last executing test programs:

36.831058146s ago: executing program 0 (id=2400):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x48)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

36.696567341s ago: executing program 0 (id=2401):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/69, 0x45}], 0x1}, 0x40000123)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000000000000000000000000000000000000a70858a423ad06e91acbfa20013bd019cfb72d233711fc0c1d4c4dfd9bdb0aeaaa1fb5f044c1235dfcdce969a3ca69bda7763bd2ba482bfd2ce46537554f4a77010dc5307842e0e9435aacabc1f61e1cc1871ded0cceb919834a0a41f535c195c92255f4c6a1fc2154605ed9823d21fb8655829916eedb49755326196d921d5925f2ec8810da4d80e169fd79867cc12635ea57c5548e5596df165fa857e53afb3fe882579091", @ANYRES32=0x0, @ANYBLOB="1708000000410000240012800b00010067726574617000001400028008000500080000000800040000010000"], 0x44}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000440c05e30000000000ce120000006ead00e100"], 0x20}, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0xf3a, 0x1)
splice(r8, 0x0, r5, 0x0, 0x8000, 0x2)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r10}, 0x10)
ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="881734afc3400961d4fd4b505c7a966ebdc06333a11f500fe485f6bef6e4af8615334e9723ac8afe2793defcdea82830444edb807fca7f026d35ed8556ec4186a1e459b73faec732c0cce14bfb4e8e1e8d81163e35a1ac680b5b65388950dfc264023a9cb45c746c15dc8e4f30350614f7df2101f048f5cb7ecbe458d3e5c83fb4a5d00713b05a87e93341bbe2130a31798c27ec2ca9374609abf13ddfe678348abae5a1c983789b7bbb1cb0689c4a2e903338012927b52f1412cf18c7046577", @ANYRES64=0x0], 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
write(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r8})

34.815901123s ago: executing program 0 (id=2410):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000002bc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000002b00)={0x88, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x88d0}, 0x4804)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})
socket$inet6(0xa, 0x800, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
socket$packet(0x11, 0x2, 0x300)
ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESOCT=r4], 0x30}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r7, 0x20, &(0x7f0000000040)={&(0x7f0000000a40)=""/4096, 0x1000, <r8=>0x0, &(0x7f0000001a40)=""/4096, 0x1000}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYRESHEX=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964003e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414988700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac0000000000000000000000106bae1ba2a1c72edbb5c6b3666d0c0e2992684a68770dfcd478b7c21ed824a288367ea384f7c96e6c22708c620338863966792d0b06f85a3e1c4e6f5003d0a5a1c64be536988f33d28f7599e8eaaa5276166d21ff26d2661199e6b5aee5be962735d3c9395ec1a678d923b199b127c8b220a36776507385a48096f1a7607750e4f2905848881ee6cf7a77f89845129d7baa2bdf58cbe1be07dd002e1323299560b2c1b6fd6a20740cc5344c6a018c527b32126fdad8bfad3235ff232d16a5e45dcc87461b6bc91f6773d7c72658eebade3cddab6d7beba7de046498cd5f15445e70db028a3ae0bf6102eda15889d6e4059190b95aa54f3db62f3fc822116b31a0282475bc0622e447c4fcfda7ae"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

34.815272743s ago: executing program 0 (id=2412):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x13, 0x4, 0x0, 0x3d, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x3, 0x29}, @ssrr={0x89, 0x17, 0xa5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @multicast2]}, @generic={0x0, 0xe, "83dc61b1ce5707432dd0595d"}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x6, 0x2}, {0x1, 0x4, "9b09"}]}]}}}}}}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000d0a01010000000000000000050000040900020073a900ad797a3100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)
socket$inet(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg1\x00'}]}, 0x30}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1004, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x50, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
accept4(r8, 0x0, 0x0, 0x80000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{}, &(0x7f0000000100), &(0x7f0000000140)=r6}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$inet(0x2, 0x800, 0x100)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0))
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)

32.065774006s ago: executing program 2 (id=2435):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r0}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200f80000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

31.95718236s ago: executing program 2 (id=2436):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
accept(r0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x1, 0x6, 0x8, 0x100, 0x10}], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x31044b03359ff7e5, 0xa, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x6, 0x8001, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f00000001c0)=[r2, 0x1, r0, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4000, @void, @value}, 0x94)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r5, r6}, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

30.99720017s ago: executing program 2 (id=2438):
socket$inet_sctp(0x2, 0x1, 0x84)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000)=0xfffffff9, 0x3b)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0xffc3}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000040000000000008000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f000001000000003800000000000000000000000700000000821066581ddb34253c0556c78617293444146773ac14143000002cb5640101020000005e000000"], 0x58}, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x7ffffffe, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00Q\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4041}, 0x4008810)
getuid()
r7 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

30.648790975s ago: executing program 2 (id=2440):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1)
writev(r0, 0x0, 0x0)

21.363655297s ago: executing program 0 (id=2412):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x13, 0x4, 0x0, 0x3d, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x3, 0x29}, @ssrr={0x89, 0x17, 0xa5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @multicast2]}, @generic={0x0, 0xe, "83dc61b1ce5707432dd0595d"}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x6, 0x2}, {0x1, 0x4, "9b09"}]}]}}}}}}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000d0a01010000000000000000050000040900020073a900ad797a3100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)
socket$inet(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg1\x00'}]}, 0x30}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1004, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x50, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
accept4(r8, 0x0, 0x0, 0x80000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{}, &(0x7f0000000100), &(0x7f0000000140)=r6}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$inet(0x2, 0x800, 0x100)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0))
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)

19.540991218s ago: executing program 2 (id=2440):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1)
writev(r0, 0x0, 0x0)

6.372045488s ago: executing program 0 (id=2412):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @private=0xa010100, {0x13, 0x4, 0x0, 0x3d, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x3, 0x29}, @ssrr={0x89, 0x17, 0xa5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @multicast2]}, @generic={0x0, 0xe, "83dc61b1ce5707432dd0595d"}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x2}, {0x6, 0x2}, {0x1, 0x4, "9b09"}]}]}}}}}}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000d0a01010000000000000000050000040900020073a900ad797a3100"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)
socket$inet(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfe, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg1\x00'}]}, 0x30}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1004, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x50, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
accept4(r8, 0x0, 0x0, 0x80000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b00)={{}, &(0x7f0000000100), &(0x7f0000000140)=r6}, 0x20)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
socket$inet(0x2, 0x800, 0x100)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0))
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)

5.921128947s ago: executing program 4 (id=2578):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r5, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r6)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
sendmmsg$inet6(r8, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendfile(r9, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
r12 = socket$inet6(0xa, 0x80003, 0xff)
r13 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
close(0x3)
recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

5.108472571s ago: executing program 2 (id=2440):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1)
writev(r0, 0x0, 0x0)

4.746611355s ago: executing program 4 (id=2586):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x1, 0x7)
recvfrom$ax25(r1, &(0x7f0000000340)=""/246, 0xf6, 0x40002101, &(0x7f0000000200)={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x8, &(0x7f0000000580)=@raw=[@ldst={0x3, 0x0, 0x1, 0xa, 0x0, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x6, 0x5, 0xb, 0x20}, @alu={0x7, 0x0, 0x6, 0x5, 0x4, 0xffffffffffffff5c, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xb, 0x3, 0x4, 0xfffffffffffffff4, 0x8}, @map_fd={0x18, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(r2, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000000000001000000008000600", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6], 0x2c}}, 0x20004810)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
r9 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', <r10=>0x0, 0x29, 0x5, 0x8, 0xe, 0x4, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf890, 0x7800, 0x2, 0x741e}})
sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=@ipv6_getaddr={0x5c, 0x16, 0x2, 0x70bd2a, 0x25dfdbff, {0xa, 0x38, 0xb8, 0xfe, r10}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x78f}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2f08}, @IFA_FLAGS={0x8, 0x8, 0x440}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_CACHEINFO={0x14, 0x6, {0x400000, 0x44, 0x8}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048811}, 0x10)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x20}, 0x5c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

