11346] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14489'.
[ 1934.006580][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14489'.
[ 1935.242577][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1935.874329][T11389] netlink: 'syz.5.14505': attribute type 27 has an invalid length.
[ 1935.900276][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14505'.
[ 1937.051100][T11421] lo: Caught tx_queue_len zero misconfig
[ 1937.581869][T11431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1938.111969][T11447] netlink: 'syz.8.14528': attribute type 27 has an invalid length.
[ 1938.245352][T11451] syzkaller0: left promiscuous mode
[ 1938.251103][T11451] syzkaller0: left allmulticast mode
[ 1938.381429][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14530'.
[ 1938.381528][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14530'.
[ 1938.486007][T11453] dummy0: entered promiscuous mode
[ 1938.580723][T11453] gretap0: entered promiscuous mode
[ 1938.589744][T11453] debugfs: 'hsr1' already exists in 'hsr'
[ 1938.596421][T11453] Cannot create hsr debugfs directory
[ 1938.957544][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1938.957838][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1938.999474][T11465] netlink: 'syz.5.14536': attribute type 3 has an invalid length.
[ 1939.479846][T11474] bond0: Caught tx_queue_len zero misconfig
[ 1940.324620][T11502] netlink: 'syz.7.14547': attribute type 27 has an invalid length.
[ 1940.745237][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14552'.
[ 1940.784387][T11514] netdevsim netdevsim8: Direct firmware load for � failed with error -2
[ 1940.798980][T11514] netdevsim netdevsim8: Falling back to sysfs fallback for: �
[ 1941.003840][    C0] 
[ 1941.006269][    C0] ================================
[ 1941.011407][    C0] WARNING: inconsistent lock state
[ 1941.016626][    C0] syzkaller #0 Not tainted
[ 1941.021074][    C0] --------------------------------
[ 1941.026205][    C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[ 1941.033163][    C0] ksoftirqd/0/15 [HC0[0]:SC1[1]:HE1:SE0] takes:
[ 1941.039440][    C0] ffff8880805c6260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250
[ 1941.048936][    C0] {SOFTIRQ-ON-W} state was registered at:
[ 1941.054705][    C0]   lock_acquire+0x115/0x350
[ 1941.059421][    C0]   lock_sock_nested+0x41/0x100
[ 1941.064314][    C0]   x25_release+0xa0/0x3d0
[ 1941.068864][    C0]   __sock_release+0xa0/0x1f0
[ 1941.073590][    C0]   sock_close+0x1c/0x30
[ 1941.077862][    C0]   __fput+0x418/0xa50
[ 1941.081973][    C0]   task_work_run+0x1d9/0x270
[ 1941.086680][    C0]   exit_to_user_mode_loop+0x204/0x770
[ 1941.092203][    C0]   do_syscall_64+0x328/0x520
[ 1941.097037][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1941.103053][    C0] irq event stamp: 121663614
[ 1941.107715][    C0] hardirqs last  enabled at (121663614): [<ffffffff8188ed06>] __local_bh_enable_ip+0xd6/0x140
[ 1941.118002][    C0] hardirqs last disabled at (121663613): [<ffffffff8188eca2>] __local_bh_enable_ip+0x72/0x140
[ 1941.128294][    C0] softirqs last  enabled at (121663402): [<ffffffff818919e6>] run_ksoftirqd+0x36/0x60
[ 1941.137948][    C0] softirqs last disabled at (121663409): [<ffffffff818919e6>] run_ksoftirqd+0x36/0x60
[ 1941.147582][    C0] 
[ 1941.147582][    C0] other info that might help us debug this:
[ 1941.155675][    C0]  Possible unsafe locking scenario:
[ 1941.155675][    C0] 
[ 1941.163274][    C0]        CPU0
[ 1941.166589][    C0]        ----
[ 1941.170000][    C0]   lock(sk_lock-AF_X25);
[ 1941.174389][    C0]   <Interrupt>
[ 1941.177873][    C0]     lock(sk_lock-AF_X25);
[ 1941.182450][    C0] 
[ 1941.182450][    C0]  *** DEADLOCK ***
[ 1941.182450][    C0] 
[ 1941.190625][    C0] locks held by ksoftirqd/0/15: 1, last CPU#0:
[ 1941.196825][    C0]  #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0
[ 1941.206897][    C0] 
[ 1941.206897][    C0] stack backtrace:
[ 1941.212820][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1941.222070][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1941.232159][    C0] Call Trace:
[ 1941.235466][    C0]  <TASK>
[ 1941.238421][    C0]  dump_stack_lvl+0xe8/0x150
[ 1941.243046][    C0]  print_usage_bug+0x28c/0x2e0
[ 1941.247839][    C0]  valid_state+0xbe/0xf0
[ 1941.252105][    C0]  mark_lock_irq+0x36/0x380
[ 1941.256638][    C0]  mark_lock+0x117/0x190
[ 1941.260907][    C0]  __lock_acquire+0x6b7/0x2e50
[ 1941.265702][    C0]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1941.271071][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1941.276135][    C0]  ? lock_acquire+0x115/0x350
[ 1941.280838][    C0]  lock_acquire+0x115/0x350
[ 1941.285369][    C0]  ? x25_kill_by_neigh+0x10d/0x250
[ 1941.290518][    C0]  ? x25_kill_by_neigh+0x103/0x250
[ 1941.295663][    C0]  lock_sock_nested+0x41/0x100
[ 1941.300454][    C0]  ? x25_kill_by_neigh+0x10d/0x250
[ 1941.305598][    C0]  x25_kill_by_neigh+0x10d/0x250
