last executing test programs:

1.822426145s ago: executing program 4 (id=3884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x100, 0x70bd2b, 0x25ffdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.687765688s ago: executing program 3 (id=3887):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250200000008000800", @ANYRES32=r3, @ANYBLOB="f98d2ae3fb77be292d1d7666050c7e4b373b2a0b1f30d2281cc84be13414d655f50358568f257d7bc023420522ff277ac3e9a788042acabe6b2d6680fa46a249765b755a5adfafc70a834c20415b2ed99dbc5adfcbc246a5e7"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
write(r0, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24)

1.586306985s ago: executing program 4 (id=3890):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @multicast2}}, 0x1e)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$sock_ifreq(r0, 0xf3, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'})

1.537922871s ago: executing program 3 (id=3891):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pwrite64(r0, &(0x7f0000000100)="573825e2e1a64fdd7fd8", 0xa, 0xffffffff)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='bond_slave_0\x00')
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)

1.478323381s ago: executing program 0 (id=3892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4084)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x24008814)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=<r4=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000340)=0xc)
sendmsg$nl_generic(r0, &(0x7f0000001700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000380)={0x1340, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x1e}, [@generic="31e0feab36dff1179893b5e8eee8891c4be6608a90c38e0790c041b3641912f7a9e0093d4609306c9c28642ccf2afd07443548cf4bb1e8395c19bf8ed805a42d77c6289fdc074b06d05a944df24e494ec8b2c877ef007c6b11c3908acf827876e0a581a7080be2d1ba3a757eaa6d2440068bf1a50c201e38c4a89b1651dc1bc6bfc73ed2c4d1b4b944955d5564579667b4466bfb78e7a65eff9b4acf3d5d8746da9ec8ca7ccff078c4d158e851459762151490a76d98e51115cf63592c", @nested={0x18, 0xab, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xc2, 0x0, 0x0, @pid=r4}]}, @generic="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", @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@private1}, @nested={0x23f, 0x2c, 0x0, 0x1, [@generic="9ab746410beed1b3872d5b091082e6a34d60d99e7b49a224715b2c50ad478c4e204bfd00f855b8d2aea01fe3bf4ef55e0d1e3c6eff320dc8c94544df68ba03d528344073605253917f95e5736757e2d2943adaee69d5d1def5e2b001e34b822bf3c17a1db773d53e21265832981953e3bc0cce6d090055da90437835fed791e8467a8f54cdee7ec6a1ec5fb3970595bdbc9f190111", @generic="2835849ffe45ecabaa86d0e608298c8106152eaee5feae5c10a4b818ae4ec6d9e973ded47a327a49019b7fe66f0424510816f250aa18e79683585356fda3edfebd88d7c5bf0c777297342253cd4077bbb96b15fcdd4563f6ed8ece9e6e885d48b19323ae766faf55420f22c213b252ad51c949092010f1", @typed={0x8, 0x29, 0x0, 0x0, @u32=0xffffacbc}, @typed={0x8, 0x64, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xa}, @nested={0x4, 0xaa}, @generic="758c8617619e3c8169a1d609c03c13fe8d723f57ee471a64f8318895b1a580342e7c64a6ffbe8ecde2f790b7aecc5d0967d309665b7f556440ea1e98f0e8abc3602372c1ee631912d14cf65d5d149ec0c4281a9961aa7aafd1fc672628fb2d350497159770ba37a34f5c9c51e92f16524d14f9bed62541c83d3695fb2440e66760974237437fa07d58afdb1d18dd4c692b23cb5c2b95ff27c667717c07f3ab05e6e89bf81b3baa8073316fc552f950182e0956c9f0d6", @generic="4c1ff0ae117d7072607e539a6b07d9f5396463354d8e90d5a1eff4cd09515ceb8620abd07f5cfe8a38f352f2bd2c0a62b60254fe10810b6d629a2212b17a1f89279571f17fb9a38690692561d9a8509491c89e805e", @nested={0x4, 0x7d}, @typed={0x8, 0x46, 0x0, 0x0, @pid=r5}]}]}, 0x1340}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000017c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001b00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001800)={0x2b0, r8, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x18, 0xb, 0x60, 0x12, 0x2, 0x3, 0x1b, 0xb, 0x30, 0x18, 0x6, 0xc, 0x16, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff, 0x3, 0x6, 0xffff, 0x9, 0x1e4a, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x5}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x4, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x15, 0xb0b, 0x4, 0x4, 0x3000, 0xa3bc, 0x74]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x3ff, 0x5aa9, 0x2, 0x7fff, 0x7f, 0x7ff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x62, 0x2, 0x3dd, 0xf, 0x2, 0x79]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x36, 0x0, 0xc, 0x6c, 0x16, 0x2, 0x3, 0x30, 0x0, 0x24, 0x1, 0x1, 0x48, 0x6, 0x5, 0xb, 0x1b]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x16, 0x6c, 0x4, 0x36, 0x5, 0x36, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7fff, 0xb4a7, 0xb6ae, 0x49cc, 0x8, 0x8, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd8, 0x3d, 0x4, 0x4c, 0x6, 0x53, 0x5c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xfff, 0x3, 0xffff, 0x2, 0x7, 0x2, 0x6]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x3ff, 0x0, 0x81, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x9}, {0x2, 0x2}, {0x1, 0x3}, {0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x4, 0xa}, {0x4, 0x8}, {0x2, 0x18}, {0x7, 0xa}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0x7}, {0x5, 0x3}, {0x5, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x91c, 0x10, 0xabc, 0x9, 0x2, 0x6, 0x2, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x4, 0x30, 0x48, 0x36, 0x1, 0x1, 0x5, 0x53, 0xc, 0x60, 0x24, 0x18, 0x1, 0x4, 0x6, 0x12, 0x9, 0x16, 0x12, 0x3, 0xcccb6bbc1e846ef7, 0x1, 0x30, 0x48, 0x6c, 0x24]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x7f, 0xf005, 0x1, 0xfff, 0x4, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x6c, 0x2, 0x12, 0xb, 0x3, 0x18, 0x1, 0x0, 0x60, 0x6, 0x4, 0x5, 0x18, 0x9, 0x24, 0x16, 0x5, 0x12, 0x2, 0x16, 0x5, 0xc, 0x48, 0x1, 0x18, 0x30, 0x3, 0x6, 0x16, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x101, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x4}, {0x3, 0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x3, 0x8}, {0x2, 0x5}, {}, {0x5, 0x2}, {0x4, 0x2}, {0x5, 0x7}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x7}, {0x5, 0x2}, {0x6, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x2b0}}, 0x40070)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002100)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001b80)={0x51c, r8, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x5, 0x18, 0x17, 0x1, 0x6c, 0x4, 0x5, 0x1, 0x3, 0x0, 0x36, 0x48, 0x1b, 0x4, 0x9, 0x48, 0x3, 0x18, 0x16, 0x36, 0x30, 0x12, 0x1, 0x1b, 0xc, 0x18, 0x12, 0x6c, 0x2, 0x48, 0x16, 0x4]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x1}, {0x2, 0x3}, {0x6, 0x4}, {0x0, 0x9}, {}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x3}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0xa}, {0x2}, {0x2}, {0x3, 0x2}, {}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc24, 0x0, 0x3, 0xb, 0x8, 0x3, 0x81]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0x9, 0x4, 0x1, 0x10, 0x6, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x24, 0x4]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x8}, {0x5, 0x6}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x5}, {0x1, 0x2}, {}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa2, 0x5d9, 0xcca, 0x7, 0x0, 0x8000, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x390, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe3, 0x2, "4d38b6a90d4f8a02434433e91fb45add94fac85665ed4ce16126b4fce4b927cc006e44d9e67f0e1dbd8117b4d6995a2df0f9871b18146f1fd22fbfb19d1575741b601c0e39dd9d4481ff25bb5c0a34f1273362bba91025023cdcb861b28d439a0612d60e0fb159d71783099840426ce960b6d35cfeae46f57856b19c617305ed0dc3044bf6aa77eeeaae9487f1d0d5bab9a4b4343ffa56cafaa0a4761039844786087bdf55f55ce49359600be94ed66b2e6c30b9beda6657924cac23a2f5dbac6c2ea7a086e342bc16005b02b894723e224566b90f25445b589ecb33491c30"}, @NL80211_FTM_RESP_ATTR_LCI={0xcd, 0x2, "b5106b627339def9a381bcc4862553648dce04b0b13a9b1b9d7aa21de219908b1e4996e3b205249cc3d41e064dbd031443d7d4302961652cb04703099d6030fc13aace08d6907827083d65c07171ae0dcae3bc91312fba870a3f17b20f0537dc46fc5af300256bb3e268eea3cba3daaeb6e6b46d1d435563f2c111e3363b2febaecab0e8ef2f9b80381c015d4455ec5606282725e816d7d84b868f67fc21d0888ef11955a7e897770627d4276ecaadfd7ea405c452c9f7468c0b4d20360212625836535fac7f47daf7"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "f9a803f819dbcb39eec1a19347f76fd3b57624b8c7a94d0b6bbbf5f18495db6d3ec373ef2babc98900705425877eb379e5186e568c010b35b7f92f7dcc286b1f0f3aa064958e4829cc6a7b6d580158f29e23423ddce2282e7d03313ec0e24466791105c692f341bf5d3f01a57706fa72b60dc3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "ebf8c8f9c40a5fca30329e6148151041719cfa00404b09d37524ae64eb2bd3fc31"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa4, 0x3, "8d0bb0b3122b4da15406c2b6275a75b12939b82af8a1076309bed0560bab8da11d37902bd69dec1455a7051c70a21d3c6c6524e6a83c9cec7032797788ef183ae5f8adc348145985acec7a4234437c048a9bc22604e90e26027a7d338183f1ac22875a732f180e32d51d916ab7b586482552801a7c22730c7b5aaa02491a546e81fc6c9c0e7946ae7e71a902b489e1d218b5b25d9ebf32bb59d52a0dca3bb3f2"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x89, 0x2, "4707c0146c1f34bef5993278a2d5aad989ba16cc057bd48a8906ca2359b09d6d6782ca49bbcd1bc7eef5fa53d07e24eadebf0997fb681ccd65cb91f652160ce98b99d314da9b94129b260fb4c32d60812593b097a17ad55f9e87477076d46d48023970bed7a19365174fe9652924c803e45d89f4010de8535a06341451c2daf36cdb8ab4c8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x52, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x9, 0x9, @device_a, 0xb3d, @value=@broadcast, 0xc000000, 0x9, 0x3, [{{0x1}, @device_b, 0x1}, {{}, @device_a, 0xfffffff8}, {{0x1, 0x0, 0x1}, @device_b, 0x4}]}}, @mesh_id={0x72, 0x6}]}]]}, 0x51c}, 0x1, 0x0, 0x0, 0x40010}, 0x4081)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r3, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000081)
r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000002240), &(0x7f0000002280)=0x12, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r10, 0x89ec, &(0x7f00000022c0)={0x1, 0xdd})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000033c0)=<r11=>0x0)
r12 = socket$inet(0x2, 0x6, 0x5)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000003400)={0x0, 0x0, <r13=>0x0}, &(0x7f0000003440)=0xc)
r14 = accept$packet(r10, &(0x7f0000004740), &(0x7f0000004780)=0x14)
r15 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000047c0)={0x0, <r16=>0x0}, &(0x7f0000004800)=0xc)
r17 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000004840), 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000002300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000002380)="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", 0x1000}], 0x1, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {r5, r11, r7}}}, @rights={{0x20, 0x1, 0x1, [r0, r10, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r13}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r7}}}], 0xa0, 0x10}}, {{&(0x7f0000003540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004700)=[{&(0x7f00000035c0)="0f380f7490cfd6e91dff2f98a8c7a296b3ae4de35bfa90a0575282809c410f0d6e1b36b283c743ab485f128ca5f35bac6b73e061fb273b08d5bbbc893f8b836ecc3cbcfc2a8eeea0a11ac797d6ae5a96af262c67333e73a4e4e4aaa518b9e43c31a2ec79dc97dd8c94f163a7a081bc018d010badae6f245d4dd184dae3f2cc70a2ec90e07dad5488032e5451ea43a6ef8ea5a11f451cf874b5483d697a5535bdfb30b5bdd2e69710feeab5d8209ff6f99c35ee5d89087891384f71a4c346faad914c63c08b795a5368a969c626f4c7dc0f9d4068b63705b6c050fb1c1424d52ec67430aa106343da2d48c40483c7507edccf45b7a2e66d1be6931207d740ed177f116e3d104a24e68fc5f70ea4bdf84f45548b9381835344aa168136000fd2d5085b2575ae00930c0cb480fa16611815cddfe091944243ce777088ed5f3c883654565b2c0019b3267b5373c481c1c0eb59b326ffa747cf032f410a50ac49266bbc9fc7aff196079dbcd900c9d7e1c240fb19bebb5ae1fd157120899073af736b229fdbe5be3fc4f17eba11c75124a4fcaa3d1588aacc389653e2b0e6dc3ecdbb5b61a3828b56075b3b439e26b03efcfc94536314d7b2772ea3af93ebeed81fb7e340ffbced4861912b04e820ba7728f8f681c9f230e0976e55ef841a3bf62b061845ee4bd0d2433f4ca899a9ff3198f0bd2ab09e22f42173658819bd4a897c7283780e8b063b8fab3266c5e3779a6b8d3f2c6c5512d3931cb60fa6b1146695a95c9c7ec6e9d2ad49491f6a2f6ad47aa04c2f51aecb5bba22da6d50315612054bb8c4efa904c4c0011998344ed62c9bd3825cbf5979de526449de714f3c3b87d0246827b7ce7d31ec025fd9b3184ee0da1a098222a982375fef3f599c0ae7ee315b31cb41829e8d457484ac2f84ce5cdfdf0300d70dfa4799ac3a445152d5937138673a4017986cdab01b7a879436d57ce188c8d6c1fffbeb40e6e9b6df957b2e9f81cc40abb53e0c200657346dabdaadb8eeedae2b12a5ae62afdecc1286e8cbe4866247a084689a9daa406e5ee1e6b9abba643368c947f9878a1213fe34ee932172e78385b904205d1b61395d408218a872d698937ecdc8faa40b882a7148fcd9a2edf7ce6d27fcc520d6cda5db43a4479d0535feee886e99453b7e53400241147cda61110f35e86b9e71d3f8a791e11bfe7c929071dfa7942ba00c8fc4441be5f199d0a49ec4e12a40ed160d348bcd24b0fca93a21c2dc028495dac3eb24e8353f7f31223d8e43146f3a6ffe22fcbc103bc36084c66d04b6fd720c6c0c05b0353a2f01f0c120c3ec20fec51313c1ec245e67e187e69b9c1bbb6c26d0bba2921ca838ba6dc99cb8c540afc098a2d576475e3c2722a9cab02caa97cae3e017fc4c94d4abeeef032369747630f1b7829308fa0f0c13d91bbc7c4d901cad2b9d411b4f3df0896f24823c26b0c252fb3183e78587bf35fde8a7cff10650127cf86559a82ec4e0f50ff8cce3c4c500526a3e7ea3951dd865db7ceb4a3a12c4d0e15bea35e8d607412ed51733ee3bafec30c06bc51afd5533829b71855cbc5d7419145a2a8a82ce1f1c120d5a0e17a7fa5183485146aca438ba7bf1d1f1017ca3dee76aa377e57be86b0bfb6cb300ae3d8b701886ed4a8cdd5f69b064a19181036eb58100e5c72444c7869ceb4b483807e0870df594a8df422569a25e703b009be3e6554c16355eb9d29efbf56e8475b195bc9c9ecbe13ca4288cf71eddbaa786d430a8139fbfc6afef3e34d9d91b993fbff6004d6be2a63689b05eaec5c9068428bbfa423a26a480b3cbd8f6d4255382a87fcae326fef0845b646925dc9057cd2ad004b3c53374740a09ae262574fbec29b054465659d685a472a8aab0d74ce81d4fc5e1eb35a241ff78272bb998f4aa8a8d154f68509f4f3ab65f2946ed6f9e7f52335348a0b65a53e0b6d2beb9fddf8dc18630c21e019ce717b618e23989eff72b2535491419cb34809bc89e97ddbf48258470d875d40457055137eb0740b17ea0edf2e8ff5ac2c5cb082238993812e489b4fd93753904eb5cb23cf7da0c7c23c678a7c63946a42450aa8f747e6f8c68089651f551572095d52290cf316f999acafc1bd0ed1ecbe83dfb328ddbdca443e56c6b73248533b3a53ca7e545289ef0f5312f4e5ca3c6f975d05d73d9dcc7704c1a6124c20c401ccf87441da5e0f614c428029e93c88d3c20a518e675332c43722e41dbe7dc3e2437b345f1085412e9764429f24549d9a90de61fdba18ecf7b2649d4edff0fbdfe7cc5b84866c491eca5dd523ff2c0c4d277dc10ec98e8a02266d7ba127d9d9f0222d1bd22d135f545e669b4f5a3131195b4fb7bdee38bf42e75cebb53227af4481fcad5da6267bf1a325a6c47e0b703da6f3840729bf37171e96507ef3e32dc5d365064df950e52273fb33e7f61955617f9b6c1549fd55e006b17bf536b71001f16219b91f1214e73d3ab0d37703ac22c9042d5917e6ffb0ab251e9665ccb7e3599a29dc30fdf4a5ac4e5513398684cba509087ef1e4d0826fdebc6d72e9fc9309cd440987474bfadc5983097827bdfde18c4f5c8925676b2b163f3e4da37f119343e83d28dfb075dec85ce00a196cc7d59108d618a481409e9c3b00b987bd28a07bcace8e125b68a766983fb927fc289d6739add9be96c10b689035130771b293b9cb9a144661271261a9cee87f2a8a8b049f6311ebd5fa69a2dc00ecb28b7833d5fab522acca943f357baf1f564796d6f4b836ece0df14c3081c3bde730f2b93a997f2de13972c3a53cada8a69885bd14090f1ddd759c14ad70755c81fd7d6ecd1299fade8ecc8926a161d46c36a581bbdebf326eb06974f74384820c7591c87dc72eddd130ed9bf7a539e8c01e90493dbcda36fc22c4d40ec178c76c9c54a86c8d8862fc9b71ce9fa4b2ff1ed2c31ada2b49be0800ddc844178e81eea311b500a99427382cf040aecc33e103a61f2e1566cc5faf323fecc957f8f285d54a71b900f6d38929380a3b18110caf5f75485a653086c5a99603a4d88d4607d29c91101b903fbe91fe3138b9279619beb43bcf54822ed470a984a067f584cbc516df5cf63afe8630a7d5eac3200557a5d2c56a5d3a4ce0fa48cf8cc844b900b362f6322793ea3260f9972982c1b67dab0269964b851716825bd99b5f4f2b46469aa88ed22ce053d2bb837e6165196f9292316948f07c86d2bc4258e1f4834e617fc54b90b9229a2dcb9bcf648b65390f4f0100bd39c9d043a2d700ff95771b9d7cc79aa29b70454e4903874c41da5cc3b34e5f2ee127375b9bdce65ef71d711ff2d93b76bc3ae05674b174514efebbb1cfa1f8d63a13973336a291983390ac81dbb8d0b22adc3efa8c03d21b8b905bd2909a0241f01521924f36f501f03fac7990111c9bfda4fb85565c9cd56f10c1e7b1b45606e322953444af952c9d02cd0ad7e87a5227102adcce960a6e68971a974370f0e957c5469b3991999bceb980292fda8117451b729684be3910c3d639c33d3969cc052fd39f71b0202cd4f12d99d53e064fecc97d28f382f4374ed61deeef4af184044a9eb37855b13e6f31412715d090149b1a492f15b09913d3eae8c8ceee11cffe88308c7afc1d922272952cc98a9a7feb1b0243064714ada73b0fa05a91d1a9bf78e5e263f773fda8c2d7da318160f828c0b604e5c17e4832645317a0adb8faa92beb4aca6cf5f8d45b744d794d6926b30b4385ce2e47ca81f3ae3dcb1974aae926fe03ce9ac54be3f72db07bfd278ba4edb09261eedaa7010f126f936b3d665a05a5d84d9a742a565eb3d29db25dea2e1c4e8574f37cc80da0a8ed39ed4f46b1d74269c998ed0361ed6d6509fd71e6bde1ee7fa575a9aba87e18f5728a3fb19d0bc5099a2997c656cba9d5544d54f90cc3c0d1d1a96948c3edafe1d4a492897dc13a27ad94eae9bb199c34cd4b402b838b7b45896318d144c7d614ed802dcb617b1491ffa179ddccd39e4abe0116a5b931e82a23a37fde49a01d97955fd52097019d5e1da1a763d8ee82a948e863fd89134ba065e158d91618556a0b9bca5075ae9273463da373cb81c5d3ddec3e711d4358b7e699d1805d0d6ac44e7a0ba3ef844fe65ccf2ddd429c902b0565bb101b2f75480656e7072540bbe1feda2b09b2dc484c6f484dd2c4722e0549cee1f9a13a5c1a8ac1ecc32912108374958897fdc54f8528068baf58ba2284a609a07a22f0d1cf6d9cb47994bcbffdff0b3f62fbde743db59a769aea54f7a9078f253c5698901b6636fe07d618b25a8aaa54381ca1f7058166d6074a91f887ca4ef6b99aa89e09bdb8025281d6b1dfa4bd3598f0ca26b5d622ffe78ac5f106ee6f9773e7d412995038b13cb40696db8427ce1cd48dd059da44d053cf7639f3d69caec2ea152991e111d9f539f6dc71f43a6d684828c6c4f61620c80a58406b3a9caf656bbedea723df50765eb44994c2eebb3df94dd0d2b3032cf3f2f339334ee8f9f6bef2c7552d707cd518513debbcd60f7b890011d93f7a5390cafc1aec635ed353c969e12e0ded908036188acfb301c98b248c8426867fbac01e9d5f8ad1debb3ca3414a1db370d10da207f7ed9d1bb489a021f3a06933e79770c16d3bfa2796e44fac70d52c8f4278aafdc48a1444f58042fc71ddb6da60556589eb4f0ce79582546a276cf8fd2ee3a7f37e31741995a890dc1167a1abbb6440ee3cbadd16a4f279de4acb2a80cda765a3bb63912d21347eacddacc2e7fe08085ddceb29d821dadf955fa103448d94407f580e9768252c83243dd725cbfb950fd52aa9bd3565f0f3c36e50280ee8658fe16c2deb686711e18050de499dbd1d4afcfe0795d893756ee277f47632e17593108bcf93240991f75c50e4f7d5d455c39afb86d320d4998ed5a177ba985369a81f6726872daf48025cdc276bb1615c01fceb67bbf173e7cf7d446bc0570018ce8962ae04dc81abc1f227a7ece14d13aa3333fc53582ccfb91669faf6503a0cd72ca36b15253149c198f8df1d796207ebd8030d59f63d96ba9e16fb9fa29d8a67760d5fe5957f9348a3f04f7384ac879dca78253a1593b79862ab7e0455244f2000ec3cc61d78a0d1ed1cff66a11bb8fc5d4cc2f2b76a78cd0ec744e3c1eed520bab866967d103d7bd79ae008d94bd8253906225d8d22bfd4212dfb90281e7c6cc1b5cf67f2cd56bb1978457227f6722a81e75b9c82db4ee6f319a016fbd97224e0d8822f63f468023f3b52394786b1eccd03616b42e6f3a621ee32f5d1ca0e4ba00cefc040881cc15599978edb605dc2e88aa1c337931a07e1030007bc27bf104a90ad55772f6c359f4ff86eed4af20b08bcb197fed2409d8848551869b76664e71ef0d363d4b5d0cbefa97549e10509f21806cae879fbb2a2c606cdaef9991f75a8b60e228162233fc59d7b5963bc28c600de3da1d123d593c1a3c044914f8f95b81640ef9e34d88c0215b2ebed95118e3be7635c01c84c41c3498fa919c5b6c0e76006e837ad743eec7e1e4416545f0b0ac44e2bff65a8a34492dd36bdf3cca46b7b3cf236b39ce689cfa64b8c5e6ba87c93e50be5473505e5a2c640ce5b15e5e47889beb75afac3a0dc881503e1d000cc015b503ed4fd61e13e97c6dbc73145dc9bc9906e6917e3f914fef067dae3764ac92526317cdf2fa5c1a67640f03e2e1675092a49749a57bf4d9dc5da71bb0f522586e9ec9d4eac93c52b5063de0396d750d5a08fc99dee6d402aecbf7b00606df210a7fc628a7242aa41c8b3", 0x1000}, {&(0x7f00000045c0)="18a03379317c578fca32b72e0afb950bdc63a8810a51df68aa85f47b7131458a7504babf4c9215fd3aae850d583b83c2920c6f6cbe584b4287f866ecf8c4c1b4f9500d95a6c3614521e1c2f1b0049eb9cd4156447ef14b8b3a8b21bcce7dcb6c6bf059cebf480898f2b8168abe5bbe44", 0x70}, {&(0x7f0000004640)="d0aacf1647658d25cb9bad5e58e442b05eabb73552054c43e1f9cab861a7d730f3368568c208849d77ea239c8867627e6c8ebaac9742e918e39e000037673929ec50438b45de893c1c6dd39c9945b1bcf37ced96577518e99ce96a712689b3f8e5792f68b3f8d6487737fe52939282897b51efdd8affcd0cb1024fac07f74392bb9336eb8b206311f5fa0b1b0d502d33", 0x90}], 0x3, &(0x7f0000004880)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r14, r15, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x20, 0x1, 0x1, [r10, r10, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4, r16, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r7}}}, @rights={{0x28, 0x1, 0x1, [r17, r0, r10, r0, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x120, 0x4000000}}, {{0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000049c0)="5e6e29870adc961d3157b5be81b9d00568ddbe07911678c1c055e45e0f8282c976538750c4e211c40471d7226135eb4cde4576883e1ada5e86a661466958e119f33e59ec36fee162e3973297b69997a6844dc6d9ce4fa940aade3195ae6d114375d62eb6348fa339516f77da31605ade8a69597004f8c83d1c5283b060f82dcf06a735a837fb8d2df7d66ff590668113596181fce693a7e17931e8796bfcc2cbae2445b0f0f86ddc3cc14c6c78c7169268d052acfb6377cf4d3031058b2e3c1d018051a3e188f3f1a5cfc7a33dbb1ad5bb6db652c7eb51023d6c26ca790b54e5cc3fc94228f9ecb0733be2d3816dbfc85dd02a5ed10b376ccfeb6b43c584ac53b6d0a36144790149e20bb4fe46958885f04cad1ab66bf60a5c9fd4efc0bcc6d39268c7da66e46990fd34120700c1e8f10c99e3ab8cb0de530bf5738efd1cf824d36f9edbb08a09691b1176db8dd93446f29ae18afd5fb4c6e75c8e7762014228d176e2a2a30a02a6e9852b210b0977a6737a5889cf91a61c4cb21cb37570a8f991b1615169a08cbf9ac4020e5123a6ed36a752f9fd792256e2c31f9d9ddc1c0f912b97dfed10b3c7b7509c8de41ea1ee2a4e116fc6057e42a6b89ac785a5f3d434a3824528f59ed087452f815b2b41adce40f544ac7109df3cffd7c6c1d2a9ed9d0bbc07109082e5eab69fba531bcc29e6f1eae326c81840294419643858e2132d737319bdb8bc7f3262500fcceba0b375f1fd347eeda7991232b5de9692d5a44c658a9a9fabf75fe07b11e80113cd7266e905a0630462aa67b5a82f999585f55db346e41272dda348dc0ce65e780b358fd758870b0b8d2603d331523137f293b41b21eb67947ce51e9d1b10313306ab06907d73b81ccbc3fbcde33aa48dd3eefafbcb1d6ce055aa8e23d57de860bd863f0739a06b44fe1365fc0a6b66333c9a2b8f9489f8dedc05ed145ad6373483a15c5805652f96515da5e8e54bfbf66216c4590545fe693fcfb21d92cc28df847d3d8d13873ef133bb230af6907989fa485504e82d3f3a9f01b5abf4672c42e6034e1f07a39ab871fc16d22f0ab715e77a4d2ba2dbdc93a4550175b1922c4fea4ae4801f6f7d348809af6467dc3d0809a234c695dfbc72de4d68dad5f29ab167901202b85185f0ad34cc06468af356f899b12f2b2d9a4fb5d6e54a882a9d585ee2c5881218ef49deac8eb320d16b0accc10533389c010d546f32b8d178e8babce2e06236d8575d9ed985f28cdbccf7069913ce6ae45822acc9f70dd5e4fc8c7ee088dda757ce4b3361a002b1d29ae18491f6dde3ea2a75ae1924dcd798459b792f340d1a91e8ada5c3627c8bbdd77a5d55173efba870313c3be3d00af154739dd6901de2d4d7a5858b81ced0073cd0d9152f9fdf7d27cab0ce7f251847b3207631efa7fde5a6619081c4d54991444952782ee5fef5b44d7f294cb35f1429580312c95f9a68e15ad54b0d9c3d36381f231fee66c648641b050f4fdfe5c3077fb6d7e22a0a4250c6511a4c3fa097c5449e059ccf0ac8e208d697ea6bc199a6bf7fdf8a9c1252f5b38fde1affaec1827f6b8c5539a2cfd1acc8110edfc2edbd0cbd41b30367b789a9a667a2e797680bbd5f09486afcd5844ebd7e5496db8eef99696d83186fcde9bbcd147f9f3d6e7a8181dc93cec2b9caabee7b3eace80f4ba51614684e65eff5b79bb1ec562f08cf372e2e4a56f982256592c3607d8cbcf0dd2563e595b2b3c43cf43709c70aae7e286198d15c3a4fb42d4f14af574cb968fa57181c693f4bc125dd16ca8a917f7bf0baa2c18430f6c482677e961fab81c6c7eaafd0334b2d8b06ab251132fe5a0a8c6fc86bcea499d1202a8768a0686516bc9d61ad01ee043997d7281a466f5f4c02c70bdbcb57497cf0c706c641a7cddaab47ed24a472a4815404ed6a1a7678af8d3acd0a2c77eee59a089053cb91da116dca4f0c75a81f0459b5787576bb00f6c6aef20748e2242968f60f4178d93119724e710b00bc82c6318389849a20cee4e7331b9caf46091c9e91b25e08cadbc7d9634765a5e7b102a8577d2f5e7e531a18671c48a1eb67fc4a27ce6abecf17c38c1a0e90802e50dfc33e18b6ed5959b3f77739324f790bd67105eb45deab063bfd08e97578b3099ae78ff0166029e79aed8b4df6ff5369c0703f02f3a122d61af41fefafdc1519a36946c9fa22dd82fb231c01eecbdcbc5ec8418ff51b2353cda862ffe54ea27c3e57acac5639a8a536efd1cc008d7f16cfea65574e338e2380c334b7b2d9b1feab0c728cdc10d3eb162c2376d3229927f2007d51a0ca2ea0d1b39f042ca5945849bbe6152d9101cafa348cb8b6d2bd0c3b096805575b39c37fac9d911c128b33eb7b82434fe20f9f75b878ea4016c99e8b9cc96ef54634c68e63c6bdb7af013cbcab7dabb20dc94c5b3365b8800774b85dcbba665cf24c3b60d8591a1fb0587510a3b2c9b50126dad5229563788d56b39f9d4193ae917b48f31d64fa51a11d62c6a485848b834d2688bcda9bb837327eb48963cd9dfe70758cb001f39c5cee49215c222c5822aaf20e49226a45a85e3a7e362da64687dfce6021870297a07fa1f853004a5600caa27b2f40345c209d57a98e6b5b03a3f2109f8e08ee3640d8413bac0130e1dfb209143a66f53be3cf7581128a08ac879199b301dcf4a91f4f252e9e268f849e25392c407b0ad3d03e667973434eb595f6178697963abaa5d7f7a41232834bc7bb86c547b7795c745c0723b2824985f6afea4abda59c8fb3bb4af28f8934886bbee454c930d1ea2f9ee7d7c43cd17744e8daba2582712d29277911134430dd17f342010eca616302d582dd07b2f4418f333f4d2393a16435101ce52227c62ecf5f5f30263801a998aa39015756e38d555e14ffeb033f419fe934260c06922c1b528a8df4cd4a9487c3eb94492a8cea273a6d7e2957b3eb74f93efebd4ee4949fe093c5d75ab95110ac5612fd3f46290207059f8319b6ad1029383e387e81bc2d8a8dfd2bdcffee8aa999b17baff4d104b6cdfd342915d150fd73dfc7dc852b890a8dbdd003cabf86dbaeed6f2d1caaa8f2f2e18f406158764c7cbd26209a885d3a2d07586496c739bba6e10a6980b6daeb3b49f9fe6a520d720714963e5e5958e2c6176e3379be28daad4b6fe12afeb70b9098f3cd5c767e87e7a3bdda6a62790ee20f47de3944ea3662837a199c8b16da72ef9f9fe673ee35c0fe604a01d6512ea8f7c50ed4b72dd39bb9ae911c0c6396eec3f7e4efb1abd467e57e0309f156a2ba4764a38447b6584700e17362857857b262e70eecfbedfcd38f4612e08d10010f90148cd040412798dc3f50fc7510e8d3b02ad2ac5b6f7372fa9882cbc977288fc1791fd1eedf8eddc1a1061b7f2ca3173eff1f785cdcd3cbf6d3a708177bf6c516209e6fbe308b7ba90d6e220c0a576aaf44d29a6b3f27d301edba831c754a6d2222c39c81f6cdf60a2882233d7b6edabb10469ad6a07af753e33a4b6069e3ff75afef394e2282f31a9f9feae5ebf296c8f362dc980d4e094c71fe65c923f138d013fea12db5e4015be70c90ff5991957aa58199de1be2da75b5fd6563469ca0b9a618fb5bcff6597380a9d0f8863b79659d619d877278c52b42e31a87cb47eab7f4c8ce1f4f92ab2b224f7a4dd9315de0cad6d1ad6f2f695b4411507a78bb59c02c4871eed070dadb413a546fc0504e3324b5f105515e0cba03067fccd57018fae82c7c4406a874ca517c0f21288b287ac5b96071d814b4eac7343237d2b6310b0b49b4ff1fc86714215f922f51e975ee6ed38ae3b76e8938f8f102c2ed9d1d4209fe24ab17963ad04133e485247ae9f03bd870acaa2e0b2e89a93e51c8086b059710352580392c7202d70c501637e0349fc5c08a4b9562bbf624ca74ef79af66cbbd226273bb3b78798da90dbb16d3c7107456177a32a2287c8194ee3a8698eedf3c48d39ac2c4e5df35b43f4f81e699b8116b08cdd60aefb1de0328da4d53e798161fc66220c3350c6de1d1935bdfdd85513f4da6373568068cb2f35bbc41a4be041bbce3d1b2e375e19c6754ebaaf96013bb6024916e3a264311a69d69481341f86d1ed9ec17bb4b1f13e262c3330fded8dd27186d8ef3ce5a6d66c4e2d38c1e4a0016c91f14965d2ab9ab8e8418181af845a1fcf357ae2701eda23161798a7b3f14cc0b504ac989f56612aac14d4714b55a931e8a90d2530cfd5baeb43c63100dc64f3a88f0ad34a4296af4df466a24106c11f84c30ff1a0aef8846dc4e00d20f84f115c73f6f291931d4cc5a28f4396528618a46bd2833fdaa1e572838f58aadf64de4703dcaaaa0bf0f5c1442a9357a13e94e9115a7202a961e224ff79588f2608e8bc1f1a98e9cc4ef1a7015464975ae2d146b6c3533713605c3cb2cf3db267ff532a8931c74968c0b85f136e72658e3369ebe4767e1da45e304f4a551115c6e8b567d04eee4f63c97e217cfe575df80e0969e175a9e66a7de2a4c7b27d8acf72db9c499b04248a7469721c29e63eff76f45337b59a7aea43166e84545618ce71611d6cf99e97c70aef280949d406c45652a180a4ecf09c13c82c3bb367390f9603c9354e24e632d26e7d62f011c707f9e64ef72b8e167dcfb2125eb51b4d8108cda6060515eac3a4071bccbbdd45df23b609f0037602cdc1f72e99d31f35e1040f7c417fe5c1883cf99411974cdfb5aa17bf09fc673e9f18718c71adab96a9f93227a03177f2c7bad560383975a497cac24ed7de8ce5910b468cad7e0036bd822e94fe4e6c2dd7ff11b96933c68323df927d4d00f9e0984c6911ddf16246e2b7df862a4269d951a9465ea8e5d637d653c61606db6cde81e16e535fe68fc95a5e2005ad324c780373a3a0a29007917f99e65ef2c9f3df43c0303d9c581a37eabdb41f816f03b4315f91c10e1a5591cec0ba78011f5ddfa220e183b94d696ad8b1e5141d3566de3ec23ffb6d29a0f51b712cecb86223dbcc9f109bb634e4c1c8649be7885d0e29b126a803a3e0549f97a0c80320f88524c4e6ba2eb4647fde829fe8caa688a2dc73f86e0bf31b1e74df22fca88976a0b59733283d5a42982934b95296c9dd46b9d54e6665e323fea257c98df52791e226eb4c289a40356a6de3b9273635da601002edc0f90bf10462ccc6268a67818e46dfcd619548b1dea5f7f226a649e7bb05d19e0dbd4c614903757790e0e09c45133b43ce35c80174fc30bf0fe530afc5292d73987fa7b47ddabc2b94e6d8f0795fd85fb0666fe0526f80c2b47f80ba136c900c1f439c0ebd986b54999885ff8cb802619edc161f302c8a74289ac6ef6eb19920425e72009b5168d22bd699c72bc14c1176f7adeaa46077e71d6677bc96be5036113cc5ac63d448ccc7c39d22c7e87cc7852c57f9f91310f8ce34fcbf804c3fa41ec368987b4424d531697f83893ee03c24a9bf6a542e0ae2fc21f6be5cd397f5b08b3d7c0990132af859c247f3c4799750c52b0e617fab156f940a4d8ca5cae267e5462d7b3991a9b31739bbdd3de1fa0c6acc2b26f576dc42780a5d530683c951732c959194400fb120a2b1264a1e431a8f5ae807e30cb7af3122588f1cce00a3f67f3da61cc6f2fde7b3bd955634740045edb7fb3b6cdab09325351e514eea19199a3673764f134001808a9abba8f91dfd450e45a0504adac3eaefd8ee5148b047c1fc570670409a3f6623cde0a30773a234f1d9e5af88e7c908e63f2f44ffb22997b57c240a5e3600307b9bea8e8063ad84dfd44e91f", 0x1000}, {&(0x7f00000059c0)="2a0d709380e989346bd9bc7d3cb70cf544a9f226d1127c800c1f343f619f95eaed661b801102781c3505f6faf37cfa4941a8a2972b88166c0123dd204bf0280b6d061a4eb219af4a57fae09207318808c8f62419c85111c59b5fc0dc97a6459afdc8841265ff60f75ea9006186374dbeebb12ea49ac06abb5c4cec64d92a67afde96afb8884b90da3498a5fac8aacd6d3148f7", 0x93}, {&(0x7f0000005a80)="af43bd9ab99c5ee3933b223dda844056d0c36f21ac80183652824b38bfe1eb08f61db78dc6b7865c999e93b807c59b6a66a6e8e11cb27e13bcb60200314222f8e884946e887c58035daef3b5ceb644b772b56b2dc9611447fb0c98236178ef5662209fa14fcf6ceddc6c", 0x6a}], 0x3, 0x0, 0x0, 0x40001}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005b40)="c2852bf7fa9d8ac235c2621e09315caa7bdd97817d56c77c0c756cc9e37613ad8da5f83e5470333f6769edc72afb37eb", 0x30}, {&(0x7f0000005b80)="05de2fe9e82bf01eeb815400ccba1f5ab4889b4c4fa20d2fae3d3ed291b787d4af9b569ca08aae904957b8a4b9eaaeffa373427cf64e1f145ec78b2f1ade482e949d40c14c935751c1eb7145fba4a6cc0dbe111b7033d43790562ff9f51bf92406029375de7919443fb6f8577ca0fb77033bbf76d0d2c6b29866c4b0f85aecf7436014266711e72d7226e13ff3cc124c625fdc5ef53af8ac367e9888491815f648164d351ee3960c1e7a4f5e7d384f1981f00587d70641046c05e51550f811504ab190e01e2c88", 0xc7}], 0x2, 0x0, 0x0, 0x20000091}}], 0x4, 0x20000800)
sendmsg$netlink(r0, &(0x7f0000005ec0)={&(0x7f0000005dc0)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005e80)=[{&(0x7f0000005e00)={0x80, 0x39, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x127, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x4f, 0x9e, 0x0, 0x1, [@generic="160f74655917990f3c69349249699062dddef53ba1df9a89d9c9b4686a146cf7ded25a70db4cca7b7d2a54f77e0780f984fe603c763f00", @nested={0x4, 0xf9}, @nested={0x4, 0x91}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r10}, @nested={0x4, 0x88}]}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@empty}]}, 0x80}], 0x1, 0x0, 0x0, 0x40000}, 0x10)
r18 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r18, 0x89e2, &(0x7f0000005f00)={<r19=>r0})
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f80)={0x20, 0x3fa, 0x8, 0x70bd29, 0x25dfdbfc, {0x1, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x1)
sendmsg$AUDIT_TTY_SET(r19, &(0x7f0000006100)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006080)={0x18, 0x3f9, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
sendmsg$TIPC_NL_MON_GET(r19, &(0x7f0000006440)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006400)={&(0x7f00000061c0)={0x238, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x27, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd975b34e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x40)