4.160391301s ago: executing program 4 (id=2588):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000006fc0)=0xbd7, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000afd", @ANYRES32=r7, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r9 = socket(0x2c, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r10, &(0x7f0000000140), &(0x7f0000000080)=@udp=r9}, 0x20)
r11 = socket$netlink(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0}}}, &(0x7f0000000280)=0xe8)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x5760, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000005000000000000007d6400004d440800f5ffffff0262f7ffffff00009500000000000000186200000c000000000000000104000018140000", @ANYRES32=r10, @ANYBLOB="000000000800000018013631c285e9b4107d00002020642500000000002020207b1af8ff00000000bfa10000000000000f010000f8ffffffb702000008000000b70300000300000085000000", @ANYRES32=r10, @ANYBLOB="000000000000000085200000020000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x24, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0xd, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x2, 0x5, 0x7}, {0x0, 0x2, 0x6, 0x3}, {0x5, 0x1, 0x7, 0x8}, {0x0, 0x2, 0xe, 0xc}, {0x2, 0x3, 0x5, 0x9}], 0x10, 0x63, @void, @value}, 0x94)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="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", @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="06000000000000000900000000000000030000000000000080000000000000000900000000000000000000000000000006000000000000008000000000000000018000000000000081000000000000000800000000000000000000000000000004000000ba6b6e000201020000000000240009009308000000000000ff010000000000000700000000000000da6b00000000000008001f0002000000d6001400706f6c79313330352d61726d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050040000800000008e49f2ca5f30bdea4b0060568a5f0344238f1015e00263e314bf963a418d867363bb9c62b77ec6dd6f09623d40925c24edab9f56aa00943b1140ad45c414ac4cbbe2f566b4b6f62e1c37fc136a45ab54d1326ed90c12cdb29281718e005f2194754523e06476b89877f6e53fc3e9bcbbbdf6c24a911a1b97cfeb24ae11551f0b13e1b2caad3c350fec04000063bf19"], 0x310}, 0x1, 0x0, 0x0, 0x4000050}, 0x40000)

4.095576462s ago: executing program 1 (id=2589):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000b00)={'bond0\x00', &(0x7f0000000a40)=@ethtool_pauseparam={0x13, 0x0, 0x36, 0x101}})
gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000880)=0xc)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000800))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000840))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf14361", 0x31}, {&(0x7f00000004c0)="edfb4e0208682b452cd165c83da6dfc89aa5780901ea6a254eeed68ef21398b1786952009c46133ba8e71abfea18fb1a5c0e37c0bf3e6d75e962bf3089db697758e2040fbd15a9a71ec7fa08b4316872ee165e4aa7e4d3b41742fe489dd1bb0dcdb452f5001cbcec1a8d4b2bf9b6d50bb836742e7bcd7681bd3fd6c61f90ee7e6c128470c89b6e79679833128c4d2ac2f21efc9920e0bf0097a7b5b34e48670be520356d8cbbb96252d11348cfd19f6d2ee3830d41c2ad6ec9aa56f1580f80c3ef88aac30c374d17d049e7a529b4b95bbc759a5abb1a97c54691d822bf50c075b6", 0xe1}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1630cc90eed99bd86f37b5115", 0x61}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d13721238f6c8aa94a30f7bcd535081ef95378cbdda4bd310b5f790c66a2cda637a0f95374364ba5bde07e8cc02574a19352b3e69e0b", 0x62}], 0x6, 0x0, 0x0, 0x4044005}}], 0x1, 0x0)
sendmsg$netlink(r0, &(0x7f0000000940)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000440)={0x348, 0x12, 0x420, 0x70bd27, 0x25dfdbfc, "", [@typed={0x14, 0x36, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @nested={0x259, 0x69, 0x0, 0x1, [@typed={0x62, 0x17, 0x0, 0x0, @binary="1ed5ca8c36c1c43ef15ac7314d5693ef7be937682fc8531d58c410401c52b88715c13fa0508e3f4602e965e38b084a779ee83ba2317f18932555d2f742bf859e90998203c094a4cad7d4a02984b984ac579e187324eb79ca1850051b042d"}, @nested={0x4, 0xf4}, @generic="01c61271c18b27bc8996fa8d0008fe2bfe2c89087a04cc5e61d78ffde068b9353fa78b6c0ac2694d93dc9921da666595112f0252cef1173eb21f251be54e8a38fbfe69e26c08dbba78807b928c1ec509303b68420a9799ed9b0ae6bfcdf586ca1ae536626b7a881538d546efb16869515b1ab66717f170adae7c12bbf7fd476218b23b37b4d06d8f3e1e02cf9e646f8ad90eb09fa798557e8fd1db40e7365ef9476b9c79", @generic="094dab8de8d47f318914e3cf8a0ec2249f91f16e0dca7478edc451c8dacb9221170f030f0d0f309979f647b1f32ce4f7ce7e57e3df39adda49975633f154d648e732ddd108bd7f54e71f60aaaa4148341841e98bb9a086c2a7c2d8b87400194759343a0a83a33ad570f3de4479a26d36ba228a1d32586f94e377ce9874cd95926818fd32a6ec47f3188afbbb2aab253ae6d3fd51b44fb0e7d7169d84c19c135027d2c59d8a1afd6b382294473c2a6089617f093ddb5d4b8f1ebf69af1470e8bf04aea491ece58653c0278858eafa2071b28d9cb433542012d8217ada2babde1c1ed7cc9b9e4321aa3a4cc66e86", @generic="899d25e45791b95801c2b14d1849fd034f09c5f91d7d7cadce79ccbb8c7cfc7b35de216dbf0217c0ba6aa7d2de42dc7a4a7f927305cba61667714bb0bd3be352c4d2419f87a8b62bfe7e8a980d252338993a0bd6e7d69b49e2137111"]}, @nested={0xc5, 0x27, 0x0, 0x1, [@nested={0x4, 0xc8}, @nested={0x4, 0x11a}, @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x12f}, @generic="71559fbb9368b2f563ac646e058f27be8e99bab5240824cda91dc21cce3dfde880ecce59a538b5a8da8fe51f6c186c6833a16953bbb3b48a7136edb12c5a184c377e24f0ff3cc71cc37c4bc685ed8fedb4b87316553833e3c4c0e9796a098fb77232268386723e4e748bd73710fc45ab18afef1d4d137b46bd00c6ca408e17233afb303ae7f2442fd18c6b94e6b8b30b0d196c94ebcba62557a43810a379a3a778"]}]}, 0x348}, {&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x17c}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x58, 0x44}, 0x4008010)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802ee00000"], 0x1c}], 0x1}, 0x300)

3.79366901s ago: executing program 1 (id=2591):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000060000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

3.737333005s ago: executing program 4 (id=2592):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x14c, r3, 0xb60, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16e2faac}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1200000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x27fe16f2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x758}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x548a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000011)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf622abd7000fcdbdf255c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1c}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xbc, 0x6, 0x3, 0x2, 0xe02, 0x10001, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x4c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x9c}}, 0x4000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25040000000872ce2ff954a9ed000002e000000114000200"/42], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.633142412s ago: executing program 1 (id=2593):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061134b0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000869163e0000000000bf0700000000000026050700fcffffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0)
write$bt_hci(r1, &(0x7f0000000200)=ANY=[], 0x6)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbb4dfd8b30c207e8b3009600180c500000288a8060081000300000c000000e003"], 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c000400bf852c8986626691b01b5f44e4ce28715f2828"], 0xe0}], 0x1}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000100003edffffff000000000000000000d45769127845c7e6711d0b269a108f63686f7d2cb2985a0ff98365698ce7240dc009fb9dec4e6bc35c59eebad9510c0b1afcd933064a6128a240396eff5e9611fcb1941f17dec9a1dfae8d2bf28f309b7a8bc6e91e36c365f0d2447603e4e8c31c", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000100190000000800020007000000"], 0x44}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24)
connect$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0xffffec77, @hyper=0x300}, 0x10)

