last executing test programs:

55.668246088s ago: executing program 0 (id=2794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x600)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xf2ff, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d8005000400000000000500010004000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fc06002502"], 0x1c}, 0x1, 0x100000000000000}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000001300)=[{&(0x7f00000013c0)="f0", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040))

55.448557708s ago: executing program 0 (id=2797):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff8, 0x208}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

55.391961679s ago: executing program 0 (id=2798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x6, 0xb}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xdd, 0xc, 0x8210}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x170bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c2cc, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000001, 0x4800}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x85}, 0x40000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r4)
close(0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500"], 0x48)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000580), &(0x7f0000000000)=0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10], 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r9, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000001240)=ANY=[], 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000680)={0x0, <r12=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r12, 0x0, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

54.54329088s ago: executing program 1 (id=2810):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000001c0), 0x37)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c58e1e92b3ea307010000000000000000000000fa786585c9b6a75bd71b8d1bfff79662bc7afd21b56886c21476463e527aa17397685cd5fca11ed5aafbe6ef509c1d3840baf8158f02cd283d99f95b050eca653cddc79599cbcace9de128816c3c6ca211598a5ded956916dc865041aa617ed5927a6ea991193cebcbd0fc72f49fe7e2ee4582b7efd6ad00", @ANYRES32=0x0, @ANYBLOB="0a0003000000000014001680100001800c000700ffffffff0900000008001b0000000000"], 0x3c}}, 0x0)
mmap(&(0x7f000062b000/0x2000)=nil, 0x2000, 0x2000004, 0x110, 0xffffffffffffffff, 0xa51bd000)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]})
splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a000000090001007379"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x4, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
listen(r0, 0x0)

54.431595866s ago: executing program 0 (id=2811):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x8, "c2a18b", 0x0, 0x6})

53.591075874s ago: executing program 1 (id=2818):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
write(r1, &(0x7f0000000240)="94", 0x1)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb0", 0x62}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r0, r5, 0x8f5, 0x0)
write(r2, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0xfd109391e26236e4, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r9, 0x11, 0xa, &(0x7f0000000980)=0x7fffffff, 0x4)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000000101010100b5f79e2a11f9db3d0000003c00018004000280010001003a0000002c00018014000300fc02000000000000000000000000000014000400ff0200000000000000000000000000010c0019800800010049"], 0x5c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r12, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300340012800b00010067726574617000002400028006000e000200000005000940fb00000008000700ac14142806000f0006000000080042b2066b83289b32c3b5214f6cb7637872f596aecf473f0f14812bc7eea55b08cfed68e174aa7c201a93d59e465b76baca630b0ff16e503466ae35dc0148423b142ed36fd0de3e7b2296e04c7b30bf675543508e11ffa59446cbb57aa2ba48f0122c2bbe40", @ANYRES32=r10, @ANYBLOB], 0x5c}}, 0x804)

53.210957631s ago: executing program 0 (id=2822):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff8, 0x301}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

53.140967889s ago: executing program 0 (id=2823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

52.924506671s ago: executing program 1 (id=2825):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x408c5}, 0x4048040)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

52.628909008s ago: executing program 1 (id=2827):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6000000}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

52.286200575s ago: executing program 1 (id=2830):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
r5 = socket(0x2, 0x80805, 0x0)
listen(r5, 0x2)
sendmmsg$inet_sctp(r5, &(0x7f00000015c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstaddrv6={0x20, 0x84, 0x8, @private2}], 0x20, 0x20040014}], 0x1, 0x4000080)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'syzkaller1\x00', @random="3b71e623b66a"})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x6001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

52.071317696s ago: executing program 1 (id=2834):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20)
recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000216ff00000003000500000000000a"], 0x70}, 0x1, 0x7}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

37.535470533s ago: executing program 32 (id=2823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

36.933530234s ago: executing program 33 (id=2834):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20)
recvmsg$unix(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000216ff00000003000500000000000a"], 0x70}, 0x1, 0x7}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4)

11.426833808s ago: executing program 2 (id=3008):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x2}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ffffffffffffffff2e2be82db1af00"/24, 0x18)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', <r7=>0x0}, 0x30)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203b30000000000000000008e"], 0x0, 0x3e}, 0x28)
r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7], 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
unshare(0x22020600)
r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_enable(r10, &(0x7f0000000180)='0', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3e, r8}, 0x94)
r11 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0x8004b709, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x3}}, 0x10)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}}}, 0x10)

5.493083361s ago: executing program 5 (id=3063):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @union={0x9, 0x0, 0x0, 0x5, 0x1, 0x7}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1}, 0x28)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x437, 0x1, 0xffffffff, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xfe}}, 0x18)
socket(0x10, 0x3, 0x0)
sendmmsg$inet6(r4, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008081)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c)
r6 = socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6})
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000040)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000000003300000000000000ffffffff00000000000000000000000000000000000000000000000000000000400000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000330000000000000000000000000000000000ffff0a0101010135000005000000000000000900000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd37fecaa28476397e34187dfd0000080003008fb2f0b5b83c4f9179ab53bb0e98f13a1c5877b44e7eb24ae7d98181f59c38f065a74ea9204232335bd687520cbd01219c4696189c0a830e697e462eab68b598a516f696faf59aabb2b8dbe8bb457c8a56", @ANYRES32=r8, @ANYBLOB="3400238005001f000000000006000d000600000008001c00c8060000050011000000000008001c00ff01000005001e000100000008000300", @ANYRES32=r8, @ANYBLOB="0c009900040000000c00000008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048094)

5.459538549s ago: executing program 3 (id=3064):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)={0x54, r2, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337)

5.000616186s ago: executing program 3 (id=3066):
unshare(0x20000400)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000190001002cbd7000000000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x18, 0x3, 0x5, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x48001)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

4.94119542s ago: executing program 4 (id=3067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000200)="09000000e700140000007e62fdb0fdc2e4fe2cf3cafa1be3d47b990088a89900", 0x20, 0x240048c1, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0x9b}, 0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)

4.871049981s ago: executing program 3 (id=3068):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050200000000fddbdf251200000008000700010000001800018014000200626f6e645f736c6176fa5f31000000000800080000000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x4, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x980)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14)
listen(r0, 0x1ff)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000100003052dbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000002c00128008000100677265002000028008000700e0000002060011004e20000004001200050008000200000008000a00", @ANYRES32=r5, @ANYBLOB="535011e652a017a7f17d22ca0007c069b0275eff4c3d73b2713f6f8cc0e976db7f2081aa04bb3fb756416d60d43786eb04abbfc6eabf332ead790317ba429cb1d30ca0e4ed90b9adede2cec1b5dc742815343a3767f4127e44a20d92421ac5699e56540b5a9f47d0ad6231a9ee5e47c156e750f7de9c801e"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x2000000)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[], 0x22c}}, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r9, &(0x7f0000000000)="ab", 0xff04, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}}, &(0x7f0000000200)='syzkaller\x00', 0x100, 0x4c, &(0x7f0000000480)=""/76, 0x41000, 0x7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, r10], &(0x7f0000000700)=[{0x3, 0x2, 0xe, 0xa}, {0x3, 0x1, 0xb, 0x6}, {0x0, 0x2, 0xb, 0xb}], 0x10, 0xb14}, 0x94)

4.547845064s ago: executing program 4 (id=3069):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0)

4.322188924s ago: executing program 4 (id=3071):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x9a, @mcast2, 0x1f6a}}, 0x2, 0x7}, 0x90)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x80000000, <r1=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r1, 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0xbd39, &(0x7f0000000200)=0x4)
socket$kcm(0xa, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
recvmsg$can_raw(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/38, 0x26}], 0x8}, 0x1021)
r5 = socket$kcm(0x2, 0x3, 0x84)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/99, 0x63}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES16], 0x68}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xd, 0xfff1}, {0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040080)

4.206631777s ago: executing program 3 (id=3072):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffb0}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

4.096330492s ago: executing program 5 (id=3073):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$kcm(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x6c000, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x22000810)

3.891656023s ago: executing program 4 (id=3074):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff000)
connect$llc(r4, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={<r6=>0x0}, &(0x7f0000000040)=0xc)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r6, r7, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30)
sendmsg$nl_generic(r1, 0x0, 0x20)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0xa778ea097ec48af0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x8, 0xc, 0x12}, 0x50)
close(r2)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030423bd7000f9dbdf253400000008000300", @ANYRES32=r11, @ANYBLOB="583191c5f945d93442906179f38314002b302a674f8aabfe006f1067594634b2c02acfab0feffe69cc0a000600dffe3cd1cea600ebe385326f79d6eb0b1ad6e45e760a76b278fa289e15fc8d74d87fb54d322591c575360f1bb9bfed0a4d35d9e5da6191705f8589fb51e4d9f6b81c932a4c1d88b74841e352dc2d025e0e7aae811f676a86a7b412e035cd9a7b66"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010)

3.890751042s ago: executing program 3 (id=3075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000280)={'veth0_virt_wifi\x00', {0x2, 0x4e22, @loopback}})

3.389629852s ago: executing program 4 (id=3078):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x800)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={<r3=>0x0, 0x4c, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e23, 0xd6, @local, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f0000000380)=0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)

2.869699936s ago: executing program 6 (id=3081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0)

2.806905064s ago: executing program 6 (id=3082):
socket$unix(0x1, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000001200000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)

1.779717524s ago: executing program 5 (id=3083):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
unshare(0x22020600)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/183, 0xb7, 0x0, &(0x7f0000000180)=""/76, 0x4c}, &(0x7f0000000200)=0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4110000000000006111480000000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)

1.672809656s ago: executing program 4 (id=3084):
unshare(0x22020400)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c1aed67b80e3f2f27b79e99da5769cfdefea6b2c18244e9a9774e648a19305228b9716ca89e3a7b9929fffa5c94be606225c0b69b7ffbeeed14f82414ca07b8dfcae5a8ccee44b1b8d5cb5ce3fbe90743ea288bf538a6d8abeba534f5f8c721de21e70766918799a1eb1"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000003c0)=r4)
bind$xdp(r2, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r8, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x7, 0x7fffffff, 0x3, r8}, &(0x7f00000000c0)=0x10)

1.672033143s ago: executing program 6 (id=3085):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xce22, 0x0, @empty, 0x7}, 0x1c)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000002bc0)}}], 0x1, 0x11)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000400000d70000000900000085000000cfed00009500000000000000e9d002e9cfcd45f9c6b52ec73cbaaaeb97e47e77c9559697f1aab8e619a2329f5ab640826a3b7117e9a329d3484c4e15fd81e9d777d01d887b36c182206e22cbdc404e9c4bcadb709d46b8f6e2283ff9bf5f932b2aa9d7e54f609734dac2a452d9fef4aec91c25741dd5214afa8362fce613ebd875750eb12f30787ca8b82b33de666cef7fc486344e119da80b7100b960a4662e52f80c8c1bc3a4c91c72dc6540494b00000000d50fa7f382deeda568334d"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
socket$unix(0x1, 0x1, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0)
unshare(0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x8010)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c000)
listen(r1, 0x6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r8, 0x0, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0)

1.671745985s ago: executing program 3 (id=3086):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x4001, 0x0, 0x10000082}, 0x90)

1.597202724s ago: executing program 2 (id=3008):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x2}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ffffffffffffffff2e2be82db1af00"/24, 0x18)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', <r7=>0x0}, 0x30)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203b30000000000000000008e"], 0x0, 0x3e}, 0x28)
r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r7], 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
unshare(0x22020600)
r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_enable(r10, &(0x7f0000000180)='0', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3e, r8}, 0x94)
r11 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r11, 0x8004b709, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x3}}, 0x10)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}}}, 0x10)

1.580526531s ago: executing program 6 (id=3087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
r3 = gettid()
close(0x4)
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x60800)

1.332881458s ago: executing program 2 (id=3088):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r5, 0x0, 0xffffffff000)
connect$llc(r4, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={<r6=>0x0}, &(0x7f0000000040)=0xc)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r6, r7, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30)
sendmsg$nl_generic(r1, 0x0, 0x20)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8081}, 0xa778ea097ec48af0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x8, 0xc, 0x12}, 0x50)
close(r2)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030423bd7000f9dbdf253400000008000300", @ANYRES32=r11, @ANYBLOB="583191c5f945d93442906179f38314002b302a674f8aabfe006f1067594634b2c02acfab0feffe69cc0a000600dffe3cd1cea600ebe385326f79d6eb0b1ad6e45e760a76b278fa289e15fc8d74d87fb54d322591c575360f1bb9bfed0a4d35d9e5da6191705f8589fb51e4d9f6b81c932a4c1d88b74841e352dc2d025e0e7aae811f676a86a7b412e035cd9a7b66"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010)

1.27695409s ago: executing program 5 (id=3089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4ea2, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) (async)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000003c0)={0x8, {{0x2, 0x4e30, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4f24, @rand_addr=0x64010101}}}, 0x108) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001d40)={0x0}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r3 = socket$inet(0x2, 0x2, 0xcef)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='xfrm0\x00') (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601040000000000000000010000031400078005001400fd7900000800084000000044050001000700000005000400040000000900020073797a3000000000050005000a00000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x40)

1.098832062s ago: executing program 6 (id=3090):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4)
sendto$inet6(r1, &(0x7f0000000800)="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", 0x597, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@tclass={{0x18, 0x29, 0x43, 0x8ab}}], 0x18}, 0x40c0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
mmap(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x6, 0x4000010, r5, 0xafa9d000)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x48, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x12, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, "ffb00afe4e70"}}}}}}}, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4)
connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0xfffe, 0x27, 0x7, 0xec, 0xfe, @remote}, 0x10)
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0)

793.014611ms ago: executing program 2 (id=3091):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

394.545742ms ago: executing program 2 (id=3093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0xa00000000000000, 0x0, 0xc0}, 0x0)

264.880253ms ago: executing program 5 (id=3094):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="007bd47342"], 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000076030000fcff00008500000086000000bf09000000000000550901008004000095b7ad4839000000bf91000006000000b70200000300000085000000c2000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000076030000fcff00008500000086000000bf09000000000000550901008004000095b7ad4839000000bf91000006000000b70200000300000085000000c2000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @empty, 0x20000000}, 0x1c)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

172.299527ms ago: executing program 6 (id=3095):
socket$unix(0x1, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000002b00000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)

151.505568ms ago: executing program 2 (id=3096):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0xfffffe66)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2, 0x0, 0x1}, 0x18)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="3dbf12", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f0000000380)="f76d43ec44", 0x5}], 0x2}}], 0x2, 0x8004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100))
close(r2)
sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x202, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xd4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x90, 0x6, "15642af47a34a43ca8018f70d6aecf7311452023ce99a7f40efafe687c5f661cb55c47dad3cfce90a68245a224b47bc4c01ae326b6f1288a55f569303a81aca1c05a6763f19a650c5da36780110f9f3d2af0dcd6ff99c77c00bf0ae41b22c19b5b5431ace26896e9b490d022e05f842982ad44e3d8ebfdce614e95c35de6454532d9dc06f6ff083f1404ae74"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x19, 0x6, "458676b4466815f63896408502ab469ce245bf63c1"}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0xfffffe66) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2, 0x0, 0x1}, 0x18) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async)
accept4(r3, 0x0, 0x0, 0x800) (async)
sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="3dbf12", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f0000000380)="f76d43ec44", 0x5}], 0x2}}], 0x2, 0x8004) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100)) (async)
close(r2) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x202, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xd4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x90, 0x6, "15642af47a34a43ca8018f70d6aecf7311452023ce99a7f40efafe687c5f661cb55c47dad3cfce90a68245a224b47bc4c01ae326b6f1288a55f569303a81aca1c05a6763f19a650c5da36780110f9f3d2af0dcd6ff99c77c00bf0ae41b22c19b5b5431ace26896e9b490d022e05f842982ad44e3d8ebfdce614e95c35de6454532d9dc06f6ff083f1404ae74"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x19, 0x6, "458676b4466815f63896408502ab469ce245bf63c1"}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async)