1.352976948s ago: executing program 4 (id=3893):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x41af9000)
ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)

1.352398505s ago: executing program 3 (id=3894):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getnexthop={0x4c, 0x6a, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r5}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x4c}, 0x1, 0x2}, 0x0)

1.345718765s ago: executing program 1 (id=3895):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="b702000000010080bfa300000000000007020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640300000000007502faff07cd10020404000003007d60b70700000d1000006a0a00fe000000188500000008000000b70000000604002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8328fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4133b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e875d1843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08200000007b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce0172f497e251f5b102893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3ab2d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894e00009338923789a1edcd8043fe83919088383268324a25df14010c8ea79c0d93ca77fd6c7ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151c2fcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e5961197332c5c9da52b573109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc76e5d3c6840ad05a57af1ede94d87590ce90a0a7579766f847ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb85ad413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8659c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9605a504bca38627df469cebb7db08358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd043c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c15a5a4dd567f91dd943f6c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85481743db5d6c2cb6a204d4d888dd4140c8edb598a36e21ad132bf6b88c99c5a5ed047d6589c10a5f6633b01813fc5cd7d048469a966bbfb300fd772cbadf2cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a1f7ac091d0f4632f638b09a0307ff31729857f9e6fe9f19e481a3f77cead663f42456e080952636515c758f1047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b0309080ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dcfa0c052feecee18c64c4600a0bc3d4945d4b918865bb7a8a726a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b32858f78d6e25537b959b69a04c5507008b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9d10cba734336703def181022cb9f1e62079c48c13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4147d6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada7766c301c65e56351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d48419a14a2bd8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13b21b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae3344295bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a22afb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9ba9c18e746aa9ea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600e4283095c203b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff2699a76973f3f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998e83e65b235c284542d48052eb15e6600733ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb0e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98282795dc5547aab3dcbd82a06e7f00c8160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f519ad33f7f2680e3cf7ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb75ca000000000000000000000000000000000000000000faa13c07b5f590ee4c8bfbd828e912b150dde95dafe80ee043a107bde9c0bb87155691d640fd000000e4a2d2aa0607b026f78417471e6ea0d10000309b29d0dae2d2c9c730ac21040000000000000009775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f130000000000000000000000000000000003572023092306e73a16f4b362f725b22b32be04e53a2219e3b08d75537c158ea4c4821d17d3b844dbe87408c34bb0f26ba43bd4530000769d45b93b8f2b6c194afc197f77bfb136dfd38c265479bd4f74b9d0b5c2f37eaacb2894370ab02abe06b823a2753ca82ea8888f2a5063212212772dcc541de26c97c1312fc247b56a9cd3e05bcb8bc93363edfa05f9c76e94190f917c3af6884c8742371f25eb0000000000000000000000004ae9afd11c62a57a29a163acc55ca9fe6da9ce6d59bdd87adec5ba4052a5edcd9999720e8b2a08b69f79f78c78b9f720bcf6a2ab411d420db8231780cdf52d44985768353ce1bc587700adf3a307ff11be0ca772f1bcc565070ef9345c2d55f0506d9059fff65ca75c9809c8e5e423f6f210a195e9b59a08c43dab5b025b1dc33cfdafe62aa8f13c38341267a920fc0be4e61fe9d8bed61524ad62896e3dfba3091cf028cdb3fabb530f1d0d4bdf391c5dda4b8b248ea58cb56aed4d968d506a108626e2423c506cc11bc2ec9de3b793fec489d08085e8c582cf6fc06c20eb57f7a1ba7315c67bd0e50f529a01211f8add5f28fd65fcd373982ae902e67966990cf34be5ed5dcf39b9e44fb0165fa40fcc5643678bab244a3a76f43dd267db562efe5156b85f6e909066b8f37b81b756eeeeee4598195e70d74bd1e221c5e0cf111b816f8bd5c2ac451fabd160815b9e81b9c4abffef4b12d82e401a0cce36fbfedaec4ab6a89e128ef71e63f2239792338e87e4c7d571d6e4bc165ea1d476531b4ddfbb698101e8563f7c25b4d527240dafb074437aa96f66e293df5e132fa95aa09c08ee57f089afc0522b438480aa3dc9f41330dcd3b25703feb85777de8fd5ac57464a31ae5924745f797a0c852ddf67e01dd5736b4826e16f885afb91b6a7f226e0d0aaabd0c01a8262cb35e501ddb3c191797560c91717a2215012da9e717ec8d65887138e3bc3886e5b6f3058e58fb4320338d6413ce94012c293e0042a2f5dd86b78d05efd9e44bbbccfae8b9361072af38c1aa3c030196d72d01a160a19c0060900e8bb2f3613a7ddacf2b878aa6b2952556d79bd183ae195e14d32ffd398ae01dbd20b034da17f5a78ceb03a16e39181a07b14e54f4e2061049569046877b9f5478106f6ac76e56213ec2e85a4dcd5960ad486e7c05a21e52e5c688c1f315169452b1b6a795dd837867899c64a04ec08a4b2d5455d93f6d5baf14ffced8576bfde19de2903835607505b4af824a0a69aee28fe65683dc83c19f6d253a5824442530c85d354c05c8b95030e629fb817697f746b9dd02fb40edf4f9886a758e0741ca2711e425f2f5be70a7fa600718fa7af2eb416a2b774f5d36f5632d791e0ba01f58f2165e6d5e564aef11dbc558170cf47c5934d41f558b02dc04d3ae4aee08aa5ad7d1e5ad92cdb90db79e73524d97ca3ce0828513c74fb0a1543eba7d17d37cc1f1f2d937bfd5fafeb23f691b326554b92d8b97e76e2cbbcb858a16287c2090727334096e574b6bb937ec9f048e041f178e8d3a3543c6862fc8b63f968501fabd17cbc81db1ad47d37d3fe02190fde2af3ac5c9a2d64ec4db0c8b211dbdf4d7b7c01248de7269c0b8d4c374d9fecb9fdff846c4e57d7d976c3f571474e4f65a87954e31e67c8cf6ac7823451b448ec90ca0b36405f6d2eef4055b5d2f4dad1aa89216f6d89bd43c4de92d8f61781a9349626fb65952dfa3c68aada76c3105d65bde2bddb981f753407c7696b767aeb3707606d0d9930b79f449557d6c3088c740f2a08c68b67f8dbbf93da08544ca26db1b58baae17c091f9bc28042630d76248e4d9d326ee62fd6e5d9bedee38b0e8da3cff3ba22e92e800b28c26901cd1a32b7aae2d762e776d66f08d78666364a2fc154fadfd105b28495e8702400a53f5191908b98a4d109a9d44107369cdf864fa8be46f52d88b01bcd795025a90669e55fc634692e554fe3a73ae6db0a5aa706c83061ba3b99aa992947346327a2521d3d4294115d9c4b44f949ae465d5aa24e3911520658e542e85023552e91dd39d98065dabfec69691c868bfc45f5830de8089ae1074b6ff56b7dd8e9029b7e5ab8e500b970cb391b14302315f99ab3bc102fbcc8d911c931c662c2a53c7a7bce275bb76b4096ee6d21acb49b088c7b7e05f70e6ed4cade99d907717b43b958390caec36fdb71fb1a5f374e86d3181ae12d12ff6a279e2047d26803cf7b1684c561ee8ff8250230e5de4171803ec2f03615f231d51f8a005a1487fb51b657a7b7f352adbd86fe56bd9bd02063b2bad542ca2ca3b61b8946abb3012c87cfa11e6df516ae4f29577dfda12068197eafdf0e343738778335ea5491cdcd7fe699a075425c9a35a731d63c2f7d3260ca187e2959223dc1a70f55ce9d02ff56e0410e3bf5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x2}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r1, 0x0, 0x0}, 0x20)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)