3.600733328s ago: executing program 4 (id=2595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="4400000010000d042cbd30000300000100000000", @ANYRES32=r2, @ANYBLOB="898200ffffffed002400128009000100626f6e6400000000140002800500010006"], 0x44}}, 0x0)

3.257200196s ago: executing program 4 (id=2597):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018580000050000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="008706751f9c0000000000000029c46f37c98fb7bb85000000a50000005d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x3, 0xd640, 0xa}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f00000003c0)=[0x1], &(0x7f0000000400)=[{0x3, 0x4, 0xc, 0x7}, {0x4, 0x5, 0xe, 0xa}, {0x4, 0x3, 0xd, 0x6}, {0x1, 0x2, 0x3, 0xb}, {0x2, 0x2, 0x1, 0x2}], 0x10, 0x10000, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r3, 0xf, 0x25, 0xfffffffffffffe22, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffefd, 0x0, 0x0}, 0x40)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r4, 0xda90)
setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6(0xa, 0x3, 0x3ff)
unshare(0x6a040000)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20048010)
sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000100000012cbd7000eaffffff000003e4b145c55436ab1f78f89cdcf9bb4544a7a40cb573296851ae636d859666decfc6d6c30392815fadff78ecbd6749cd953db7b6d83f21d074ba4eed2a32ab48a3ae9d5ee0fdd13d6a74e37ff83975f948847c709c3bceccb1524a24d5cf34bbb7025b9f7fe99109412dc3d73973a3d225af8169a6acaf0635e8e287ed9477701832a712f6", @ANYRES32=0x0, @ANYBLOB="83000400110200001800128008000100767469000c00028008000500ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4010)
socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r10], 0x4c}}, 0x0)

2.680446521s ago: executing program 1 (id=2599):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0xff80, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffff80}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0)

2.612225219s ago: executing program 1 (id=2601):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$inet(0x2, 0x1, 0x100)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x1f8, 0x308, 0x1f8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x462)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket(0x2b, 0x80801, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}}}, 0x24}}, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000062400000000b7084000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f0ffffffb70200000800000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r6, &(0x7f00000005c0), 0x0}, 0x20)
recvmsg(r3, &(0x7f00000001c0)={&(0x7f0000000700)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000780)=""/89, 0x59}], 0x1, &(0x7f00000014c0)=""/4096, 0x1000}, 0x12163)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000006800010000000000000000400aa000000017000004000b00080005"], 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, <r11=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20)
recvmsg$unix(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/152, 0x98}], 0x1}, 0x40010122)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20)
sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.253470758s ago: executing program 3 (id=2602):
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000640)={0x8, 0x64, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0x1, [0x1]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8}, @generic={0xf7, 0x4f, "7f6750b376ecba74046f5a03d99637f903bd924613e53d016362b0d9cba4faa79bb1ab52648e8d92789a229f2963eb2af7b7ee83961fca5b6b696fae9c98665d920b8a4545c54201bc1552f662de71"}, @generic={0x1, 0x2b9, "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"}]}, 0x330)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a00"], 0x1fc}}, 0x0)

2.221925596s ago: executing program 3 (id=2603):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0xb00, 0x7fff, 0x0, 0x54}, 0x9c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}]}}}]}, 0x3c}}, 0x4044)

1.465948284s ago: executing program 1 (id=2604):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)

1.217089876s ago: executing program 3 (id=2605):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x2a, 0x7}}}}]}, 0x44}}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
unshare(0xa020480)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x18400, 0x0)
ioctl$PPPIOCSMRU1(r6, 0x40047452, &(0x7f0000000380)=0x9)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(r8, 0x29, 0x1d, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)={@cgroup=r7, r7, 0x2f, 0x2008, 0x4, @value}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r9, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd7b}}], 0x1, 0x0, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x74, r4, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.009229532s ago: executing program 3 (id=2606):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000700000018000000000000008400000007000000ac1414bb000000001800000000000000840000000000000009000700ff01030018000000000000008400000005000000000000060e00000020000000000000008400000002000000f6020680"], 0xf8, 0x200400c4}], 0x1, 0x80)

928.630688ms ago: executing program 3 (id=2607):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpid()
getpid()
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmmsg$unix(r1, &(0x7f00000049c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x40000}}], 0x1, 0x0)