0s ago: executing program 5 (id=3097):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
write(r1, &(0x7f0000000240)="94", 0x1)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r0, r5, 0x8f5, 0x0)
write(r2, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r4, 0x0, 0x40000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r9, 0x11, 0xa, &(0x7f0000000980)=0x7fffffff, 0x4)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c0000000101010100b5f79e2a11f9db3d0000003c00018004000280010001003a0000002c00018014000300fc02000000000000000000000000000014000400ff0200000000000000000000000000010c0019800800010049"], 0x5c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r12, 0xf1aad47e89fb43b5, 0x0, 0x0, {}, [@handle=@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000080400300340012800b00010067726574617000002400028006000e000200000005000940fb00000008000700ac14142806000f0006000000080042b2066b83289b32c3b5214f6cb7637872f596aecf473f0f14812bc7eea55b08cfed68e174aa7c201a93d59e465b76baca630b0ff16e503466ae35dc0148423b142ed36fd0de3e7b2296e04c7b30bf675543508e11ffa59446cbb57aa2ba48f0122c2bbe40", @ANYRES32=r10, @ANYBLOB], 0x5c}}, 0x804)

kernel console output (not intermixed with test programs):

1.1922': attribute type 1 has an invalid length.
[  358.346110][T12382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'.
[  358.720878][T12398] FAULT_INJECTION: forcing a failure.
[  358.720878][T12398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  358.774535][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.2.1924 Not tainted syzkaller #0 PREEMPT(full) 
[  358.774567][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  358.774580][T12398] Call Trace:
[  358.774588][T12398]  <TASK>
[  358.774598][T12398]  dump_stack_lvl+0x189/0x250
[  358.774632][T12398]  ? __pfx____ratelimit+0x10/0x10
[  358.774656][T12398]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.774685][T12398]  ? __pfx__printk+0x10/0x10
[  358.774707][T12398]  ? __might_fault+0xb0/0x130
[  358.774749][T12398]  should_fail_ex+0x414/0x560
[  358.774796][T12398]  _copy_from_iter+0x1de/0x1790
[  358.774822][T12398]  ? __lock_acquire+0xab9/0xd20
[  358.774843][T12398]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  358.774876][T12398]  ? __pfx__copy_from_iter+0x10/0x10
[  358.774905][T12398]  ? dev_get_by_index+0x22/0x2e0
[  358.774936][T12398]  ? dev_get_by_index+0x22/0x2e0
[  358.774975][T12398]  packet_sendmsg+0x3072/0x5080
[  358.775013][T12398]  ? aa_unix_bind_perm+0x2f6/0x8d0
[  358.775068][T12398]  ? __pfx___might_resched+0x10/0x10
[  358.775090][T12398]  ? __lock_acquire+0xab9/0xd20
[  358.775128][T12398]  ? __pfx_packet_sendmsg+0x10/0x10
[  358.775152][T12398]  ? aa_sk_perm+0x81e/0x950
[  358.775185][T12398]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  358.775221][T12398]  ? aa_sock_msg_perm+0xf1/0x1d0
[  358.775255][T12398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  358.775298][T12398]  ? __pfx_packet_sendmsg+0x10/0x10
[  358.775327][T12398]  __sock_sendmsg+0x21c/0x270
[  358.775364][T12398]  __sys_sendto+0x3bd/0x520
[  358.775397][T12398]  ? __pfx___sys_sendto+0x10/0x10
[  358.775417][T12398]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  358.775459][T12398]  ? __fget_files+0x3a0/0x420
[  358.775490][T12398]  ? ksys_write+0x22a/0x250
[  358.775527][T12398]  ? __pfx_ksys_write+0x10/0x10
[  358.775561][T12398]  __x64_sys_sendto+0xde/0x100
[  358.775588][T12398]  do_syscall_64+0xfa/0xfa0
[  358.775612][T12398]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.775637][T12398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.775656][T12398]  ? clear_bhb_loop+0x60/0xb0
[  358.775681][T12398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.775702][T12398] RIP: 0033:0x7f67d558f749
[  358.775721][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.775739][T12398] RSP: 002b:00007f67d6409038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  358.775770][T12398] RAX: ffffffffffffffda RBX: 00007f67d57e5fa0 RCX: 00007f67d558f749
[  358.775785][T12398] RDX: fffffffffffffe57 RSI: 0000200000000180 RDI: 0000000000000003
[  358.775800][T12398] RBP: 00007f67d6409090 R08: 0000200000000140 R09: 0000000000000014
[  358.775814][T12398] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  358.775826][T12398] R13: 00007f67d57e6038 R14: 00007f67d57e5fa0 R15: 00007ffc177bedd8
[  358.775863][T12398]  </TASK>
[  359.283577][T12406] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.343412][T12406] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  359.478671][T12406] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.493410][T12406] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  359.522425][T12417] FAULT_INJECTION: forcing a failure.
[  359.522425][T12417] name failslab, interval 1, probability 0, space 0, times 0
[  359.538896][T12417] CPU: 1 UID: 0 PID: 12417 Comm: syz.4.1930 Not tainted syzkaller #0 PREEMPT(full) 
[  359.538926][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  359.538957][T12417] Call Trace:
[  359.538966][T12417]  <TASK>
[  359.538974][T12417]  dump_stack_lvl+0x189/0x250
[  359.539009][T12417]  ? __pfx____ratelimit+0x10/0x10
[  359.539035][T12417]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.539064][T12417]  ? __pfx__printk+0x10/0x10
[  359.539092][T12417]  ? __pfx___might_resched+0x10/0x10
[  359.539115][T12417]  ? fs_reclaim_acquire+0x7d/0x100
[  359.539141][T12417]  should_fail_ex+0x414/0x560
[  359.539181][T12417]  should_failslab+0xa8/0x100
[  359.539205][T12417]  kmem_cache_alloc_noprof+0x74/0x6e0
[  359.539236][T12417]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  359.539263][T12417]  ? getname_flags+0xb8/0x540
[  359.539284][T12417]  ? __pfx_vfs_write+0x10/0x10
[  359.539318][T12417]  getname_flags+0xb8/0x540
[  359.539346][T12417]  do_sys_openat2+0xbc/0x1c0
[  359.539375][T12417]  ? __pfx_do_sys_openat2+0x10/0x10
[  359.539405][T12417]  ? ksys_write+0x22a/0x250
[  359.539438][T12417]  ? __pfx_ksys_write+0x10/0x10
[  359.539481][T12417]  __x64_sys_openat+0x138/0x170
[  359.539513][T12417]  do_syscall_64+0xfa/0xfa0
[  359.539538][T12417]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.539565][T12417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.539586][T12417]  ? clear_bhb_loop+0x60/0xb0
[  359.539612][T12417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.539633][T12417] RIP: 0033:0x7f8b0d98df90
[  359.539653][T12417] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  359.539671][T12417] RSP: 002b:00007f8b0e7e4f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  359.539694][T12417] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b0d98df90
[  359.539710][T12417] RDX: 0000000000000000 RSI: 00007f8b0da1407e RDI: 00000000ffffff9c
[  359.539723][T12417] RBP: 00007f8b0da1407e R08: 0000000000000000 R09: 0000000000000000
[  359.539737][T12417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  359.539749][T12417] R13: 00007f8b0dbe6038 R14: 00007f8b0dbe5fa0 R15: 00007fff366a8d78
[  359.539790][T12417]  </TASK>
[  359.889104][T12406] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.899050][T12406] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  361.206540][T12406] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.231369][T12406] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  361.339161][T12441] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1935'.
[  361.432848][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'.
[  361.558036][   T74] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  361.573315][   T74] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  361.598484][   T74] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  361.607645][   T74] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  361.632017][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  361.640930][   T52] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  361.677293][   T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  361.687437][   T52] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  361.727538][T12445] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1938'.
[  361.754993][T12445] netlink: 'syz.4.1938': attribute type 1 has an invalid length.
[  361.935791][T12445] 8021q: adding VLAN 0 to HW filter on device bond4
[  362.004319][T12462] FAULT_INJECTION: forcing a failure.
[  362.004319][T12462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.040987][T12462] CPU: 0 UID: 0 PID: 12462 Comm: syz.2.1943 Not tainted syzkaller #0 PREEMPT(full) 
[  362.041016][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  362.041029][T12462] Call Trace:
[  362.041037][T12462]  <TASK>
[  362.041045][T12462]  dump_stack_lvl+0x189/0x250
[  362.041078][T12462]  ? __pfx____ratelimit+0x10/0x10
[  362.041120][T12462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.041149][T12462]  ? __pfx__printk+0x10/0x10
[  362.041171][T12462]  ? __might_fault+0xb0/0x130
[  362.041221][T12462]  should_fail_ex+0x414/0x560
[  362.041259][T12462]  _copy_from_iter+0x1de/0x1790
[  362.041282][T12462]  ? kmem_cache_alloc_node_noprof+0x483/0x710
[  362.041311][T12462]  ? kmalloc_reserve+0xbd/0x290
[  362.041348][T12462]  ? __pfx__copy_from_iter+0x10/0x10
[  362.041369][T12462]  ? __alloc_skb+0x2f1/0x430
[  362.041394][T12462]  ? __pfx___alloc_skb+0x10/0x10
[  362.041420][T12462]  ? netlink_sendmsg+0x642/0xb30
[  362.041445][T12462]  ? skb_put+0x11b/0x210
[  362.041472][T12462]  netlink_sendmsg+0x6b2/0xb30
[  362.041510][T12462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.041541][T12462]  ? aa_sock_msg_perm+0xf1/0x1d0
[  362.041575][T12462]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  362.041596][T12462]  ? __pfx_netlink_sendmsg+0x10/0x10
[  362.041624][T12462]  __sock_sendmsg+0x21c/0x270
[  362.041661][T12462]  ____sys_sendmsg+0x505/0x830
[  362.041693][T12462]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.041731][T12462]  ? import_iovec+0x74/0xa0
[  362.041761][T12462]  ___sys_sendmsg+0x21f/0x2a0
[  362.041791][T12462]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.041857][T12462]  ? __fget_files+0x2a/0x420
[  362.041876][T12462]  ? __fget_files+0x3a0/0x420
[  362.041908][T12462]  __x64_sys_sendmsg+0x19b/0x260
[  362.041939][T12462]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  362.041976][T12462]  ? __pfx_ksys_write+0x10/0x10
[  362.042011][T12462]  ? do_syscall_64+0xbe/0xfa0
[  362.042041][T12462]  do_syscall_64+0xfa/0xfa0
[  362.042065][T12462]  ? lockdep_hardirqs_on+0x9c/0x150
[  362.042091][T12462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.042111][T12462]  ? clear_bhb_loop+0x60/0xb0
[  362.042137][T12462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.042158][T12462] RIP: 0033:0x7f67d558f749
[  362.042177][T12462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.042195][T12462] RSP: 002b:00007f67d6409038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.042224][T12462] RAX: ffffffffffffffda RBX: 00007f67d57e5fa0 RCX: 00007f67d558f749
[  362.042240][T12462] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  362.042253][T12462] RBP: 00007f67d6409090 R08: 0000000000000000 R09: 0000000000000000
[  362.042266][T12462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.042278][T12462] R13: 00007f67d57e6038 R14: 00007f67d57e5fa0 R15: 00007ffc177bedd8
[  362.042313][T12462]  </TASK>
[  362.362545][T12466] FAULT_INJECTION: forcing a failure.
[  362.362545][T12466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.377490][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.0.1944 Not tainted syzkaller #0 PREEMPT(full) 
[  362.377520][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  362.377533][T12466] Call Trace:
[  362.377541][T12466]  <TASK>
[  362.377550][T12466]  dump_stack_lvl+0x189/0x250
[  362.377584][T12466]  ? __pfx____ratelimit+0x10/0x10
[  362.377609][T12466]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.377637][T12466]  ? __pfx__printk+0x10/0x10
[  362.377673][T12466]  should_fail_ex+0x414/0x560
[  362.377711][T12466]  strncpy_from_user+0x36/0x290
[  362.377747][T12466]  getname_flags+0xf3/0x540
[  362.377775][T12466]  do_sys_openat2+0xbc/0x1c0
[  362.377815][T12466]  ? __pfx_do_sys_openat2+0x10/0x10
[  362.377844][T12466]  ? ksys_write+0x22a/0x250
[  362.377875][T12466]  ? __pfx_ksys_write+0x10/0x10
[  362.377907][T12466]  __x64_sys_openat+0x138/0x170
[  362.377937][T12466]  do_syscall_64+0xfa/0xfa0
[  362.377961][T12466]  ? lockdep_hardirqs_on+0x9c/0x150
[  362.377985][T12466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.378005][T12466]  ? clear_bhb_loop+0x60/0xb0
[  362.378030][T12466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.378050][T12466] RIP: 0033:0x7fcfa718df90
[  362.378068][T12466] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  362.378088][T12466] RSP: 002b:00007fcfa80daf60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  362.378110][T12466] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfa718df90
[  362.378125][T12466] RDX: 0000000000000000 RSI: 00007fcfa721407e RDI: 00000000ffffff9c
[  362.378139][T12466] RBP: 00007fcfa721407e R08: 0000000000000000 R09: 0000000000000000
[  362.378152][T12466] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  362.378164][T12466] R13: 00007fcfa73e6038 R14: 00007fcfa73e5fa0 R15: 00007fff3b273e58
[  362.378199][T12466]  </TASK>
[  362.572364][T12469] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1945'.
[  363.327239][T12497] FAULT_INJECTION: forcing a failure.
[  363.327239][T12497] name failslab, interval 1, probability 0, space 0, times 0
[  363.343324][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.0.1953 Not tainted syzkaller #0 PREEMPT(full) 
[  363.343353][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  363.343367][T12497] Call Trace:
[  363.343376][T12497]  <TASK>
[  363.343385][T12497]  dump_stack_lvl+0x189/0x250
[  363.343420][T12497]  ? __pfx____ratelimit+0x10/0x10
[  363.343446][T12497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.343476][T12497]  ? __pfx__printk+0x10/0x10
[  363.343513][T12497]  should_fail_ex+0x414/0x560
[  363.343552][T12497]  should_failslab+0xa8/0x100
[  363.343576][T12497]  kmem_cache_alloc_node_noprof+0x77/0x710
[  363.343607][T12497]  ? __alloc_skb+0x255/0x430
[  363.343630][T12497]  ? napi_skb_cache_get+0x4a5/0x790
[  363.343652][T12497]  ? napi_skb_cache_get+0x151/0x790
[  363.343682][T12497]  __alloc_skb+0x255/0x430
[  363.343709][T12497]  ? __pfx___alloc_skb+0x10/0x10
[  363.343734][T12497]  ? do_raw_spin_lock+0x121/0x290
[  363.343786][T12497]  tcp_make_synack+0xc5/0x22e0
[  363.343825][T12497]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  363.343868][T12497]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.343896][T12497]  ? __pfx_tcp_make_synack+0x10/0x10
[  363.343917][T12497]  ? rcu_is_watching+0x15/0xb0
[  363.343950][T12497]  ? __mod_timer+0xb37/0xf30
[  363.343988][T12497]  tcp_v6_send_synack+0xeb/0xcf0
[  363.344031][T12497]  ? __pfx_tcp_v6_send_synack+0x10/0x10
[  363.344082][T12497]  tcp_conn_request+0x22ab/0x3410
[  363.344156][T12497]  ? __pfx_tcp_conn_request+0x10/0x10
[  363.344190][T12497]  ? __lock_acquire+0xab9/0xd20
[  363.344236][T12497]  ? subflow_v6_conn_request+0x25b/0x430
[  363.344268][T12497]  ? tcp_rcv_state_process+0x20a/0x44d0
[  363.344291][T12497]  tcp_rcv_state_process+0x19c0/0x44d0
[  363.344333][T12497]  ? sk_filter_trim_cap+0x1e1/0xd60
[  363.344367][T12497]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  363.344390][T12497]  ? sk_filter_trim_cap+0x932/0xd60
[  363.344436][T12497]  tcp_v6_do_rcv+0xbef/0x1ba0
[  363.344477][T12497]  tcp_v6_rcv+0x1fb2/0x2ae0
[  363.344507][T12497]  ? raw6_local_deliver+0x15d/0xad0
[  363.344574][T12497]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  363.344603][T12497]  ? nf_nat_ipv6_fn+0xe7/0x2d0
[  363.344642][T12497]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  363.344672][T12497]  ip6_protocol_deliver_rcu+0xcb0/0x15c0
[  363.344732][T12497]  ip6_input_finish+0x191/0x370
[  363.344764][T12497]  NF_HOOK+0x30c/0x3a0
[  363.344791][T12497]  ? __pfx_ip6_input_finish+0x10/0x10
[  363.344817][T12497]  ? NF_HOOK+0x9a/0x3a0
[  363.344841][T12497]  ? __pfx_NF_HOOK+0x10/0x10
[  363.344868][T12497]  ? __pfx_ip6_input_finish+0x10/0x10
[  363.344910][T12497]  ip6_input+0x16a/0x270
[  363.344934][T12497]  ? ip6_input+0x23/0x270
[  363.344964][T12497]  NF_HOOK+0x30c/0x3a0
[  363.344988][T12497]  ? skb_orphan+0x4f/0xd0
[  363.345034][T12497]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  363.345059][T12497]  ? NF_HOOK+0x9a/0x3a0
[  363.345084][T12497]  ? __pfx_NF_HOOK+0x10/0x10
[  363.345114][T12497]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  363.345154][T12497]  __netif_receive_skb+0xd3/0x380
[  363.345184][T12497]  ? netif_receive_skb+0x115/0x790
[  363.345228][T12497]  netif_receive_skb+0x1cb/0x790
[  363.345260][T12497]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  363.345286][T12497]  ? __pfx_netif_receive_skb+0x10/0x10
[  363.345332][T12497]  ? tun_rx_batched+0x160/0x730
[  363.345361][T12497]  tun_rx_batched+0x1b9/0x730
[  363.345387][T12497]  ? __lock_acquire+0xab9/0xd20
[  363.345413][T12497]  ? __pfx_tun_rx_batched+0x10/0x10
[  363.345444][T12497]  ? tun_get_user+0x272f/0x3e90
[  363.345501][T12497]  tun_get_user+0x2b65/0x3e90
[  363.345541][T12497]  ? tun_get_user+0x6f6/0x3e90
[  363.345570][T12497]  ? tun_get_user+0x272f/0x3e90
[  363.345606][T12497]  ? aa_file_perm+0x44d/0x1550
[  363.345628][T12497]  ? __pfx_tun_get_user+0x10/0x10
[  363.345668][T12497]  ? __lock_acquire+0xab9/0xd20
[  363.345702][T12497]  ? ref_tracker_alloc+0x318/0x460
[  363.345726][T12497]  ? __lock_acquire+0xab9/0xd20
[  363.345754][T12497]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  363.345783][T12497]  ? tun_get+0x1c/0x2f0