1.21733643s ago: executing program 1 (id=3897):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
unshare(0x20000400)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, 0x0, 0x0, 0x4}, 0x20)
ioctl(r0, 0x8b32, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x11, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x0, 0x1f0, 0xb8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x54, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x5, @private1, 0xa7d}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x17, 0x1, 0xf0bd29, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', <r9=>0x0, 0x4, 0x3, 0x1, 0xf91, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x20, 0x10, 0x3, 0x52}})
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000001c0)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, r9}, 0xc)

1.100875476s ago: executing program 2 (id=3898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, 0x0, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket(0x26, 0x5, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10)

1.099331282s ago: executing program 3 (id=3899):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000f00))
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
r2 = socket$packet(0x11, 0xc4b2f1b5bc2834bb, 0x300)
sendmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)="4b2cb123f18ae96dbbbfba01a90147de6ad12cdc013aef", 0x17}, {&(0x7f00000004c0)="a670cf7bd9d6928741456686c11293844a536c35ecd0976680fbb53b14cafcda7b0bc76e67a0c25159bc93b8ed011d24ac6530bf7c7c9e6712569170d319acd417afbe250197744187f40cbffd182afbab955051cced0c25ddc8e0ea67fe51dff2b4c443ee827593e6a26619b33ce67e0a3e1fd82ed03076a5724fe3a93f2b60aebee860d4a8fa63ba88e21e2d29b81f46691f5e70bd9d107f701af31f86450e5e0f758e72aa412b928325c68b76a81207479f7b6eccba5bb64928ac726e87943d5aeae40e0fa367549f5c8a76", 0xcd}, {&(0x7f0000000280)="8aa3aa6dbc607b27f9bd7351bdbfe6160a1c56df8bbc711534355b5d144d00aea731e2d4cea422bb0a54ee9cb55def81c26f90c9432047b8247a397a4a7163a11efd70631f8c4862a44fa15d2b436e8bcd7e20e6aa88821ba3266f59ce97410ca05af08c011784624ee31773722c0ae2c2b894e450671dcb4fb3bedddcca107c68cd786deaa2a0a159774fcc643fab54", 0x90}, {&(0x7f00000005c0)="56a24142e4e0db2d12edbe953a9f08398cb061f7a478bf2c47960f9e808dabbaa22282e3311a6bea19f5f331962a34c07b92614fa1816a7d9464f6a67540028f1fcab6375af3b45e48a9ca2b746285e9870bc72f458f1b24cf3d98edc238df31a37ab5c8dc39f3e5fc1284c8b2960dd3e04b1b54c04afd2f9a463468b58a146841dba731c3c81b1c43c17494996d0a1d16a260b1a09331c4dde001ad", 0x9c}], 0x4, &(0x7f00000006c0)=[{0xb8, 0x10e, 0x400, "931b9a9cfbac932f6be2efa5d91465b17a50029b4bafc24203b34cbc0d48a3602909b20b6c8da75f347bcad2c2769bb6db43adf0cacfa34c4336853f6e01e02debc4e46cbadcc2ba3849a751eeae421698b7ec384852447d29e2e7bffd11dff8c4f5a8635789273aa7c3df961642dde99911456776a12d72b351610b771948b3334be6be6a371fc0eaf588acdbbd32a1c84846e95ac11207a3d7958d2a7aad8ff2520b91"}, {0x110, 0x115, 0xf, "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"}, {0xf8, 0x118, 0x8, "f69c4fbbbbf150e68d84dc35482662b3783a0126d3d5133ccbe7aaa4a4a2bbfadae256dc47d938a2cc826ed40faa31fa0009d8e70079c5c181526a7494b1aec83d8e37d2ac65922cb906f57be577936aa557ef291b60488736e8414b4b9480b09a73a4b878dd32c1cb4e1ac6cfde4966cc260ff7e1bdb1e67585627bcc1a5ceee4af410132188c02ce3e9c23e43d421f8c58fbb9089b740210d771a3d327c39fe67ba7caa45ce15868c8f2eb494a2f20c92d67ed62029df530eb9af6bb53ff0c5daae23f2b8a3fd1c0897e57369de155f16147251f1dacc58b9bb661a32a350598c5fce85a42a3"}, {0xe8, 0x110, 0x3ff, "85338b98f4cccf20fa0b695f109bc28d9590bc4bf739877e4d8b4cca310f3144139b510792c3771eed7ab09d03e1eaee5287df4d2c857f1bf58a630df2199acd4c64f4b5f6d56d4bb71af805f30c07acaf7c8ea3406e1044bd80260409d5156a4cf57f055873b4b013a40c406b7426b20510119521935aff384ca34ce024459f130601b3c1fe093290374e4bf1ee12a51e3f0eda0eaa74d9109a768c35ee5d68f2351627c9ccd5c18eccc7d7d2e071e43fdec193c45699eb26f1e047807cc2b991176916abaa7c01c361cecb3adcffc4276fae31edeef6"}, {0xb0, 0x0, 0x5, "14dfafeb9809d94900b27d3f88d99f09d6b0d6454d8389260139d633efce795ecc4b72ce1ec7d930c5df4bee98bc536fe834491456d1157287d7ae6705c6ef27a25bc718d9744c870b11c25496cc43b98690fcea41ed6de16c5959b0a415bc93bff087015f3772d81511f90405c891552607f5ab7e6d7e188c7dcdd94f4a57bfb0a9fd62e832fbc7f32e30280efba624d1263e466692dd50e9f93a"}, {0x60, 0x1, 0x5, "61083dfea3db079d26c27b21e6ec3fa480446cde423b69484bfbc7f9a69805d05c6015e96ec1483ecac425301458c742e0cfc151a7065f317c29cf9a009f2748c9ac97e436bb7290e1f3217a326e"}, {0x70, 0x6, 0x8000, "ecf7a6e52195a6735071faba475741b65e9c47f73cee6748756ce4f0bf5f15319bc3de4b4b475d5bfbc9d46199d3d549212871a754268690cc1c0e297b0f61e9ba5c4a36e70987bdaf69432aad746371d167cee506ea9afdcbdf42aea3a9872d"}, {0xa0, 0x108, 0x2, "b63cdab87b19332b7cbf4ea4ef8f74b85b6b3d68db5a928e9f4b3c9f1297e62ceaea0ce5544065495922ba79157f7afb591d2cea376c7845d82909fc3d64a9d70aa1a394c8d4652851d3e024328807e8f9b7c190c786daa23579ed9023f93a415c5553a77676343b463e6ca5d26994c65214df2e7226945d20b6947fd5f6b346cba5a3dbd5ab113548dc23abd030"}], 0x5c8}}], 0x1, 0x200480c0)
r3 = socket$inet(0x2, 0x2000000000003, 0x2)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000d00)={{0x0, @broadcast, 0x4e24, 0x4, 'none\x00', 0x22, 0x4, 0x5e}, {@loopback, 0x4e21, 0x10000, 0x0, 0x5, 0x1000}}, 0x44)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r5, 0x0, 0x0, 0x800)
writev(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

1.090743844s ago: executing program 0 (id=3900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x64000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

1.061186977s ago: executing program 4 (id=3901):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0010000305000000000305000000000000000000", @ANYRES32=0x0, @ANYBLOB="20020400061000001c0012800b00010062726964676500000c000280060006000180000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.025248874s ago: executing program 1 (id=3902):
r0 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0}) (rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gretap0\x00', r2, 0x7, 0x10, 0x6, 0x8ea, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x64, 0x0, 0x7, 0x17, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x17, 0x49, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback]}, @ssrr={0x89, 0x23, 0x5d, [@multicast2, @local, @remote, @remote, @empty, @remote, @private=0xa010101, @loopback]}, @end, @noop, @noop, @lsrr={0x83, 0x7, 0xeb, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000240)=0x2f)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800801}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x200, 0x70bd25, 0x2, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x401}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x40) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)
sendto$rose(r5, &(0x7f0000000340)="844421e18c76c64a7ec6cbdb659bc2b816b5d2ea48e20767255b18", 0x1b, 0x0, &(0x7f0000000380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010103, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

1.024514446s ago: executing program 2 (id=3903):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10) (async)
listen(r4, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10) (async)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r6 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async)
recvfrom$unix(r5, 0x0, 0x0, 0x2002, 0x0, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

831.987119ms ago: executing program 0 (id=3904):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38ae0000", @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38ae0000", @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="0200000010000000086afa0000ee0100000080000000000000000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="e49cf947568abed9cb76d477d3445c8836a2b66229123ad53899c443f212d2a37f68aa65b445b613cd6a405ab8d3242ff46e21b7248d5f1c6a27c7219d23445c8d661a8ae76057b4e34dc09d00682f76099f0fac39897223fb091a938048e5a880060f3423a032380b7280a9774d71962e5e34af0ffa2e0ec7824934eae412b7a523f81f2c775a4038c26cbc56f5428f1e3bba", @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0], 0x48)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb0100180000000000000080000000800000000c0000000900000000000012040000000a0000000000001201000000000000000000000d0000000000000000000000030000000003000000020000000b000000100000000000110e04000000020000000400000000000010100000000c0000000000010a0500000010000000020000060400000000000000020000001000000017ffffff0000615f612e306130005f0042f32854d5fa0c72ad6e8967a657df03564b487d1fa11d9299e0a1b4b802d1938cd4cb27c95858aa05c915cfad249520ee56cb0cfa8f768806fd6240163affab"], &(0x7f0000000640)=""/246, 0xa4, 0xf6, 0x1, 0x9, 0x10000}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYRESHEX=0x0], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvmmsg(r12, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) (async)
recvmmsg(r12, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001a80)=@newqdisc={0x158, 0x24, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xa, 0x2}, {0x9, 0xc}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x8, 0xe}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8f, 0xfffc, 0x60, 0x0, 0x4e01e7dc, 0x54c2, 0x1}}, {0x6, 0x2, [0xff97]}}, {{0x1c, 0x1, {0x3, 0x1, 0x6, 0x5, 0x1, 0xfffffffe, 0x8, 0x1c}}, {0x10, 0x2, [0x6, 0x3ff, 0xb72, 0x592, 0x5, 0x400]}}, {{0x1c, 0x1, {0x6, 0x2, 0x4, 0xfffffffc, 0x0, 0x203c, 0x7, 0x2}}, {0x8, 0x2, [0x6745, 0x2]}}, {{0x1c, 0x1, {0x3, 0x4b, 0xfff9, 0x80000001, 0x0, 0x1000, 0x4, 0x6}}, {0x10, 0x2, [0x7, 0x7, 0x7, 0xfe01, 0xfffc, 0xfff7]}}, {{0x1c, 0x1, {0x6, 0x1, 0x2, 0xb, 0x0, 0x9a38, 0xffffffff, 0x5}}, {0xe, 0x2, [0x3d, 0x4, 0x7, 0x1, 0xfffd]}}, {{0x1c, 0x1, {0x4, 0x4, 0xcfe1, 0xeba, 0x2, 0x1, 0x401, 0x2}}, {0x8, 0x2, [0xfffe, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x6d, 0x2}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}, 0x1, 0x0, 0x0, 0x404c144}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r5}, 0xc)
socket$rds(0x15, 0x5, 0x0) (async)
r14 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r14, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

825.895787ms ago: executing program 3 (id=3905):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x48}}, 0xc001)

759.727371ms ago: executing program 2 (id=3906):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
close(0x3)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040), 0x0, 0x0, 0xfffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2)
sendmsg$FOU_CMD_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000804)
socket(0x2a, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

680.08488ms ago: executing program 0 (id=3907):
clock_gettime(0xfffffffb, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054)

679.570113ms ago: executing program 3 (id=3908):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r1}, 0x10)
r2 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) (async)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x9, 0x61, 0x10, 0xbf}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0xc4, &(0x7f00000000c0)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)

677.464398ms ago: executing program 1 (id=3909):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r2=>0x0})
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
bind$pptp(r3, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x44}}, 0x0)

666.842159ms ago: executing program 4 (id=3910):
syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0xf, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @timestamp_addr={0x44, 0x24, 0xf, 0x1, 0x5, [{@multicast1, 0x1}, {@private=0xa010101, 0x6}, {@broadcast, 0x1ff}, {@multicast2}]}]}}}}}}}, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0)
recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90)

497.3037ms ago: executing program 2 (id=3911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x4a, 0x7, 0x1, 0x0, "e518659f2ddf8441dedb80aadefa55cbef402c58e9640f071b6e70d8dc8ede77e99e5548df4be72cf980c4aeb4f8a4d0fa797014ba49725e0aedf0750c280ab79d871e2e1849"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x178}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

416.317461ms ago: executing program 1 (id=3912):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "17f78a4231c724fb", "91f4de83e53c642c05b4749fd769714a", "e2dfe93c", "9ba50c63d5d9556c"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x3c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000200000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

415.247568ms ago: executing program 4 (id=3913):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r2=>0xffffffffffffffff})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)=0x4, 0x4)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)={0x48, r1, 0x79964d8cba2f455d, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x48}, 0x1, 0x0, 0x0, 0x24050045}, 0x20000010)

409.182431ms ago: executing program 0 (id=3914):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x40}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

310.532302ms ago: executing program 1 (id=3915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2a, 0x25dfdbfe, {0x80, 0x20, 0x20, 0xb3, 0x0, 0x4, 0xc8, 0xa, 0x1700}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010014}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom$l2tp(r4, &(0x7f0000000280)=""/4096, 0x1000, 0x40000000, 0x0, 0x0)
r5 = accept$inet(r4, &(0x7f0000001280)={0x2, 0x0, @dev}, &(0x7f00000012c0)=0x10)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000001300))
r6 = socket(0xd, 0x1, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001340)={'sit0\x00', r2, 0x10, 0x51, 0xffffff7f, 0x0, {{0x8, 0x4, 0x0, 0x9, 0x20, 0x66, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @loopback, {[@generic={0x94, 0xb, "05f3b1d891629e0f3e"}]}}}}})
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000013c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @default, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001440)={<r9=>0x0, 0x8000000000000001, 0x1, [0x4, 0x66c, 0x4, 0x200, 0x7], [0x76a4, 0xe, 0x9, 0x5, 0xaaa0, 0x6, 0x79, 0xc, 0x9, 0x5, 0x4, 0x29d38fb5, 0x0, 0x600000000000000, 0x5fa, 0x3ff, 0x8, 0x3, 0x8, 0x8000000000000001, 0x4, 0x5, 0x4, 0x8, 0x8, 0x3ff, 0x483f, 0xf, 0x9, 0x0, 0xfffffffffffffffc, 0x2, 0x3, 0xc0, 0x1, 0x1, 0x400, 0x9, 0x5, 0x1, 0x5, 0xbc1, 0x3, 0x1, 0x609, 0x7fffffff, 0x253, 0x40, 0xe, 0x8, 0x1, 0x8, 0x8000, 0xfffffffffffffffb, 0x10, 0xfffffffffffffff8, 0xff, 0x1000, 0x80000001, 0xd, 0x200, 0xffffffffffffffff, 0x7bd9, 0x13e, 0xfff, 0xc59bc92000000000, 0x0, 0x2, 0xd, 0x4, 0xfffffffffffffffc, 0x1, 0x4, 0x9, 0x6, 0x8000000000000001, 0x5, 0x8, 0x9, 0xedb7, 0x7f, 0x9, 0xff, 0x400, 0x3, 0x2858, 0x8, 0x5, 0x400, 0x100000001, 0x2, 0x10001, 0xf04a, 0x8000000000000001, 0x6, 0x7, 0xd3b800000000, 0xae, 0x3, 0x9, 0x4, 0xa0, 0x9, 0xc, 0x9, 0x89, 0x3, 0x6, 0x2, 0x8000000000000001, 0x9, 0x0, 0x7, 0x0, 0x2, 0x1, 0x4, 0x0, 0xb9, 0x2, 0x4]})
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001880)={r9, "e3fa98b8e121b4ed070981577b188c69"})
sendmsg$nl_route(r7, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x54, 0x4, 0x0, 0x0, 0xde93fd5139c28a11, 0x15}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x480d0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000002980)={0x20000000})
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
r10 = accept4$inet(r6, &(0x7f0000002ac0)={0x2, 0x0, @loopback}, &(0x7f0000002b00)=0x10, 0x800)
r11 = accept4$alg(r6, 0x0, 0x0, 0x800)
r12 = accept4$tipc(r6, &(0x7f0000002b40), &(0x7f0000002b80)=0x10, 0x80000)
ppoll(&(0x7f0000002bc0)=[{r10, 0x402}, {r4, 0x6024}, {r11, 0x8000}, {r4, 0x4}, {r8, 0x8040}, {r12, 0x3042}, {r8, 0x110}, {}, {r4, 0x124}, {r8, 0xe0}], 0xa, &(0x7f0000002c40), &(0x7f0000002c80), 0x8)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r13, 0x111, 0x3, 0x0, 0x4)
r14 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r11, &(0x7f0000002cc0)={0x20000001})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002d80)=<r15=>0x0)
sendto(r7, &(0x7f0000002d00)="c9f50e6d4d1ff01cc228bd429fb7e64df83a5423562b143379ce9a310faa12661f5d521ecc60d70601f687cdb50e271111861a46c56113ca61b59e1efee30e4f7fbdf1ff49121a2264df822428ffd3f82f4c5cf68b1e598618233ea8cd9e64789c81ea2d6cc9e3bc226c0f7d46", 0x6d, 0x2, &(0x7f0000002dc0)=@nfc={0x27, r15}, 0x80)

263.92192ms ago: executing program 2 (id=3916):
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa00000000000086dd6002000000280600fe8000000000000000050000000000bbfe8000000000000000000000000000aa00004e22ce9ec4e543a750c1ee6bf74e7ac7c8a61a4d5638238ee504276f1d96f1908f73acc67c03e05d53813f0b5a9ef368b186cdfa28a28bdcda3cdb296939d7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002000090780000011304e2cd220cce2781a9dfe9bc8597d9000000"], 0x0)

156.325813ms ago: executing program 0 (id=3917):
r0 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r3)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xa00}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000300a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

0s ago: executing program 2 (id=3918):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket(0xa, 0x5, 0x0) (async, rerun: 64)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) (async, rerun: 64)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x2000000}], 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="ac", 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) (async, rerun: 32)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x2000007e26], 0x1, 0x0, 0x0, [{}]}, 0x88) (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) (async)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) (async, rerun: 32)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000300)={0x10000000}) (async, rerun: 32)
epoll_pwait(r4, &(0x7f0000000280)=[{}, {}], 0x2, 0x7, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