0s ago: executing program 3 (id=2608):
socket$inet_sctp(0x2, 0x1, 0x84)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x8}, 0x68)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000)=0xfffffff9, 0x3b)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0xffc3}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000040000000000008000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f000001000000003800000000000000000000000700000000821066581ddb34253c0556c78617293444146773ac14143000002cb5640101020000005e000000"], 0x58}, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00Q\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x4041}, 0x4008810)
getuid()
r7 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x7, 0x8b2, [0x200000001200, 0x0, 0x0, 0x200000001464, 0x2000000016c8], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0xa, 0x5, 0x4, 'veth0\x00', 'macsec0\x00', 'veth1_virt_wifi\x00', 'pim6reg0\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0xee, 0xee, 0x126, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x6, 0x3, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x8, 0x14fc, 0xb248, 0xed5c, 0xffffffff}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x3, 0x20, 0xfbfb, 'team_slave_1\x00', 'hsr0\x00', 'sit0\x00', 'vlan1\x00', @random="7597eddf42e7", [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @random="3ee09e6124d6", [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xa6, 0xde, 0x10e, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="1889e272fa7f"}}}], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffc}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x2, 0x8fb, 'pim6reg1\x00', 'netpci0\x00', 'macvlan0\x00', 'veth1_virt_wifi\x00', @random="691711708a84", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff], 0xae, 0x11e, 0x156, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x9, 0x10001, 0x7fffffff}}}], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@random="2409c21e5d2d", 0xfffffffffffffffc}}}}, {0x5, 0x40, 0x9300, 'gretap0\x00', 'veth0_to_batadv\x00', 'bond_slave_1\x00', 'syzkaller1\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x3, 0x8, 0xdada, 'veth0_to_hsr\x00', 'vlan0\x00', 'nr0\x00', 'vxcan1\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0xff], 0xe6, 0xe6, 0x116, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@loopback, @empty, [0xff000000, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff], 0x9, 0x1, 0x9, 0x25, 0x4e20, 0x4e21, 0x4e24, 0x4e22}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x2, [{0x9, 0x1, 0x6006, 'pimreg0\x00', 'team_slave_0\x00', 'vxcan1\x00', 'ip6tnl0\x00', @random="6dba8d821618", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x11e, [], [@common=@nflog={'nflog\x00', 0x50, {{0x10001, 0x0, 0x401, 0x0, 0x0, "ddd499a6f2c01ff0ba94b22fc20bb93d8ad72c80c0ef5af04a8fe7c7b116d6b2b470f54b6e2169efa9c8e4893b941fcca1e90c20758a307b21dbc2840a35fa4d"}}}], @arpreply={'arpreply\x00', 0x10, {{@local}}}}, {0x11, 0x8, 0x88fb, 'bond0\x00', 'dvmrp1\x00', 'nr0\x00', 'pim6reg0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff], 0xf6, 0x126, 0x156, [@ip={{'ip\x00', 0x0, 0x20}, {{@dev={0xac, 0x14, 0x14, 0x32}, @loopback, 0xff000000, 0xffffffff, 0x3, 0x40, 0x0, 0x8, 0x4e22, 0x4e20, 0x4e24, 0x4e20}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0xfffffff9, 0x8, 0x80, 0x2}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}]}, 0x92a)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.1.1431'.
[  222.456121][T10125] lo speed is unknown, defaulting to 1000
[  222.651503][T10145] xt_hashlimit: size too large, truncated to 1048576
[  222.739598][T10149] xt_hashlimit: size too large, truncated to 1048576
[  224.082128][T10160] lo speed is unknown, defaulting to 1000
[  224.759454][T10184] xt_hashlimit: max too large, truncated to 1048576
[  224.785716][T10184] No such timeout policy "syz1"
[  224.791756][T10188] tipc: Started in network mode
[  224.812758][T10188] tipc: Node identity 4, cluster identity 4711
[  224.865800][T10188] tipc: Node number set to 4
[  225.522076][T10200] lo speed is unknown, defaulting to 1000
[  225.605629][T10202] lo speed is unknown, defaulting to 1000
[  225.758068][T10210] lo speed is unknown, defaulting to 1000
[  225.876795][T10218] netlink: 'syz.1.1460': attribute type 1 has an invalid length.
[  225.945757][T10224] __nla_validate_parse: 2 callbacks suppressed
[  225.945780][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  226.006140][T10226] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1462'.
[  226.015289][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'.
[  226.056406][T10224] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.057863][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'.
[  226.081303][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'.
[  226.093080][T10226] netlink: 'syz.0.1462': attribute type 4 has an invalid length.
[  226.174754][T10230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1463'.
[  226.734885][T10260] IPv6: syztnl0: Disabled Multicast RS
[  226.828706][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1472'.
[  226.861180][T10262] netlink: 63 bytes leftover after parsing attributes in process `syz.1.1472'.
[  226.972561][T10262] netlink: 'syz.1.1472': attribute type 4 has an invalid length.
[  227.066137][T10270] FAULT_INJECTION: forcing a failure.
[  227.066137][T10270] name failslab, interval 1, probability 0, space 0, times 0
[  227.088557][T10270] CPU: 1 UID: 0 PID: 10270 Comm: syz.1.1475 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  227.088594][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  227.088606][T10270] Call Trace:
[  227.088615][T10270]  <TASK>
[  227.088623][T10270]  dump_stack_lvl+0x189/0x250
[  227.088666][T10270]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.088695][T10270]  ? __pfx__printk+0x10/0x10
[  227.088716][T10270]  ? kasan_save_track+0x4f/0x80
[  227.088737][T10270]  ? kasan_save_free_info+0x46/0x50
[  227.088764][T10270]  ? __kasan_slab_free+0x62/0x70
[  227.088785][T10270]  ? kmem_cache_free+0x192/0x3f0
[  227.088821][T10270]  ? pfkey_sendmsg+0x48a/0x1090
[  227.088842][T10270]  ? __sock_sendmsg+0x219/0x270
[  227.088860][T10270]  ? ____sys_sendmsg+0x505/0x830
[  227.088884][T10270]  ? ___sys_sendmsg+0x21f/0x2a0
[  227.088909][T10270]  ? __x64_sys_sendmsg+0x19b/0x260
[  227.088939][T10270]  should_fail_ex+0x414/0x560
[  227.088966][T10270]  should_failslab+0xa8/0x100
[  227.088993][T10270]  kmem_cache_alloc_noprof+0x73/0x3c0
[  227.089017][T10270]  ? xfrm_state_alloc+0x24/0x2f0
[  227.089053][T10270]  xfrm_state_alloc+0x24/0x2f0
[  227.089085][T10270]  pfkey_add+0x6e4/0x2e00
[  227.089129][T10270]  ? __pfx_pfkey_add+0x10/0x10
[  227.089150][T10270]  ? kmem_cache_free+0x192/0x3f0
[  227.089190][T10270]  pfkey_sendmsg+0xbfb/0x1090
[  227.089234][T10270]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  227.089287][T10270]  ? aa_sock_msg_perm+0x94/0x160
[  227.089311][T10270]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  227.089334][T10270]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  227.089358][T10270]  __sock_sendmsg+0x219/0x270
[  227.089382][T10270]  ____sys_sendmsg+0x505/0x830
[  227.089417][T10270]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.089454][T10270]  ? import_iovec+0x74/0xa0
[  227.089486][T10270]  ___sys_sendmsg+0x21f/0x2a0
[  227.089516][T10270]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.089585][T10270]  ? __fget_files+0x2a/0x420
[  227.089630][T10270]  ? __fget_files+0x3a0/0x420
[  227.089676][T10270]  __x64_sys_sendmsg+0x19b/0x260
[  227.089719][T10270]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  227.089768][T10270]  ? do_syscall_64+0xba/0x210
[  227.089813][T10270]  do_syscall_64+0xf6/0x210
[  227.089834][T10270]  ? clear_bhb_loop+0x45/0xa0
[  227.089859][T10270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.089878][T10270] RIP: 0033:0x7f52b8f8e969
[  227.089896][T10270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.089914][T10270] RSP: 002b:00007f52b9dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.089934][T10270] RAX: ffffffffffffffda RBX: 00007f52b91b5fa0 RCX: 00007f52b8f8e969
[  227.089949][T10270] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003
[  227.089962][T10270] RBP: 00007f52b9dc2090 R08: 0000000000000000 R09: 0000000000000000
[  227.089974][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.089985][T10270] R13: 0000000000000000 R14: 00007f52b91b5fa0 R15: 00007ffef6d9ffe8
[  227.090017][T10270]  </TASK>
[  227.558295][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'.
[  227.742151][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'.
[  229.065341][T10292] netlink: 'syz.0.1481': attribute type 4 has an invalid length.
[  229.101390][T10292] netlink: 'syz.0.1481': attribute type 4 has an invalid length.