[  363.345816][T12497]  ? tun_get+0x1c/0x2f0
[  363.345841][T12497]  ? tun_get+0x1c/0x2f0
[  363.345873][T12497]  tun_chr_write_iter+0x113/0x200
[  363.345903][T12497]  vfs_write+0x5c9/0xb30
[  363.345939][T12497]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  363.345968][T12497]  ? __pfx_vfs_write+0x10/0x10
[  363.346010][T12497]  ? __fget_files+0x2a/0x420
[  363.346042][T12497]  ksys_write+0x145/0x250
[  363.346075][T12497]  ? __pfx_ksys_write+0x10/0x10
[  363.346108][T12497]  ? do_syscall_64+0xbe/0xfa0
[  363.346138][T12497]  do_syscall_64+0xfa/0xfa0
[  363.346161][T12497]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.346186][T12497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.346206][T12497]  ? clear_bhb_loop+0x60/0xb0
[  363.346231][T12497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.346250][T12497] RIP: 0033:0x7fcfa718e1ff
[  363.346269][T12497] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  363.346287][T12497] RSP: 002b:00007fcfa80db000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  363.346308][T12497] RAX: ffffffffffffffda RBX: 00007fcfa73e5fa0 RCX: 00007fcfa718e1ff
[  363.346331][T12497] RDX: 000000000000004a RSI: 0000200000000600 RDI: 00000000000000c8
[  363.346343][T12497] RBP: 00007fcfa80db090 R08: 0000000000000000 R09: 0000000000000000
[  363.346357][T12497] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  363.346369][T12497] R13: 00007fcfa73e6038 R14: 00007fcfa73e5fa0 R15: 00007fff3b273e58
[  363.346407][T12497]  </TASK>
[  364.451743][T12513] netlink: 'syz.0.1960': attribute type 13 has an invalid length.
[  364.522118][T12517] siw: device registration error -23
[  365.776676][T12536] FAULT_INJECTION: forcing a failure.
[  365.776676][T12536] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.790773][T12536] CPU: 0 UID: 0 PID: 12536 Comm: syz.2.1966 Not tainted syzkaller #0 PREEMPT(full) 
[  365.790812][T12536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  365.790824][T12536] Call Trace:
[  365.790832][T12536]  <TASK>
[  365.790841][T12536]  dump_stack_lvl+0x189/0x250
[  365.790874][T12536]  ? __pfx____ratelimit+0x10/0x10
[  365.790897][T12536]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.790925][T12536]  ? __pfx__printk+0x10/0x10
[  365.790960][T12536]  should_fail_ex+0x414/0x560
[  365.790997][T12536]  _copy_to_user+0x31/0xb0
[  365.791026][T12536]  simple_read_from_buffer+0xe1/0x170
[  365.791062][T12536]  proc_fail_nth_read+0x1b3/0x220
[  365.791092][T12536]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  365.791122][T12536]  ? rw_verify_area+0x2a6/0x4d0
[  365.791149][T12536]  ? __lock_acquire+0xab9/0xd20
[  365.791167][T12536]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  365.791195][T12536]  vfs_read+0x200/0xa30
[  365.791222][T12536]  ? fdget_pos+0x247/0x320
[  365.791247][T12536]  ? __pfx___mutex_lock+0x10/0x10
[  365.791271][T12536]  ? __pfx_vfs_read+0x10/0x10
[  365.791298][T12536]  ? __fget_files+0x2a/0x420
[  365.791319][T12536]  ? __fget_files+0x3a0/0x420
[  365.791334][T12536]  ? __fget_files+0x2a/0x420
[  365.791360][T12536]  ksys_read+0x145/0x250
[  365.791387][T12536]  ? __pfx_ksys_read+0x10/0x10
[  365.791416][T12536]  ? do_syscall_64+0xbe/0xfa0
[  365.791444][T12536]  do_syscall_64+0xfa/0xfa0
[  365.791464][T12536]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.791486][T12536]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.791504][T12536]  ? clear_bhb_loop+0x60/0xb0
[  365.791526][T12536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.791543][T12536] RIP: 0033:0x7f67d558e15c
[  365.791561][T12536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  365.791577][T12536] RSP: 002b:00007f67d6409030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  365.791596][T12536] RAX: ffffffffffffffda RBX: 00007f67d57e5fa0 RCX: 00007f67d558e15c
[  365.791610][T12536] RDX: 000000000000000f RSI: 00007f67d64090a0 RDI: 0000000000000004
[  365.791621][T12536] RBP: 00007f67d6409090 R08: 0000000000000000 R09: 0000000000000000
[  365.791632][T12536] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001
[  365.791643][T12536] R13: 00007f67d57e6038 R14: 00007f67d57e5fa0 R15: 00007ffc177bedd8
[  365.791674][T12536]  </TASK>
[  366.758880][T12513] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.896544][T12513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.903887][T12564] netlink: 'syz.3.1973': attribute type 1 has an invalid length.
[  366.928732][T12513] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.254967][ T3094] lo speed is unknown, defaulting to 1000
[  367.260774][ T3094] syz1: Port: 1 Link DOWN
[  367.270418][T12552] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  367.343640][T12552] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  367.369347][T12552] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  367.446482][T12564] 8021q: adding VLAN 0 to HW filter on device bond8
[  367.454570][   T52] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.463024][   T52] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.472810][   T52] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.688250][   T52] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.706323][T12585] siw: device registration error -23
[  367.940475][T12591] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.011396][T12591] bond0: (slave rose0): Enslaving as an active interface with an up link
[  369.069835][T12625] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1988'.
[  369.080029][T12625] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1988'.
[  370.284830][T12625] syz_tun: entered promiscuous mode
[  370.295683][T12644] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  370.372020][T12640] wg1 speed is unknown, defaulting to 1000
[  370.405114][T12640] lo speed is unknown, defaulting to 1000
[  370.683074][T12666] siw: device registration error -23
[  370.711027][T12669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1997'.
[  371.728247][T12694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2003'.
[  371.738887][T12694] netlink: 'syz.0.2003': attribute type 1 has an invalid length.
[  371.849879][T12694] 8021q: adding VLAN 0 to HW filter on device bond1
[  373.060455][T12737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2017'.
[  373.777433][T12739] wg1 speed is unknown, defaulting to 1000
[  373.825058][T12739] lo speed is unknown, defaulting to 1000
[  373.875421][T12744] syzkaller0: entered promiscuous mode
[  373.880965][T12744] syzkaller0: entered allmulticast mode
[  373.889288][T12744] FAULT_INJECTION: forcing a failure.
[  373.889288][T12744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  373.914767][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.3.2020 Not tainted syzkaller #0 PREEMPT(full) 
[  373.914797][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.914810][T12744] Call Trace:
[  373.914818][T12744]  <TASK>
[  373.914826][T12744]  dump_stack_lvl+0x189/0x250
[  373.914859][T12744]  ? __pfx____ratelimit+0x10/0x10
[  373.914883][T12744]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.914909][T12744]  ? __pfx__printk+0x10/0x10
[  373.914940][T12744]  should_fail_ex+0x414/0x560
[  373.914974][T12744]  _copy_from_user+0x2d/0xb0
[  373.915001][T12744]  __copy_msghdr+0x3c5/0x5b0
[  373.915050][T12744]  ___sys_sendmsg+0x1a5/0x2a0
[  373.915075][T12744]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.915128][T12744]  ? __fget_files+0x2a/0x420
[  373.915147][T12744]  ? __fget_files+0x3a0/0x420
[  373.915173][T12744]  __x64_sys_sendmsg+0x19b/0x260
[  373.915199][T12744]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.915231][T12744]  ? __pfx_ksys_write+0x10/0x10
[  373.915265][T12744]  ? do_syscall_64+0xbe/0xfa0
[  373.915295][T12744]  do_syscall_64+0xfa/0xfa0
[  373.915319][T12744]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.915348][T12744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.915369][T12744]  ? clear_bhb_loop+0x60/0xb0
[  373.915394][T12744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.915414][T12744] RIP: 0033:0x7f2bb038f749
[  373.915433][T12744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.915451][T12744] RSP: 002b:00007f2bb1301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.915472][T12744] RAX: ffffffffffffffda RBX: 00007f2bb05e5fa0 RCX: 00007f2bb038f749
[  373.915486][T12744] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007
[  373.915497][T12744] RBP: 00007f2bb1301090 R08: 0000000000000000 R09: 0000000000000000
[  373.915508][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.915519][T12744] R13: 00007f2bb05e6038 R14: 00007f2bb05e5fa0 R15: 00007ffd21c713d8
[  373.915547][T12744]  </TASK>
[  374.244793][T12740] wg1 speed is unknown, defaulting to 1000
[  374.246654][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2019'.
[  374.300939][T12740] lo speed is unknown, defaulting to 1000
[  374.781815][T12774] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  374.962830][T12792] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2031'.
[  375.195109][T12798] syzkaller0: entered promiscuous mode
[  375.211183][T12798] syzkaller0: entered allmulticast mode
[  375.258597][T12798] FAULT_INJECTION: forcing a failure.
[  375.258597][T12798] name failslab, interval 1, probability 0, space 0, times 0
[  375.272404][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.4.2033 Not tainted syzkaller #0 PREEMPT(full) 
[  375.272436][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  375.272450][T12798] Call Trace:
[  375.272458][T12798]  <TASK>
[  375.272468][T12798]  dump_stack_lvl+0x189/0x250
[  375.272504][T12798]  ? __pfx____ratelimit+0x10/0x10
[  375.272529][T12798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.272559][T12798]  ? __pfx__printk+0x10/0x10
[  375.272585][T12798]  ? __pfx___might_resched+0x10/0x10
[  375.272610][T12798]  ? fs_reclaim_acquire+0x7d/0x100
[  375.272636][T12798]  should_fail_ex+0x414/0x560
[  375.272676][T12798]  should_failslab+0xa8/0x100
[  375.272700][T12798]  kmem_cache_alloc_node_noprof+0x77/0x710
[  375.272733][T12798]  ? __alloc_skb+0x255/0x430
[  375.272755][T12798]  ? napi_skb_cache_get+0x4a5/0x790
[  375.272777][T12798]  ? napi_skb_cache_get+0x151/0x790
[  375.272810][T12798]  __alloc_skb+0x255/0x430
[  375.272838][T12798]  ? __pfx___alloc_skb+0x10/0x10
[  375.272873][T12798]  alloc_skb_with_frags+0xca/0x890
[  375.272898][T12798]  ? ima_match_policy+0x10b/0x2150
[  375.272948][T12798]  sock_alloc_send_pskb+0x84d/0x980
[  375.273000][T12798]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  375.273037][T12798]  ? dev_get_by_index+0x22/0x2e0
[  375.273069][T12798]  ? dev_get_by_index+0x22/0x2e0
[  375.273107][T12798]  packet_sendmsg+0x33a0/0x5080
[  375.273144][T12798]  ? __aa_labelset_update_subtree+0xd17/0x11b0
[  375.273190][T12798]  ? __lock_acquire+0xab9/0xd20
[  375.273215][T12798]  ? __pfx___might_resched+0x10/0x10
[  375.273257][T12798]  ? __pfx_packet_sendmsg+0x10/0x10
[  375.273282][T12798]  ? aa_sk_perm+0x81e/0x950
[  375.273319][T12798]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  375.273360][T12798]  ? __lock_acquire+0xab9/0xd20
[  375.273378][T12798]  ? aa_sock_msg_perm+0xf1/0x1d0
[  375.273412][T12798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  375.273434][T12798]  ? __pfx_packet_sendmsg+0x10/0x10
[  375.273462][T12798]  __sock_sendmsg+0x21c/0x270
[  375.273498][T12798]  ____sys_sendmsg+0x505/0x830
[  375.273532][T12798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  375.273571][T12798]  ? import_iovec+0x74/0xa0
[  375.273614][T12798]  ___sys_sendmsg+0x21f/0x2a0
[  375.273643][T12798]  ? __pfx____sys_sendmsg+0x10/0x10
[  375.273708][T12798]  ? __fget_files+0x2a/0x420
[  375.273727][T12798]  ? __fget_files+0x3a0/0x420
[  375.273758][T12798]  __x64_sys_sendmsg+0x19b/0x260
[  375.273825][T12798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  375.273862][T12798]  ? __pfx_ksys_write+0x10/0x10
[  375.273898][T12798]  ? do_syscall_64+0xbe/0xfa0
[  375.273927][T12798]  do_syscall_64+0xfa/0xfa0
[  375.273959][T12798]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.273985][T12798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.274006][T12798]  ? clear_bhb_loop+0x60/0xb0
[  375.274032][T12798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.274053][T12798] RIP: 0033:0x7f8b0d98f749
[  375.274073][T12798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.274091][T12798] RSP: 002b:00007f8b0e7e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  375.274121][T12798] RAX: ffffffffffffffda RBX: 00007f8b0dbe5fa0 RCX: 00007f8b0d98f749
[  375.274137][T12798] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007
[  375.274151][T12798] RBP: 00007f8b0e7e5090 R08: 0000000000000000 R09: 0000000000000000
[  375.274165][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.274177][T12798] R13: 00007f8b0dbe6038 R14: 00007f8b0dbe5fa0 R15: 00007fff366a8d78
[  375.274215][T12798]  </TASK>
[  375.941733][T12807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'.
[  375.951001][T12807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'.
[  376.010983][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'.
[  376.039940][T12806] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  376.087689][T12811] wg1 speed is unknown, defaulting to 1000
[  376.098225][T12811] lo speed is unknown, defaulting to 1000
[  376.200644][T12810] wg1 speed is unknown, defaulting to 1000
[  376.224686][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2036'.
[  376.282594][T12818] wg1 speed is unknown, defaulting to 1000
[  376.283571][T12810] lo speed is unknown, defaulting to 1000
[  376.454810][T12818] lo speed is unknown, defaulting to 1000
[  376.536487][T12824] wg1 speed is unknown, defaulting to 1000
[  376.579352][T12824] lo speed is unknown, defaulting to 1000
[  377.328298][T12847] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2046'.
[  377.912042][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'.
[  378.282432][T12865] wg1 speed is unknown, defaulting to 1000
[  378.284426][T12868] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  378.291604][T12865] lo speed is unknown, defaulting to 1000
[  378.319670][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'.
[  378.362876][T12874] syzkaller0: entered promiscuous mode
[  378.394015][T12874] syzkaller0: entered allmulticast mode
[  378.620082][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  379.102798][T12892] bond3: (slave veth3): Enslaving as an active interface with a down link
[  379.152832][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2058'.
[  379.648562][T12917] __nla_validate_parse: 1 callbacks suppressed
[  379.648583][T12917] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2066'.
[  380.086180][T12926] wg1 speed is unknown, defaulting to 1000
[  380.107007][T12926] lo speed is unknown, defaulting to 1000
[  381.095583][T12946] netlink: 'syz.1.2075': attribute type 1 has an invalid length.
[  381.116058][T12946] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2075'.
[  381.288445][T12954] syzkaller0: entered promiscuous mode
[  381.294038][T12954] syzkaller0: entered allmulticast mode
[  381.520181][T12964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2080'.
[  381.726091][T12968] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  382.087704][T12972] dvmrp0: entered allmulticast mode
[  382.385949][T12980] wg1 speed is unknown, defaulting to 1000
[  382.406895][T12980] lo speed is unknown, defaulting to 1000
[  383.675835][T13011] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2094'.
[  384.310993][T13032] netlink: 'syz.4.2103': attribute type 10 has an invalid length.
[  384.328158][T13032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2103'.
[  384.344496][T13032] dummy0: entered promiscuous mode
[  384.352709][T13032] bridge0: port 5(dummy0) entered blocking state
[  384.359596][T13032] bridge0: port 5(dummy0) entered disabled state
[  384.366645][T13032] dummy0: entered allmulticast mode
[  384.375115][T13032] bridge0: port 5(dummy0) entered blocking state
[  384.381692][T13032] bridge0: port 5(dummy0) entered forwarding state
[  384.399448][T13030] siw: device registration error -23
[  384.498696][T13035] wg1 speed is unknown, defaulting to 1000
[  384.538635][T13035] lo speed is unknown, defaulting to 1000
[  385.022071][T13051] xt_hashlimit: size too large, truncated to 1048576
[  385.276743][T13059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'.
[  385.477549][T13065] nbd: couldn't find device at index 536870912
[  385.886891][T13078] syz.1.2115 (13078) used obsolete PPPIOCDETACH ioctl
[  386.340315][T13092] wg1 speed is unknown, defaulting to 1000
[  386.356470][T13095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2121'.
[  386.357349][T13092] lo speed is unknown, defaulting to 1000
[  386.605640][T13096] siw: device registration error -23
[  386.851380][T13104] wg1 speed is unknown, defaulting to 1000
[  386.864856][T13104] lo speed is unknown, defaulting to 1000
[  387.025887][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2127'.
[  387.043721][T13108] netlink: 'syz.1.2127': attribute type 1 has an invalid length.
[  387.219571][T13108] 8021q: adding VLAN 0 to HW filter on device bond7
[  387.285600][T13128] x_tables: unsorted underflow at hook 1
[  387.336495][T13128] netlink: 'syz.3.2130': attribute type 1 has an invalid length.
[  387.836704][T13150] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  388.000743][T13156] syzkaller0: entered promiscuous mode
[  388.013319][T13156] syzkaller0: entered allmulticast mode
[  388.107361][T13169] netlink: 'syz.1.2143': attribute type 5 has an invalid length.
[  388.115462][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2143'.