+0x7c/0x90
[  303.975180][T15248]  do_syscall_64+0xec/0xf80
[  303.975203][T15248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.975224][T15248]  ? trace_irq_disable+0x37/0x100
[  303.975254][T15248]  ? clear_bhb_loop+0x60/0xb0
[  303.975280][T15248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.975301][T15248] RIP: 0033:0x7f193cb8f749
[  303.975321][T15248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.975339][T15248] RSP: 002b:00007f193da63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  303.975363][T15248] RAX: ffffffffffffffda RBX: 00007f193cde5fa0 RCX: 00007f193cb8f749
[  303.975380][T15248] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  303.975394][T15248] RBP: 00007f193da63090 R08: 0000000000000000 R09: 0000000000000000
[  303.975408][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.975421][T15248] R13: 00007f193cde6038 R14: 00007f193cde5fa0 R15: 00007ffd1b53a6d8
[  303.975458][T15248]  </TASK>
[  303.975853][ T3458] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  304.234691][T15229] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.258616][T15229] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.327693][T15229] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.342736][T15229] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.446782][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'.
[  304.497650][ T3551] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  304.506521][ T3551] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.539012][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2732'.
[  304.544362][T15273] netlink: 'syz.3.2733': attribute type 1 has an invalid length.
[  304.568205][ T1165] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  304.577796][ T1165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.636115][ T1165] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  304.657309][T15282] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  304.677480][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.737521][T15272] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  304.809762][ T1307] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  304.820449][ T1307] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.987436][T15297] ip6t_srh: unknown srh invflags 4000
[  305.087485][T15304] FAULT_INJECTION: forcing a failure.
[  305.087485][T15304] name failslab, interval 1, probability 0, space 0, times 0
[  305.134833][T15304] CPU: 0 UID: 0 PID: 15304 Comm: syz.1.2741 Not tainted syzkaller #0 PREEMPT(full) 
[  305.134865][T15304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.134879][T15304] Call Trace:
[  305.134888][T15304]  <TASK>
[  305.134897][T15304]  dump_stack_lvl+0xe8/0x150
[  305.134931][T15304]  should_fail_ex+0x414/0x560
[  305.134971][T15304]  should_failslab+0xa8/0x100
[  305.135001][T15304]  __kmalloc_noprof+0xdf/0x800
[  305.135021][T15304]  ? rcu_is_watching+0x15/0xb0
[  305.135047][T15304]  ? security_sk_alloc+0x52/0x390
[  305.135086][T15304]  security_sk_alloc+0x52/0x390
[  305.135122][T15304]  sk_prot_alloc+0x101/0x220
[  305.135146][T15304]  ? sk_alloc+0x27/0x390
[  305.135172][T15304]  sk_alloc+0x3a/0x390
[  305.135200][T15304]  bpf_prog_test_run_skb+0x3f4/0x1d50
[  305.135236][T15304]  ? __fget_files+0x2a/0x420
[  305.135267][T15304]  ? __fget_files+0x2a/0x420
[  305.135293][T15304]  ? __fget_files+0x3a0/0x420
[  305.135319][T15304]  ? __fget_files+0x2a/0x420
[  305.135352][T15304]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  305.135380][T15304]  bpf_prog_test_run+0x2c7/0x340
[  305.135417][T15304]  __sys_bpf+0x562/0x860
[  305.135448][T15304]  ? __pfx___sys_bpf+0x10/0x10
[  305.135497][T15304]  ? ksys_write+0x22a/0x250
[  305.135521][T15304]  ? __pfx_ksys_write+0x10/0x10
[  305.135551][T15304]  __x64_sys_bpf+0x7c/0x90
[  305.135588][T15304]  do_syscall_64+0xec/0xf80
[  305.135611][T15304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.135631][T15304]  ? trace_irq_disable+0x37/0x100
[  305.135660][T15304]  ? clear_bhb_loop+0x60/0xb0
[  305.135687][T15304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.135708][T15304] RIP: 0033:0x7f668b58f749
[  305.135727][T15304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.135745][T15304] RSP: 002b:00007f668c449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  305.135770][T15304] RAX: ffffffffffffffda RBX: 00007f668b7e5fa0 RCX: 00007f668b58f749
[  305.135786][T15304] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  305.135801][T15304] RBP: 00007f668c449090 R08: 0000000000000000 R09: 0000000000000000
[  305.135814][T15304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.135828][T15304] R13: 00007f668b7e6038 R14: 00007f668b7e5fa0 R15: 00007ffd70fdc668
[  305.135870][T15304]  </TASK>
[  305.785752][T15334] sctp: [Deprecated]: syz.2.2749 (pid 15334) Use of struct sctp_assoc_value in delayed_ack socket option.
[  305.785752][T15334] Use struct sctp_sack_info instead
[  305.933060][T15343] netlink: 'syz.3.2751': attribute type 23 has an invalid length.
[  306.014685][T15343] tipc: Enabled bearer <ib:caif0>, priority 13
[  306.605495][T15391] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2766'.
[  306.705111][T15394] FAULT_INJECTION: forcing a failure.
[  306.705111][T15394] name failslab, interval 1, probability 0, space 0, times 0
[  306.718111][T15394] CPU: 0 UID: 0 PID: 15394 Comm: syz.0.2768 Not tainted syzkaller #0 PREEMPT(full) 
[  306.718140][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.718153][T15394] Call Trace:
[  306.718162][T15394]  <TASK>
[  306.718171][T15394]  dump_stack_lvl+0xe8/0x150
[  306.718206][T15394]  should_fail_ex+0x414/0x560
[  306.718245][T15394]  should_failslab+0xa8/0x100
[  306.718275][T15394]  kmem_cache_alloc_noprof+0x88/0x710
[  306.718309][T15394]  ? is_bpf_text_address+0x26/0x2b0
[  306.718343][T15394]  ? skb_clone+0x212/0x3a0
[  306.718376][T15394]  skb_clone+0x212/0x3a0
[  306.718408][T15394]  bpf_clone_redirect+0x16a/0x4b0
[  306.718433][T15394]  ? __lock_acquire+0x6b6/0x2cf0
[  306.718461][T15394]  ? bpf_test_run+0x192/0x7d0
[  306.718488][T15394]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  306.718513][T15394]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  306.718547][T15394]  ? arch_stack_walk+0xfc/0x150
[  306.718583][T15394]  ? ktime_get+0x45/0x200
[  306.718630][T15394]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  306.718664][T15394]  ? lockdep_hardirqs_on+0x7b/0x110
[  306.718694][T15394]  ? ktime_get+0x45/0x200
[  306.718723][T15394]  ? seqcount_lockdep_reader_access+0xea/0x100
[  306.718757][T15394]  ? read_tsc+0x9/0x20
[  306.718785][T15394]  ? ktime_get+0x1d2/0x200
[  306.718826][T15394]  bpf_test_run+0x313/0x7d0
[  306.718878][T15394]  ? __pfx_bpf_test_run+0x10/0x10
[  306.718923][T15394]  ? __kasan_krealloc+0xeb/0x110
[  306.718948][T15394]  ? eth_type_trans+0x35e/0x6d0
[  306.718987][T15394]  ? convert___skb_to_skb+0x3d/0x5b0
[  306.719017][T15394]  bpf_prog_test_run_skb+0xd67/0x1d50
[  306.719059][T15394]  ? __fget_files+0x2a/0x420
[  306.719086][T15394]  ? __fget_files+0x3a0/0x420
[  306.719112][T15394]  ? __fget_files+0x2a/0x420
[  306.719146][T15394]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  306.719175][T15394]  bpf_prog_test_run+0x2c7/0x340
[  306.719212][T15394]  __sys_bpf+0x562/0x860
[  306.719245][T15394]  ? __pfx___sys_bpf+0x10/0x10
[  306.719294][T15394]  ? ksys_write+0x22a/0x250
[  306.719319][T15394]  ? __pfx_ksys_write+0x10/0x10
[  306.719350][T15394]  __x64_sys_bpf+0x7c/0x90
[  306.719379][T15394]  do_syscall_64+0xec/0xf80
[  306.719401][T15394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.719422][T15394]  ? trace_irq_disable+0x37/0x100
[  306.719452][T15394]  ? clear_bhb_loop+0x60/0xb0
[  306.719479][T15394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.719500][T15394] RIP: 0033:0x7f73dbf8f749
[  306.719520][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.719540][T15394] RSP: 002b:00007f73da1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  306.719563][T15394] RAX: ffffffffffffffda RBX: 00007f73dc1e5fa0 RCX: 00007f73dbf8f749
[  306.719580][T15394] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  306.719594][T15394] RBP: 00007f73da1f6090 R08: 0000000000000000 R09: 0000000000000000
[  306.719608][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.719621][T15394] R13: 00007f73dc1e6038 R14: 00007f73dc1e5fa0 R15: 00007ffd1e269028
[  306.719658][T15394]  </TASK>
[  307.265528][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2774'.
[  307.756984][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2780'.
[  308.068798][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'.
[  308.079219][T15442] openvswitch: netlink: Key type 31 is not supported
[  308.097777][T15447] syzkaller0: entered promiscuous mode
[  308.103537][T15447] syzkaller0: entered allmulticast mode
[  308.593433][T15460] netlink: 'syz.3.2790': attribute type 2 has an invalid length.
[  308.721390][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'.
[  308.738967][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'.
[  308.761209][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'.
[  308.788450][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'.
[  308.944918][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.955257][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.964597][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.972962][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.001878][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.038979][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.046545][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.054251][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.069275][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.086072][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.325443][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'.
[  309.348924][T15488] bridge_slave_1: left allmulticast mode
[  309.354671][T15488] bridge_slave_1: left promiscuous mode
[  309.378334][T15488] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.394769][T15488] bridge_slave_0: left allmulticast mode
[  309.400849][T15488] bridge_slave_0: left promiscuous mode
[  309.413635][T15488] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.457671][T15491] FAULT_INJECTION: forcing a failure.
[  309.457671][T15491] name failslab, interval 1, probability 0, space 0, times 0
[  309.470433][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.0.2799 Not tainted syzkaller #0 PREEMPT(full) 
[  309.470462][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  309.470476][T15491] Call Trace:
[  309.470484][T15491]  <TASK>
[  309.470493][T15491]  dump_stack_lvl+0xe8/0x150
[  309.470526][T15491]  should_fail_ex+0x414/0x560
[  309.470584][T15491]  should_failslab+0xa8/0x100
[  309.470614][T15491]  kmem_cache_alloc_noprof+0x88/0x710
[  309.470648][T15491]  ? is_bpf_text_address+0x26/0x2b0
[  309.470682][T15491]  ? skb_clone+0x212/0x3a0
[  309.470715][T15491]  skb_clone+0x212/0x3a0
[  309.470747][T15491]  bpf_clone_redirect+0x16a/0x4b0
[  309.470772][T15491]  ? __lock_acquire+0x6b6/0x2cf0
[  309.470800][T15491]  ? bpf_test_run+0x192/0x7d0
[  309.470827][T15491]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  309.470853][T15491]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  309.470887][T15491]  ? arch_stack_walk+0xfc/0x150
[  309.470923][T15491]  ? ktime_get+0x45/0x200
[  309.470969][T15491]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  309.471003][T15491]  ? lockdep_hardirqs_on+0x7b/0x110
[  309.471025][T15491]  ? ktime_get+0x45/0x200
[  309.471054][T15491]  ? seqcount_lockdep_reader_access+0xea/0x100
[  309.471087][T15491]  ? read_tsc+0x9/0x20
[  309.471115][T15491]  ? ktime_get+0x1d2/0x200
[  309.471156][T15491]  bpf_test_run+0x313/0x7d0
[  309.471207][T15491]  ? __pfx_bpf_test_run+0x10/0x10
[  309.471252][T15491]  ? __kasan_krealloc+0xeb/0x110
[  309.471278][T15491]  ? eth_type_trans+0x35e/0x6d0
[  309.471316][T15491]  ? convert___skb_to_skb+0x3d/0x5b0
[  309.471345][T15491]  bpf_prog_test_run_skb+0xd67/0x1d50
[  309.471387][T15491]  ? __fget_files+0x2a/0x420
[  309.471421][T15491]  ? __fget_files+0x3a0/0x420
[  309.471448][T15491]  ? __fget_files+0x2a/0x420
[  309.471481][T15491]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  309.471509][T15491]  bpf_prog_test_run+0x2c7/0x340
[  309.471547][T15491]  __sys_bpf+0x562/0x860
[  309.471580][T15491]  ? __pfx___sys_bpf+0x10/0x10
[  309.471628][T15491]  ? ksys_write+0x22a/0x250
[  309.471653][T15491]  ? __pfx_ksys_write+0x10/0x10
[  309.471683][T15491]  __x64_sys_bpf+0x7c/0x90
[  309.471712][T15491]  do_syscall_64+0xec/0xf80
[  309.471734][T15491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.471755][T15491]  ? trace_irq_disable+0x37/0x100
[  309.471783][T15491]  ? clear_bhb_loop+0x60/0xb0
[  309.471810][T15491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.471831][T15491] RIP: 0033:0x7f73dbf8f749
[  309.471850][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.471870][T15491] RSP: 002b:00007f73da1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  309.471893][T15491] RAX: ffffffffffffffda RBX: 00007f73dc1e5fa0 RCX: 00007f73dbf8f749
[  309.471909][T15491] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  309.471923][T15491] RBP: 00007f73da1f6090 R08: 0000000000000000 R09: 0000000000000000
[  309.471937][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.471950][T15491] R13: 00007f73dc1e6038 R14: 00007f73dc1e5fa0 R15: 00007ffd1e269028
[  309.471986][T15491]  </TASK>
[  309.981848][T15475] wg1 speed is unknown, defaulting to 1000
[  310.040313][T15494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2800'.
[  310.121052][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'.
[  310.132271][T15499] ieee802154 phy0 wpan0: encryption failed: -22
[  310.256643][T15504] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2803'.
[  310.347524][ T1307] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  310.364379][ T1307] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  310.378867][T15506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.388935][T15505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.398718][T15515] netlink: 'syz.0.2804': attribute type 3 has an invalid length.
[  310.849881][T15536] nbd: must specify a device to reconfigure
[  311.047436][T15545] netlink: 'syz.0.2813': attribute type 9 has an invalid length.
[  311.057913][T15545] netlink: 'syz.0.2813': attribute type 11 has an invalid length.
[  311.068898][T15545] netlink: 'syz.0.2813': attribute type 12 has an invalid length.
[  311.072025][T15475] chnl_net:caif_netlink_parms(): no params data found
[  311.178681][ T5151] Bluetooth: hci5: command tx timeout
[  311.348937][T15475] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.361934][T15475] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.369754][T15475] bridge_slave_0: entered allmulticast mode
[  311.377429][T15475] bridge_slave_0: entered promiscuous mode
[  311.404958][T15475] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.412584][T15475] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.427423][T15475] bridge_slave_1: entered allmulticast mode
[  311.468597][T15475] bridge_slave_1: entered promiscuous mode
[  311.643766][T15575] netlink: 'syz.4.2821': attribute type 11 has an invalid length.
[  311.722651][T15554] wg1 speed is unknown, defaulting to 1000
[  311.737749][T15475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.772525][T15475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.925670][T15585] xt_HMARK: spi-set and port-set can't be combined
[  311.990422][T15475] team0: Port device team_slave_0 added
[  312.008619][T15475] team0: Port device team_slave_1 added
[  312.427873][T15475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.446136][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.497793][T15475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.584965][T15475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.608044][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.641352][T15475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.899009][T15475] hsr_slave_0: entered promiscuous mode
[  312.917681][T15475] hsr_slave_1: entered promiscuous mode
[  312.947028][T15475] debugfs: 'hsr0' already exists in 'hsr'
[  312.957418][T15475] Cannot create hsr debugfs directory
[  313.073987][T15630] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  313.266382][ T5151] Bluetooth: hci5: command tx timeout
[  313.343787][T15635] __nla_validate_parse: 5 callbacks suppressed
[  313.343814][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2835'.
[  313.420989][T15637] 8021q: adding VLAN 0 to HW filter on device bond5
[  313.433228][T15637] bond4: (slave bond5): Enslaving as an active interface with an up link
[  313.530926][T15635] 8021q: adding VLAN 0 to HW filter on device bond6
[  313.542469][T15635] bond4: (slave bond6): Enslaving as an active interface with an up link
[  313.644064][T15475] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.760558][T15475] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.836503][T15651] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0
[  313.854263][T15650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.882591][T15475] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.976765][T15475] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.233270][T15666] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  314.264806][T15475] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  314.332416][T15475] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  314.350252][T15475] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  314.357157][T15644] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  314.365627][T15675] netlink: 'syz.0.2849': attribute type 1 has an invalid length.
[  314.385691][T15475] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  314.504998][T15689] x_tables: unsorted underflow at hook 2
[  314.585152][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'.
[  314.591348][T15684] bond10 (unregistering): Released all slaves
[  314.624509][T15694] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  314.883028][T15475] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.933891][T15475] 8021q: adding VLAN 0 to HW filter on device team0
[  314.966198][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.973498][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.064720][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.072010][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.083000][T15718] netlink: 'syz.3.2860': attribute type 2 has an invalid length.
[  315.202392][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2857'.
[  315.337564][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'.
[  315.358168][ T5151] Bluetooth: hci5: command tx timeout
[  315.368219][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'.
[  315.675716][T15475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.792680][T15752] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2869'.
[  315.859518][T15752] bond10 (unregistering): Released all slaves
[  315.979574][T15762] netlink: 'syz.4.2872': attribute type 3 has an invalid length.
[  316.018267][T15475] veth0_vlan: entered promiscuous mode
[  316.059779][T15475] veth1_vlan: entered promiscuous mode
[  316.147755][T15475] veth0_macvtap: entered promiscuous mode
[  316.192182][T15475] veth1_macvtap: entered promiscuous mode
[  316.229707][T15475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.250339][T15475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.270766][ T3596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.313320][ T3596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.351072][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'.
[  316.352531][ T3596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.391102][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'.
[  316.407057][T15783] xt_hashlimit: size too large, truncated to 1048576
[  316.421353][ T3596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.671307][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.691298][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.990053][T11268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.999760][T11268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.171729][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'.
[  317.211663][T15811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.301017][T15815] ip6gre3: entered allmulticast mode
[  317.419536][ T5151] Bluetooth: hci5: command tx timeout
[  317.610031][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  317.619602][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  317.629752][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  317.640931][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  317.649035][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  317.970194][T15834] netlink: 'syz.4.2894': attribute type 21 has an invalid length.
[  317.994081][T15834] netlink: 'syz.4.2894': attribute type 6 has an invalid length.
[  318.038942][T15834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2894'.
[  318.090717][T15822] wg1 speed is unknown, defaulting to 1000
[  318.445079][T15848] bond1: entered allmulticast mode
[  318.451226][T15848] 8021q: adding VLAN 0 to HW filter on device bond1
[  318.760779][T15861] !
: renamed from dummy0
[  318.761229][T15860] Bluetooth: MGMT ver 1.23
[  318.947585][T15822] chnl_net:caif_netlink_parms(): no params data found
[  319.280310][T15904] veth0_to_bond: entered allmulticast mode
[  319.381100][T15822] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.418744][T15822] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.426116][T15822] bridge_slave_0: entered allmulticast mode
[  319.455327][T15822] bridge_slave_0: entered promiscuous mode
[  319.476456][T15822] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.496178][T15822] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.514849][T15822] bridge_slave_1: entered allmulticast mode
[  319.530223][T15822] bridge_slave_1: entered promiscuous mode
[  319.711229][T15822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.741704][ T5151] Bluetooth: hci3: command tx timeout
[  319.768451][T15822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.867647][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'.
[  319.935723][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2922'.
[  319.957565][T15822] team0: Port device team_slave_0 added
[  319.981869][T15948] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  319.997146][T15822] team0: Port device team_slave_1 added
[  320.042619][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  320.088664][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  320.144744][T15822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.153072][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.210827][T15822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.275400][T15822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.286127][T15822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.314621][T15822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.327328][T15961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2929'.
[  320.418808][T15970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2931'.
[  320.650267][T15822] hsr_slave_0: entered promiscuous mode
[  320.657179][T15822] hsr_slave_1: entered promiscuous mode
[  320.664998][T15822] debugfs: 'hsr0' already exists in 'hsr'
[  320.672473][T15822] Cannot create hsr debugfs directory
[  320.679205][T15972] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[  320.930245][T15822] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.942128][T15822] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.024154][T15822] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.048868][T15822] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.142185][T15822] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.157926][T15822] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.251654][T15822] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.290508][T15822] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.603549][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'.
[  321.713769][T15822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  321.751418][T15822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  321.759094][T16008] netlink: 'syz.2.2944': attribute type 24 has an invalid length.
[  321.783993][T15822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  321.812263][T15822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  321.819464][ T5151] Bluetooth: hci3: command tx timeout
[  322.165589][T15822] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.182778][T16039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.223157][T16040] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2950'.
[  322.266014][T15822] 8021q: adding VLAN 0 to HW filter on device team0
[  322.275624][T16041] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2950'.
[  322.305170][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.312441][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.353396][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.360674][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.542715][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  322.571158][T16053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2954'.
[  322.736184][T16056] bond11 (unregistering): Released all slaves
[  322.809688][T16062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.962107][T16075] netlink: 'syz.2.2961': attribute type 3 has an invalid length.