[  229.245359][T10298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.113695][T10331] FAULT_INJECTION: forcing a failure.
[  230.113695][T10331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.150586][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.3.1495 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  230.150616][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  230.150628][T10331] Call Trace:
[  230.150636][T10331]  <TASK>
[  230.150645][T10331]  dump_stack_lvl+0x189/0x250
[  230.150675][T10331]  ? __lock_acquire+0xaac/0xd20
[  230.150705][T10331]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.150733][T10331]  ? __pfx__printk+0x10/0x10
[  230.150752][T10331]  ? __might_fault+0xb0/0x130
[  230.150789][T10331]  should_fail_ex+0x414/0x560
[  230.150814][T10331]  _copy_from_user+0x2d/0xb0
[  230.150853][T10331]  rose_rt_ioctl+0x25a/0xfb0
[  230.150876][T10331]  ? __pfx_rose_rt_ioctl+0x10/0x10
[  230.150904][T10331]  ? bpf_lsm_capable+0x9/0x20
[  230.150930][T10331]  ? security_capable+0x7e/0x2e0
[  230.150958][T10331]  rose_ioctl+0x3ce/0x8b0
[  230.150984][T10331]  ? __pfx_rose_ioctl+0x10/0x10
[  230.151010][T10331]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  230.151037][T10331]  sock_do_ioctl+0xd9/0x300
[  230.151060][T10331]  ? __pfx_sock_do_ioctl+0x10/0x10
[  230.151080][T10331]  ? __lock_acquire+0xaac/0xd20
[  230.151120][T10331]  sock_ioctl+0x576/0x790
[  230.151141][T10331]  ? __pfx_sock_ioctl+0x10/0x10
[  230.151163][T10331]  ? __fget_files+0x3a0/0x420
[  230.151187][T10331]  ? __fget_files+0x2a/0x420
[  230.151221][T10331]  ? bpf_lsm_file_ioctl+0x9/0x20
[  230.151245][T10331]  ? __pfx_sock_ioctl+0x10/0x10
[  230.151263][T10331]  __se_sys_ioctl+0xf9/0x170
[  230.151286][T10331]  do_syscall_64+0xf6/0x210
[  230.151306][T10331]  ? clear_bhb_loop+0x45/0xa0
[  230.151330][T10331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.151349][T10331] RIP: 0033:0x7fd8b278e969
[  230.151365][T10331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.151381][T10331] RSP: 002b:00007fd8b05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.151420][T10331] RAX: ffffffffffffffda RBX: 00007fd8b29b5fa0 RCX: 00007fd8b278e969
[  230.151435][T10331] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004
[  230.151448][T10331] RBP: 00007fd8b05f6090 R08: 0000000000000000 R09: 0000000000000000
[  230.151460][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.151472][T10331] R13: 0000000000000000 R14: 00007fd8b29b5fa0 R15: 00007fff3b7e9f38
[  230.151504][T10331]  </TASK>
[  230.655073][T10344] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  230.670418][T10350] netlink: 'syz.0.1501': attribute type 1 has an invalid length.
[  230.731304][T10344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  230.763507][T10342] lo speed is unknown, defaulting to 1000
[  230.861900][T10344] wg1: entered promiscuous mode
[  230.873138][T10358] netlink: 'syz.3.1503': attribute type 1 has an invalid length.
[  230.881602][T10344] wg1: entered allmulticast mode
[  231.042641][T10365] __nla_validate_parse: 1 callbacks suppressed
[  231.042660][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'.
[  231.312790][T10372] lo speed is unknown, defaulting to 1000
[  231.658028][T10381] lo speed is unknown, defaulting to 1000
[  233.100266][T10433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.281348][T10434] lo speed is unknown, defaulting to 1000
[  233.329833][T10415] lo speed is unknown, defaulting to 1000
[  234.219709][T10461] FAULT_INJECTION: forcing a failure.
[  234.219709][T10461] name failslab, interval 1, probability 0, space 0, times 0
[  234.276657][T10461] CPU: 1 UID: 0 PID: 10461 Comm: syz.2.1532 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  234.276686][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  234.276698][T10461] Call Trace:
[  234.276706][T10461]  <TASK>
[  234.276714][T10461]  dump_stack_lvl+0x189/0x250
[  234.276750][T10461]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.276778][T10461]  ? __pfx__printk+0x10/0x10
[  234.276804][T10461]  ? __pfx___might_resched+0x10/0x10
[  234.276821][T10461]  ? fs_reclaim_acquire+0x7d/0x100
[  234.276867][T10461]  should_fail_ex+0x414/0x560
[  234.276890][T10461]  should_failslab+0xa8/0x100
[  234.276916][T10461]  __kmalloc_cache_noprof+0x70/0x3d0
[  234.276957][T10461]  ? hash_ip_create+0x6d5/0x1410
[  234.276988][T10461]  hash_ip_create+0x6d5/0x1410
[  234.277029][T10461]  ? __pfx_hash_ip_create+0x10/0x10
[  234.277056][T10461]  ? __nla_parse+0x40/0x60
[  234.277078][T10461]  ? __pfx_hash_ip_create+0x10/0x10
[  234.277104][T10461]  ip_set_create+0xa94/0x1940
[  234.277134][T10461]  ? ip_set_create+0x4a2/0x1940
[  234.277176][T10461]  ? __pfx_ip_set_create+0x10/0x10
[  234.277244][T10461]  nfnetlink_rcv_msg+0xb4a/0x1130
[  234.277270][T10461]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  234.277308][T10461]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  234.277360][T10461]  ? is_bpf_text_address+0x26/0x2b0
[  234.277393][T10461]  ? is_bpf_text_address+0x292/0x2b0
[  234.277429][T10461]  netlink_rcv_skb+0x219/0x490
[  234.277454][T10461]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  234.277475][T10461]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.277513][T10461]  ? apparmor_capable+0x137/0x1b0
[  234.277542][T10461]  ? bpf_lsm_capable+0x9/0x20
[  234.277568][T10461]  ? security_capable+0x7e/0x2e0
[  234.277597][T10461]  nfnetlink_rcv+0x273/0x2530
[  234.277630][T10461]  ? kernel_text_address+0xa5/0xe0
[  234.277675][T10461]  ? __kernel_text_address+0xd/0x40
[  234.277701][T10461]  ? unwind_get_return_address+0x4d/0x90
[  234.277726][T10461]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  234.277747][T10461]  ? arch_stack_walk+0xfc/0x150
[  234.277787][T10461]  ? stack_trace_save+0x9c/0xe0
[  234.277811][T10461]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  234.277838][T10461]  ? stack_depot_save_flags+0x40/0x910
[  234.277869][T10461]  ? kasan_save_track+0x4f/0x80
[  234.277888][T10461]  ? kasan_save_track+0x3e/0x80
[  234.277918][T10461]  ? __lock_acquire+0xaac/0xd20
[  234.277973][T10461]  ? __lock_acquire+0xaac/0xd20
[  234.278010][T10461]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.278041][T10461]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.278065][T10461]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.278095][T10461]  netlink_unicast+0x758/0x8d0
[  234.278129][T10461]  netlink_sendmsg+0x805/0xb30
[  234.278165][T10461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.278193][T10461]  ? aa_sock_msg_perm+0x94/0x160
[  234.278217][T10461]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  234.278239][T10461]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.278270][T10461]  __sock_sendmsg+0x219/0x270
[  234.278295][T10461]  ____sys_sendmsg+0x505/0x830
[  234.278329][T10461]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.278367][T10461]  ? import_iovec+0x74/0xa0
[  234.278399][T10461]  ___sys_sendmsg+0x21f/0x2a0
[  234.278430][T10461]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.278499][T10461]  ? __fget_files+0x2a/0x420
[  234.278525][T10461]  ? __fget_files+0x3a0/0x420
[  234.278563][T10461]  __x64_sys_sendmsg+0x19b/0x260
[  234.278594][T10461]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.278641][T10461]  ? do_syscall_64+0xba/0x210
[  234.278666][T10461]  do_syscall_64+0xf6/0x210
[  234.278687][T10461]  ? clear_bhb_loop+0x45/0xa0
[  234.278711][T10461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.278730][T10461] RIP: 0033:0x7f6fd0d8e969
[  234.278748][T10461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.278765][T10461] RSP: 002b:00007f6fd1b7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.278786][T10461] RAX: ffffffffffffffda RBX: 00007f6fd0fb5fa0 RCX: 00007f6fd0d8e969
[  234.278800][T10461] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  234.278824][T10461] RBP: 00007f6fd1b7a090 R08: 0000000000000000 R09: 0000000000000000
[  234.278836][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.278847][T10461] R13: 0000000000000000 R14: 00007f6fd0fb5fa0 R15: 00007ffc086cf6b8
[  234.278888][T10461]  </TASK>
[  234.284925][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  234.348481][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  236.251858][T10496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1541'.
[  236.273022][T10496] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1541'.
[  236.365825][T10498] FAULT_INJECTION: forcing a failure.
[  236.365825][T10498] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.435560][T10498] CPU: 1 UID: 0 PID: 10498 Comm: syz.3.1542 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  236.435588][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  236.435599][T10498] Call Trace:
[  236.435606][T10498]  <TASK>
[  236.435614][T10498]  dump_stack_lvl+0x189/0x250
[  236.435643][T10498]  ? __lock_acquire+0xaac/0xd20
[  236.435671][T10498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.435695][T10498]  ? __pfx__printk+0x10/0x10
[  236.435713][T10498]  ? __might_fault+0xb0/0x130
[  236.435745][T10498]  should_fail_ex+0x414/0x560
[  236.435766][T10498]  _copy_from_user+0x2d/0xb0
[  236.435792][T10498]  kstrtouint_from_user+0xc4/0x170
[  236.435813][T10498]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  236.435847][T10498]  proc_fail_nth_write+0x88/0x240
[  236.435872][T10498]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  236.435901][T10498]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  236.435926][T10498]  vfs_write+0x27b/0xa90
[  236.435955][T10498]  ? __pfx_vfs_write+0x10/0x10
[  236.435977][T10498]  ? __fget_files+0x2a/0x420
[  236.436005][T10498]  ? __fget_files+0x3a0/0x420
[  236.436027][T10498]  ? __fget_files+0x2a/0x420
[  236.436058][T10498]  ksys_write+0x145/0x250
[  236.436077][T10498]  ? rcu_is_watching+0x15/0xb0
[  236.436105][T10498]  ? __pfx_ksys_write+0x10/0x10
[  236.436128][T10498]  ? do_syscall_64+0xba/0x210
[  236.436154][T10498]  do_syscall_64+0xf6/0x210
[  236.436173][T10498]  ? clear_bhb_loop+0x45/0xa0
[  236.436195][T10498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.436212][T10498] RIP: 0033:0x7fd8b278d41f
[  236.436229][T10498] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  236.436244][T10498] RSP: 002b:00007fd8b05d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  236.436262][T10498] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8b278d41f
[  236.436274][T10498] RDX: 0000000000000001 RSI: 00007fd8b05d50a0 RDI: 0000000000000003
[  236.436284][T10498] RBP: 00007fd8b05d5090 R08: 0000000000000000 R09: 0000000000000000
[  236.436294][T10498] R10: 0000000000012141 R11: 0000000000000293 R12: 0000000000000001
[  236.436306][T10498] R13: 0000000000000000 R14: 00007fd8b29b6080 R15: 00007fff3b7e9f38
[  236.436344][T10498]  </TASK>
[  237.155872][T10520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  237.228542][T10522] lo speed is unknown, defaulting to 1000
[  237.338394][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  237.351470][T10531] xt_hashlimit: max too large, truncated to 1048576
[  237.354634][T10534] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1557'.
[  237.359078][T10526] lo speed is unknown, defaulting to 1000
[  237.383398][T10531] No such timeout policy "syz1"
[  237.611660][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1561'.
[  237.634587][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1561'.
[  238.975094][T10590] netlink: 'syz.1.1580': attribute type 10 has an invalid length.
[  239.030866][T10590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1580'.
[  239.518596][T10607] netlink: 'syz.1.1586': attribute type 4 has an invalid length.
[  239.551425][T10607] netlink: 'syz.1.1586': attribute type 4 has an invalid length.
[  239.563752][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'.
[  239.593130][T10612] FAULT_INJECTION: forcing a failure.
[  239.593130][T10612] name failslab, interval 1, probability 0, space 0, times 0
[  239.652160][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.4.1589 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  239.652188][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  239.652200][T10612] Call Trace:
[  239.652208][T10612]  <TASK>
[  239.652217][T10612]  dump_stack_lvl+0x189/0x250
[  239.652254][T10612]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.652282][T10612]  ? __pfx__printk+0x10/0x10
[  239.652308][T10612]  ? __pfx___might_resched+0x10/0x10
[  239.652326][T10612]  ? fs_reclaim_acquire+0x7d/0x100
[  239.652360][T10612]  should_fail_ex+0x414/0x560
[  239.652386][T10612]  should_failslab+0xa8/0x100
[  239.652414][T10612]  __kmalloc_cache_noprof+0x70/0x3d0
[  239.652438][T10612]  ? hash_ip_create+0x6d5/0x1410
[  239.652468][T10612]  hash_ip_create+0x6d5/0x1410
[  239.652510][T10612]  ? __pfx_hash_ip_create+0x10/0x10
[  239.652537][T10612]  ? __nla_parse+0x40/0x60
[  239.652559][T10612]  ? __pfx_hash_ip_create+0x10/0x10
[  239.652585][T10612]  ip_set_create+0xa94/0x1940
[  239.652615][T10612]  ? ip_set_create+0x4a2/0x1940
[  239.652658][T10612]  ? __pfx_ip_set_create+0x10/0x10
[  239.652726][T10612]  nfnetlink_rcv_msg+0xb4a/0x1130
[  239.652743][T10612]  ? unwind_get_return_address+0x4d/0x90
[  239.652768][T10612]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  239.652789][T10612]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  239.652827][T10612]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  239.652843][T10612]  ? stack_depot_save_flags+0x40/0x910
[  239.652925][T10612]  netlink_rcv_skb+0x219/0x490
[  239.652950][T10612]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  239.652970][T10612]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  239.652990][T10612]  ? kasan_quarantine_put+0xdd/0x220
[  239.653026][T10612]  ? apparmor_capable+0x137/0x1b0
[  239.653056][T10612]  ? bpf_lsm_capable+0x9/0x20
[  239.653082][T10612]  ? security_capable+0x7e/0x2e0
[  239.653115][T10612]  nfnetlink_rcv+0x273/0x2530
[  239.653148][T10612]  ? __dev_queue_xmit+0x27e/0x3a70
[  239.653177][T10612]  ? __dev_queue_xmit+0x27e/0x3a70
[  239.653204][T10612]  ? __dev_queue_xmit+0x27e/0x3a70
[  239.653233][T10612]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  239.653273][T10612]  ? __dev_queue_xmit+0x27e/0x3a70
[  239.653302][T10612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.653326][T10612]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  239.653363][T10612]  ? __pfx___dev_queue_xmit+0x10/0x10
[  239.653407][T10612]  ? ref_tracker_free+0x63a/0x7d0
[  239.653427][T10612]  ? __copy_skb_header+0xa7/0x550
[  239.653456][T10612]  ? __pfx_ref_tracker_free+0x10/0x10
[  239.653477][T10612]  ? __skb_clone+0x63/0x7a0
[  239.653509][T10612]  ? __skb_clone+0x483/0x7a0
[  239.653544][T10612]  ? skb_clone+0x246/0x3a0
[  239.653576][T10612]  ? __netlink_deliver_tap+0x807/0x850
[  239.653599][T10612]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.653629][T10612]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.653652][T10612]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.653682][T10612]  netlink_unicast+0x758/0x8d0
[  239.653715][T10612]  netlink_sendmsg+0x805/0xb30
[  239.653750][T10612]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.653778][T10612]  ? aa_sock_msg_perm+0x94/0x160
[  239.653801][T10612]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  239.653823][T10612]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.653854][T10612]  __sock_sendmsg+0x219/0x270
[  239.653878][T10612]  ____sys_sendmsg+0x505/0x830
[  239.653911][T10612]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.653947][T10612]  ? import_iovec+0x74/0xa0
[  239.653977][T10612]  ___sys_sendmsg+0x21f/0x2a0
[  239.654006][T10612]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.654082][T10612]  ? __fget_files+0x2a/0x420
[  239.654123][T10612]  ? __fget_files+0x3a0/0x420
[  239.654158][T10612]  __x64_sys_sendmsg+0x19b/0x260
[  239.654187][T10612]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.654241][T10612]  ? do_syscall_64+0xba/0x210
[  239.654264][T10612]  do_syscall_64+0xf6/0x210
[  239.654283][T10612]  ? clear_bhb_loop+0x45/0xa0
[  239.654304][T10612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.654322][T10612] RIP: 0033:0x7f41b7b8e969
[  239.654337][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.654353][T10612] RSP: 002b:00007f41b8952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.654372][T10612] RAX: ffffffffffffffda RBX: 00007f41b7db5fa0 RCX: 00007f41b7b8e969
[  239.654385][T10612] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  239.654396][T10612] RBP: 00007f41b8952090 R08: 0000000000000000 R09: 0000000000000000
[  239.654407][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.654417][T10612] R13: 0000000000000000 R14: 00007f41b7db5fa0 R15: 00007fff489f6958
[  239.654446][T10612]  </TASK>
[  240.696995][T10630] netlink: 'syz.0.1596': attribute type 10 has an invalid length.
[  240.704882][T10630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1596'.
[  241.018233][T10649] netlink: 'syz.4.1601': attribute type 1 has an invalid length.
[  241.055614][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'.
[  241.067607][T10649] 8021q: adding VLAN 0 to HW filter on device bond4
[  241.333895][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'.
[  241.748915][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'.
[  241.761540][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'.