[ 1941.310572][    C0]  x25_lapb_receive_frame+0x1b0/0xfb0
[ 1941.316055][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[ 1941.321675][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[ 1941.327200][    C0]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[ 1941.333158][    C0]  netif_receive_skb_core+0x2a6/0x2b0
[ 1941.338572][    C0]  lapbeth_napi_poll+0x42/0x90
[ 1941.343451][    C0]  __napi_poll+0xaa/0x330
[ 1941.347816][    C0]  net_rx_action+0x61d/0xf50
[ 1941.352531][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1941.357669][    C0]  ? xfrm_dev_backlog+0x24b/0x3c0
[ 1941.362780][    C0]  ? net_tx_action+0x5bb/0xc30
[ 1941.367587][    C0]  ? net_tx_action+0xbff/0xc30
[ 1941.372391][    C0]  handle_softirqs+0x226/0x860
[ 1941.377194][    C0]  ? schedule+0x90/0x2b0
[ 1941.381473][    C0]  ? run_ksoftirqd+0x36/0x60
[ 1941.386112][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[ 1941.391175][    C0]  run_ksoftirqd+0x36/0x60
[ 1941.395631][    C0]  smpboot_thread_fn+0x565/0xa70
[ 1941.401044][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[ 1941.406106][    C0]  kthread+0x38b/0x480
[ 1941.410201][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1941.415689][    C0]  ? __pfx_kthread+0x10/0x10
[ 1941.420316][    C0]  ret_from_fork+0x514/0xb70
[ 1941.425013][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1941.430190][    C0]  ? __switch_to+0xc89/0x1420
[ 1941.434913][    C0]  ? __pfx_kthread+0x10/0x10
[ 1941.439534][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1941.444446][    C0]  </TASK>
[ 1941.450670][    C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829
[ 1941.450698][    C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0
[ 1941.450723][    C0] preempt_count: 100, expected: 0
[ 1941.450741][    C0] RCU nest depth: 1, expected: 0
[ 1941.450756][    C0] INFO: lockdep is turned off.
[ 1941.450767][    C0] Preemption disabled at:
[ 1941.450778][    C0] [<ffffffff8188ef0b>] handle_softirqs+0xab/0x860
[ 1941.450828][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1941.450857][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1941.450877][    C0] Call Trace:
[ 1941.450888][    C0]  <TASK>
[ 1941.450899][    C0]  dump_stack_lvl+0xe8/0x150
[ 1941.450933][    C0]  __might_resched+0x36a/0x4c0
[ 1941.450971][    C0]  ? handle_softirqs+0xab/0x860
[ 1941.451005][    C0]  lock_sock_nested+0x56/0x100
[ 1941.451038][    C0]  x25_kill_by_neigh+0x10d/0x250
[ 1941.451078][    C0]  x25_lapb_receive_frame+0x1b0/0xfb0
[ 1941.451119][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[ 1941.451149][    C0]  ? netif_receive_skb_core+0x33/0x2b0
[ 1941.451178][    C0]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[ 1941.451218][    C0]  netif_receive_skb_core+0x2a6/0x2b0
[ 1941.451250][    C0]  lapbeth_napi_poll+0x42/0x90
[ 1941.451284][    C0]  __napi_poll+0xaa/0x330
[ 1941.451317][    C0]  net_rx_action+0x61d/0xf50
[ 1941.451358][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1941.451390][    C0]  ? xfrm_dev_backlog+0x24b/0x3c0
[ 1941.451423][    C0]  ? net_tx_action+0x5bb/0xc30
[ 1941.451459][    C0]  ? net_tx_action+0xbff/0xc30
[ 1941.451494][    C0]  handle_softirqs+0x226/0x860
[ 1941.451527][    C0]  ? schedule+0x90/0x2b0
[ 1941.451555][    C0]  ? run_ksoftirqd+0x36/0x60
[ 1941.451594][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[ 1941.451629][    C0]  run_ksoftirqd+0x36/0x60
[ 1941.451663][    C0]  smpboot_thread_fn+0x565/0xa70
[ 1941.451699][    C0]  ? smpboot_thread_fn+0x4e/0xa70
[ 1941.451746][    C0]  kthread+0x38b/0x480
[ 1941.451769][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1941.451803][    C0]  ? __pfx_kthread+0x10/0x10
[ 1941.451827][    C0]  ret_from_fork+0x514/0xb70
[ 1941.451867][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1941.451905][    C0]  ? __switch_to+0xc89/0x1420
[ 1941.451940][    C0]  ? __pfx_kthread+0x10/0x10
[ 1941.451964][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1941.452010][    C0]  </TASK>
[ 1941.645375][ T2737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1941.645589][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1941.916776][T11531] netlink: 'syz.5.14558': attribute type 12 has an invalid length.
[ 1942.016541][T11531] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht'
[ 1947.404832][T13265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1947.405493][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1949.335028][ T1724] block nbd4: Possible stuck request ffff88802719e000: control (read@0,1024B). Runtime 240 seconds
[ 1949.335434][ T1724] block nbd4: Possible stuck request ffff88802719e1c0: control (read@1024,1024B). Runtime 240 seconds
[ 1949.335530][ T1724] block nbd4: Possible stuck request ffff88802719e380: control (read@2048,1024B). Runtime 240 seconds
[ 1949.335611][ T1724] block nbd4: Possible stuck request ffff88802719e540: control (read@3072,1024B). Runtime 240 seconds
[ 1950.604273][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)