[  388.211320][T13168] siw: device registration error -23
[  388.332939][T13175] wg1 speed is unknown, defaulting to 1000
[  388.344319][T13176] wg1 speed is unknown, defaulting to 1000
[  388.351827][T13175] lo speed is unknown, defaulting to 1000
[  388.385614][T13176] lo speed is unknown, defaulting to 1000
[  388.623684][T13184] wg1 speed is unknown, defaulting to 1000
[  388.634941][T13184] lo speed is unknown, defaulting to 1000
[  389.599620][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'.
[  390.209639][T13234] wg1 speed is unknown, defaulting to 1000
[  390.227057][T13234] lo speed is unknown, defaulting to 1000
[  390.255782][T13237] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  390.459468][T13241] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2167'.
[  390.516434][T13245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2167'.
[  390.547288][T13243] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2168'.
[  391.676617][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2178'.
[  391.737074][T13280] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2178'.
[  391.765571][T13280] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2178'.
[  392.082940][T13288] syz_tun: entered allmulticast mode
[  392.112705][T13287] syz_tun: left allmulticast mode
[  392.197681][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'.
[  392.209457][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'.
[  392.218614][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2185'.
[  392.309396][T13299] FAULT_INJECTION: forcing a failure.
[  392.309396][T13299] name failslab, interval 1, probability 0, space 0, times 0
[  392.354568][T13299] CPU: 1 UID: 0 PID: 13299 Comm: syz.4.2186 Not tainted syzkaller #0 PREEMPT(full) 
[  392.354598][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  392.354611][T13299] Call Trace:
[  392.354620][T13299]  <TASK>
[  392.354629][T13299]  dump_stack_lvl+0x189/0x250
[  392.354671][T13299]  ? __pfx____ratelimit+0x10/0x10
[  392.354695][T13299]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.354724][T13299]  ? __pfx__printk+0x10/0x10
[  392.354751][T13299]  ? __pfx___might_resched+0x10/0x10
[  392.354773][T13299]  ? fs_reclaim_acquire+0x7d/0x100
[  392.354797][T13299]  should_fail_ex+0x414/0x560
[  392.354834][T13299]  should_failslab+0xa8/0x100
[  392.354857][T13299]  __kmalloc_noprof+0xcb/0x7f0
[  392.354886][T13299]  ? sock_kmalloc+0xd6/0x160
[  392.354918][T13299]  sock_kmalloc+0xd6/0x160
[  392.354949][T13299]  ____sys_sendmsg+0x1b5/0x830
[  392.354980][T13299]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.355017][T13299]  ? import_iovec+0x74/0xa0
[  392.355047][T13299]  ___sys_sendmsg+0x21f/0x2a0
[  392.355075][T13299]  ? __pfx____sys_sendmsg+0x10/0x10
[  392.355140][T13299]  ? __fget_files+0x2a/0x420
[  392.355159][T13299]  ? __fget_files+0x3a0/0x420
[  392.355189][T13299]  __x64_sys_sendmsg+0x19b/0x260
[  392.355219][T13299]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  392.355256][T13299]  ? __pfx_ksys_write+0x10/0x10
[  392.355290][T13299]  ? do_syscall_64+0xbe/0xfa0
[  392.355319][T13299]  do_syscall_64+0xfa/0xfa0
[  392.355343][T13299]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.355368][T13299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.355388][T13299]  ? clear_bhb_loop+0x60/0xb0
[  392.355414][T13299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.355434][T13299] RIP: 0033:0x7f8b0d98f749
[  392.355452][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.355470][T13299] RSP: 002b:00007f8b0e7e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  392.355491][T13299] RAX: ffffffffffffffda RBX: 00007f8b0dbe5fa0 RCX: 00007f8b0d98f749
[  392.355506][T13299] RDX: 0000000000008000 RSI: 0000200000000f00 RDI: 0000000000000003
[  392.355520][T13299] RBP: 00007f8b0e7e5090 R08: 0000000000000000 R09: 0000000000000000
[  392.355532][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.355545][T13299] R13: 00007f8b0dbe6038 R14: 00007f8b0dbe5fa0 R15: 00007fff366a8d78
[  392.355579][T13299]  </TASK>
[  393.016419][ T5826] Bluetooth: hci4: command 0x0405 tx timeout
[  393.035297][T13318] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2190'.
[  393.455979][T13328] block nbd0: server does not support multiple connections per device.
[  393.491092][T13328] block nbd0: shutting down sockets
[  393.528272][T13330] bond8: option mode: invalid value (254)
[  393.561850][T13330] bond8 (unregistering): Released all slaves
[  394.607635][T13352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.627211][T13352] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.035749][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.045265][   T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.063378][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.101554][   T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.129548][T13333] wg1 speed is unknown, defaulting to 1000
[  395.165330][T13333] lo speed is unknown, defaulting to 1000
[  395.854724][T13391] netlink: 'syz.4.2209': attribute type 1 has an invalid length.
[  396.473876][T13411] wg2: entered promiscuous mode
[  396.479983][T13411] wg2: entered allmulticast mode
[  396.635849][T13414] wg1 speed is unknown, defaulting to 1000
[  396.647492][T13414] lo speed is unknown, defaulting to 1000
[  396.813649][T13424] netlink: 'syz.2.2220': attribute type 2 has an invalid length.
[  396.923712][T13424] bond4: option miimon: invalid value (18446744073709551607)
[  396.945071][T13424] bond4: option miimon: allowed values 0 - 2147483647
[  396.977679][T13424] bond4 (unregistering): Released all slaves
[  398.267091][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'.
[  399.170253][T13505] wg1 speed is unknown, defaulting to 1000
[  399.191671][T13505] lo speed is unknown, defaulting to 1000
[  399.306755][T13516] xt_limit: Overflow, try lower: 268435456/134217728
[  399.664330][T13533] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  399.738938][T13532] wg1 speed is unknown, defaulting to 1000
[  399.768952][T13532] lo speed is unknown, defaulting to 1000
[  399.846515][T13525] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2250'.
[  400.028505][T13541] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2255'.
[  400.089938][T13541] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  400.191318][T13541] 8021q: adding VLAN 0 to HW filter on device bond4
[  400.346398][T13561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'.
[  400.385956][T13561] openvswitch: netlink: Message has 8 unknown bytes.
[  400.555656][T13571] xt_hashlimit: size too large, truncated to 1048576
[  400.725944][T13582] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  400.815262][T13575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2265'.
[  400.825999][T13575] netlink: 'syz.0.2265': attribute type 1 has an invalid length.
[  400.920006][T13575] 8021q: adding VLAN 0 to HW filter on device bond2
[  401.001450][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2271'.
[  401.205802][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2275'.
[  401.305491][T13614] xt_CT: No such helper "snmp_trap"
[  401.419256][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'.
[  401.445626][T13626] xt_hashlimit: size too large, truncated to 1048576
[  401.659364][T13628] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2283'.
[  401.670289][T13628] netlink: 'syz.4.2283': attribute type 1 has an invalid length.
[  401.757937][T13628] 8021q: adding VLAN 0 to HW filter on device bond6
[  401.771152][T13642] ieee802154 phy0 wpan0: encryption failed: -90
[  401.873455][T13643] wg1 speed is unknown, defaulting to 1000
[  401.885019][T13643] lo speed is unknown, defaulting to 1000
[  402.723555][T13675] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2297'.
[  403.184652][T13680] wg1 speed is unknown, defaulting to 1000
[  403.292481][T13680] lo speed is unknown, defaulting to 1000
[  404.127964][T13716] macvtap1: entered promiscuous mode
[  404.317899][T13709] wg1 speed is unknown, defaulting to 1000
[  404.370615][T13709] lo speed is unknown, defaulting to 1000
[  404.975497][T13745] netem: incorrect ge model size
[  404.980792][T13745] netem: change failed
[  405.473979][T13768] netlink: 'syz.4.2324': attribute type 1 has an invalid length.
[  405.570765][T13759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2323'.
[  405.585157][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'.
[  405.773525][T13778] wg1 speed is unknown, defaulting to 1000
[  405.783358][T13778] lo speed is unknown, defaulting to 1000
[  405.785857][T13776] netlink: 'syz.4.2325': attribute type 23 has an invalid length.
[  406.192586][T13790] tipc: Can't bind to reserved service type 1
[  406.216895][T13790] netlink: 'syz.4.2330': attribute type 39 has an invalid length.
[  406.275490][T13798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2330'.
[  406.290764][T13798] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2330'.
[  406.304979][T13798] netlink: 'syz.4.2330': attribute type 5 has an invalid length.
[  406.320924][T13793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.348520][T13800] syzkaller0: entered promiscuous mode
[  406.354186][T13800] syzkaller0: entered allmulticast mode
[  406.368765][T13798] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2330'.
[  406.394822][T13794] wg1 speed is unknown, defaulting to 1000
[  406.435046][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'.
[  406.487094][T13794] lo speed is unknown, defaulting to 1000
[  406.507362][T13793] tipc: Resetting bearer <eth:syzkaller0>
[  406.560893][T13791] tipc: Resetting bearer <eth:syzkaller0>
[  406.596498][T13811] siw: device registration error -23
[  406.658853][T13791] tipc: Disabling bearer <eth:syzkaller0>
[  406.862462][T13819] bridge3: entered allmulticast mode
[  406.991373][T13816] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2337'.
[  407.001555][T13816] netlink: 'syz.0.2337': attribute type 1 has an invalid length.
[  407.058150][T13816] 8021q: adding VLAN 0 to HW filter on device bond3
[  407.148007][T13830] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2341'.
[  407.239908][T13830] .70·: renamed from hsr0
[  407.262293][T13830] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  407.284216][T13830] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  407.330814][T13830] .70·: entered allmulticast mode
[  407.343330][T13830] hsr_slave_0: entered allmulticast mode
[  407.349155][T13830] hsr_slave_1: entered allmulticast mode
[  407.380831][T13830] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  407.435501][T13840] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  407.442179][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2346'.
[  407.506734][T13844] wg1 speed is unknown, defaulting to 1000
[  407.510031][T13851] netlink: 63 bytes leftover after parsing attributes in process `syz.2.2346'.
[  407.524030][T13844] lo speed is unknown, defaulting to 1000
[  407.866400][T13863] wg1 speed is unknown, defaulting to 1000
[  407.878938][T13863] lo speed is unknown, defaulting to 1000
[  408.246410][T13873] netlink: 'syz.2.2354': attribute type 1 has an invalid length.
[  408.536282][T13873] 8021q: adding VLAN 0 to HW filter on device bond6
[  408.728865][T13894] 0ªX¹¦À: renamed from caif0
[  408.796707][T13894] 0ªX¹¦À: entered allmulticast mode
[  408.801972][T13894] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  409.155244][T13911] netlink: 'syz.4.2364': attribute type 10 has an invalid length.
[  409.281058][T13911] bridge0: port 5(dummy0) entered disabled state
[  409.301935][T13911] dummy0: left allmulticast mode
[  409.331361][T13911] dummy0: left promiscuous mode
[  409.386107][T13911] bridge0: port 5(dummy0) entered disabled state
[  409.492091][T13911] team0: Port device dummy0 added
[  410.138227][T13926] wg1 speed is unknown, defaulting to 1000
[  410.165066][T13922] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  410.191125][T13926] lo speed is unknown, defaulting to 1000
[  410.471060][T13937] wg1 speed is unknown, defaulting to 1000
[  410.480040][T13937] lo speed is unknown, defaulting to 1000
[  410.732529][T13949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.771786][T13949] syzkaller0: entered promiscuous mode
[  410.782908][T13948] __nla_validate_parse: 12 callbacks suppressed
[  410.782937][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'.
[  410.804853][T13949] syzkaller0: entered allmulticast mode
[  410.930981][T13948] veth5: entered promiscuous mode
[  410.939896][T13950] tipc: Resetting bearer <eth:syzkaller0>
[  411.024041][T13950] tipc: Disabling bearer <eth:syzkaller0>
[  412.060341][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2384'.
[  412.155024][T13989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2383'.
[  412.202113][T13989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2383'.
[  412.444803][T14006] siw: device registration error -23
[  412.471517][T14002] wg1 speed is unknown, defaulting to 1000
[  412.487010][T14002] lo speed is unknown, defaulting to 1000
[  413.338136][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'.
[  413.524555][T14040] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  413.664429][T14048] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2399'.
[  413.675924][T14048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2399'.
[  413.980500][T14072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.001172][T14072] syzkaller0: entered promiscuous mode
[  414.006876][T14072] syzkaller0: entered allmulticast mode
[  414.016252][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'.
[  414.034403][T14072] ip6gretap2: entered promiscuous mode
[  414.040403][T14072] ip6gretap2: entered allmulticast mode
[  414.090987][T14076] wg1 speed is unknown, defaulting to 1000
[  414.119684][T14076] lo speed is unknown, defaulting to 1000
[  414.175058][T14081] netlink: 'syz.4.2407': attribute type 8 has an invalid length.
[  414.311735][T14082] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  414.326320][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'.
[  414.401510][T14086] wg1 speed is unknown, defaulting to 1000
[  414.504712][T14086] lo speed is unknown, defaulting to 1000
[  414.512159][T14088] wg1 speed is unknown, defaulting to 1000
[  414.580974][T14088] lo speed is unknown, defaulting to 1000
[  414.626887][T14092] wg1 speed is unknown, defaulting to 1000
[  414.931228][T14092] lo speed is unknown, defaulting to 1000
[  414.961493][T14071] tipc: Resetting bearer <eth:syzkaller0>
[  415.007249][T14071] tipc: Disabling bearer <eth:syzkaller0>
[  415.201961][T14113] bond10: entered promiscuous mode
[  415.207494][T14113] bond10: entered allmulticast mode
[  415.215603][T14113] 8021q: adding VLAN 0 to HW filter on device bond10
[  415.268136][T14117] netlink: 'syz.2.2414': attribute type 1 has an invalid length.
[  415.378090][T14122] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2414'.
[  415.568768][T14129] FAULT_INJECTION: forcing a failure.
[  415.568768][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.622741][T14131] netlink: 'syz.4.2419': attribute type 1 has an invalid length.
[  415.631309][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.2.2418 Not tainted syzkaller #0 PREEMPT(full) 
[  415.631339][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  415.631353][T14129] Call Trace:
[  415.631361][T14129]  <TASK>
[  415.631370][T14129]  dump_stack_lvl+0x189/0x250
[  415.631406][T14129]  ? __pfx____ratelimit+0x10/0x10
[  415.631431][T14129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  415.631459][T14129]  ? __pfx__printk+0x10/0x10
[  415.631482][T14129]  ? __might_fault+0xb0/0x130
[  415.631525][T14129]  should_fail_ex+0x414/0x560
[  415.631562][T14129]  _copy_from_user+0x2d/0xb0
[  415.631591][T14129]  __sys_bpf+0x1e3/0x860
[  415.631616][T14129]  ? __pfx___sys_bpf+0x10/0x10
[  415.631651][T14129]  ? ksys_write+0x22a/0x250
[  415.631682][T14129]  ? __pfx_ksys_write+0x10/0x10
[  415.631718][T14129]  __x64_sys_bpf+0x7c/0x90
[  415.631749][T14129]  do_syscall_64+0xfa/0xfa0
[  415.631772][T14129]  ? lockdep_hardirqs_on+0x9c/0x150
[  415.631797][T14129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.631817][T14129]  ? clear_bhb_loop+0x60/0xb0
[  415.631842][T14129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.631861][T14129] RIP: 0033:0x7f67d558f749
[  415.631880][T14129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  415.631899][T14129] RSP: 002b:00007f67d6409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  415.631921][T14129] RAX: ffffffffffffffda RBX: 00007f67d57e5fa0 RCX: 00007f67d558f749
[  415.631936][T14129] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a
[  415.631949][T14129] RBP: 00007f67d6409090 R08: 0000000000000000 R09: 0000000000000000
[  415.631962][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.631974][T14129] R13: 00007f67d57e6038 R14: 00007f67d57e5fa0 R15: 00007ffc177bedd8
[  415.632010][T14129]  </TASK>
[  415.900778][T14131] bond7: entered promiscuous mode
[  415.906681][T14131] bond7: entered allmulticast mode
[  415.912263][T14131] 8021q: adding VLAN 0 to HW filter on device bond7
[  415.925967][T14131] __nla_validate_parse: 1 callbacks suppressed
[  415.925989][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2419'.
[  416.062674][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2421'.
[  416.247662][T14152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2423'.
[  416.418626][T14160] xt_hashlimit: size too large, truncated to 1048576
[  416.609263][T14172] netlink: 'syz.3.2428': attribute type 1 has an invalid length.
[  416.640057][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'.