[  323.061334][T15822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.183535][T15822] veth0_vlan: entered promiscuous mode
[  323.223245][T15822] veth1_vlan: entered promiscuous mode
[  323.305579][T15822] veth0_macvtap: entered promiscuous mode
[  323.343486][T15822] veth1_macvtap: entered promiscuous mode
[  323.491029][T16101] netlink: 'syz.0.2970': attribute type 21 has an invalid length.
[  323.495199][T15822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.545382][T15822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.637431][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.673332][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.698719][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.717174][ T3596] nci: nci_rsp_packet: unknown rsp opcode 0x504
[  323.732506][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.831799][T16119] bond0: (slave macvlan2): Opening slave failed
[  323.875253][T16105] sctp: [Deprecated]: syz.2.2973 (pid 16105) Use of int in maxseg socket option.
[  323.875253][T16105] Use struct sctp_assoc_value instead
[  323.899397][ T5151] Bluetooth: hci3: command tx timeout
[  323.910056][T16122] FAULT_INJECTION: forcing a failure.
[  323.910056][T16122] name failslab, interval 1, probability 0, space 0, times 0
[  323.922890][T16122] CPU: 0 UID: 0 PID: 16122 Comm: syz.4.2976 Not tainted syzkaller #0 PREEMPT(full) 
[  323.922911][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  323.922921][T16122] Call Trace:
[  323.922929][T16122]  <TASK>
[  323.922936][T16122]  dump_stack_lvl+0xe8/0x150
[  323.922961][T16122]  should_fail_ex+0x414/0x560
[  323.922991][T16122]  should_failslab+0xa8/0x100
[  323.923012][T16122]  kmem_cache_alloc_noprof+0x88/0x710
[  323.923037][T16122]  ? skb_clone+0x212/0x3a0
[  323.923061][T16122]  skb_clone+0x212/0x3a0
[  323.923084][T16122]  bpf_clone_redirect+0x16a/0x4b0
[  323.923107][T16122]  ? bpf_test_run+0x192/0x7d0
[  323.923129][T16122]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  323.923156][T16122]  ? __pfx___schedule+0x10/0x10
[  323.923179][T16122]  ? ktime_get+0x45/0x200
[  323.923211][T16122]  ? preempt_schedule_thunk+0x16/0x30
[  323.923227][T16122]  ? preempt_schedule_common+0x83/0xd0
[  323.923241][T16122]  ? bpf_test_run+0x192/0x7d0
[  323.923262][T16122]  ? bpf_test_timer_continue+0x10d/0x320
[  323.923285][T16122]  bpf_test_run+0x313/0x7d0
[  323.923321][T16122]  ? __pfx_bpf_test_run+0x10/0x10
[  323.923351][T16122]  ? __kasan_krealloc+0xeb/0x110
[  323.923369][T16122]  ? eth_type_trans+0x35e/0x6d0
[  323.923395][T16122]  ? convert___skb_to_skb+0x3d/0x5b0
[  323.923417][T16122]  bpf_prog_test_run_skb+0xd67/0x1d50
[  323.923445][T16122]  ? __fget_files+0x2a/0x420
[  323.923465][T16122]  ? __fget_files+0x3a0/0x420
[  323.923483][T16122]  ? __fget_files+0x2a/0x420
[  323.923511][T16122]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  323.923531][T16122]  bpf_prog_test_run+0x2c7/0x340
[  323.923558][T16122]  __sys_bpf+0x562/0x860
[  323.923581][T16122]  ? __pfx___sys_bpf+0x10/0x10
[  323.923615][T16122]  ? ksys_write+0x22a/0x250
[  323.923632][T16122]  ? __pfx_ksys_write+0x10/0x10
[  323.923653][T16122]  __x64_sys_bpf+0x7c/0x90
[  323.923674][T16122]  do_syscall_64+0xec/0xf80
[  323.923690][T16122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.923705][T16122]  ? trace_irq_disable+0x37/0x100
[  323.923725][T16122]  ? clear_bhb_loop+0x60/0xb0
[  323.923744][T16122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.923759][T16122] RIP: 0033:0x7f193cb8f749
[  323.923773][T16122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.923786][T16122] RSP: 002b:00007f193da63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  323.923803][T16122] RAX: ffffffffffffffda RBX: 00007f193cde5fa0 RCX: 00007f193cb8f749
[  323.923816][T16122] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  323.923826][T16122] RBP: 00007f193da63090 R08: 0000000000000000 R09: 0000000000000000
[  323.923836][T16122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  323.923845][T16122] R13: 00007f193cde6038 R14: 00007f193cde5fa0 R15: 00007ffd1b53a6d8
[  323.923915][T16122]  </TASK>
[  324.409302][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.479700][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.595209][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.605528][T16128] netlink: 'syz.4.2978': attribute type 7 has an invalid length.
[  324.641967][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.479727][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  325.491043][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  325.506029][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  325.514256][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  325.528710][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  325.788913][T16183] x_tables: duplicate underflow at hook 1
[  325.959432][T16191] __nla_validate_parse: 4 callbacks suppressed
[  325.959453][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3000'.
[  325.978219][ T5151] Bluetooth: hci3: command tx timeout
[  326.028966][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2999'.
[  326.147004][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'.
[  326.156491][T16198] 8021q: VLANs not supported on ipvlan1
[  326.224058][T16195] macvlan0: entered promiscuous mode
[  326.267164][T16204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3003'.
[  326.309943][  T146] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.328839][  T146] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  326.349681][  T146] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  326.410833][T16172] wg1 speed is unknown, defaulting to 1000
[  326.520649][  T146] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.550695][T16215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3006'.
[  326.560791][  T146] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  326.592135][  T146] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  326.722111][  T146] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.750296][  T146] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  326.774064][  T146] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  326.919345][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'.
[  326.936366][T16226] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3010'.
[  326.955009][  T146] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.975542][  T146] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  326.999172][  T146] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  327.549177][T16260] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3022'.
[  327.579212][ T5151] Bluetooth: hci2: command tx timeout
[  327.861163][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3023'.
[  328.222985][  T146] bond3 (unregistering): (slave gretap1): Releasing active interface
[  328.698820][  T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.710114][  T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.723329][  T146] bond0 (unregistering): Released all slaves
[  328.834096][  T146] bond1 (unregistering): Released all slaves
[  328.849449][  T146] bond2 (unregistering): Released all slaves
[  328.977774][  T146] bond3 (unregistering): Released all slaves
[  329.086081][  T146] bond4 (unregistering): Released all slaves
[  329.101407][  T146] bond5 (unregistering): Released all slaves
[  329.205380][  T146] bond6 (unregistering): Released all slaves
[  329.223084][  T146] bond7 (unregistering): Released all slaves
[  329.320782][  T146] bond8 (unregistering): Released all slaves
[  329.420259][  T146] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface
[  329.432542][  T146] bond9 (unregistering): Released all slaves
[  329.448553][  T146] bond10 (unregistering): Released all slaves
[  329.481800][T16268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3021'.
[  329.524218][T16256] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.559757][T16256] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.577783][T16256] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  329.658782][ T5151] Bluetooth: hci2: command tx timeout
[  329.699401][  T146] tipc: Left network mode
[  329.749280][T16256] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.783559][T16256] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.815267][T16256] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  329.996985][T16293] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  330.029238][T16256] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.039989][T16256] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.052985][T16256] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  330.132215][T16256] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.158684][T16256] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.177884][T16256] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  330.208311][T16172] chnl_net:caif_netlink_parms(): no params data found
[  330.674987][   T73] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.720352][   T73] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  330.768391][   T73] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  331.092119][T16325] team0: Device ipvlan2 failed to register rx_handler
[  331.125121][T16172] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.148349][T16172] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.155686][T16172] bridge_slave_0: entered allmulticast mode
[  331.195861][T16172] bridge_slave_0: entered promiscuous mode
[  331.204667][   T73] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.213818][   T73] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  331.228027][   T73] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  331.253130][T16327] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.266788][T16172] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.279075][T16172] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.286696][T16172] bridge_slave_1: entered allmulticast mode
[  331.296365][T16172] bridge_slave_1: entered promiscuous mode
[  331.349525][ T1165] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.358765][ T1165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  331.368418][ T1165] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  331.586630][T16172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.611570][   T73] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.625996][   T73] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  331.655506][   T73] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  331.691051][T16172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.738312][ T5151] Bluetooth: hci2: command tx timeout
[  331.871101][T16172] team0: Port device team_slave_0 added
[  331.902338][  T146] hsr_slave_0: left promiscuous mode
[  331.916176][  T146] hsr_slave_1: left promiscuous mode
[  331.964805][  T146] vlan0: left allmulticast mode
[  331.980742][  T146] veth0_vlan: left allmulticast mode
[  331.996730][  T146] vlan0: left promiscuous mode
[  332.012390][  T146] veth1_macvtap: left promiscuous mode
[  332.031200][  T146] veth0_macvtap: left promiscuous mode
[  332.061297][  T146] veth1_vlan: left promiscuous mode
[  332.066720][  T146] veth0_vlan: left promiscuous mode
[  333.470918][T16172] team0: Port device team_slave_1 added
[  333.476807][T16322] wg1 speed is unknown, defaulting to 1000
[  333.487576][T16355] __nla_validate_parse: 1 callbacks suppressed
[  333.487594][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3046'.
[  333.506186][T16356] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  333.818592][ T5151] Bluetooth: hci2: command tx timeout
[  335.203657][T16172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.211532][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.239587][T16172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.262133][T16172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.273365][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.300329][T16172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.528916][T16388] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3051'.
[  335.616571][T16172] hsr_slave_0: entered promiscuous mode
[  335.634312][T16172] hsr_slave_1: entered promiscuous mode
[  335.652360][T16172] debugfs: 'hsr0' already exists in 'hsr'
[  335.663364][T16172] Cannot create hsr debugfs directory
[  335.733033][  T146] IPVS: stop unused estimator thread 0...
[  335.999997][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3057'.
[  336.029205][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3057'.
[  336.096489][T16408] gretap0: entered promiscuous mode
[  336.144883][T16408] gretap0: left promiscuous mode
[  336.347504][T16415] nft_compat: unsupported protocol 5
[  336.767297][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'.
[  336.979721][T16444] netlink: 164348 bytes leftover after parsing attributes in process `syz.2.3069'.
[  336.990126][T16172] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  337.019451][T16172] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  337.045219][T16172] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  337.081858][T16172] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  337.101975][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'.
[  337.472282][T16474] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3073'.
[  337.570687][T16474] vlan3: entered allmulticast mode
[  337.575885][T16474] gretap0: entered allmulticast mode
[  337.650377][T16172] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.726043][T16172] 8021q: adding VLAN 0 to HW filter on device team0
[  337.770016][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.777209][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.821203][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.828473][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.009570][T16492] netlink: 'syz.2.3079': attribute type 6 has an invalid length.
[  338.039029][T16492] netlink: 'syz.2.3079': attribute type 6 has an invalid length.
[  338.083334][T16492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3079'.
[  338.108282][T16498] netlink: 'syz.1.3080': attribute type 5 has an invalid length.
[  338.168359][T16501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.178747][T16502] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  338.683714][T16172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.082562][T16545] syzkaller0: entered promiscuous mode
[  339.089132][T16545] syzkaller0: entered allmulticast mode
[  339.109480][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'.
[  339.148754][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'.
[  339.150691][T16545] netlink: 'syz.0.3096': attribute type 2 has an invalid length.
[  339.236249][T16554] netlink: 'syz.3.3098': attribute type 12 has an invalid length.
[  339.252466][T16554] netlink: 'syz.3.3098': attribute type 29 has an invalid length.
[  339.260873][T16554] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3098'.
[  339.270198][T16554] netlink: 'syz.3.3098': attribute type 2 has an invalid length.
[  339.278085][T16554] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3098'.
[  339.382632][T16172] veth0_vlan: entered promiscuous mode
[  339.422500][T16172] veth1_vlan: entered promiscuous mode
[  339.492601][T16172] veth0_macvtap: entered promiscuous mode
[  339.507597][T16172] veth1_macvtap: entered promiscuous mode
[  339.563221][T16172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.583191][T16172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.591435][T16569] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3103'.
[  339.616937][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'.
[  339.638384][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'.
[  339.651716][T11275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.677190][T16569] netlink: 'syz.0.3103': attribute type 12 has an invalid length.
[  339.689566][T11275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.756318][T16569] bond8: option primary_reselect: invalid value (255)
[  339.772186][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  339.791947][T16569] bond8 (unregistering): Released all slaves
[  339.824318][T11275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.834696][T11275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.851683][T16575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.859506][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3104'.
[  339.887895][T16575] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.909913][T16575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.927717][T16575] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.163175][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3108'.
[  340.229702][T11275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.262172][T11275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.369668][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.382718][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.460561][T16613] FAULT_INJECTION: forcing a failure.
[  340.460561][T16613] name failslab, interval 1, probability 0, space 0, times 0
[  340.473310][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.0.3115 Not tainted syzkaller #0 PREEMPT(full) 
[  340.473341][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  340.473355][T16613] Call Trace:
[  340.473364][T16613]  <TASK>
[  340.473374][T16613]  dump_stack_lvl+0xe8/0x150
[  340.473407][T16613]  should_fail_ex+0x414/0x560
[  340.473456][T16613]  should_failslab+0xa8/0x100
[  340.473486][T16613]  kmem_cache_alloc_noprof+0x88/0x710
[  340.473522][T16613]  ? skb_clone+0x212/0x3a0
[  340.473556][T16613]  skb_clone+0x212/0x3a0
[  340.473588][T16613]  bpf_clone_redirect+0x16a/0x4b0
[  340.473621][T16613]  ? bpf_test_run+0x192/0x7d0
[  340.473648][T16613]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  340.473673][T16613]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  340.473708][T16613]  ? arch_stack_walk+0xfc/0x150
[  340.473744][T16613]  ? ktime_get+0x45/0x200
[  340.473790][T16613]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  340.473830][T16613]  ? lockdep_hardirqs_on+0x7b/0x110
[  340.473851][T16613]  ? ktime_get+0x45/0x200
[  340.473880][T16613]  ? seqcount_lockdep_reader_access+0xea/0x100
[  340.473921][T16613]  ? bpf_test_run+0x192/0x7d0
[  340.473946][T16613]  ? kvm_sched_clock_read+0x11/0x20
[  340.473968][T16613]  bpf_test_run+0x5a2/0x7d0
[  340.474020][T16613]  ? __pfx_bpf_test_run+0x10/0x10
[  340.474064][T16613]  ? __kasan_krealloc+0xeb/0x110
[  340.474090][T16613]  ? eth_type_trans+0x35e/0x6d0
[  340.474128][T16613]  ? convert___skb_to_skb+0x3d/0x5b0
[  340.474158][T16613]  bpf_prog_test_run_skb+0xd67/0x1d50
[  340.474200][T16613]  ? __fget_files+0x2a/0x420
[  340.474227][T16613]  ? __fget_files+0x3a0/0x420
[  340.474253][T16613]  ? __fget_files+0x2a/0x420
[  340.474287][T16613]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  340.474315][T16613]  bpf_prog_test_run+0x2c7/0x340
[  340.474353][T16613]  __sys_bpf+0x562/0x860
[  340.474386][T16613]  ? __pfx___sys_bpf+0x10/0x10
[  340.474440][T16613]  ? ksys_write+0x22a/0x250
[  340.474465][T16613]  ? __pfx_ksys_write+0x10/0x10
[  340.474496][T16613]  __x64_sys_bpf+0x7c/0x90
[  340.474525][T16613]  do_syscall_64+0xec/0xf80
[  340.474548][T16613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.474569][T16613]  ? trace_irq_disable+0x37/0x100
[  340.474597][T16613]  ? clear_bhb_loop+0x60/0xb0
[  340.474624][T16613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.474645][T16613] RIP: 0033:0x7f73dbf8f749
[  340.474665][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  340.474684][T16613] RSP: 002b:00007f73da1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  340.474708][T16613] RAX: ffffffffffffffda RBX: 00007f73dc1e5fa0 RCX: 00007f73dbf8f749
[  340.474724][T16613] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  340.474739][T16613] RBP: 00007f73da1f6090 R08: 0000000000000000 R09: 0000000000000000
[  340.474752][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  340.474765][T16613] R13: 00007f73dc1e6038 R14: 00007f73dc1e5fa0 R15: 00007ffd1e269028
[  340.474802][T16613]  </TASK>
[  341.446417][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.457041][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.465850][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.476255][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.485404][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.562930][T16646] netlink: 'syz.4.3123': attribute type 1 has an invalid length.
[  341.724966][T16648] veth0: entered promiscuous mode
[  341.944169][T16651] tipc: Started in network mode
[  341.963662][T16651] tipc: Node identity c643cb4acd9a, cluster identity 4711
[  341.971927][T16651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.065184][T16652] syzkaller0: entered promiscuous mode
[  342.071081][T16652] syzkaller0: entered allmulticast mode
[  342.080740][T16652] tipc: Resetting bearer <eth:syzkaller0>
[  342.216303][T16640] wg1 speed is unknown, defaulting to 1000
[  342.216327][T16663] 8021q: VLANs not supported on nr0
[  342.259004][T16652] tipc: Resetting bearer <eth:syzkaller0>
[  343.583126][ T5151] Bluetooth: hci0: command tx timeout
[  343.931971][T16652] tipc: Disabling bearer <eth:syzkaller0>
[  343.984083][ T5837] tipc: Node number set to 198822730
[  344.109106][T16695] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  344.127150][T16695] 0ªî{X¹¦: entered allmulticast mode
[  344.144013][T16695] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  344.301932][T16702] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  344.733826][T16724] __nla_validate_parse: 43 callbacks suppressed
[  344.733850][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'.
[  344.902751][T16640] chnl_net:caif_netlink_parms(): no params data found
[  344.911107][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'.
[  344.985425][T16732] netlink: 'syz.0.3150': attribute type 1 has an invalid length.
[  345.009463][T16732] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3150'.
[  345.130482][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3152'.
[  345.196400][T16743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3154'.
[  345.399921][T16640] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.419171][T16640] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.436838][T16640] bridge_slave_0: entered allmulticast mode
[  345.448754][T16640] bridge_slave_0: entered promiscuous mode
[  345.474409][T16640] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.501723][T16640] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.518913][T16640] bridge_slave_1: entered allmulticast mode
[  345.538438][T16640] bridge_slave_1: entered promiscuous mode
[  345.658177][ T5151] Bluetooth: hci0: command tx timeout
[  345.729158][T16640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.755544][T16640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.902836][T16773] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  345.930947][T16640] team0: Port device team_slave_0 added
[  345.945702][T16640] team0: Port device team_slave_1 added
[  345.957108][T16777] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0801
[  345.976934][T16778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3161'.
[  346.089236][T16640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.103506][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.136294][T16640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.168985][T16640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.189792][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.200268][T16786] sctp: [Deprecated]: syz.1.3167 (pid 16786) Use of struct sctp_assoc_value in delayed_ack socket option.
[  346.200268][T16786] Use struct sctp_sack_info instead
[  346.252644][T16640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.448964][T16640] hsr_slave_0: entered promiscuous mode
[  346.463242][T16640] hsr_slave_1: entered promiscuous mode
[  346.473165][T16795] netlink: 'syz.0.3169': attribute type 21 has an invalid length.
[  346.482616][T16640] debugfs: 'hsr0' already exists in 'hsr'
[  346.488983][T16640] Cannot create hsr debugfs directory
[  346.634943][T16795] batadv0: entered allmulticast mode
[  347.005955][T16640] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.043234][T16640] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.090684][T16816] veth1_macvtap: left promiscuous mode
[  347.100367][T16816] macsec0: entered promiscuous mode
[  347.113158][T16816] macsec0: entered allmulticast mode
[  347.157129][T16640] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.199773][T16640] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.224104][T16824] netlink: 'syz.3.3178': attribute type 1 has an invalid length.
[  347.393722][T16830] bond1: (slave geneve2): making interface the new active one
[  347.403791][T16830] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  347.422765][T16640] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.463138][T16640] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.504906][T16831] veth1_macvtap: entered promiscuous mode
[  347.511099][T16831] veth1_macvtap: entered allmulticast mode
[  347.521460][T16831] macsec0: left promiscuous mode
[  347.534490][T16831] macsec0: left allmulticast mode
[  347.548768][T16831] veth1_macvtap: left allmulticast mode