[  241.869162][T10679] netlink: 'syz.1.1610': attribute type 10 has an invalid length.
[  241.889055][T10679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1610'.
[  242.401914][T10702] lo speed is unknown, defaulting to 1000
[  242.860914][T10717] netlink: 'syz.3.1626': attribute type 10 has an invalid length.
[  242.869056][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1626'.
[  242.976602][T10717] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  243.785844][T10757] netlink: 'syz.4.1640': attribute type 10 has an invalid length.
[  243.807131][T10757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1640'.
[  244.355564][T10789] xt_hashlimit: max too large, truncated to 1048576
[  244.365112][T10789] No such timeout policy "syz1"
[  244.536838][T10793] netlink: 'syz.4.1652': attribute type 10 has an invalid length.
[  244.554189][T10793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1652'.
[  244.675319][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1657'.
[  244.708204][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1657'.
[  245.006007][T10811] lo speed is unknown, defaulting to 1000
[  245.085315][T10817] lo speed is unknown, defaulting to 1000
[  245.488712][T10842] lo speed is unknown, defaulting to 1000
[  245.724465][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  245.748091][T10854] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  247.067372][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1685'.
[  247.408511][T10907] xt_hashlimit: size too large, truncated to 1048576
[  247.432842][T10907] xt_hashlimit: max too large, truncated to 1048576
[  248.604085][T10916] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  248.749403][T10916] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.758001][T10916] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.766945][T10916] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.775449][T10916] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.951016][T10917] veth3: entered allmulticast mode
[  249.088834][T10918] bond0: left promiscuous mode
[  249.106821][T10918] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.115242][T10918] 8021q: adding VLAN 0 to HW filter on device team0
[  249.135672][T10918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.274448][T10931] 8021q: adding VLAN 0 to HW filter on device batadv1
[  249.284163][T10931] team0: Port device batadv1 added
[  249.524902][T10940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1697'.
[  249.911868][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'.
[  249.951743][T10954] netlink: 'syz.0.1704': attribute type 4 has an invalid length.
[  249.975388][T10954] netlink: 'syz.0.1704': attribute type 4 has an invalid length.
[  250.266092][T10970] netlink: 'syz.3.1710': attribute type 1 has an invalid length.
[  250.294015][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'.
[  250.435087][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'.
[  250.674370][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'.
[  250.737567][T10992] netlink: 'syz.0.1719': attribute type 4 has an invalid length.
[  250.776528][T10992] netlink: 'syz.0.1719': attribute type 4 has an invalid length.
[  251.529573][T11034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 38062 - 0
[  251.539334][T11034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 38062 - 0
[  251.548262][T11034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 38062 - 0
[  251.557945][T11034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 38062 - 0
[  251.569454][T11034] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 47337 - 0
[  251.578798][T11034] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 47337 - 0
[  251.587719][T11034] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 47337 - 0
[  251.597102][T11034] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 47337 - 0
[  251.606554][T11034] geneve3: entered promiscuous mode
[  251.611967][T11034] geneve3: entered allmulticast mode
[  251.668870][T11040] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1735'.
[  251.726007][T11044] xt_ecn: cannot match TCP bits for non-tcp packets
[  251.895159][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  251.953710][T11053] tipc: Started in network mode
[  251.967183][T11053] tipc: Node identity 7, cluster identity 4711
[  251.994118][T11053] tipc: Node number set to 7
[  253.585197][T11103] FAULT_INJECTION: forcing a failure.
[  253.585197][T11103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.601269][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.2.1757 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  253.601295][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  253.601314][T11103] Call Trace:
[  253.601320][T11103]  <TASK>
[  253.601328][T11103]  dump_stack_lvl+0x189/0x250
[  253.601356][T11103]  ? __lock_acquire+0xaac/0xd20
[  253.601383][T11103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.601408][T11103]  ? __pfx__printk+0x10/0x10
[  253.601425][T11103]  ? __might_fault+0xb0/0x130
[  253.601459][T11103]  should_fail_ex+0x414/0x560
[  253.601483][T11103]  _copy_from_user+0x2d/0xb0
[  253.601509][T11103]  kstrtouint_from_user+0xc4/0x170
[  253.601533][T11103]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  253.601569][T11103]  proc_fail_nth_write+0x88/0x240
[  253.601594][T11103]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  253.601642][T11103]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  253.601668][T11103]  vfs_write+0x27b/0xa90
[  253.601696][T11103]  ? __pfx_vfs_write+0x10/0x10
[  253.601717][T11103]  ? __fget_files+0x2a/0x420
[  253.601743][T11103]  ? __fget_files+0x3a0/0x420
[  253.601763][T11103]  ? __fget_files+0x2a/0x420
[  253.601796][T11103]  ksys_write+0x145/0x250
[  253.601818][T11103]  ? __pfx_ksys_write+0x10/0x10
[  253.601843][T11103]  ? do_syscall_64+0xba/0x210
[  253.601866][T11103]  do_syscall_64+0xf6/0x210
[  253.601885][T11103]  ? clear_bhb_loop+0x45/0xa0
[  253.601907][T11103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.601924][T11103] RIP: 0033:0x7f6fd0d8d41f
[  253.601941][T11103] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  253.601957][T11103] RSP: 002b:00007f6fd1b7a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  253.601975][T11103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6fd0d8d41f
[  253.601986][T11103] RDX: 0000000000000001 RSI: 00007f6fd1b7a0a0 RDI: 0000000000000004
[  253.601997][T11103] RBP: 00007f6fd1b7a090 R08: 0000000000000000 R09: 0000000000000000
[  253.602007][T11103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  253.602022][T11103] R13: 0000000000000000 R14: 00007f6fd0fb5fa0 R15: 00007ffc086cf6b8
[  253.602046][T11103]  </TASK>
[  253.852397][T11106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1759'.
[  253.874324][T11104] No such timeout policy "syz0"
[  254.025826][T11112] netlink: 'syz.4.1763': attribute type 4 has an invalid length.
[  254.034197][T11112] netlink: 'syz.4.1763': attribute type 4 has an invalid length.
[  254.044272][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'.
[  254.072215][T11114] netem: change failed
[  254.104813][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'.
[  254.207802][T11122] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  254.236393][T11122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  254.329161][T11130] lo speed is unknown, defaulting to 1000
[  254.892200][T11151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1775'.
[  254.949065][T11151] lo speed is unknown, defaulting to 1000
[  255.622265][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.692172][T11165] bond6: entered promiscuous mode
[  255.736788][T11165] 8021q: adding VLAN 0 to HW filter on device bond6
[  255.953077][T11188] xt_ecn: cannot match TCP bits for non-tcp packets
[  256.115235][T11197] tipc: Started in network mode
[  256.130272][T11193] FAULT_INJECTION: forcing a failure.
[  256.130272][T11193] name failslab, interval 1, probability 0, space 0, times 0
[  256.140593][T11197] tipc: Node identity 7, cluster identity 4711
[  256.147384][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.4.1789 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  256.147413][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  256.147427][T11193] Call Trace:
[  256.147435][T11193]  <TASK>
[  256.147444][T11193]  dump_stack_lvl+0x189/0x250
[  256.147483][T11193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.147513][T11193]  ? __pfx__printk+0x10/0x10
[  256.147541][T11193]  ? __pfx___might_resched+0x10/0x10
[  256.147565][T11193]  should_fail_ex+0x414/0x560
[  256.147597][T11193]  should_failslab+0xa8/0x100
[  256.147627][T11193]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  256.147677][T11193]  ? __alloc_skb+0x112/0x2d0