[  416.677868][T14172] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2428'.
[  416.688894][T14172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2428'.
[  416.721437][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'.
[  416.733100][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'.
[  416.744883][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'.
[  417.336093][T14198] wg1 speed is unknown, defaulting to 1000
[  417.431202][T14198] lo speed is unknown, defaulting to 1000
[  417.725839][T14208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2437'.
[  418.200712][T14218] netlink: 'syz.4.2441': attribute type 1 has an invalid length.
[  418.584667][T14238] syzkaller0: entered promiscuous mode
[  418.590218][T14238] syzkaller0: entered allmulticast mode
[  418.851667][T14250] wg1 speed is unknown, defaulting to 1000
[  418.898678][T14250] lo speed is unknown, defaulting to 1000
[  419.353460][T14273] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  419.415040][T14278] syzkaller0: entered promiscuous mode
[  419.421175][T14278] syzkaller0: entered allmulticast mode
[  419.774806][T14289] netlink: 'syz.0.2460': attribute type 1 has an invalid length.
[  420.392616][T14321] xt_hashlimit: size too large, truncated to 1048576
[  420.434758][T14323] wg1 speed is unknown, defaulting to 1000
[  420.444126][T14323] lo speed is unknown, defaulting to 1000
[  420.508434][T14328] macvtap1: entered promiscuous mode
[  420.523977][T14328] batadv0: entered promiscuous mode
[  420.546269][T14328] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  420.614878][T14328] batadv0: left promiscuous mode
[  420.806532][T14335] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  420.842470][T14335] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  421.000283][T14349] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  421.015843][T14349] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  421.026620][T14349] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  421.066265][T14335] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  421.108440][T14335] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  421.173630][T14338] wg1 speed is unknown, defaulting to 1000
[  421.304053][T14335] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  421.357259][T14335] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  421.459402][T14338] lo speed is unknown, defaulting to 1000
[  421.516102][T14354] siw: device registration error -23
[  421.615063][T14363] __nla_validate_parse: 6 callbacks suppressed
[  421.615082][T14363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2476'.
[  421.669109][T14335] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  421.681132][T14335] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  421.920051][T11039] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  421.929448][T11039] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  421.947446][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2478'.
[  421.950551][T14378] FAULT_INJECTION: forcing a failure.
[  421.950551][T14378] name failslab, interval 1, probability 0, space 0, times 0
[  421.971490][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.1.2479 Not tainted syzkaller #0 PREEMPT(full) 
[  421.971516][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  421.971528][T14378] Call Trace:
[  421.971536][T14378]  <TASK>
[  421.971544][T14378]  dump_stack_lvl+0x189/0x250
[  421.971575][T14378]  ? __pfx____ratelimit+0x10/0x10
[  421.971599][T14378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.971624][T14378]  ? __pfx__printk+0x10/0x10
[  421.971647][T14378]  ? __pfx___might_resched+0x10/0x10
[  421.971668][T14378]  ? fs_reclaim_acquire+0x7d/0x100
[  421.971702][T14378]  should_fail_ex+0x414/0x560
[  421.971737][T14378]  should_failslab+0xa8/0x100
[  421.971759][T14378]  kmem_cache_alloc_node_noprof+0x77/0x710
[  421.971786][T14378]  ? __alloc_skb+0x255/0x430
[  421.971806][T14378]  ? napi_skb_cache_get+0x4a5/0x790
[  421.971827][T14378]  ? napi_skb_cache_get+0x151/0x790
[  421.971853][T14378]  __alloc_skb+0x255/0x430
[  421.971877][T14378]  ? __pfx___alloc_skb+0x10/0x10
[  421.971903][T14378]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  421.971929][T14378]  netlink_sendmsg+0x5c6/0xb30
[  421.971965][T14378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  421.971995][T14378]  ? aa_sock_msg_perm+0xf1/0x1d0
[  421.972026][T14378]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  421.972045][T14378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  421.972072][T14378]  __sock_sendmsg+0x21c/0x270
[  421.972105][T14378]  ____sys_sendmsg+0x505/0x830
[  421.972135][T14378]  ? __pfx_____sys_sendmsg+0x10/0x10
[  421.972169][T14378]  ? import_iovec+0x74/0xa0
[  421.972199][T14378]  ___sys_sendmsg+0x21f/0x2a0
[  421.972226][T14378]  ? __pfx____sys_sendmsg+0x10/0x10
[  421.972288][T14378]  ? __fget_files+0x2a/0x420
[  421.972307][T14378]  ? __fget_files+0x3a0/0x420
[  421.972337][T14378]  __x64_sys_sendmsg+0x19b/0x260
[  421.972365][T14378]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  421.972400][T14378]  ? __pfx_ksys_write+0x10/0x10
[  421.972434][T14378]  ? do_syscall_64+0xbe/0xfa0
[  421.972462][T14378]  do_syscall_64+0xfa/0xfa0
[  421.972484][T14378]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.972508][T14378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.972528][T14378]  ? clear_bhb_loop+0x60/0xb0
[  421.972551][T14378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.972570][T14378] RIP: 0033:0x7f0f5158f749
[  421.972587][T14378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.972605][T14378] RSP: 002b:00007f0f523c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  421.972627][T14378] RAX: ffffffffffffffda RBX: 00007f0f517e5fa0 RCX: 00007f0f5158f749
[  421.972641][T14378] RDX: 0000000004048040 RSI: 0000200000000040 RDI: 0000000000000005
[  421.972654][T14378] RBP: 00007f0f523c9090 R08: 0000000000000000 R09: 0000000000000000
[  421.972666][T14378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.972685][T14378] R13: 00007f0f517e6038 R14: 00007f0f517e5fa0 R15: 00007ffcacd43cf8
[  421.972719][T14378]  </TASK>
[  422.285441][ T4041] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  422.294559][ T4041] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  422.325720][ T4041] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  422.337725][ T4041] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  422.361792][ T4041] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  422.371464][ T4041] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  422.722788][T14398] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  422.964513][T14413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2490'.
[  423.150735][T14420] siw: device registration error -23
[  423.463405][T14423] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  423.476244][T14423] bond11 (unregistering): Released all slaves
[  423.641543][T14429] wg1 speed is unknown, defaulting to 1000
[  423.650011][T14429] lo speed is unknown, defaulting to 1000
[  423.931207][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'.
[  424.206848][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2500'.
[  424.652070][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'.
[  424.679350][T14465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2505'.
[  424.832345][T14475] wg1 speed is unknown, defaulting to 1000
[  424.852324][T14475] lo speed is unknown, defaulting to 1000
[  425.269231][T14491] wg1 speed is unknown, defaulting to 1000
[  425.279592][T14491] lo speed is unknown, defaulting to 1000
[  425.326929][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'.
[  425.772290][T14500] wg1 speed is unknown, defaulting to 1000
[  425.818010][T14500] lo speed is unknown, defaulting to 1000
[  426.062369][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'.
[  426.095672][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'.
[  427.260403][T14553] __nla_validate_parse: 1 callbacks suppressed
[  427.260434][T14553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2529'.
[  427.651471][T14567] netlink: 'syz.0.2524': attribute type 3 has an invalid length.
[  427.690977][T14560] netlink: 'syz.0.2524': attribute type 5 has an invalid length.
[  427.804122][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2532'.
[  427.910861][T14576] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2532'.
[  428.322026][T14584] wg1 speed is unknown, defaulting to 1000
[  428.395118][T14581] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  428.411686][T14584] lo speed is unknown, defaulting to 1000
[  428.491301][T14592] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2536'.
[  428.514327][T14588] netlink: del zone limit has 4 unknown bytes
[  428.537742][T14594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2540'.
[  428.785735][T14608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2541'.
[  429.038336][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'.
[  429.335764][T14626] siw: device registration error -23
[  429.361621][T14629] netlink: 'syz.2.2549': attribute type 10 has an invalid length.
[  429.376211][T14627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2548'.
[  429.445795][T14629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2549'.
[  429.559112][T14629] team0: Port device geneve0 added
[  429.781970][T14634] xt_hashlimit: size too large, truncated to 1048576
[  430.521612][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'.
[  430.595478][T14655] netlink: 'syz.3.2556': attribute type 3 has an invalid length.
[  430.663647][T14651] bond5 (unregistering): Released all slaves
[  430.807116][T14639] netlink: 'syz.1.2551': attribute type 3 has an invalid length.
[  430.854336][T14638] netlink: 'syz.1.2551': attribute type 5 has an invalid length.
[  431.172466][T14678] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  432.386643][T14720] __nla_validate_parse: 5 callbacks suppressed
[  432.386663][T14720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2574'.
[  432.560448][T14726] syzkaller0: entered promiscuous mode
[  432.573924][T14728] netlink: 'syz.4.2578': attribute type 33 has an invalid length.
[  432.576948][T14726] syzkaller0: entered allmulticast mode
[  432.591200][T14728] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2578'.
[  432.833338][T14739] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2581'.
[  432.902579][T14745] netlink: 'syz.0.2575': attribute type 3 has an invalid length.
[  432.912504][T14745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'.
[  432.943923][T14736] netlink: 'syz.0.2575': attribute type 5 has an invalid length.
[  433.182574][T14753] sctp: [Deprecated]: syz.3.2585 (pid 14753) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.182574][T14753] Use struct sctp_sack_info instead
[  433.260269][T14755] xt_hashlimit: size too large, truncated to 1048576
[  433.295743][T14757] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2587'.
[  433.789351][T14771] syzkaller0: entered promiscuous mode
[  433.795130][T14771] syzkaller0: entered allmulticast mode
[  434.180086][T14798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2597'.
[  434.247973][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'.
[  434.275922][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'.
[  434.462887][T14806] xt_hashlimit: size too large, truncated to 1048576
[  434.679207][T14814] netlink: 'syz.1.2598': attribute type 3 has an invalid length.
[  434.723451][T14814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2598'.
[  434.767717][T14809] netlink: 'syz.1.2598': attribute type 5 has an invalid length.
[  434.962971][T14822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2604'.
[  435.432355][T14820] netem: incorrect ge model size
[  435.444115][T14820] netem: change failed
[  435.473309][T14841] syzkaller0: entered promiscuous mode
[  435.483541][T14841] syzkaller0: entered allmulticast mode
[  435.724888][T14854] xt_hashlimit: size too large, truncated to 1048576
[  435.739662][T14855] wg1 speed is unknown, defaulting to 1000
[  435.751244][T14855] lo speed is unknown, defaulting to 1000
[  435.891714][T14857] netlink: 'syz.4.2615': attribute type 13 has an invalid length.
[  435.967318][T14857] netlink: 'syz.4.2615': attribute type 17 has an invalid length.
[  436.111196][T14857] bridge0: port 3(gretap0) entered blocking state
[  436.118020][T14857] bridge0: port 3(gretap0) entered forwarding state
[  436.259087][T14857] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.269505][T14857] 8021q: adding VLAN 0 to HW filter on device team0
[  436.305413][T14857] 0ªX¹¦À: left allmulticast mode
[  436.310763][T14857] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  436.789148][T14885] netlink: 'syz.3.2616': attribute type 3 has an invalid length.
[  436.834872][T14880] v: renamed from vlan0
[  436.879645][T14887] siw: device registration error -23
[  437.391353][T14895] netlink: 'syz.2.2623': attribute type 2 has an invalid length.
[  437.451575][T14895] !: entered promiscuous mode
[  437.636726][T14899] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  437.684152][T14902] wg1 speed is unknown, defaulting to 1000
[  437.714711][T14902] lo speed is unknown, defaulting to 1000
[  437.756061][T14907] __nla_validate_parse: 6 callbacks suppressed
[  437.756082][T14907] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2626'.
[  438.408387][T14930] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2630'.
[  438.419050][T14930] netlink: 'syz.2.2630': attribute type 1 has an invalid length.
[  438.473869][T14930] 8021q: adding VLAN 0 to HW filter on device bond8
[  438.547818][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2631'.
[  438.616989][T14936] syzkaller1: entered promiscuous mode
[  438.623406][T14936] syzkaller1: entered allmulticast mode
[  438.840207][T14944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2634'.
[  438.933358][T14948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2636'.
[  439.030673][T14948] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  439.115248][T14954] siw: device registration error -23
[  439.191681][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'.
[  439.444219][T14970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2643'.
[  439.796789][T14982] macsec1: entered promiscuous mode
[  439.818844][T14982] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  439.915818][T14989] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2650'.
[  440.004322][T14995] wg1 speed is unknown, defaulting to 1000
[  440.020789][T14995] lo speed is unknown, defaulting to 1000
[  440.067657][T14996] netlink: 'syz.0.2649': attribute type 8 has an invalid length.
[  440.232629][T15000] pim6reg: entered allmulticast mode
[  440.304509][T14997] wg1 speed is unknown, defaulting to 1000
[  440.313874][T14999] pim6reg: left allmulticast mode
[  440.510570][T14997] lo speed is unknown, defaulting to 1000
[  440.752733][T15019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2658'.
[  440.781772][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2657'.
[  440.791780][T15017] netlink: 'syz.3.2657': attribute type 29 has an invalid length.
[  441.807096][T15050] wg1 speed is unknown, defaulting to 1000
[  441.815967][T15053] wg1 speed is unknown, defaulting to 1000
[  441.824614][T15053] lo speed is unknown, defaulting to 1000
[  441.869780][T15050] lo speed is unknown, defaulting to 1000
[  442.467147][T15071] xt_hashlimit: invalid interval
[  443.056546][T15092] __nla_validate_parse: 2 callbacks suppressed
[  443.056567][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'.
[  443.576135][T15109] wg1 speed is unknown, defaulting to 1000
[  443.625400][T15109] lo speed is unknown, defaulting to 1000
[  443.833077][T15118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.138685][T15101] tipc: Disabling bearer <eth:syzkaller0>
[  444.317347][T15130] team_slave_0: mtu less than device minimum
[  444.362032][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'.
[  444.462322][T15132] wg1 speed is unknown, defaulting to 1000
[  444.610653][T15132] lo speed is unknown, defaulting to 1000
[  444.681869][T15146] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[  444.697010][T15145] netlink: 676 bytes leftover after parsing attributes in process `syz.4.2689'.
[  444.717190][T15145] netlink: 676 bytes leftover after parsing attributes in process `syz.4.2689'.
[  444.804536][T15150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2687'.
[  445.269452][T15164] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  445.280103][T15170] wg1 speed is unknown, defaulting to 1000
[  445.443620][T15174] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2693'.
[  445.459377][T15170] lo speed is unknown, defaulting to 1000
[  446.016428][T15203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'.
[  446.398759][T15216] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2705'.
[  446.780199][T15220] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  446.879321][T15225] tipc: Failed to remove unknown binding: 66,1,1/0:2227282594/2227282596
[  446.960474][T15229] tipc: Failed to remove unknown binding: 66,1,1/0:2227282594/2227282596
[  446.978902][T15229] tipc: Failed to remove unknown binding: 66,1,1/0:2227282594/2227282596
[  447.047452][T15233] netlink: 'syz.2.2711': attribute type 2 has an invalid length.
[  447.085311][T15233] netlink: 'syz.2.2711': attribute type 2 has an invalid length.
[  447.094661][T15233] !: left promiscuous mode
[  447.155545][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2711'.
[  447.174417][T15242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2711'.