[  347.556794][ T3596] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  347.573498][ T3596] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  347.596083][ T3596] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  347.617696][ T3596] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  347.643324][T16640] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.656037][T16640] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.739860][ T5151] Bluetooth: hci0: command tx timeout
[  347.851126][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'.
[  347.851160][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'.
[  347.942348][T16640] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  347.964661][T16640] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  348.005156][T16640] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  348.045896][T16640] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  348.235122][T16640] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.267077][T16865] tunl0: entered promiscuous mode
[  348.279993][T16865] netlink: 'syz.4.3187': attribute type 3 has an invalid length.
[  348.288725][T16865] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3187'.
[  348.303315][T16640] 8021q: adding VLAN 0 to HW filter on device team0
[  348.343795][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.351124][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.382463][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.389701][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.416439][T16872] FAULT_INJECTION: forcing a failure.
[  348.416439][T16872] name failslab, interval 1, probability 0, space 0, times 0
[  348.429199][T16872] CPU: 0 UID: 0 PID: 16872 Comm: syz.3.3190 Not tainted syzkaller #0 PREEMPT(full) 
[  348.429230][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  348.429243][T16872] Call Trace:
[  348.429252][T16872]  <TASK>
[  348.429261][T16872]  dump_stack_lvl+0xe8/0x150
[  348.429296][T16872]  should_fail_ex+0x414/0x560
[  348.429336][T16872]  should_failslab+0xa8/0x100
[  348.429365][T16872]  kmem_cache_alloc_noprof+0x88/0x710
[  348.429399][T16872]  ? dst_alloc+0x105/0x170
[  348.429434][T16872]  dst_alloc+0x105/0x170
[  348.429461][T16872]  ? ip_check_mc_rcu+0x4c7/0x680
[  348.429487][T16872]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  348.429522][T16872]  ? ip_route_output_key_hash+0xc1/0x280
[  348.429548][T16872]  ip_route_output_key_hash+0x174/0x280
[  348.429577][T16872]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  348.429612][T16872]  ? __asan_memset+0x22/0x50
[  348.429636][T16872]  ip_route_output_flow+0x2a/0x150
[  348.429663][T16872]  ip_tunnel_xmit+0x96b/0x2390
[  348.429689][T16872]  ? unwind_next_frame+0xa5/0x23d0
[  348.429738][T16872]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  348.429762][T16872]  ? gre_build_header+0x31c/0xa40
[  348.429799][T16872]  ? __pfx_gre_build_header+0x10/0x10
[  348.429824][T16872]  ? iptunnel_handle_offloads+0x2fd/0x630
[  348.429866][T16872]  ipgre_xmit+0x89e/0xc50
[  348.429902][T16872]  ? __pfx_ipgre_xmit+0x10/0x10
[  348.429940][T16872]  dev_hard_start_xmit+0x2cd/0x800
[  348.429988][T16872]  __dev_queue_xmit+0x149d/0x31c0
[  348.430028][T16872]  ? __dev_queue_xmit+0x289/0x31c0
[  348.430080][T16872]  ? __pfx___dev_queue_xmit+0x10/0x10
[  348.430109][T16872]  ? pskb_expand_head+0x19d/0x1160
[  348.430141][T16872]  ? rcu_is_watching+0x15/0xb0
[  348.430167][T16872]  ? trace_kmalloc+0x1f/0xb0
[  348.430184][T16872]  ? __kmalloc_node_track_caller_noprof+0x594/0x820
[  348.430223][T16872]  ? pskb_expand_head+0xb44/0x1160
[  348.430262][T16872]  __bpf_tx_skb+0x18e/0x260
[  348.430294][T16872]  bpf_clone_redirect+0x313/0x4b0
[  348.430327][T16872]  ? bpf_test_run+0x192/0x7d0
[  348.430354][T16872]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  348.430393][T16872]  ? __pfx___schedule+0x10/0x10
[  348.430424][T16872]  ? ktime_get+0x45/0x200
[  348.430470][T16872]  ? preempt_schedule_thunk+0x16/0x30
[  348.430492][T16872]  ? preempt_schedule_common+0x83/0xd0
[  348.430511][T16872]  ? bpf_test_run+0x192/0x7d0
[  348.430540][T16872]  ? bpf_test_timer_continue+0x10d/0x320
[  348.430573][T16872]  bpf_test_run+0x313/0x7d0
[  348.430622][T16872]  ? __pfx_bpf_test_run+0x10/0x10
[  348.430666][T16872]  ? __kasan_krealloc+0xeb/0x110
[  348.430692][T16872]  ? eth_type_trans+0x35e/0x6d0
[  348.430742][T16872]  ? convert___skb_to_skb+0x3d/0x5b0
[  348.430771][T16872]  bpf_prog_test_run_skb+0xd67/0x1d50
[  348.430812][T16872]  ? __fget_files+0x2a/0x420
[  348.430838][T16872]  ? __fget_files+0x3a0/0x420
[  348.430864][T16872]  ? __fget_files+0x2a/0x420
[  348.430895][T16872]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  348.430923][T16872]  bpf_prog_test_run+0x2c7/0x340
[  348.430958][T16872]  __sys_bpf+0x562/0x860
[  348.430991][T16872]  ? __pfx___sys_bpf+0x10/0x10
[  348.431038][T16872]  ? ksys_write+0x22a/0x250
[  348.431070][T16872]  ? __pfx_ksys_write+0x10/0x10
[  348.431100][T16872]  __x64_sys_bpf+0x7c/0x90
[  348.431127][T16872]  do_syscall_64+0xec/0xf80
[  348.431148][T16872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.431168][T16872]  ? trace_irq_disable+0x37/0x100
[  348.431195][T16872]  ? clear_bhb_loop+0x60/0xb0
[  348.431221][T16872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.431241][T16872] RIP: 0033:0x7f9427d8f749
[  348.431260][T16872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.431279][T16872] RSP: 002b:00007f9428bfd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  348.431301][T16872] RAX: ffffffffffffffda RBX: 00007f9427fe5fa0 RCX: 00007f9427d8f749
[  348.431317][T16872] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  348.431331][T16872] RBP: 00007f9428bfd090 R08: 0000000000000000 R09: 0000000000000000
[  348.431362][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  348.431375][T16872] R13: 00007f9427fe6038 R14: 00007f9427fe5fa0 R15: 00007ffc0445cfb8
[  348.431412][T16872]  </TASK>
[  349.065361][T16880] xt_CT: You must specify a L4 protocol and not use inversions on it
[  349.081130][T16640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.130267][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'.
[  349.209213][T16640] veth0_vlan: entered promiscuous mode
[  349.222716][T16640] veth1_vlan: entered promiscuous mode
[  349.290707][T16640] veth0_macvtap: entered promiscuous mode
[  349.313986][T16890] openvswitch: netlink: Tunnel attr 44 out of range max 16
[  349.318715][T16640] veth1_macvtap: entered promiscuous mode
[  349.401416][T16640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.439222][T16640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.506390][T16896] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.513799][T16896] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.611891][T16905] syzkaller0: entered promiscuous mode
[  349.617602][T16905] syzkaller0: entered allmulticast mode
[  349.625132][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.635918][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.658950][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.677170][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.828003][ T5151] Bluetooth: hci0: command tx timeout
[  349.874255][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.898738][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.944550][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.956716][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.235096][T16916] wg1 speed is unknown, defaulting to 1000
[  350.252683][T16926] netlink: 'syz.2.3119': attribute type 10 has an invalid length.
[  350.272538][T16926] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  350.342489][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'.
[  350.635298][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  350.645865][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  350.655958][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  350.667316][T16934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3209'.
[  350.688654][T16934] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3209'.
[  350.706878][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  350.719380][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  350.727368][T16934] netlink: 'syz.2.3209': attribute type 5 has an invalid length.
[  350.736996][T16934] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3209'.
[  351.061934][T16942] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[  351.092618][T16944] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3211'.
[  351.175324][T16944] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3211'.
[  351.319099][T16951] tipc: Started in network mode
[  351.324047][T16951] tipc: Node identity ae829fc92996, cluster identity 4711
[  351.388150][T16951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.396807][T16956] syzkaller0: entered promiscuous mode
[  351.402918][T16935] wg1 speed is unknown, defaulting to 1000
[  351.413256][T16956] syzkaller0: entered allmulticast mode
[  351.532993][T16960] netlink: 'syz.3.3217': attribute type 12 has an invalid length.
[  351.546005][T16956] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  351.591817][T16951] tipc: Resetting bearer <eth:syzkaller0>
[  351.747542][T16963] syzkaller0: entered promiscuous mode
[  351.779290][T16963] syzkaller0: entered allmulticast mode
[  351.807220][T16950] tipc: Resetting bearer <eth:syzkaller0>
[  351.869463][T16950] tipc: Disabling bearer <eth:syzkaller0>
[  352.085927][T16979] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3221'.
[  352.106219][T16981] FAULT_INJECTION: forcing a failure.
[  352.106219][T16981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.137617][T16981] CPU: 1 UID: 0 PID: 16981 Comm: syz.3.3222 Not tainted syzkaller #0 PREEMPT(full) 
[  352.137645][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.137659][T16981] Call Trace:
[  352.137666][T16981]  <TASK>
[  352.137674][T16981]  dump_stack_lvl+0xe8/0x150
[  352.137704][T16981]  should_fail_ex+0x414/0x560
[  352.137736][T16981]  _copy_from_iter+0x1cd/0x1630
[  352.137766][T16981]  ? __pfx__copy_from_iter+0x10/0x10
[  352.137785][T16981]  ? __build_skb_around+0x22d/0x3c0
[  352.137810][T16981]  ? __alloc_skb+0x198/0x3a0
[  352.137828][T16981]  ? netlink_sendmsg+0x642/0xb30
[  352.137848][T16981]  ? skb_put+0x11b/0x210
[  352.137869][T16981]  netlink_sendmsg+0x6b2/0xb30
[  352.137899][T16981]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.137924][T16981]  ? aa_sock_msg_perm+0xf1/0x1b0
[  352.137948][T16981]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.137982][T16981]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.138012][T16981]  __sock_sendmsg+0x21c/0x270
[  352.138042][T16981]  ____sys_sendmsg+0x505/0x820
[  352.138068][T16981]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.138102][T16981]  ? import_iovec+0x74/0xa0
[  352.138126][T16981]  ___sys_sendmsg+0x21f/0x2a0
[  352.138149][T16981]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.138203][T16981]  ? __fget_files+0x2a/0x420
[  352.138225][T16981]  ? __fget_files+0x3a0/0x420
[  352.138256][T16981]  __x64_sys_sendmsg+0x19b/0x260
[  352.138280][T16981]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  352.138310][T16981]  ? __pfx_ksys_write+0x10/0x10
[  352.138339][T16981]  do_syscall_64+0xec/0xf80
[  352.138357][T16981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.138374][T16981]  ? trace_irq_disable+0x37/0x100
[  352.138406][T16981]  ? clear_bhb_loop+0x60/0xb0
[  352.138427][T16981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.138445][T16981] RIP: 0033:0x7f9427d8f749
[  352.138462][T16981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.138478][T16981] RSP: 002b:00007f9428bfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.138498][T16981] RAX: ffffffffffffffda RBX: 00007f9427fe5fa0 RCX: 00007f9427d8f749
[  352.138511][T16981] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000006
[  352.138522][T16981] RBP: 00007f9428bfd090 R08: 0000000000000000 R09: 0000000000000000
[  352.138533][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.138543][T16981] R13: 00007f9427fe6038 R14: 00007f9427fe5fa0 R15: 00007ffc0445cfb8
[  352.138572][T16981]  </TASK>
[  352.549386][T16985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3223'.
[  352.861947][ T5843] Bluetooth: hci4: command tx timeout
[  352.985472][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'.
[  353.002420][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3224'.
[  354.219124][T17000] netlink: 'syz.4.3227': attribute type 2 has an invalid length.
[  354.274112][T17000] : entered promiscuous mode
[  354.469919][T16935] chnl_net:caif_netlink_parms(): no params data found
[  354.661629][T17028] ieee802154 phy0 wpan0: encryption failed: -22
[  354.770500][T16935] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.780834][T16935] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.789619][T16935] bridge_slave_0: entered allmulticast mode
[  354.797748][T16935] bridge_slave_0: entered promiscuous mode
[  354.809552][T16935] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.816979][T16935] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.824540][T16935] bridge_slave_1: entered allmulticast mode
[  354.834920][T16935] bridge_slave_1: entered promiscuous mode
[  354.949936][ T5843] Bluetooth: hci4: command tx timeout
[  354.979817][T16935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.999905][T17041] netlink: 'syz.3.3241': attribute type 1 has an invalid length.
[  355.034764][T17041] 8021q: adding VLAN 0 to HW filter on device bond2
[  355.045567][T16935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.066993][T17041] bond2: entered allmulticast mode
[  355.129594][T17041] netlink: 'syz.3.3241': attribute type 1 has an invalid length.
[  355.146731][T16935] team0: Port device team_slave_0 added
[  355.171918][T16935] team0: Port device team_slave_1 added
[  355.289086][T16935] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.316901][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.356334][T16935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.371177][T16935] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.394952][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.538911][T16935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.673469][T17065] nftables ruleset with unbound chain
[  355.711155][T17071] __nla_validate_parse: 2 callbacks suppressed
[  355.711176][T17071] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3247'.
[  355.776004][T16935] hsr_slave_0: entered promiscuous mode
[  355.786431][T16935] hsr_slave_1: entered promiscuous mode
[  355.793063][T16935] debugfs: 'hsr0' already exists in 'hsr'
[  355.799738][T16935] Cannot create hsr debugfs directory
[  356.094945][T17077] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3249'.
[  356.126571][T17082] syzkaller0: entered promiscuous mode
[  356.133259][T17082] syzkaller0: entered allmulticast mode
[  356.185107][T17089] tunl0: left promiscuous mode
[  356.287270][T17089] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.295131][T17089] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.430433][T17101] netlink: 'syz.2.3255': attribute type 29 has an invalid length.
[  356.460072][T17102] netlink: 'syz.2.3255': attribute type 29 has an invalid length.
[  356.494354][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3257'.
[  356.527538][T17101] netlink: 'syz.2.3255': attribute type 29 has an invalid length.
[  356.546048][T17102] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3255'.
[  356.546196][T17101] netlink: 'syz.2.3255': attribute type 29 has an invalid length.
[  356.718484][T17101] netlink: 'syz.2.3255': attribute type 29 has an invalid length.
[  356.750679][T17101] netlink: 'syz.2.3255': attribute type 29 has an invalid length.
[  356.803111][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'.
[  356.914041][T16935] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  356.948152][T16935] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  356.968949][T16935] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.018367][ T5843] Bluetooth: hci4: command tx timeout
[  357.071111][T16935] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.101022][T16935] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  357.111467][T16935] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.212072][T16935] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.231229][T16935] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  357.257503][T16935] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.269529][T17148] netlink: 'syz.4.3270': attribute type 1 has an invalid length.
[  357.370814][T16935] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.393107][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'.
[  357.404671][T16935] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  357.414866][T16935] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.472415][T17161] sctp: [Deprecated]: syz.3.3272 (pid 17161) Use of int in max_burst socket option deprecated.
[  357.472415][T17161] Use struct sctp_assoc_value instead
[  357.703721][T16935] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  357.725253][T16935] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  357.742812][T16935] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  357.760139][T16935] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  357.906473][T17182] netlink: 'syz.1.3276': attribute type 10 has an invalid length.
[  357.944107][T17182] team0: Device veth0_macvtap failed to register rx_handler
[  357.969511][T16935] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.009997][T16935] 8021q: adding VLAN 0 to HW filter on device team0
[  358.036016][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.043256][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.066936][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'.
[  358.066937][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'.
[  358.113330][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.120610][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.242831][T17187] syzkaller0: entered promiscuous mode
[  358.260759][T17187] syzkaller0: entered allmulticast mode
[  358.364814][T17199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3281'.
[  358.394495][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3283'.
[  358.431235][T17202] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  358.581040][T17205] netlink: 'syz.2.3281': attribute type 11 has an invalid length.
[  359.108185][ T5843] Bluetooth: hci4: command tx timeout
[  360.267416][T16935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.430868][T16935] veth0_vlan: entered promiscuous mode
[  360.487301][T16935] veth1_vlan: entered promiscuous mode
[  360.580840][T16935] veth0_macvtap: entered promiscuous mode
[  360.595528][T16935] veth1_macvtap: entered promiscuous mode
[  360.651283][T16935] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.674317][T16935] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.775083][T17259] netlink: 'syz.4.3299': attribute type 1 has an invalid length.
[  360.791226][T17250] __nla_validate_parse: 5 callbacks suppressed
[  360.791247][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'.
[  360.809785][T11275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.820443][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'.
[  360.839966][T11275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.905256][T11275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.925967][T11275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.984068][T17262] caif0: entered promiscuous mode
[  361.001134][T17262] caif0: entered allmulticast mode
[  361.007335][T17264] xt_hashlimit: size too large, truncated to 1048576
[  361.090393][T17268] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3301'.
[  361.172519][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3304'.
[  361.207738][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'.
[  361.218094][T17281] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  361.378752][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.386644][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.494750][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.504489][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.773158][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'.
[  361.802920][T17307] validate_nla: 2 callbacks suppressed
[  361.802941][T17307] netlink: 'syz.2.3315': attribute type 1 has an invalid length.
[  361.817699][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3316'.
[  361.827572][T17307] netlink: 'syz.2.3315': attribute type 2 has an invalid length.
[  362.029969][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'.
[  362.068602][T17304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.136370][T17327] netlink: 'syz.1.3318': attribute type 1 has an invalid length.
[  362.146602][T17327] netlink: 'syz.1.3318': attribute type 2 has an invalid length.
[  362.156450][T17327] netlink: 'syz.1.3318': attribute type 1 has an invalid length.
[  362.179271][T17327] netlink: 'syz.1.3318': attribute type 3 has an invalid length.
[  362.187221][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'.
[  362.242602][T17327] openvswitch: netlink: EtherType 50a is less than min 600
[  362.287279][T17304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.601805][T17348] netlink: 'syz.0.3324': attribute type 8 has an invalid length.
[  362.845731][T17366] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  362.926619][T17370] netlink: 180848 bytes leftover after parsing attributes in process `syz.0.3331'.
[  365.017180][T17410] netlink: 'syz.0.3344': attribute type 39 has an invalid length.
[  365.057056][T17414] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  365.136867][T17415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.219561][T17421] ksmbd: Unknown IPC event: 3, ignore.
[  365.239038][T17410] netlink: 'syz.0.3344': attribute type 39 has an invalid length.
[  365.255605][T17410] netlink: 'syz.0.3344': attribute type 39 has an invalid length.
[  365.277332][T17423] syzkaller1: entered promiscuous mode
[  365.285127][T17423] syzkaller1: entered allmulticast mode
[  365.371254][T17428] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.715542][T17449] openvswitch: netlink: VXLAN extension 30 out of range max 1
[  365.947378][T17466] __nla_validate_parse: 3 callbacks suppressed
[  365.947399][T17466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3360'.
[  366.002356][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'.
[  366.072132][T17474] 8021q: VLANs not supported on ip6_vti0
[  366.173122][T17478] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3363'.
[  366.491303][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'.
[  366.770886][T17519] syzkaller0: entered promiscuous mode
[  366.781021][T17519] syzkaller0: entered allmulticast mode
[  367.123524][T17533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3377'.
[  367.223472][T17541] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3380'.
[  367.483751][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'.
[  367.626787][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3388'.
[  367.839582][T17574] bond3: Unable to set up delay as MII monitoring is disabled
[  367.852528][T17574] bond3 (unregistering): Released all slaves
[  367.893700][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'.
[  368.038928][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'.
[  368.269802][T17602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  368.277304][T17602] IPv6: NLM_F_CREATE should be set when creating new route
[  368.284706][T17602] IPv6: NLM_F_CREATE should be set when creating new route
[  368.292008][T17602] IPv6: NLM_F_CREATE should be set when creating new route
[  368.309403][T17598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  368.443777][ T9634] IPVS: starting estimator thread 0...
[  368.463517][T17604] IPVS: ip_vs_edit_dest(): server weight less than zero
[  368.526062][T17613] validate_nla: 30 callbacks suppressed
[  368.526082][T17613] netlink: 'syz.2.3403': attribute type 5 has an invalid length.
[  368.558204][T17614] netlink: 'syz.1.3404': attribute type 1 has an invalid length.
[  368.568066][T17606] IPVS: using max 26 ests per chain, 62400 per kthread
[  368.578844][T17613] geneve2: entered promiscuous mode
[  368.584109][T17613] geneve2: entered allmulticast mode
[  368.673120][T17614] 8021q: adding VLAN 0 to HW filter on device bond2
[  368.715219][ T6260] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  368.853804][T17618] veth3: entered promiscuous mode
[  368.859706][ T6260] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  368.877923][ T6260] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  368.898583][ T6260] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  370.544417][T17678] openvswitch: netlink: Flow key attr not present in new flow.
[  370.584748][T17676] tipc: Started in network mode
[  370.599437][T17676] tipc: Node identity ac14140f, cluster identity 4711
[  370.614567][T17676] tipc: New replicast peer: 255.255.255.255
[  370.633437][T17676] tipc: Enabled bearer <udp:syz2>, priority 10
[  370.740156][T17692] netlink: 'syz.3.3430': attribute type 10 has an invalid length.
[  370.820730][T17692] team0: Device veth0_macvtap failed to register rx_handler
[  370.869326][T17699] xt_socket: unknown flags 0x50
[  371.005128][T17699] __nla_validate_parse: 11 callbacks suppressed
[  371.005152][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'.
[  371.033733][T17708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3435'.
[  371.432035][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3441'.