[  447.386751][T15250] : entered promiscuous mode
[  447.409110][T15250] netlink: 'syz.3.2716': attribute type 1 has an invalid length.
[  447.447039][T15250] bond10: entered promiscuous mode
[  447.455871][T15250] 8021q: adding VLAN 0 to HW filter on device bond10
[  447.558962][T15253] 8021q: adding VLAN 0 to HW filter on device bond10
[  447.567001][T15253] bond10: (slave gre1): The slave device specified does not support setting the MAC address
[  447.583270][T15253] bond10: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  447.604944][T15253] bond10: (slave gre1): Opening slave failed
[  447.651540][T15256] wg1: entered promiscuous mode
[  447.661117][T15256] wg1: entered allmulticast mode
[  448.002012][T15275] netlink: 'syz.4.2724': attribute type 10 has an invalid length.
[  448.063373][T15275] __nla_validate_parse: 3 callbacks suppressed
[  448.063393][T15275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2724'.
[  448.149960][T15278] netlink: 'syz.0.2725': attribute type 21 has an invalid length.
[  448.159347][T15278] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2725'.
[  448.168850][T15278] netlink: 'syz.0.2725': attribute type 4 has an invalid length.
[  448.176940][T15278] netlink: 'syz.0.2725': attribute type 5 has an invalid length.
[  448.185346][T15278] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2725'.
[  448.368118][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2726'.
[  448.573990][T15288] block nbd0: server does not support multiple connections per device.
[  448.582764][T15288] block nbd0: shutting down sockets
[  448.969132][T15302] team0: Port device bond0 removed
[  449.000738][T15302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  449.031347][T15310] geneve3: entered promiscuous mode
[  449.040824][T11940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  449.050903][T11940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  449.060782][T11940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  449.107616][T11940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  449.410551][T15332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2745'.
[  449.666741][T15349] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2749'.
[  449.785641][T15354] xt_hashlimit: size too large, truncated to 1048576
[  450.141608][T15370] netlink: 36300 bytes leftover after parsing attributes in process `syz.2.2756'.
[  450.668296][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2763'.
[  450.680341][T15387] netlink: 'syz.4.2763': attribute type 3 has an invalid length.
[  450.886494][T15393] xt_hashlimit: size too large, truncated to 1048576
[  450.922232][T15394] netlink: 'syz.0.2765': attribute type 1 has an invalid length.
[  451.363424][T15407] netlink: 'syz.2.2771': attribute type 3 has an invalid length.
[  451.648019][T15420] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2774'.
[  451.929446][T15430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2778'.
[  452.059131][T15430] syzkaller1: entered promiscuous mode
[  452.067537][T15430] syzkaller1: entered allmulticast mode
[  452.430450][T15445] wg1 speed is unknown, defaulting to 1000
[  452.443632][T15448] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  452.450413][T15445] lo speed is unknown, defaulting to 1000
[  452.885927][T15474] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  452.899008][T15474] bond9 (unregistering): Released all slaves
[  452.928404][T15476] validate_nla: 4 callbacks suppressed
[  452.928422][T15476] netlink: 'syz.4.2792': attribute type 4 has an invalid length.
[  453.242503][T15490] netlink: 'syz.4.2795': attribute type 12 has an invalid length.
[  453.758947][T15516] xt_hashlimit: size too large, truncated to 1048576
[  453.862395][T15513] __nla_validate_parse: 6 callbacks suppressed
[  453.862415][T15513] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2804'.
[  453.913649][T15514] netlink: 'syz.3.2804': attribute type 1 has an invalid length.
[  453.968599][T15514] 8021q: adding VLAN 0 to HW filter on device bond11
[  453.995647][T15525] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  453.998024][T15522] wg1 speed is unknown, defaulting to 1000
[  454.009987][T15522] lo speed is unknown, defaulting to 1000
[  454.191607][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'.
[  454.234778][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'.
[  454.739056][T15558] netlink: 'syz.1.2810': attribute type 3 has an invalid length.
[  454.754604][T15549] netlink: 'syz.1.2810': attribute type 5 has an invalid length.
[  455.111460][T15569] xt_hashlimit: size too large, truncated to 1048576
[  455.150396][T15542] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  455.372145][T15578] netlink: 'syz.3.2819': attribute type 16 has an invalid length.
[  455.468474][T15573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2818'.
[  455.478492][T15573] netlink: 'syz.1.2818': attribute type 1 has an invalid length.
[  455.480124][T15575] wg1 speed is unknown, defaulting to 1000
[  455.577599][T15573] 8021q: adding VLAN 0 to HW filter on device bond11
[  455.595515][T15575] lo speed is unknown, defaulting to 1000
[  456.482112][T15602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.536469][T15610] syzkaller0: entered promiscuous mode
[  456.545620][T15610] syzkaller0: entered allmulticast mode
[  456.596129][T15602] tipc: Resetting bearer <eth:syzkaller0>
[  456.634134][T15601] tipc: Resetting bearer <eth:syzkaller0>
[  456.687638][T15601] tipc: Disabling bearer <eth:syzkaller0>
[  456.695485][T15615] netlink: 'syz.4.2833': attribute type 1 has an invalid length.
[  456.852047][T15615] 8021q: adding VLAN 0 to HW filter on device bond9
[  456.853484][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'.
[  456.881951][T15619] bond9: (slave gretap2): making interface the new active one
[  456.919203][T15619] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  459.313920][T15622] bond9 (unregistering): (slave gretap2): Releasing active interface
[  459.416281][T15622] bond9 (unregistering): Released all slaves
[  468.183469][T15616] syzkaller0: entered promiscuous mode
[  468.189008][T15616] syzkaller0: entered allmulticast mode
[  471.554021][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'.
[  471.594894][T15634] netlink: 'syz.4.2839': attribute type 3 has an invalid length.
[  471.897681][T15639] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2841'.
[  472.008650][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  472.018901][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  472.028041][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  472.036781][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  472.046441][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  472.259883][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  472.269803][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  472.286048][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  472.294527][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  472.302421][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  472.468966][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2845'.
[  473.541542][T15629] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  473.577774][T15655] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2845'.
[  473.617032][T15655] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2845'.
[  473.670183][T15658] vlan4: entered promiscuous mode
[  473.693463][T15658] bond0: entered promiscuous mode
[  473.766176][T15653] wg1 speed is unknown, defaulting to 1000
[  473.782824][T15653] lo speed is unknown, defaulting to 1000
[  473.795595][T15648] wg1 speed is unknown, defaulting to 1000
[  473.842129][T15642] wg1 speed is unknown, defaulting to 1000
[  473.857249][T15648] lo speed is unknown, defaulting to 1000
[  473.913101][T15642] lo speed is unknown, defaulting to 1000
[  474.123969][ T5826] Bluetooth: hci0: command tx timeout
[  474.184268][T15673] netlink: 'syz.3.2849': attribute type 1 has an invalid length.
[  474.271162][T15676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.364221][ T5826] Bluetooth: hci5: command tx timeout
[  474.434447][   T74] bridge_slave_1: left allmulticast mode
[  474.440794][   T74] bridge_slave_1: left promiscuous mode
[  474.448523][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.460151][   T74] bridge_slave_0: left allmulticast mode
[  474.466330][   T74] bridge_slave_0: left promiscuous mode
[  474.472297][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.595468][T15685] netlink: 'syz.2.2852': attribute type 1 has an invalid length.
[  474.709405][T15687] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2852'.
[  474.768194][T15688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2852'.
[  475.038497][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  475.048838][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  475.059126][   T74] bond0 (unregistering): Released all slaves
[  475.154253][   T74] bond1 (unregistering): Released all slaves
[  475.260271][   T74] bond2 (unregistering): Released all slaves
[  475.395682][   T74] bond3 (unregistering): Released all slaves
[  475.416603][   T74] bond4 (unregistering): Released all slaves
[  475.443453][T15685] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  475.580826][T15648] chnl_net:caif_netlink_parms(): no params data found
[  475.638951][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'.
[  475.661103][   T74] tipc: Left network mode
[  475.662694][T15702] C: renamed from lo
[  475.674766][T15702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  475.891312][T15642] chnl_net:caif_netlink_parms(): no params data found
[  475.964473][T15716] bond12: option all_slaves_active: invalid value (13)
[  475.986379][T15716] bond12 (unregistering): Released all slaves
[  476.116763][T15710] wg1 speed is unknown, defaulting to 1000
[  476.173224][T15710] lo speed is unknown, defaulting to 1000
[  476.197383][T15648] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.205532][ T5826] Bluetooth: hci0: command tx timeout
[  476.211731][T15648] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.219240][T15648] bridge_slave_0: entered allmulticast mode
[  476.230428][T15648] bridge_slave_0: entered promiscuous mode
[  476.262337][T15718] bond0: Error: Cannot enslave bond to itself.
[  476.270313][T15648] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.277720][T15648] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.288114][T15648] bridge_slave_1: entered allmulticast mode
[  476.295711][T15648] bridge_slave_1: entered promiscuous mode
[  476.412648][T15642] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.421292][T15642] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.428799][T15642] bridge_slave_0: entered allmulticast mode
[  476.439293][T15642] bridge_slave_0: entered promiscuous mode
[  476.447131][ T5826] Bluetooth: hci5: command tx timeout
[  476.460671][T15642] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.468500][T15642] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.475892][T15642] bridge_slave_1: entered allmulticast mode
[  476.488617][T15642] bridge_slave_1: entered promiscuous mode
[  476.502884][T15648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.570099][T15648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.652198][T15642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.667282][T15642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.684250][T15648] team0: Port device team_slave_0 added
[  476.712525][T15648] team0: Port device team_slave_1 added
[  476.756034][T15742] netlink: 'syz.3.2863': attribute type 1 has an invalid length.
[  476.792614][T15642] team0: Port device team_slave_0 added
[  476.815472][T15744] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2863'.
[  476.838151][T15642] team0: Port device team_slave_1 added
[  476.866003][T15742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2863'.
[  476.884482][T15648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.891584][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.919005][T15648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.932171][T15648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.940851][T15648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.967314][T15648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.979282][T15642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.986685][T15642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.023359][T15642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.092865][T15642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.107895][T15642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.137013][T15642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.294903][T15648] hsr_slave_0: entered promiscuous mode
[  477.302655][T15648] hsr_slave_1: entered promiscuous mode
[  477.315612][T15751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2864'.
[  477.430543][T15642] hsr_slave_0: entered promiscuous mode
[  477.433529][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2866'.
[  477.445301][T15642] hsr_slave_1: entered promiscuous mode
[  477.446231][T15642] debugfs: 'hsr0' already exists in 'hsr'
[  477.458090][T15642] Cannot create hsr debugfs directory
[  477.710563][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'.
[  477.734103][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'.
[  477.757161][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'.
[  477.835409][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'.
[  477.847726][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'.
[  477.860138][T15763] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2869'.
[  478.225870][   T74] hsr_slave_0: left promiscuous mode
[  478.233035][   T74] hsr_slave_1: left promiscuous mode
[  478.240736][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.254227][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.260696][T15783] netlink: 'syz.4.2873': attribute type 1 has an invalid length.
[  478.283292][ T5826] Bluetooth: hci0: command tx timeout
[  478.523734][ T5826] Bluetooth: hci5: command tx timeout
[  478.611458][   T74] team0 (unregistering): Port device team_slave_1 removed
[  478.657317][   T74] team0 (unregistering): Port device team_slave_0 removed
[  479.051223][T15795] Bluetooth: MGMT ver 1.23
[  479.102103][T15783] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  479.275535][T15801] bond9: Removing last ns target with arp_interval on
[  479.303840][T15804] netlink: 'syz.2.2878': attribute type 1 has an invalid length.
[  479.312138][T15648] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  479.326605][T15804] netlink: 'syz.2.2878': attribute type 2 has an invalid length.
[  479.342994][T15648] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  479.370354][T15804] netlink: 'syz.2.2878': attribute type 1 has an invalid length.
[  479.394419][T15648] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  479.415298][T15648] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  479.631651][T15642] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  479.656145][T15642] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  479.689281][T15642] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  479.702890][T15642] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  479.891533][T15648] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.895805][T15835] netlink: 'syz.3.2885': attribute type 1 has an invalid length.
[  479.962301][   T74] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  479.996334][T15838] netlink: 'syz.3.2886': attribute type 29 has an invalid length.
[  480.006502][T15838] netlink: 'syz.3.2886': attribute type 29 has an invalid length.
[  480.024702][T15648] 8021q: adding VLAN 0 to HW filter on device team0
[  480.046228][   T74] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  480.088065][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.095376][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.146085][   T74] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  480.162160][T11940] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.169309][T11940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.265202][   T74] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  480.364059][ T5826] Bluetooth: hci0: command tx timeout
[  480.369700][T15642] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.470369][T15642] 8021q: adding VLAN 0 to HW filter on device team0
[  480.497489][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.504721][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.546059][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.553317][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.603738][ T5826] Bluetooth: hci5: command tx timeout
[  480.656916][   T74] bridge_slave_1: left allmulticast mode
[  480.662624][   T74] bridge_slave_1: left promiscuous mode
[  480.668926][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.696716][   T74] bridge_slave_0: left allmulticast mode
[  480.712596][   T74] bridge_slave_0: left promiscuous mode
[  480.719906][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.458981][T15872] netlink: 'syz.4.2894': attribute type 1 has an invalid length.
[  481.583943][   T74] bond1 (unregistering): (slave bridge2): Releasing active interface
[  481.770424][   T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.780893][   T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  481.790354][   T74] bond0 (unregistering): Released all slaves
[  481.805226][   T74] bond1 (unregistering): Released all slaves
[  481.819596][   T74] bond2 (unregistering): Released all slaves
[  481.920015][   T74] bond3 (unregistering): Released all slaves
[  481.934589][   T74] bond4 (unregistering): Released all slaves
[  481.948614][   T74] bond5 (unregistering): Released all slaves
[  481.962815][   T74] bond6 (unregistering): Released all slaves
[  482.068858][   T74] bond7 (unregistering): Released all slaves
[  482.084180][   T74] bond8 (unregistering): Released all slaves
[  482.098470][   T74] bond9 (unregistering): Released all slaves
[  482.208506][   T74] bond10 (unregistering): Released all slaves
[  482.305994][   T74] bond11 (unregistering): Released all slaves
[  482.350014][T15872] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  482.439600][T15648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  482.564005][   T74] tipc: Disabling bearer <udp:syz2>
[  482.593831][   T74] tipc: Left network mode
[  482.736353][T15888] __nla_validate_parse: 15 callbacks suppressed
[  482.736374][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2897'.
[  482.963981][T15642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.420559][T15648] veth0_vlan: entered promiscuous mode
[  483.431292][T15905] netlink: 'syz.3.2896': attribute type 3 has an invalid length.
[  483.508209][T15648] veth1_vlan: entered promiscuous mode
[  483.720942][T15915] netlink: 'syz.2.2903': attribute type 1 has an invalid length.
[  483.769025][T15648] veth0_macvtap: entered promiscuous mode
[  483.862335][T15915] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2903'.
[  483.897587][T15648] veth1_macvtap: entered promiscuous mode
[  483.920555][T15917] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2903'.
[  483.943145][T15642] veth0_vlan: entered promiscuous mode
[  484.010201][T15642] veth1_vlan: entered promiscuous mode
[  484.015820][T15929] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2907'.
[  484.015854][T15929] block nbd0: not configured, cannot reconfigure
[  484.106623][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2909'.
[  484.159549][T15648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  484.205886][T15648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.231063][T15642] veth0_macvtap: entered promiscuous mode
[  484.282164][ T1137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.292445][ T1137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.306101][T15642] veth1_macvtap: entered promiscuous mode
[  484.336815][T15936] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2911'.
[  484.347653][T15936] netlink: 'syz.4.2911': attribute type 1 has an invalid length.
[  484.385103][ T1137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.431607][T15936] 8021q: adding VLAN 0 to HW filter on device bond10
[  484.546375][ T1137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.583455][   T74] hsr_slave_0: left promiscuous mode
[  484.590050][   T74] hsr_slave_1: left promiscuous mode
[  484.596353][   T74] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.605570][   T74] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.818672][T15955] netlink: 'syz.2.2914': attribute type 3 has an invalid length.
[  485.090633][   T74] team0 (unregistering): Port device team_slave_1 removed
[  485.136968][   T74] team0 (unregistering): Port device team_slave_0 removed
[  485.160900][T15959] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  485.234255][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'.
[  485.681094][T15642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.709423][T15963] netlink: 'syz.4.2917': attribute type 1 has an invalid length.
[  485.786359][T15957] wg1 speed is unknown, defaulting to 1000
[  485.808569][T15642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.828917][T15963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2917'.
[  485.887282][T15966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2917'.
[  485.911407][   T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.921309][   T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.931147][   T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.974885][   T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.026647][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.044949][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.065536][T15969] gretap0: entered promiscuous mode
[  486.071165][T15969] vlan0: entered promiscuous mode
[  486.254924][   T74] IPVS: stop unused estimator thread 0...
[  486.315185][ T4041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.341617][T15973] xt_policy: too many policy elements
[  486.344096][ T4041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.535067][T11039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.563434][T11039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.714337][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2840'.
[  486.911985][T15989] bond1 (unregistering): Released all slaves
[  487.037151][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.063650][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.099921][T15986] wg1 speed is unknown, defaulting to 1000
[  488.658752][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  488.669449][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  488.678577][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  488.690098][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  488.698456][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  488.843016][T16042] wg1 speed is unknown, defaulting to 1000
[  489.004341][T16053] xt_hashlimit: size too large, truncated to 1048576
[  489.136523][T16051] wg1 speed is unknown, defaulting to 1000
[  489.156416][T16056] wg1 speed is unknown, defaulting to 1000
[  489.230016][T16042] chnl_net:caif_netlink_parms(): no params data found
[  489.718101][T16042] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.751881][T16042] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.761261][T16042] bridge_slave_0: entered allmulticast mode
[  489.769704][T16042] bridge_slave_0: entered promiscuous mode
[  489.782827][T16042] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.792222][T16042] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.800630][T16042] bridge_slave_1: entered allmulticast mode
[  489.811585][T16042] bridge_slave_1: entered promiscuous mode
[  489.858031][T16080] wg1 speed is unknown, defaulting to 1000
[  490.055357][T16042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.231476][T16088] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  490.240788][T16088] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  490.278474][T16042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.510296][T16042] team0: Port device team_slave_0 added
[  490.592870][ T3094] IPVS: starting estimator thread 0...
[  490.594837][T16097] __nla_validate_parse: 4 callbacks suppressed
[  490.594859][T16097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2953'.
[  490.638271][T16042] team0: Port device team_slave_1 added
[  490.684164][T16100] IPVS: using max 29 ests per chain, 69600 per kthread
[  490.763391][ T5146] Bluetooth: hci1: command tx timeout
[  490.824660][T16042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.854321][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.901119][T16042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.946716][T16111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2957'.
[  490.990927][T16042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.000198][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  491.029231][T16042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.099665][T16099] wg1 speed is unknown, defaulting to 1000
[  491.256432][T16042] hsr_slave_0: entered promiscuous mode
[  491.263028][T16042] hsr_slave_1: entered promiscuous mode
[  491.281320][T16116] TCP: TCP_TX_DELAY enabled
[  491.284796][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2959'.
[  491.290510][T16042] debugfs: 'hsr0' already exists in 'hsr'
[  491.299370][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2959'.
[  491.307184][T16042] Cannot create hsr debugfs directory
[  491.461768][T16128] syz.6.2961: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  491.481560][T16125] netlink: 'syz.5.2959': attribute type 13 has an invalid length.
[  491.487269][T16128] CPU: 1 UID: 0 PID: 16128 Comm: syz.6.2961 Not tainted syzkaller #0 PREEMPT(full) 
[  491.487309][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  491.487332][T16128] Call Trace:
[  491.487344][T16128]  <TASK>
[  491.487357][T16128]  dump_stack_lvl+0x189/0x250
[  491.487405][T16128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.487441][T16128]  ? __pfx__printk+0x10/0x10
[  491.487470][T16128]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  491.487516][T16128]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  491.487555][T16128]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  491.487594][T16128]  warn_alloc+0x214/0x310
[  491.487633][T16128]  ? stack_depot_save_flags+0x40/0x860
[  491.487679][T16128]  ? __pfx_warn_alloc+0x10/0x10
[  491.487720][T16128]  ? kasan_save_track+0x3e/0x80
[  491.487755][T16128]  ? __kasan_kmalloc+0x93/0xb0
[  491.487789][T16128]  ? xsk_setsockopt+0x4dc/0x8d0
[  491.487822][T16128]  ? do_sock_setsockopt+0x17c/0x1b0
[  491.487848][T16128]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  491.487872][T16128]  ? do_syscall_64+0xfa/0xfa0
[  491.487900][T16128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.487933][T16128]  __vmalloc_node_range_noprof+0x125/0x12d0
[  491.488001][T16128]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  491.488041][T16128]  ? __kasan_kmalloc+0x93/0xb0
[  491.488068][T16128]  vmalloc_user_noprof+0xad/0xf0
[  491.488102][T16128]  ? xskq_create+0xbf/0x170
[  491.488126][T16128]  xskq_create+0xbf/0x170
[  491.488156][T16128]  xsk_init_queue+0xb0/0x110
[  491.488183][T16128]  xsk_setsockopt+0x4dc/0x8d0
[  491.488209][T16128]  ? __pfx_xsk_setsockopt+0x10/0x10
[  491.488236][T16128]  ? __pfx_aa_sk_perm+0x10/0x10
[  491.488270][T16128]  ? aa_sock_opt_perm+0xff/0x1b0
[  491.488310][T16128]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  491.488332][T16128]  ? __pfx_xsk_setsockopt+0x10/0x10
[  491.488357][T16128]  do_sock_setsockopt+0x17c/0x1b0
[  491.488390][T16128]  __x64_sys_setsockopt+0x13f/0x1b0
[  491.488424][T16128]  do_syscall_64+0xfa/0xfa0
[  491.488451][T16128]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.488478][T16128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.488509][T16128]  ? clear_bhb_loop+0x60/0xb0
[  491.488537][T16128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.488564][T16128] RIP: 0033:0x7f4000f8f749
[  491.488587][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.488608][T16128] RSP: 002b:00007f4001d86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  491.488633][T16128] RAX: ffffffffffffffda RBX: 00007f40011e5fa0 RCX: 00007f4000f8f749
[  491.488651][T16128] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  491.488666][T16128] RBP: 00007f4001013f91 R08: 0000000000000004 R09: 0000000000000000
[  491.488684][T16128] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  491.488700][T16128] R13: 00007f40011e6038 R14: 00007f40011e5fa0 R15: 00007ffe82916648
[  491.488738][T16128]  </TASK>
[  491.494885][T16128] Mem-Info:
[  491.535440][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2962'.
[  491.541858][T16128] active_anon:3851 inactive_anon:0 isolated_anon:0
[  491.541858][T16128]  active_file:3663 inactive_file:40040 isolated_file:0
[  491.541858][T16128]  unevictable:788 dirty:341 writeback:0
[  491.541858][T16128]  slab_reclaimable:12854 slab_unreclaimable:123499
[  491.541858][T16128]  mapped:29414 shmem:1359 pagetables:926
[  491.541858][T16128]  sec_pagetables:0 bounce:0
[  491.541858][T16128]  kernel_misc_reclaimable:0
[  491.541858][T16128]  free:1304678 free_pcp:10818 free_cma:0
[  491.849846][T16128] Node 0 active_anon:15404kB inactive_anon:0kB active_file:14652kB inactive_file:159960kB unevictable:1616kB isolated(anon):0kB isolated(file):0kB mapped:125856kB dirty:1364kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12344kB pagetables:3568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  491.884060][T16128] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  491.914906][T16128] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  491.945380][T16128] lowmem_reserve[]: 0 2504 2505 2505 2505
[  491.951227][T16128] Node 0 DMA32 free:1305128kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15516kB inactive_anon:0kB active_file:14652kB inactive_file:159968kB unevictable:1616kB writepending:1404kB zspages:0kB present:3129332kB managed:2565012kB mlocked:80kB bounce:0kB free_pcp:26896kB local_pcp:4484kB free_cma:0kB
[  491.985988][T16128] lowmem_reserve[]: 0 0 0 0 0
[  491.990760][T16128] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  492.020586][T16128] lowmem_reserve[]: 0 0 0 0 0
[  492.025563][T16128] Node 1 Normal free:3900000kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14128kB local_pcp:2176kB free_cma:0kB
[  492.072208][T16128] lowmem_reserve[]: 0 0 0 0 0
[  492.077307][T16128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  492.090553][T16128] Node 0 DMA32: 2770*4kB (UME) 2067*8kB (UM) 419*16kB (UME) 256*32kB (UME) 157*64kB (UM) 210*128kB (UM) 174*256kB (UME) 95*512kB (UM) 82*1024kB (UME) 6*2048kB (UME) 253*4096kB (UM) = 1305168kB
[  492.110115][T16128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  492.124024][T16128] Node 1 Normal: 160*4kB (UE) 40*8kB (UME) 34*16kB (UME) 140*32kB (UME) 50*64kB (UME) 11*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3900000kB
[  492.148487][T16128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  492.159317][T16128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  492.170298][T16128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  492.180049][T16128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  492.189881][T16128] 45061 total pagecache pages
[  492.195073][T16128] 0 pages in swap cache
[  492.199349][T16128] Free swap  = 124996kB
[  492.204738][T16128] Total swap = 124996kB
[  492.208993][T16128] 2097051 pages RAM
[  492.212851][T16128] 0 pages HighMem/MovableOnly
[  492.218121][T16128] 424156 pages reserved
[  492.222317][T16128] 0 pages cma reserved
[  492.275893][T16131] bond12: entered promiscuous mode
[  492.288577][T16131] 8021q: adding VLAN 0 to HW filter on device bond12
[  492.344359][T16133] 8021q: adding VLAN 0 to HW filter on device bond12
[  492.351812][T16133] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[  492.369959][T16133] bond12: (slave wireguard0): Error -95 calling set_mac_address
[  492.843336][ T5146] Bluetooth: hci1: command tx timeout
[  492.861503][T16165] gretap3: entered allmulticast mode
[  493.027003][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2973'.
[  493.104928][T16177] netlink: 'syz.2.2974': attribute type 1 has an invalid length.
[  493.158853][T16177] bond10: entered promiscuous mode
[  493.170503][T16177] 8021q: adding VLAN 0 to HW filter on device bond10
[  493.194576][T16177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  493.201881][T16177] IPv6: NLM_F_CREATE should be set when creating new route
[  493.209216][T16177] IPv6: NLM_F_CREATE should be set when creating new route
[  493.235332][T16177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  493.317620][T16042] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  493.338813][T16042] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  493.369998][T16042] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  493.403931][T16042] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  493.621670][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2978'.
[  493.635523][T16042] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.646834][T16198] veth1_macvtap: left promiscuous mode
[  493.722663][T16042] 8021q: adding VLAN 0 to HW filter on device team0
[  493.748762][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.756012][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.802664][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.809885][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.828254][T16207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2981'.
[  493.857290][T16207] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2981'.
[  493.978757][T16213] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2985'.
[  493.998464][T16213] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  494.020779][T16213] 1ªX¹¦À: entered allmulticast mode
[  494.043733][T16213] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  494.080361][T16042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  494.820941][T16042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.923945][ T5146] Bluetooth: hci1: command tx timeout
[  494.948285][T16042] veth0_vlan: entered promiscuous mode
[  494.967172][T16042] veth1_vlan: entered promiscuous mode
[  495.007376][T16042] veth0_macvtap: entered promiscuous mode
[  495.035889][T16042] veth1_macvtap: entered promiscuous mode
[  495.098322][T16042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.157126][T16042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.176609][T16261] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  495.197086][T16257] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  495.245786][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.266430][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.281464][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.314431][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.347510][T16263] wg1 speed is unknown, defaulting to 1000