[  371.525960][T17733] netlink: 'syz.0.3441': attribute type 1 has an invalid length.
[  371.628064][ T9636] tipc: Node number set to 2886997007
[  371.670745][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'.
[  371.681727][T17746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3447'.
[  371.718533][T17748] 
: renamed from bond_slave_0 (while UP)
[  372.101951][T17777] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000
[  372.170353][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'.
[  372.445785][T17793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3463'.
[  372.576873][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'.
[  372.586445][T17797] bridge_slave_1: left allmulticast mode
[  372.595508][T17797] bridge_slave_1: left promiscuous mode
[  372.603597][T17797] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.632413][T17797] bridge_slave_0: left allmulticast mode
[  372.644642][T17797] bridge_slave_0: left promiscuous mode
[  372.654951][T17797] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.934828][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'.
[  372.997566][T17828] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3474'.
[  373.518478][T17862] FAULT_INJECTION: forcing a failure.
[  373.518478][T17862] name failslab, interval 1, probability 0, space 0, times 0
[  373.531257][T17862] CPU: 1 UID: 0 PID: 17862 Comm: syz.0.3482 Not tainted syzkaller #0 PREEMPT(full) 
[  373.531286][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.531304][T17862] Call Trace:
[  373.531314][T17862]  <TASK>
[  373.531323][T17862]  dump_stack_lvl+0xe8/0x150
[  373.531359][T17862]  should_fail_ex+0x414/0x560
[  373.531399][T17862]  should_failslab+0xa8/0x100
[  373.531429][T17862]  kmem_cache_alloc_noprof+0x88/0x710
[  373.531464][T17862]  ? dst_alloc+0x105/0x170
[  373.531500][T17862]  dst_alloc+0x105/0x170
[  373.531528][T17862]  ? ip_check_mc_rcu+0x4c7/0x680
[  373.531554][T17862]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  373.531589][T17862]  ? ip_route_output_key_hash+0xc1/0x280
[  373.531615][T17862]  ip_route_output_key_hash+0x174/0x280
[  373.531643][T17862]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  373.531677][T17862]  ? __asan_memset+0x22/0x50
[  373.531703][T17862]  ip_route_output_flow+0x2a/0x150
[  373.531727][T17862]  ip_tunnel_xmit+0x96b/0x2390
[  373.531754][T17862]  ? unwind_next_frame+0xa5/0x23d0
[  373.531807][T17862]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  373.531831][T17862]  ? gre_build_header+0x31c/0xa40
[  373.531875][T17862]  ? __pfx_gre_build_header+0x10/0x10
[  373.531902][T17862]  ? iptunnel_handle_offloads+0x2fd/0x630
[  373.531944][T17862]  ipgre_xmit+0x89e/0xc50
[  373.531980][T17862]  ? __pfx_ipgre_xmit+0x10/0x10
[  373.532019][T17862]  dev_hard_start_xmit+0x2cd/0x800
[  373.532068][T17862]  __dev_queue_xmit+0x149d/0x31c0
[  373.532108][T17862]  ? __dev_queue_xmit+0x289/0x31c0
[  373.532155][T17862]  ? __pfx___dev_queue_xmit+0x10/0x10
[  373.532183][T17862]  ? pskb_expand_head+0x19d/0x1160
[  373.532215][T17862]  ? rcu_is_watching+0x15/0xb0
[  373.532241][T17862]  ? trace_kmalloc+0x1f/0xb0
[  373.532258][T17862]  ? __kmalloc_node_track_caller_noprof+0x594/0x820
[  373.532299][T17862]  ? pskb_expand_head+0xb44/0x1160
[  373.532339][T17862]  __bpf_tx_skb+0x18e/0x260
[  373.532373][T17862]  bpf_clone_redirect+0x313/0x4b0
[  373.532406][T17862]  ? bpf_test_run+0x192/0x7d0
[  373.532433][T17862]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  373.532473][T17862]  ? __pfx___schedule+0x10/0x10
[  373.532505][T17862]  ? ktime_get+0x45/0x200
[  373.532552][T17862]  ? preempt_schedule_thunk+0x16/0x30
[  373.532576][T17862]  ? preempt_schedule_common+0x83/0xd0
[  373.532596][T17862]  ? bpf_test_run+0x192/0x7d0
[  373.532626][T17862]  ? bpf_test_timer_continue+0x10d/0x320
[  373.532660][T17862]  bpf_test_run+0x313/0x7d0
[  373.532713][T17862]  ? __pfx_bpf_test_run+0x10/0x10
[  373.532758][T17862]  ? __kasan_krealloc+0xeb/0x110
[  373.532784][T17862]  ? eth_type_trans+0x35e/0x6d0
[  373.532822][T17862]  ? convert___skb_to_skb+0x3d/0x5b0
[  373.532861][T17862]  bpf_prog_test_run_skb+0xd67/0x1d50
[  373.532904][T17862]  ? __fget_files+0x2a/0x420
[  373.532931][T17862]  ? __fget_files+0x3a0/0x420
[  373.532957][T17862]  ? __fget_files+0x2a/0x420
[  373.532991][T17862]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  373.533020][T17862]  bpf_prog_test_run+0x2c7/0x340
[  373.533058][T17862]  __sys_bpf+0x562/0x860
[  373.533092][T17862]  ? __pfx___sys_bpf+0x10/0x10
[  373.533142][T17862]  ? ksys_write+0x22a/0x250
[  373.533167][T17862]  ? __pfx_ksys_write+0x10/0x10
[  373.533198][T17862]  __x64_sys_bpf+0x7c/0x90
[  373.533227][T17862]  do_syscall_64+0xec/0xf80
[  373.533250][T17862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.533271][T17862]  ? trace_irq_disable+0x37/0x100
[  373.533300][T17862]  ? clear_bhb_loop+0x60/0xb0
[  373.533327][T17862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.533358][T17862] RIP: 0033:0x7ff79458f749
[  373.533378][T17862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.533397][T17862] RSP: 002b:00007ff7953d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  373.533420][T17862] RAX: ffffffffffffffda RBX: 00007ff7947e5fa0 RCX: 00007ff79458f749
[  373.533437][T17862] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  373.533451][T17862] RBP: 00007ff7953d9090 R08: 0000000000000000 R09: 0000000000000000
[  373.533465][T17862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  373.533478][T17862] R13: 00007ff7947e6038 R14: 00007ff7947e5fa0 R15: 00007fff42a34588
[  373.533516][T17862]  </TASK>
[  374.172752][T17870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.252321][T17874] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  374.280245][T17880] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  374.591808][T17895] netlink: 'syz.2.3496': attribute type 4 has an invalid length.
[  374.868913][T17911] netlink: 'syz.0.3502': attribute type 11 has an invalid length.
[  374.886403][T17911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.900189][T17911] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  374.915182][T17911] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  376.025412][T17975] netlink: 'syz.4.3521': attribute type 1 has an invalid length.
[  376.034792][T17970] bond3: option miimon: invalid value (18446744073709551585)
[  376.068125][T17970] bond3: option miimon: allowed values 0 - 2147483647
[  376.079941][T17970] bond3 (unregistering): Released all slaves
[  376.233163][T17980] __nla_validate_parse: 13 callbacks suppressed
[  376.233186][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3525'.
[  376.258236][T17985] netlink: 'syz.0.3528': attribute type 10 has an invalid length.
[  376.266329][T17985] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  376.277880][T17985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.316769][T17990] netlink: 'syz.2.3527': attribute type 16 has an invalid length.
[  376.397868][T17990] netlink: 'syz.2.3527': attribute type 17 has an invalid length.
[  376.641341][T17990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.671583][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'.
[  376.808937][T18015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3535'.
[  376.822089][T18015] netlink: 'syz.1.3535': attribute type 1 has an invalid length.
[  377.182185][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'.
[  377.204678][T17999] wg1 speed is unknown, defaulting to 1000
[  377.342718][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'.
[  377.501200][T18034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3540'.
[  377.519042][T18035] netlink: 'syz.2.3541': attribute type 33 has an invalid length.
[  377.762918][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'.
[  377.773275][T18048] netlink: 'syz.0.3546': attribute type 1 has an invalid length.
[  377.796287][T18049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3545'.
[  377.815113][T18048] netlink: 'syz.0.3546': attribute type 1 has an invalid length.
[  377.857293][T18052] netlink: 'syz.0.3546': attribute type 1 has an invalid length.
[  378.047233][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3550'.
[  378.158615][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'.
[  378.306829][T18072] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  378.359028][ T9646] IPVS: starting estimator thread 0...
[  378.370528][T18078] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  378.448140][T18081] IPVS: using max 34 ests per chain, 81600 per kthread
[  379.335818][T18124] siw: device registration error -23
[  379.922994][T18144] validate_nla: 3 callbacks suppressed
[  379.923015][T18144] netlink: 'syz.2.3576': attribute type 1 has an invalid length.
[  380.555205][T18167] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  380.631854][T18167] bond3 (unregistering): Released all slaves
[  380.864528][T18181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.596482][T18193] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  382.597469][T18200] veth0_to_team: entered promiscuous mode
[  382.804614][T18223] __nla_validate_parse: 17 callbacks suppressed
[  382.804636][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'.
[  383.061484][T18234] xt_hashlimit: size too large, truncated to 1048576
[  383.103141][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'.
[  383.113592][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'.
[  383.316195][T18244] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  383.334685][T18244] bond2: (slave lo): Enslaving as a backup interface with an up link
[  383.352842][T18244] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  383.983609][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  384.051218][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3621'.
[  384.262603][T18306] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3626'.
[  384.289495][T18304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.302149][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'.
[  384.365401][   T30] audit: type=1800 audit(1767182076.391:6): pid=18314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3628" name="memory.events" dev="tmpfs" ino=593 res=0 errno=0
[  384.530465][T18321] FAULT_INJECTION: forcing a failure.
[  384.530465][T18321] name failslab, interval 1, probability 0, space 0, times 0
[  384.543212][T18321] CPU: 0 UID: 0 PID: 18321 Comm: syz.4.3634 Not tainted syzkaller #0 PREEMPT(full) 
[  384.543243][T18321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  384.543257][T18321] Call Trace:
[  384.543266][T18321]  <TASK>
[  384.543275][T18321]  dump_stack_lvl+0xe8/0x150
[  384.543308][T18321]  should_fail_ex+0x414/0x560
[  384.543349][T18321]  should_failslab+0xa8/0x100
[  384.543378][T18321]  kmem_cache_alloc_noprof+0x88/0x710
[  384.543413][T18321]  ? skb_clone+0x212/0x3a0
[  384.543446][T18321]  skb_clone+0x212/0x3a0
[  384.543477][T18321]  bpf_clone_redirect+0x16a/0x4b0
[  384.543510][T18321]  ? bpf_test_run+0x192/0x7d0
[  384.543537][T18321]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  384.543576][T18321]  ? __pfx___schedule+0x10/0x10
[  384.543607][T18321]  ? ktime_get+0x45/0x200
[  384.543653][T18321]  ? preempt_schedule_thunk+0x16/0x30
[  384.543676][T18321]  ? preempt_schedule_common+0x83/0xd0
[  384.543696][T18321]  ? bpf_test_run+0x192/0x7d0
[  384.543726][T18321]  ? bpf_test_timer_continue+0x10d/0x320
[  384.543759][T18321]  bpf_test_run+0x313/0x7d0
[  384.543816][T18321]  ? __pfx_bpf_test_run+0x10/0x10
[  384.543865][T18321]  ? __kasan_krealloc+0xeb/0x110
[  384.543891][T18321]  ? eth_type_trans+0x35e/0x6d0
[  384.543928][T18321]  ? convert___skb_to_skb+0x3d/0x5b0
[  384.543959][T18321]  bpf_prog_test_run_skb+0xd67/0x1d50
[  384.544000][T18321]  ? __fget_files+0x2a/0x420
[  384.544026][T18321]  ? __fget_files+0x3a0/0x420
[  384.544053][T18321]  ? __fget_files+0x2a/0x420
[  384.544086][T18321]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  384.544113][T18321]  bpf_prog_test_run+0x2c7/0x340
[  384.544151][T18321]  __sys_bpf+0x562/0x860
[  384.544184][T18321]  ? __pfx___sys_bpf+0x10/0x10
[  384.544233][T18321]  ? ksys_write+0x22a/0x250
[  384.544258][T18321]  ? __pfx_ksys_write+0x10/0x10
[  384.544288][T18321]  __x64_sys_bpf+0x7c/0x90
[  384.544317][T18321]  do_syscall_64+0xec/0xf80
[  384.544345][T18321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.544366][T18321]  ? trace_irq_disable+0x37/0x100
[  384.544394][T18321]  ? clear_bhb_loop+0x60/0xb0
[  384.544421][T18321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.544443][T18321] RIP: 0033:0x7f1cef18f749
[  384.544463][T18321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.544482][T18321] RSP: 002b:00007f1cf001a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  384.544505][T18321] RAX: ffffffffffffffda RBX: 00007f1cef3e5fa0 RCX: 00007f1cef18f749
[  384.544521][T18321] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  384.544535][T18321] RBP: 00007f1cf001a090 R08: 0000000000000000 R09: 0000000000000000
[  384.544548][T18321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  384.544561][T18321] R13: 00007f1cef3e6038 R14: 00007f1cef3e5fa0 R15: 00007ffcf1b640a8
[  384.544598][T18321]  </TASK>
[  384.951189][T18329] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3635'.
[  384.985673][T18329] ksmbd: Unknown IPC event: 3, ignore.
[  385.092528][T18342] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  385.104418][T18342] x_tables: duplicate underflow at hook 1
[  385.433611][T18370] FAULT_INJECTION: forcing a failure.
[  385.433611][T18370] name failslab, interval 1, probability 0, space 0, times 0
[  385.446376][T18370] CPU: 1 UID: 0 PID: 18370 Comm: syz.3.3647 Not tainted syzkaller #0 PREEMPT(full) 
[  385.446404][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  385.446414][T18370] Call Trace:
[  385.446421][T18370]  <TASK>
[  385.446428][T18370]  dump_stack_lvl+0xe8/0x150
[  385.446461][T18370]  should_fail_ex+0x414/0x560
[  385.446492][T18370]  should_failslab+0xa8/0x100
[  385.446515][T18370]  kmem_cache_alloc_noprof+0x88/0x710
[  385.446542][T18370]  ? dst_alloc+0x105/0x170
[  385.446569][T18370]  dst_alloc+0x105/0x170
[  385.446590][T18370]  ? ip_check_mc_rcu+0x4c7/0x680
[  385.446610][T18370]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  385.446636][T18370]  ? ip_route_output_key_hash+0xc1/0x280
[  385.446657][T18370]  ip_route_output_key_hash+0x174/0x280
[  385.446678][T18370]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  385.446706][T18370]  ? __asan_memset+0x22/0x50
[  385.446724][T18370]  ip_route_output_flow+0x2a/0x150
[  385.446744][T18370]  ip_tunnel_xmit+0x96b/0x2390
[  385.446763][T18370]  ? unwind_next_frame+0xa5/0x23d0
[  385.446801][T18370]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  385.446820][T18370]  ? gre_build_header+0x31c/0xa40
[  385.446847][T18370]  ? __pfx_gre_build_header+0x10/0x10
[  385.446866][T18370]  ? iptunnel_handle_offloads+0x2fd/0x630
[  385.446898][T18370]  ipgre_xmit+0x89e/0xc50
[  385.446925][T18370]  ? __pfx_ipgre_xmit+0x10/0x10
[  385.446953][T18370]  dev_hard_start_xmit+0x2cd/0x800
[  385.446989][T18370]  __dev_queue_xmit+0x149d/0x31c0
[  385.447018][T18370]  ? __dev_queue_xmit+0x289/0x31c0
[  385.447052][T18370]  ? __pfx___dev_queue_xmit+0x10/0x10
[  385.447078][T18370]  ? rcu_is_watching+0x15/0xb0
[  385.447099][T18370]  ? trace_kmalloc+0x1f/0xb0
[  385.447112][T18370]  ? __kmalloc_node_track_caller_noprof+0x594/0x820
[  385.447143][T18370]  ? pskb_expand_head+0xb44/0x1160
[  385.447173][T18370]  __bpf_tx_skb+0x18e/0x260
[  385.447199][T18370]  bpf_clone_redirect+0x313/0x4b0
[  385.447224][T18370]  ? bpf_test_run+0x192/0x7d0
[  385.447245][T18370]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  385.447274][T18370]  ? __pfx___schedule+0x10/0x10
[  385.447298][T18370]  ? ktime_get+0x45/0x200
[  385.447333][T18370]  ? preempt_schedule_thunk+0x16/0x30
[  385.447351][T18370]  ? preempt_schedule_common+0x83/0xd0
[  385.447365][T18370]  ? bpf_test_run+0x192/0x7d0
[  385.447388][T18370]  ? bpf_test_timer_continue+0x10d/0x320
[  385.447413][T18370]  bpf_test_run+0x313/0x7d0
[  385.447457][T18370]  ? __pfx_bpf_test_run+0x10/0x10
[  385.447491][T18370]  ? __kasan_krealloc+0xeb/0x110
[  385.447510][T18370]  ? eth_type_trans+0x35e/0x6d0
[  385.447539][T18370]  ? convert___skb_to_skb+0x3d/0x5b0
[  385.447562][T18370]  bpf_prog_test_run_skb+0xd67/0x1d50
[  385.447593][T18370]  ? __fget_files+0x2a/0x420
[  385.447614][T18370]  ? __fget_files+0x3a0/0x420
[  385.447634][T18370]  ? __fget_files+0x2a/0x420
[  385.447659][T18370]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  385.447681][T18370]  bpf_prog_test_run+0x2c7/0x340
[  385.447711][T18370]  __sys_bpf+0x562/0x860
[  385.447735][T18370]  ? __pfx___sys_bpf+0x10/0x10
[  385.447772][T18370]  ? ksys_write+0x22a/0x250
[  385.447795][T18370]  ? __pfx_ksys_write+0x10/0x10
[  385.447824][T18370]  __x64_sys_bpf+0x7c/0x90
[  385.447850][T18370]  do_syscall_64+0xec/0xf80
[  385.447871][T18370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.447890][T18370]  ? trace_irq_disable+0x37/0x100
[  385.447917][T18370]  ? clear_bhb_loop+0x60/0xb0
[  385.447939][T18370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.447955][T18370] RIP: 0033:0x7f9427d8f749
[  385.447970][T18370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.447985][T18370] RSP: 002b:00007f9428bfd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  385.448022][T18370] RAX: ffffffffffffffda RBX: 00007f9427fe5fa0 RCX: 00007f9427d8f749
[  385.448035][T18370] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  385.448046][T18370] RBP: 00007f9428bfd090 R08: 0000000000000000 R09: 0000000000000000
[  385.448057][T18370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  385.448066][T18370] R13: 00007f9427fe6038 R14: 00007f9427fe5fa0 R15: 00007ffc0445cfb8
[  385.448095][T18370]  </TASK>
[  386.239694][T18394] can: request_module (can-proto-4) failed.
[  386.641871][T18426] netlink: 'syz.3.3665': attribute type 1 has an invalid length.
[  386.724059][T18426] 8021q: adding VLAN 0 to HW filter on device bond3
[  386.806975][T18426] macvlan2: entered promiscuous mode
[  386.820957][T18426] macvlan2: entered allmulticast mode
[  386.836862][T18426] bond3: entered allmulticast mode
[  386.845467][T18426] bond3: entered promiscuous mode
[  386.877147][T18426] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  386.909285][T18426] team0: Port device macvlan2 added
[  386.995558][T18440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3671'.
[  387.120571][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'.
[  387.380602][T18467] netlink: 'syz.4.3679': attribute type 1 has an invalid length.
[  387.445801][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'.
[  387.569835][T18476] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  387.581794][T18449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.603515][T18449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.623734][T18449] bond0 (unregistering): Released all slaves
[  387.709781][T18467] bond4: entered promiscuous mode
[  387.715475][T18467] 8021q: adding VLAN 0 to HW filter on device bond4
[  387.771906][T18473] bond4: (slave bridge1): making interface the new active one
[  387.780313][T18473] bridge1: entered promiscuous mode
[  387.788297][T18473] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  387.926078][T18483] __nla_validate_parse: 2 callbacks suppressed
[  387.926098][T18483] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3683'.
[  387.948502][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3683'.
[  387.959806][T18483] Unsupported ieee802154 address type: 0
[  387.968569][T18483] ieee802154 phy0 wpan0: encryption failed: -22
[  388.140284][T18494] netlink: 'syz.3.3687': attribute type 9 has an invalid length.
[  388.155691][T18494] netlink: 'syz.3.3687': attribute type 6 has an invalid length.
[  388.223453][T18500] netlink: 592 bytes leftover after parsing attributes in process `syz.2.3685'.
[  388.383916][T18507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.086600][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'.
[  389.192969][T18556] netlink: 'syz.0.3708': attribute type 1 has an invalid length.
[  389.222715][T18556] netlink: 'syz.0.3708': attribute type 1 has an invalid length.
[  389.272929][T18563] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  389.493502][T18578] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3714'.
[  389.517585][T18578] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  389.530303][T18574] vlan2: entered allmulticast mode
[  389.704676][T18587] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  389.789294][T18592] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3718'.
[  389.820642][T18592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3718'.
[  390.151240][T18611] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  390.358484][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  390.469184][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'.
[  390.866806][T18623] wg1 speed is unknown, defaulting to 1000
[  391.311497][T18656] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  391.487627][T18670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3745'.
[  391.519112][T18671] netlink: 'syz.4.3746': attribute type 10 has an invalid length.
[  391.586196][T18671] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  391.942651][T18698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.991803][T18682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.004609][T18682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  392.040107][T18698] tipc: Started in network mode
[  392.046926][T18698] tipc: Node identity ac14140f, cluster identity 4711
[  392.054660][T18698] tipc: New replicast peer: 255.255.255.255
[  392.065817][T18698] tipc: Enabled bearer <udp:syz2>, priority 10
[  392.199936][T18710] netlink: 'syz.0.3753': attribute type 1 has an invalid length.
[  392.754726][T18692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.771356][T18692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.886908][T18692] geneve2: left promiscuous mode
[  392.892053][T18692] geneve2: left allmulticast mode
[  392.917705][T18682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.929984][T18682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  392.952918][T18709] syzkaller0: entered promiscuous mode
[  392.959381][T18709] syzkaller0: entered allmulticast mode
[  392.999291][T11256] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.010954][T11256] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  393.022305][T11256] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.049323][T11256] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  393.078662][ T9638] tipc: Node number set to 2886997007
[  393.217086][T18725] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  393.243911][T18729] __nla_validate_parse: 4 callbacks suppressed
[  393.243931][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3760'.
[  393.293674][T18725] bond3 (unregistering): Released all slaves
[  393.317033][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'.
[  393.464075][T18742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.473707][T18746] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3764'.
[  393.750397][T18762] vlan2: entered promiscuous mode
[  393.755510][T18762] geneve1: entered promiscuous mode
[  393.775330][T18762] vlan2: entered allmulticast mode
[  393.786809][T18762] geneve1: entered allmulticast mode
[  393.852926][T18747] syzkaller0: entered promiscuous mode
[  393.858962][T18747] syzkaller0: entered allmulticast mode
[  393.865300][T18747] tipc: Resetting bearer <eth:syzkaller0>
[  393.898938][T18731] tipc: Resetting bearer <eth:syzkaller0>
[  394.286496][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3775'.
[  394.401856][T18792] rdma_rxe: rxe_newlink: failed to add lo
[  395.520168][T18731] tipc: Disabling bearer <eth:syzkaller0>
[  395.530049][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'.
[  395.550250][T18790] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  395.800915][T18806] xt_hashlimit: size too large, truncated to 1048576
[  395.954218][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'.
[  395.966736][T18819] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  395.986365][T18819] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  396.160597][T18829] tipc: Started in network mode
[  396.165561][T18829] tipc: Node identity 2246cad261fc, cluster identity 4711
[  396.174919][T18829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.230980][T18829] syzkaller0: entered promiscuous mode
[  396.238666][T18829] syzkaller0: entered allmulticast mode
[  396.245946][T18829] tipc: Resetting bearer <eth:syzkaller0>
[  396.272835][T18828] tipc: Resetting bearer <eth:syzkaller0>
[  397.860797][T18828] tipc: Disabling bearer <eth:syzkaller0>
[  397.894124][ T9634] tipc: Node number set to 1136315090
[  398.077030][T18852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3794'.
[  398.200881][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3797'.
[  398.497893][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3802'.
[  398.507552][T18881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.584729][T18881] syzkaller0: entered promiscuous mode
[  398.592683][T18881] syzkaller0: entered allmulticast mode
[  398.599849][T18881] tipc: Resetting bearer <eth:syzkaller0>
[  398.667251][T18877] 8021q: adding VLAN 0 to HW filter on device bond5
[  398.699929][T18887] 8021q: adding VLAN 0 to HW filter on device bond5
[  398.708759][T18887] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  398.721319][T18887] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  398.747185][T18880] tipc: Resetting bearer <eth:syzkaller0>
[  398.866644][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'.
[  398.958435][T18902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3812'.
[  400.384926][T18880] tipc: Disabling bearer <eth:syzkaller0>
[  400.590630][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'.
[  400.616570][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3816'.
[  400.676631][T18921] FAULT_INJECTION: forcing a failure.
[  400.676631][T18921] name failslab, interval 1, probability 0, space 0, times 0
[  400.689344][T18921] CPU: 1 UID: 0 PID: 18921 Comm: syz.1.3820 Not tainted syzkaller #0 PREEMPT(full) 
[  400.689381][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  400.689395][T18921] Call Trace:
[  400.689404][T18921]  <TASK>
[  400.689413][T18921]  dump_stack_lvl+0xe8/0x150
[  400.689447][T18921]  should_fail_ex+0x414/0x560
[  400.689488][T18921]  should_failslab+0xa8/0x100
[  400.689518][T18921]  kmem_cache_alloc_noprof+0x88/0x710
[  400.689554][T18921]  ? skb_clone+0x212/0x3a0
[  400.689587][T18921]  skb_clone+0x212/0x3a0
[  400.689620][T18921]  bpf_clone_redirect+0x16a/0x4b0
[  400.689653][T18921]  ? bpf_test_run+0x192/0x7d0
[  400.689680][T18921]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  400.689706][T18921]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  400.689741][T18921]  ? arch_stack_walk+0xfc/0x150
[  400.689776][T18921]  ? ktime_get+0x45/0x200
[  400.689823][T18921]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  400.689857][T18921]  ? lockdep_hardirqs_on+0x7b/0x110
[  400.689879][T18921]  ? ktime_get+0x45/0x200
[  400.689907][T18921]  ? seqcount_lockdep_reader_access+0xea/0x100
[  400.689947][T18921]  ? bpf_test_timer_continue+0x10d/0x320
[  400.689981][T18921]  bpf_test_run+0x313/0x7d0
[  400.690032][T18921]  ? __pfx_bpf_test_run+0x10/0x10
[  400.690077][T18921]  ? __kasan_krealloc+0xeb/0x110
[  400.690102][T18921]  ? eth_type_trans+0x35e/0x6d0
[  400.690139][T18921]  ? convert___skb_to_skb+0x3d/0x5b0
[  400.690170][T18921]  bpf_prog_test_run_skb+0xd67/0x1d50
[  400.690211][T18921]  ? __fget_files+0x2a/0x420
[  400.690238][T18921]  ? __fget_files+0x3a0/0x420
[  400.690264][T18921]  ? __fget_files+0x2a/0x420
[  400.690298][T18921]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  400.690326][T18921]  bpf_prog_test_run+0x2c7/0x340
[  400.690370][T18921]  __sys_bpf+0x562/0x860
[  400.690405][T18921]  ? __pfx___sys_bpf+0x10/0x10
[  400.690454][T18921]  ? ksys_write+0x22a/0x250
[  400.690478][T18921]  ? __pfx_ksys_write+0x10/0x10
[  400.690508][T18921]  __x64_sys_bpf+0x7c/0x90
[  400.690536][T18921]  do_syscall_64+0xec/0xf80
[  400.690559][T18921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.690581][T18921]  ? trace_irq_disable+0x37/0x100
[  400.690609][T18921]  ? clear_bhb_loop+0x60/0xb0
[  400.690636][T18921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.690658][T18921] RIP: 0033:0x7f6997f8f749
[  400.690677][T18921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.690696][T18921] RSP: 002b:00007f6998e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  400.690719][T18921] RAX: ffffffffffffffda RBX: 00007f69981e5fa0 RCX: 00007f6997f8f749
[  400.690735][T18921] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  400.690749][T18921] RBP: 00007f6998e4b090 R08: 0000000000000000 R09: 0000000000000000
[  400.690762][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  400.690774][T18921] R13: 00007f69981e6038 R14: 00007f69981e5fa0 R15: 00007ffed42fcc78
[  400.690811][T18921]  </TASK>
[  401.117639][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3819'.
[  401.198506][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'.
[  401.324080][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3825'.
[  401.399149][T18948] IPv6: NLM_F_CREATE should be specified when creating new route
[  401.602451][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3830'.
[  401.653428][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'.
[  401.740789][T18971] netlink: 'syz.3.3831': attribute type 11 has an invalid length.
[  401.765544][T18972] FAULT_INJECTION: forcing a failure.
[  401.765544][T18972] name failslab, interval 1, probability 0, space 0, times 0
[  401.778309][T18972] CPU: 0 UID: 0 PID: 18972 Comm: syz.1.3834 Not tainted syzkaller #0 PREEMPT(full) 
[  401.778337][T18972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  401.778350][T18972] Call Trace:
[  401.778358][T18972]  <TASK>
[  401.778367][T18972]  dump_stack_lvl+0xe8/0x150
[  401.778399][T18972]  should_fail_ex+0x414/0x560
[  401.778440][T18972]  should_failslab+0xa8/0x100
[  401.778465][T18972]  kmem_cache_alloc_noprof+0x88/0x710
[  401.778493][T18972]  ? skb_clone+0x212/0x3a0
[  401.778524][T18972]  skb_clone+0x212/0x3a0
[  401.778553][T18972]  bpf_clone_redirect+0x16a/0x4b0
[  401.778585][T18972]  ? bpf_test_run+0x192/0x7d0
[  401.778612][T18972]  bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68
[  401.778649][T18972]  ? __pfx___schedule+0x10/0x10
[  401.778677][T18972]  ? ktime_get+0x45/0x200
[  401.778718][T18972]  ? preempt_schedule_thunk+0x16/0x30
[  401.778741][T18972]  ? preempt_schedule_common+0x83/0xd0
[  401.778758][T18972]  ? bpf_test_run+0x192/0x7d0
[  401.778785][T18972]  ? bpf_test_timer_continue+0x10d/0x320
[  401.778815][T18972]  bpf_test_run+0x313/0x7d0
[  401.778862][T18972]  ? __pfx_bpf_test_run+0x10/0x10
[  401.778903][T18972]  ? __kasan_krealloc+0xeb/0x110
[  401.778927][T18972]  ? eth_type_trans+0x35e/0x6d0
[  401.778961][T18972]  ? convert___skb_to_skb+0x3d/0x5b0
[  401.779001][T18972]  bpf_prog_test_run_skb+0xd67/0x1d50
[  401.779039][T18972]  ? __fget_files+0x2a/0x420
[  401.779067][T18972]  ? __fget_files+0x3a0/0x420
[  401.779113][T18972]  ? __fget_files+0x2a/0x420
[  401.779143][T18972]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  401.779168][T18972]  bpf_prog_test_run+0x2c7/0x340
[  401.779203][T18972]  __sys_bpf+0x562/0x860
[  401.779234][T18972]  ? __pfx___sys_bpf+0x10/0x10
[  401.779280][T18972]  ? ksys_write+0x22a/0x250
[  401.779304][T18972]  ? __pfx_ksys_write+0x10/0x10
[  401.779332][T18972]  __x64_sys_bpf+0x7c/0x90
[  401.779358][T18972]  do_syscall_64+0xec/0xf80
[  401.779379][T18972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.779400][T18972]  ? trace_irq_disable+0x37/0x100
[  401.779427][T18972]  ? clear_bhb_loop+0x60/0xb0
[  401.779453][T18972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.779473][T18972] RIP: 0033:0x7f6997f8f749
[  401.779492][T18972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.779510][T18972] RSP: 002b:00007f6998e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  401.779533][T18972] RAX: ffffffffffffffda RBX: 00007f69981e5fa0 RCX: 00007f6997f8f749
[  401.779548][T18972] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  401.779560][T18972] RBP: 00007f6998e4b090 R08: 0000000000000000 R09: 0000000000000000
[  401.779573][T18972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  401.779585][T18972] R13: 00007f69981e6038 R14: 00007f69981e5fa0 R15: 00007ffed42fcc78
[  401.779639][T18972]  </TASK>
[  402.292498][T18985] netlink: 'syz.4.3838': attribute type 28 has an invalid length.
[  402.679006][T19011] IPv6: addrconf: prefix option has invalid lifetime
[  402.696220][T19012] IPv6: addrconf: prefix option has invalid lifetime
[  402.712537][T19015] netlink: 'syz.4.3848': attribute type 3 has an invalid length.
[  402.839721][T19022] netlink: 'syz.3.3851': attribute type 6 has an invalid length.
[  403.572187][T19067] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  403.608154][T19067] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  403.638583][T19067] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  403.714876][T19072] netlink: 'syz.4.3872': attribute type 1 has an invalid length.
[  403.745655][T19072] __nla_validate_parse: 13 callbacks suppressed
[  403.745675][T19072] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3872'.
[  403.771622][T19073] netlink: 'syz.4.3872': attribute type 1 has an invalid length.
[  403.785469][T19073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3872'.
[  404.007522][T19085] netlink: 'syz.2.3876': attribute type 1 has an invalid length.
[  404.043539][T19085] netlink: 'syz.2.3876': attribute type 1 has an invalid length.
[  404.067071][T19085] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.3876'.
[  404.095354][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'.
[  404.287382][T19098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.567203][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'.
[  404.628783][T19114] rdma_rxe: rxe_newlink: failed to add lo
[  404.834796][T19130] netlink: 4908 bytes leftover after parsing attributes in process `syz.0.3892'.
[  405.213079][T19148] vlan2: entered promiscuous mode
[  405.230410][T19150] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  405.231117][T19148] bridge0: entered promiscuous mode
[  405.239822][T19152] netlink: 'syz.4.3901': attribute type 1 has an invalid length.
[  405.255863][T19156] netlink: 'syz.2.3903': attribute type 1 has an invalid length.
[  405.326906][T19152] bond6: entered promiscuous mode
[  405.343153][T19152] 8021q: adding VLAN 0 to HW filter on device bond6
[  405.360991][T19156] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  405.613957][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'.
[  405.648839][T19183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3910'.
[  405.775097][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'.
[  406.191574][T19189] 
[  406.193978][T19189] ======================================================
[  406.201017][T19189] WARNING: possible circular locking dependency detected
[  406.208074][T19189] syzkaller #0 Not tainted
[  406.212516][T19189] ------------------------------------------------------
[  406.219557][T19189] syz.4.3913/19189 is trying to acquire lock:
[  406.225647][T19189] ffff888141ff64f0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450
[  406.235126][T19189] 
[  406.235126][T19189] but task is already holding lock:
[  406.242524][T19189] ffff888141ff5fb0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x199/0x450
[  406.252772][T19189] 
[  406.252772][T19189] which lock already depends on the new lock.
[  406.252772][T19189] 
[  406.263207][T19189] 
[  406.263207][T19189] the existing dependency chain (in reverse order) is:
[  406.272246][T19189] 
[  406.272246][T19189] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  406.280914][T19189]        blk_alloc_queue+0x52f/0x610
[  406.286248][T19189]        __blk_mq_alloc_disk+0x15c/0x340
[  406.291927][T19189]        nbd_dev_add+0x46c/0xae0
[  406.296920][T19189]        nbd_init+0x168/0x1f0
[  406.301654][T19189]        do_one_initcall+0x1f1/0x800
[  406.306979][T19189]        do_initcall_level+0x104/0x190
[  406.312463][T19189]        do_initcalls+0x59/0xa0
[  406.317337][T19189]        kernel_init_freeable+0x2a7/0x3d0
[  406.323083][T19189]        kernel_init+0x1d/0x1d0
[  406.327975][T19189]        ret_from_fork+0x510/0xa50
[  406.333112][T19189]        ret_from_fork_asm+0x1a/0x30
[  406.338441][T19189] 
[  406.338441][T19189] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  406.345697][T19189]        fs_reclaim_acquire+0x72/0x100
[  406.351233][T19189]        __kmalloc_cache_node_noprof+0x45/0x700
[  406.357514][T19189]        create_worker+0x112/0x720
[  406.362687][T19189]        workqueue_prepare_cpu+0xe4/0x170
[  406.368450][T19189]        cpuhp_invoke_callback+0x445/0x860
[  406.374300][T19189]        _cpu_up+0x2ce/0x5c0
[  406.378930][T19189]        cpu_up+0x1d2/0x220
[  406.383470][T19189]        cpuhp_bringup_mask+0xb2/0x1a0
[  406.388977][T19189]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  406.395348][T19189]        bringup_nonboot_cpus+0x17/0x30
[  406.400925][T19189]        smp_init+0x32/0x110
[  406.405530][T19189]        kernel_init_freeable+0x289/0x3d0
[  406.411278][T19189]        kernel_init+0x1d/0x1d0
[  406.416151][T19189]        ret_from_fork+0x510/0xa50
[  406.421277][T19189]        ret_from_fork_asm+0x1a/0x30
[  406.426582][T19189] 
[  406.426582][T19189] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  406.434336][T19189]        cpus_read_lock+0x42/0x160
[  406.439460][T19189]        static_key_slow_inc+0x12/0x30
[  406.444945][T19189]        nbd_genl_reconfigure+0x10d8/0x1a50
[  406.450860][T19189]        genl_family_rcv_msg_doit+0x215/0x300
[  406.456942][T19189]        genl_rcv_msg+0x60e/0x790
[  406.461976][T19189]        netlink_rcv_skb+0x208/0x470
[  406.467277][T19189]        genl_rcv+0x28/0x40
[  406.471843][T19189]        netlink_unicast+0x82f/0x9e0
[  406.477148][T19189]        netlink_sendmsg+0x805/0xb30
[  406.482453][T19189]        __sock_sendmsg+0x21c/0x270
[  406.487669][T19189]        ____sys_sendmsg+0x505/0x820
[  406.492968][T19189]        ___sys_sendmsg+0x21f/0x2a0
[  406.498187][T19189]        __x64_sys_sendmsg+0x19b/0x260
[  406.503669][T19189]        do_syscall_64+0xec/0xf80
[  406.508727][T19189]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.515166][T19189] 
[  406.515166][T19189] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  406.522831][T19189]        __mutex_lock+0x187/0x1350
[  406.527957][T19189]        nbd_queue_rq+0x257/0xf10
[  406.533005][T19189]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  406.539091][T19189]        __blk_mq_sched_dispatch_requests+0xdac/0x1570
[  406.545977][T19189]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  406.552507][T19189]        blk_mq_run_hw_queue+0x348/0x4f0
[  406.558175][T19189]        blk_mq_dispatch_list+0xd0b/0xe00
[  406.563913][T19189]        blk_mq_flush_plug_list+0x469/0x550
[  406.569826][T19189]        __blk_flush_plug+0x3d3/0x4b0
[  406.575216][T19189]        __submit_bio+0x2d0/0x5a0
[  406.580261][T19189]        submit_bio_noacct_nocheck+0x2eb/0xa30
[  406.586436][T19189]        block_read_full_folio+0x599/0x830
[  406.592261][T19189]        filemap_read_folio+0x117/0x380
[  406.597912][T19189]        do_read_cache_folio+0x358/0x590
[  406.603575][T19189]        read_part_sector+0xb6/0x2b0
[  406.608906][T19189]        adfspart_check_ICS+0xa4/0xa50
[  406.614409][T19189]        bdev_disk_changed+0x75f/0x14b0
[  406.619986][T19189]        blkdev_get_whole+0x380/0x510
[  406.625383][T19189]        bdev_open+0x31e/0xd30
[  406.630177][T19189]        blkdev_open+0x457/0x600
[  406.635143][T19189]        do_dentry_open+0x7ce/0x1420
[  406.640464][T19189]        vfs_open+0x3b/0x340
[  406.645085][T19189]        path_openat+0x340e/0x3dd0
[  406.650217][T19189]        do_filp_open+0x1fa/0x410
[  406.655274][T19189]        do_sys_openat2+0x121/0x200
[  406.660583][T19189]        __x64_sys_openat+0x138/0x170
[  406.665982][T19189]        do_syscall_64+0xec/0xf80
[  406.671126][T19189]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.677646][T19189] 
[  406.677646][T19189] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  406.684883][T19189]        __mutex_lock+0x187/0x1350
[  406.690019][T19189]        nbd_queue_rq+0xc8/0xf10
[  406.694993][T19189]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  406.701170][T19189]        __blk_mq_sched_dispatch_requests+0xdac/0x1570
[  406.708064][T19189]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  406.714614][T19189]        blk_mq_run_hw_queue+0x348/0x4f0
[  406.720288][T19189]        blk_mq_dispatch_list+0xd0b/0xe00
[  406.726065][T19189]        blk_mq_flush_plug_list+0x469/0x550
[  406.731995][T19189]        __blk_flush_plug+0x3d3/0x4b0
[  406.737433][T19189]        __submit_bio+0x2d0/0x5a0
[  406.742489][T19189]        submit_bio_noacct_nocheck+0x2eb/0xa30
[  406.748673][T19189]        block_read_full_folio+0x599/0x830
[  406.754500][T19189]        filemap_read_folio+0x117/0x380
[  406.760068][T19189]        do_read_cache_folio+0x358/0x590
[  406.765721][T19189]        read_part_sector+0xb6/0x2b0
[  406.771021][T19189]        adfspart_check_ICS+0xa4/0xa50
[  406.776530][T19189]        bdev_disk_changed+0x75f/0x14b0
[  406.782116][T19189]        blkdev_get_whole+0x380/0x510
[  406.787507][T19189]        bdev_open+0x31e/0xd30
[  406.792290][T19189]        blkdev_open+0x457/0x600
[  406.797253][T19189]        do_dentry_open+0x7ce/0x1420
[  406.802560][T19189]        vfs_open+0x3b/0x340
[  406.807181][T19189]        path_openat+0x340e/0x3dd0
[  406.812546][T19189]        do_filp_open+0x1fa/0x410
[  406.817645][T19189]        do_sys_openat2+0x121/0x200
[  406.822876][T19189]        __x64_sys_openat+0x138/0x170
[  406.828283][T19189]        do_syscall_64+0xec/0xf80
[  406.833354][T19189]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.839788][T19189] 
[  406.839788][T19189] -> #1 (set->srcu){.+.+}-{0:0}:
[  406.846967][T19189]        __synchronize_srcu+0x96/0x390
[  406.852451][T19189]        elevator_switch+0x12b/0x5f0
[  406.857754][T19189]        elevator_change+0x2cd/0x450
[  406.863229][T19189]        elevator_set_default+0x1af/0x2b0
[  406.868968][T19189]        blk_register_queue+0x34e/0x3f0
[  406.874649][T19189]        __add_disk+0x677/0xd50
[  406.879526][T19189]        add_disk_fwnode+0xfc/0x480
[  406.884746][T19189]        nbd_dev_add+0x717/0xae0
[  406.889807][T19189]        nbd_init+0x168/0x1f0
[  406.894518][T19189]        do_one_initcall+0x1f1/0x800
[  406.899831][T19189]        do_initcall_level+0x104/0x190
[  406.905305][T19189]        do_initcalls+0x59/0xa0
[  406.910191][T19189]        kernel_init_freeable+0x2a7/0x3d0
[  406.915922][T19189]        kernel_init+0x1d/0x1d0
[  406.920799][T19189]        ret_from_fork+0x510/0xa50
[  406.925941][T19189]        ret_from_fork_asm+0x1a/0x30
[  406.931350][T19189] 
[  406.931350][T19189] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  406.939191][T19189]        __lock_acquire+0x15a6/0x2cf0
[  406.944593][T19189]        lock_acquire+0x107/0x340
[  406.949629][T19189]        __mutex_lock+0x187/0x1350
[  406.954765][T19189]        elevator_change+0x1b4/0x450
[  406.960065][T19189]        elevator_set_none+0x98/0x110
[  406.965455][T19189]        blk_mq_update_nr_hw_queues+0x5b4/0x1a80
[  406.971895][T19189]        nbd_start_device+0x17f/0xb10
[  406.977311][T19189]        nbd_genl_connect+0x1353/0x1900
[  406.982902][T19189]        genl_family_rcv_msg_doit+0x215/0x300
[  406.988992][T19189]        genl_rcv_msg+0x60e/0x790
[  406.994121][T19189]        netlink_rcv_skb+0x208/0x470
[  406.999425][T19189]        genl_rcv+0x28/0x40
[  407.004047][T19189]        netlink_unicast+0x82f/0x9e0
[  407.009352][T19189]        netlink_sendmsg+0x805/0xb30
[  407.014654][T19189]        __sock_sendmsg+0x21c/0x270
[  407.019873][T19189]        ____sys_sendmsg+0x505/0x820
[  407.025204][T19189]        ___sys_sendmsg+0x21f/0x2a0
[  407.030422][T19189]        __x64_sys_sendmsg+0x19b/0x260
[  407.035897][T19189]        do_syscall_64+0xec/0xf80
[  407.040944][T19189]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.047469][T19189] 
[  407.047469][T19189] other info that might help us debug this:
[  407.047469][T19189] 
[  407.057709][T19189] Chain exists of:
[  407.057709][T19189]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53
[  407.057709][T19189] 
[  407.071558][T19189]  Possible unsafe locking scenario:
[  407.071558][T19189] 
[  407.079025][T19189]        CPU0                    CPU1
[  407.084402][T19189]        ----                    ----
[  407.089789][T19189]   lock(&q->q_usage_counter(io)#53);
[  407.095276][T19189]                                lock(fs_reclaim);
[  407.101882][T19189]                                lock(&q->q_usage_counter(io)#53);
[  407.109883][T19189]   lock(&q->elevator_lock);
[  407.114487][T19189] 
[  407.114487][T19189]  *** DEADLOCK ***
[  407.114487][T19189] 
[  407.122740][T19189] 6 locks held by syz.4.3913/19189:
[  407.127975][T19189]  #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  407.136285][T19189]  #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  407.145276][T19189]  #2: ffff888024fa41d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80
[  407.156711][T19189]  #3: ffff888024fa40d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80
[  407.167792][T19189]  #4: ffff888141ff5fb0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x199/0x450
[  407.178534][T19189]  #5: ffff888141ff5fe8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x199/0x450
[  407.189478][T19189] 
[  407.189478][T19189] stack backtrace:
[  407.195387][T19189] CPU: 1 UID: 0 PID: 19189 Comm: syz.4.3913 Not tainted syzkaller #0 PREEMPT(full) 
[  407.195410][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  407.195421][T19189] Call Trace:
[  407.195429][T19189]  <TASK>
[  407.195436][T19189]  dump_stack_lvl+0xe8/0x150
[  407.195460][T19189]  print_circular_bug+0x2e2/0x300
[  407.195485][T19189]  check_noncircular+0x12e/0x150
[  407.195510][T19189]  __lock_acquire+0x15a6/0x2cf0
[  407.195539][T19189]  ? elevator_change+0x1b4/0x450
[  407.195568][T19189]  lock_acquire+0x107/0x340
[  407.195584][T19189]  ? elevator_change+0x1b4/0x450
[  407.195613][T19189]  __mutex_lock+0x187/0x1350
[  407.195632][T19189]  ? elevator_change+0x1b4/0x450
[  407.195655][T19189]  ? __timer_delete+0x5d/0x390
[  407.195671][T19189]  ? rcu_is_watching+0x15/0xb0
[  407.195694][T19189]  ? work_grab_pending+0x3d6/0x8e0
[  407.195713][T19189]  ? elevator_change+0x1b4/0x450
[  407.195737][T19189]  ? __pfx___mutex_lock+0x10/0x10
[  407.195754][T19189]  ? enable_work+0x16b/0x220
[  407.195775][T19189]  ? lockdep_hardirqs_on+0x7b/0x110
[  407.195795][T19189]  ? __cancel_work_sync+0xf7/0x110
[  407.195819][T19189]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  407.195846][T19189]  elevator_change+0x1b4/0x450
[  407.195872][T19189]  elevator_set_none+0x98/0x110
[  407.195894][T19189]  ? __pfx_elevator_set_none+0x10/0x10
[  407.195919][T19189]  ? xa_load+0x1ea/0x210
[  407.195941][T19189]  blk_mq_update_nr_hw_queues+0x5b4/0x1a80
[  407.195975][T19189]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  407.195995][T19189]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  407.196027][T19189]  ? sysfs_add_file_mode_ns+0x259/0x300
[  407.196059][T19189]  nbd_start_device+0x17f/0xb10
[  407.196089][T19189]  ? device_create_file+0xf4/0x1b0
[  407.196119][T19189]  nbd_genl_connect+0x1353/0x1900
[  407.196149][T19189]  ? __pfx_nbd_genl_connect+0x10/0x10
[  407.196178][T19189]  ? rcu_is_watching+0x15/0xb0
[  407.196201][T19189]  ? __nla_parse+0x40/0x60
[  407.196221][T19189]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  407.196243][T19189]  genl_family_rcv_msg_doit+0x215/0x300
[  407.196263][T19189]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  407.196284][T19189]  ? __lock_acquire+0x6b6/0x2cf0
[  407.196305][T19189]  genl_rcv_msg+0x60e/0x790
[  407.196323][T19189]  ? __pfx_genl_rcv_msg+0x10/0x10
[  407.196338][T19189]  ? __pfx_nbd_genl_connect+0x10/0x10
[  407.196369][T19189]  netlink_rcv_skb+0x208/0x470
[  407.196392][T19189]  ? __pfx_genl_rcv_msg+0x10/0x10
[  407.196408][T19189]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  407.196428][T19189]  ? genl_rcv+0x19/0x40
[  407.196461][T19189]  ? down_read+0x274/0x2e0
[  407.196480][T19189]  ? genl_rcv+0xd/0x40
[  407.196507][T19189]  genl_rcv+0x28/0x40
[  407.196532][T19189]  netlink_unicast+0x82f/0x9e0
[  407.196563][T19189]  ? __pfx_netlink_unicast+0x10/0x10
[  407.196581][T19189]  ? __alloc_skb+0x198/0x3a0
[  407.196599][T19189]  ? netlink_sendmsg+0x642/0xb30
[  407.196620][T19189]  ? skb_put+0x11b/0x210
[  407.196639][T19189]  netlink_sendmsg+0x805/0xb30
[  407.196666][T19189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.196690][T19189]  ? aa_sock_msg_perm+0xf1/0x1b0
[  407.196713][T19189]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  407.196730][T19189]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.196753][T19189]  __sock_sendmsg+0x21c/0x270
[  407.196780][T19189]  ____sys_sendmsg+0x505/0x820
[  407.196804][T19189]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.196830][T19189]  ? import_iovec+0x74/0xa0
[  407.196852][T19189]  ___sys_sendmsg+0x21f/0x2a0
[  407.196873][T19189]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.196897][T19189]  ? futex_wait+0x285/0x360
[  407.196932][T19189]  ? __fget_files+0x2a/0x420
[  407.196954][T19189]  ? __fget_files+0x3a0/0x420
[  407.196981][T19189]  __x64_sys_sendmsg+0x19b/0x260
[  407.197003][T19189]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.197028][T19189]  ? rcu_is_watching+0x15/0xb0
[  407.197055][T19189]  do_syscall_64+0xec/0xf80
[  407.197072][T19189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.197089][T19189]  ? trace_irq_disable+0x37/0x100
[  407.197113][T19189]  ? clear_bhb_loop+0x60/0xb0
[  407.197132][T19189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.197149][T19189] RIP: 0033:0x7f1cef18f749
[  407.197165][T19189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.197181][T19189] RSP: 002b:00007f1cf001a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.197199][T19189] RAX: ffffffffffffffda RBX: 00007f1cef3e5fa0 RCX: 00007f1cef18f749
[  407.197213][T19189] RDX: 0000000020000010 RSI: 0000200000000000 RDI: 0000000000000004
[  407.197225][T19189] RBP: 00007f1cef213f91 R08: 0000000000000000 R09: 0000000000000000
[  407.197237][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.197247][T19189] R13: 00007f1cef3e6038 R14: 00007f1cef3e5fa0 R15: 00007ffcf1b640a8
[  407.197269][T19189]  </TASK>
[  407.734911][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3917'.
[  407.790604][ T5843] block nbd4: Receive control failed (result -32)
[  407.797337][ T5843] block nbd4: Receive control failed (result -32)