[  495.745702][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.769204][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.817530][T16285] __nla_validate_parse: 2 callbacks suppressed
[  495.817551][T16285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3002'.
[  495.871710][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.886459][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.124539][T16289] wg1 speed is unknown, defaulting to 1000
[  496.370647][T16307] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2931'.
[  496.381168][T16307] netlink: 'syz.3.2931': attribute type 1 has an invalid length.
[  497.005846][ T5146] Bluetooth: hci1: command tx timeout
[  497.101065][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  497.110847][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  497.120155][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  497.129084][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  497.154730][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  497.208552][T16333] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  497.867182][T16350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3018'.
[  497.882081][T16350] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3018'.
[  498.004188][T16351] bridge0: entered promiscuous mode
[  498.265384][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  498.279956][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  498.291183][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  498.305542][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  498.318291][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  498.382275][T16373] netlink: 'syz.3.3017': attribute type 3 has an invalid length.
[  498.390479][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'.
[  498.411776][T16371] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3024'.
[  498.447540][T16364] wg1 speed is unknown, defaulting to 1000
[  498.510309][T16376] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3024'.
[  498.976975][T16364] chnl_net:caif_netlink_parms(): no params data found
[  499.195530][T16364] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.204483][T16364] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.212445][T16364] bridge_slave_0: entered allmulticast mode
[  499.222860][T16364] bridge_slave_0: entered promiscuous mode
[  499.235659][T16364] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.242941][T16364] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.251479][T16364] bridge_slave_1: entered allmulticast mode
[  499.260047][T16364] bridge_slave_1: entered promiscuous mode
[  499.284382][T16403] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3032'.
[  499.374431][T16364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.438942][T16364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.528927][T16405] wg1 speed is unknown, defaulting to 1000
[  499.556872][T16364] team0: Port device team_slave_0 added
[  499.635864][T16364] team0: Port device team_slave_1 added
[  499.676060][T16403] wg1 speed is unknown, defaulting to 1000
[  499.761778][T16364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.769974][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.801525][T16364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.848438][T16425] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3037'.
[  499.860333][T16364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.867437][T16364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.915819][T16364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.218682][T16364] hsr_slave_0: entered promiscuous mode
[  500.228207][T16364] hsr_slave_1: entered promiscuous mode
[  500.238045][T16443] netlink: 'syz.6.3043': attribute type 8 has an invalid length.
[  500.248442][T16364] debugfs: 'hsr0' already exists in 'hsr'
[  500.256120][T16364] Cannot create hsr debugfs directory
[  500.362128][T16433] wg1 speed is unknown, defaulting to 1000
[  500.368995][ T5146] Bluetooth: hci2: command tx timeout
[  500.481117][T16447] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3043'.
[  500.558663][T16443] wg1 speed is unknown, defaulting to 1000
[  500.636417][T16441] wg1 speed is unknown, defaulting to 1000
[  501.204270][T16364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  501.242536][T16364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  501.284261][T16465] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3047'.
[  501.301090][T16469] netlink: 'syz.6.3049': attribute type 1 has an invalid length.
[  501.354338][T16364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  501.365333][T16364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  501.400060][T16469] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[  501.412169][T16469] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  501.433728][T16469] bond1: (slave xfrm1): making interface the new active one
[  501.442809][T16469] bond1: (slave xfrm1): Enslaving as an active interface with an up link
[  501.461624][T16364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  501.477133][T16364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  501.594783][T16364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  501.608357][T16364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  501.636192][T16474] netlink: 'syz.6.3050': attribute type 1 has an invalid length.
[  501.644273][T16474] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3050'.
[  501.733001][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3050'.
[  501.821013][T16474] vxcan2: entered allmulticast mode
[  502.146739][T16364] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  502.167377][T16364] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  502.188355][T16364] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  502.222578][T16364] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  502.443925][ T5146] Bluetooth: hci2: command tx timeout
[  502.632811][T16511] wg1 speed is unknown, defaulting to 1000
[  502.738452][T16512] wg1 speed is unknown, defaulting to 1000
[  502.779503][T16515] netlink: 'syz.3.3060': attribute type 1 has an invalid length.
[  502.837649][T16364] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.890696][T16519] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3061'.
[  502.963889][T16515] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3060'.
[  503.020680][T16364] 8021q: adding VLAN 0 to HW filter on device team0
[  503.035745][T16515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3060'.
[  503.169766][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.177031][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.196604][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.203852][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  503.494023][T16524] syzkaller1: tun_chr_ioctl cmd 1074025677
[  503.500146][T16524] syzkaller1: linktype set to 823
[  503.502352][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'.
[  503.528015][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'.
[  503.557181][T16530] netlink: 'syz.4.3065': attribute type 18 has an invalid length.
[  503.596490][T16533] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3065'.
[  503.612252][T16531] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3062'.
[  503.688861][T16536] ip6gre1: entered promiscuous mode
[  503.697595][T16536] ip6gre1: entered allmulticast mode
[  503.936882][T16541] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  503.951769][T16541] bond13 (unregistering): Released all slaves
[  504.001904][T16364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.041112][T16546] netlink: 'syz.3.3068': attribute type 1 has an invalid length.
[  504.085616][T16544] : entered promiscuous mode
[  504.266451][T16364] veth0_vlan: entered promiscuous mode
[  504.322255][T16364] veth1_vlan: entered promiscuous mode
[  504.473027][T16364] veth0_macvtap: entered promiscuous mode
[  504.519781][T16364] veth1_macvtap: entered promiscuous mode
[  504.537587][ T5146] Bluetooth: hci2: command tx timeout
[  504.588206][T16364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.680383][T16364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.729744][T11940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.741841][T11940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.753173][T11940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.789489][T11940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.891246][T16566] syzkaller0: entered promiscuous mode
[  504.909692][T16566] syzkaller0: entered allmulticast mode
[  506.608187][ T5146] Bluetooth: hci2: command tx timeout
[  506.875415][T11940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.890429][T11940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.949775][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.961741][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.253156][T16612] batadv0: entered promiscuous mode
[  507.267047][T16615] __nla_validate_parse: 5 callbacks suppressed
[  507.267068][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3008'.
[  507.271229][T16612] macvtap1: entered promiscuous mode
[  507.307205][T16612] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  507.365135][T16612] batadv0: left promiscuous mode
[  507.555486][T16622] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3088'.
[  508.579909][T16633] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3094'.
[  508.656466][T16636] batadv_slave_0: entered promiscuous mode
[  508.759070][T11878] ------------[ cut here ]------------
[  508.764942][T11878] refcount_t: underflow; use-after-free.
[  508.771057][T11878] WARNING: CPU: 0 PID: 11878 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  508.780602][T11878] Modules linked in:
[  508.785118][T11878] CPU: 0 UID: 0 PID: 11878 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) 
[  508.794400][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.804491][T11878] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  508.810652][T11878] Code: 00 5a be 8b e8 27 80 f9 fc 90 0f 0b 90 90 eb d7 e8 1b 64 36 fd c6 05 a1 95 dd 0a 01 90 48 c7 c7 60 5a be 8b e8 07 80 f9 fc 90 <0f> 0b 90 90 eb b7 e8 fb 63 36 fd c6 05 7e 95 dd 0a 01 90 48 c7 c7
[  508.830540][T11878] RSP: 0018:ffffc9001b5876e0 EFLAGS: 00010246
[  508.837514][T11878] RAX: 28c77147d438d800 RBX: 0000000000000003 RCX: ffff888057cc5ac0
[  508.845627][T11878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  508.853960][T11878] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  508.862348][T11878] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: dffffc0000000000
[  508.870829][T11878] R13: ffff8880524eac60 R14: ffff8880524eac78 R15: ffffffff85c683d0
[  508.878839][T11878] FS:  0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000
[  508.888156][T11878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  508.894825][T11878] CR2: 00007ffd119b7268 CR3: 000000005782a000 CR4: 00000000003526f0
[  508.902821][T11878] Call Trace:
[  508.906141][T11878]  <TASK>
[  508.909074][T11878]  klist_dec_and_del+0x3c7/0x3d0
[  508.914258][T11878]  ? __pfx_klist_children_put+0x10/0x10
[  508.919808][T11878]  klist_del+0xa6/0x110
[  508.924915][T11878]  device_del+0x280/0x8e0
[  508.929262][T11878]  ? _raw_spin_unlock_irq+0x2e/0x50
[  508.934773][T11878]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  508.940845][T11878]  ? __pfx_device_del+0x10/0x10
[  508.945965][T11878]  ? netdev_unregister_kobject+0x344/0x450
[  508.951798][T11878]  unregister_netdevice_many_notify+0x1df2/0x2390
[  508.958690][T11878]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  508.965833][T11878]  ? rtnl_net_dev_lock+0x257/0x2f0
[  508.970951][T11878]  unregister_netdevice_queue+0x33c/0x380
[  508.976983][T11878]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  508.983269][T11878]  ? rtnl_net_dev_lock+0x36/0x2f0
[  508.988288][T11878]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  508.993426][T11878]  unregister_netdev+0x1f/0x60
[  508.998194][T11878]  bnep_session+0x294d/0x2b40
[  509.002871][T11878]  ? rcu_is_watching+0x15/0xb0
[  509.008256][T11878]  ? trace_sched_exit_tp+0x36/0x110
[  509.013675][T11878]  ? __lock_acquire+0xab9/0xd20
[  509.018543][T11878]  ? __pfx_bnep_session+0x10/0x10
[  509.023617][T11878]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  509.029510][T11878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  509.036158][T11878]  ? __pfx_woken_wake_function+0x10/0x10
[  509.041818][T11878]  ? __kthread_parkme+0x7b/0x200
[  509.046833][T11878]  ? __kthread_parkme+0x1a1/0x200
[  509.051881][T11878]  kthread+0x711/0x8a0
[  509.055989][T11878]  ? __pfx_bnep_session+0x10/0x10
[  509.061475][T11878]  ? __pfx_kthread+0x10/0x10
[  509.066684][T11878]  ? _raw_spin_unlock_irq+0x23/0x50
[  509.071896][T11878]  ? lockdep_hardirqs_on+0x9c/0x150
[  509.077126][T11878]  ? __pfx_kthread+0x10/0x10
[  509.081756][T11878]  ret_from_fork+0x4bc/0x870
[  509.086911][T11878]  ? __pfx_ret_from_fork+0x10/0x10
[  509.092037][T11878]  ? __switch_to_asm+0x39/0x70
[  509.097229][T11878]  ? __switch_to_asm+0x33/0x70
[  509.101997][T11878]  ? __pfx_kthread+0x10/0x10
[  509.106645][T11878]  ret_from_fork_asm+0x1a/0x30
[  509.111452][T11878]  </TASK>
[  509.114513][T11878] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  509.121794][T11878] CPU: 0 UID: 0 PID: 11878 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) 
[  509.130982][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  509.141032][T11878] Call Trace:
[  509.144315][T11878]  <TASK>
[  509.147245][T11878]  dump_stack_lvl+0x99/0x250
[  509.151838][T11878]  ? __asan_memcpy+0x40/0x70
[  509.156425][T11878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  509.161632][T11878]  ? __pfx__printk+0x10/0x10
[  509.166246][T11878]  vpanic+0x237/0x6d0
[  509.170246][T11878]  ? __pfx_vpanic+0x10/0x10
[  509.174769][T11878]  panic+0xb9/0xc0
[  509.178535][T11878]  ? __pfx_panic+0x10/0x10
[  509.182986][T11878]  __warn+0x31b/0x4b0
[  509.186985][T11878]  ? refcount_warn_saturate+0x11a/0x1d0
[  509.192552][T11878]  ? refcount_warn_saturate+0x11a/0x1d0
[  509.198122][T11878]  report_bug+0x2be/0x4f0
[  509.202461][T11878]  ? refcount_warn_saturate+0x11a/0x1d0
[  509.208032][T11878]  ? refcount_warn_saturate+0x11a/0x1d0
[  509.213597][T11878]  ? refcount_warn_saturate+0x11c/0x1d0
[  509.219145][T11878]  handle_bug+0x84/0x160
[  509.223393][T11878]  exc_invalid_op+0x1a/0x50
[  509.227924][T11878]  asm_exc_invalid_op+0x1a/0x20
[  509.232784][T11878] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  509.238930][T11878] Code: 00 5a be 8b e8 27 80 f9 fc 90 0f 0b 90 90 eb d7 e8 1b 64 36 fd c6 05 a1 95 dd 0a 01 90 48 c7 c7 60 5a be 8b e8 07 80 f9 fc 90 <0f> 0b 90 90 eb b7 e8 fb 63 36 fd c6 05 7e 95 dd 0a 01 90 48 c7 c7
[  509.258543][T11878] RSP: 0018:ffffc9001b5876e0 EFLAGS: 00010246
[  509.264788][T11878] RAX: 28c77147d438d800 RBX: 0000000000000003 RCX: ffff888057cc5ac0
[  509.272766][T11878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  509.280753][T11878] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  509.288721][T11878] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: dffffc0000000000
[  509.296856][T11878] R13: ffff8880524eac60 R14: ffff8880524eac78 R15: ffffffff85c683d0
[  509.304838][T11878]  ? __pfx_klist_children_put+0x10/0x10
[  509.310414][T11878]  klist_dec_and_del+0x3c7/0x3d0
[  509.315366][T11878]  ? __pfx_klist_children_put+0x10/0x10
[  509.320928][T11878]  klist_del+0xa6/0x110
[  509.325084][T11878]  device_del+0x280/0x8e0
[  509.329410][T11878]  ? _raw_spin_unlock_irq+0x2e/0x50
[  509.334609][T11878]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  509.340682][T11878]  ? __pfx_device_del+0x10/0x10
[  509.345535][T11878]  ? netdev_unregister_kobject+0x344/0x450
[  509.351347][T11878]  unregister_netdevice_many_notify+0x1df2/0x2390
[  509.357770][T11878]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  509.364543][T11878]  ? rtnl_net_dev_lock+0x257/0x2f0
[  509.369659][T11878]  unregister_netdevice_queue+0x33c/0x380
[  509.375390][T11878]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  509.381659][T11878]  ? rtnl_net_dev_lock+0x36/0x2f0
[  509.386682][T11878]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  509.391794][T11878]  unregister_netdev+0x1f/0x60
[  509.396557][T11878]  bnep_session+0x294d/0x2b40
[  509.401231][T11878]  ? rcu_is_watching+0x15/0xb0
[  509.406004][T11878]  ? trace_sched_exit_tp+0x36/0x110
[  509.411205][T11878]  ? __lock_acquire+0xab9/0xd20
[  509.416067][T11878]  ? __pfx_bnep_session+0x10/0x10
[  509.421097][T11878]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  509.426989][T11878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  509.433316][T11878]  ? __pfx_woken_wake_function+0x10/0x10
[  509.438945][T11878]  ? __kthread_parkme+0x7b/0x200
[  509.443896][T11878]  ? __kthread_parkme+0x1a1/0x200
[  509.448920][T11878]  kthread+0x711/0x8a0
[  509.452986][T11878]  ? __pfx_bnep_session+0x10/0x10
[  509.458009][T11878]  ? __pfx_kthread+0x10/0x10
[  509.462603][T11878]  ? _raw_spin_unlock_irq+0x23/0x50
[  509.467815][T11878]  ? lockdep_hardirqs_on+0x9c/0x150
[  509.473029][T11878]  ? __pfx_kthread+0x10/0x10
[  509.477625][T11878]  ret_from_fork+0x4bc/0x870
[  509.482224][T11878]  ? __pfx_ret_from_fork+0x10/0x10
[  509.487339][T11878]  ? __switch_to_asm+0x39/0x70
[  509.492094][T11878]  ? __switch_to_asm+0x33/0x70
[  509.496849][T11878]  ? __pfx_kthread+0x10/0x10
[  509.501442][T11878]  ret_from_fork_asm+0x1a/0x30
[  509.506214][T11878]  </TASK>
[  510.663470][T11878] Shutting down cpus with NMI
[  510.668512][T11878] Kernel Offset: disabled
[  510.672861][T11878] Rebooting in 86400 seconds..