[  256.147708][T11193]  __alloc_skb+0x112/0x2d0
[  256.147740][T11193]  pfkey_sendmsg+0xca5/0x1090
[  256.147783][T11193]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  256.147837][T11193]  ? aa_sock_msg_perm+0x94/0x160
[  256.147862][T11193]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  256.147892][T11193]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  256.147919][T11193]  __sock_sendmsg+0x219/0x270
[  256.147944][T11193]  ____sys_sendmsg+0x505/0x830
[  256.147981][T11193]  ? __pfx_____sys_sendmsg+0x10/0x10
[  256.148021][T11193]  ? import_iovec+0x74/0xa0
[  256.148054][T11193]  ___sys_sendmsg+0x21f/0x2a0
[  256.148086][T11193]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.148157][T11193]  ? __fget_files+0x2a/0x420
[  256.148184][T11193]  ? __fget_files+0x3a0/0x420
[  256.148223][T11193]  __x64_sys_sendmsg+0x19b/0x260
[  256.148256][T11193]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  256.148306][T11193]  ? do_syscall_64+0xba/0x210
[  256.148332][T11193]  do_syscall_64+0xf6/0x210
[  256.148355][T11193]  ? clear_bhb_loop+0x45/0xa0
[  256.148385][T11193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.148406][T11193] RIP: 0033:0x7f41b7b8e969
[  256.148424][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.148443][T11193] RSP: 002b:00007f41b8952038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  256.148466][T11193] RAX: ffffffffffffffda RBX: 00007f41b7db5fa0 RCX: 00007f41b7b8e969
[  256.148481][T11193] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003
[  256.148495][T11193] RBP: 00007f41b8952090 R08: 0000000000000000 R09: 0000000000000000
[  256.148508][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  256.148521][T11193] R13: 0000000000000000 R14: 00007f41b7db5fa0 R15: 00007fff489f6958
[  256.148554][T11193]  </TASK>
[  256.399619][T11197] tipc: Node number set to 7
[  257.050221][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  257.070487][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'.
[  257.476829][T11240] lo speed is unknown, defaulting to 1000
[  257.633407][T11251] syzkaller1: entered promiscuous mode
[  257.642313][T11251] syzkaller1: entered allmulticast mode
[  257.781662][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'.
[  257.792175][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'.
[  258.012717][T11269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1812'.
[  258.035036][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1812'.
[  258.186828][T11275] netlink: 'syz.2.1815': attribute type 11 has an invalid length.
[  259.098940][T11310] __nla_validate_parse: 3 callbacks suppressed
[  259.098963][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1830'.
[  259.286715][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  259.457054][T11320] netlink: 'syz.4.1834': attribute type 4 has an invalid length.
[  259.468582][T11320] netlink: 'syz.4.1834': attribute type 4 has an invalid length.
[  259.482177][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'.
[  259.506037][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'.
[  260.132208][T11336] openvswitch: netlink: IPv4 tun info is not correct
[  260.213976][T11341] gtp0: entered promiscuous mode
[  260.244994][T11341] gtp0: entered allmulticast mode
[  261.003245][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  261.019001][T11381] netlink: 'syz.0.1862': attribute type 4 has an invalid length.
[  261.070369][T11385] netlink: 'syz.0.1862': attribute type 4 has an invalid length.
[  261.286609][T11395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.298642][T11383] lo speed is unknown, defaulting to 1000
[  261.467468][T11392] lo speed is unknown, defaulting to 1000
[  261.524744][T11399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1864'.
[  261.656830][T11402] ªªªªªª: renamed from lo
[  261.703233][T11387] lo speed is unknown, defaulting to 1000
[  261.852523][T11404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1868'.
[  261.887535][T11404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1868'.
[  262.031490][T11410] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1871'.
[  262.041762][T11410] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1871'.
[  262.138462][T11413] netlink: 'syz.2.1872': attribute type 1 has an invalid length.
[  262.359906][T11423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.619945][T11444] netlink: 'syz.0.1884': attribute type 10 has an invalid length.
[  263.639986][T11448] xt_ecn: cannot match TCP bits for non-tcp packets
[  263.658597][T11444] batman_adv: batadv0: Interface activated: virt_wifi0
[  264.571824][T11479] netlink: 'syz.2.1895': attribute type 21 has an invalid length.
[  264.815610][T11485] netlink: 'syz.1.1898': attribute type 10 has an invalid length.
[  264.823734][T11485] __nla_validate_parse: 4 callbacks suppressed
[  264.823750][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1898'.
[  265.246287][T11505] xt_hashlimit: size too large, truncated to 1048576
[  265.253146][T11505] xt_hashlimit: max too large, truncated to 1048576
[  265.271608][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'.
[  265.326852][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'.
[  265.512891][T11505] syz.0.1905 (11505) used greatest stack depth: 18168 bytes left
[  265.815211][T11522] netlink: 'syz.0.1912': attribute type 10 has an invalid length.
[  265.823670][T11522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'.
[  266.291544][T11542] lo speed is unknown, defaulting to 1000
[  266.722749][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1927'.
[  266.731955][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1927'.
[  266.883965][T11555] netlink: 'syz.4.1926': attribute type 10 has an invalid length.
[  266.920605][T11555] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1926'.
[  267.000742][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'.
[  267.016513][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'.
[  267.025609][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'.
[  267.805819][T11589] lo speed is unknown, defaulting to 1000
[  267.865091][T11590] lo speed is unknown, defaulting to 1000
[  267.925041][T11593] lo speed is unknown, defaulting to 1000
[  267.935683][T11609] netlink: 'syz.3.1947': attribute type 10 has an invalid length.
[  267.945191][T11609] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  268.239987][T11621] xt_ecn: cannot match TCP bits for non-tcp packets
[  268.329487][T11621] tipc: Started in network mode
[  268.334427][T11621] tipc: Node identity 7, cluster identity 4711
[  268.341060][T11621] tipc: Node number set to 7
[  268.812785][T11631] netlink: 'syz.3.1954': attribute type 2 has an invalid length.
[  269.507032][T11677] netlink: 'syz.0.1971': attribute type 4 has an invalid length.
[  269.535633][T11677] netlink: 'syz.0.1971': attribute type 4 has an invalid length.
[  269.997102][T11696] netlink: 'syz.1.1977': attribute type 10 has an invalid length.
[  270.005064][T11696] __nla_validate_parse: 4 callbacks suppressed
[  270.005078][T11696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'.
[  270.231752][T11698] FAULT_INJECTION: forcing a failure.
[  270.231752][T11698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.245937][T11698] CPU: 0 UID: 0 PID: 11698 Comm: syz.0.1978 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  270.245965][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  270.245978][T11698] Call Trace:
[  270.245985][T11698]  <TASK>
[  270.245994][T11698]  dump_stack_lvl+0x189/0x250
[  270.246031][T11698]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.246060][T11698]  ? __pfx__printk+0x10/0x10
[  270.246093][T11698]  should_fail_ex+0x414/0x560
[  270.246119][T11698]  _copy_to_user+0x31/0xb0
[  270.246152][T11698]  simple_read_from_buffer+0xe1/0x170
[  270.246182][T11698]  proc_fail_nth_read+0x1df/0x250
[  270.246212][T11698]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  270.246243][T11698]  ? rw_verify_area+0x258/0x650
[  270.246263][T11698]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  270.246292][T11698]  vfs_read+0x1fd/0x980
[  270.246319][T11698]  ? __pfx___mutex_lock+0x10/0x10
[  270.246339][T11698]  ? __pfx_vfs_read+0x10/0x10
[  270.246362][T11698]  ? __fget_files+0x2a/0x420
[  270.246391][T11698]  ? __fget_files+0x3a0/0x420
[  270.246415][T11698]  ? __fget_files+0x2a/0x420
[  270.246449][T11698]  ksys_read+0x145/0x250
[  270.246469][T11698]  ? rcu_is_watching+0x15/0xb0
[  270.246500][T11698]  ? __pfx_ksys_read+0x10/0x10
[  270.246526][T11698]  ? do_syscall_64+0xba/0x210
[  270.246550][T11698]  do_syscall_64+0xf6/0x210
[  270.246570][T11698]  ? clear_bhb_loop+0x45/0xa0
[  270.246595][T11698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.246613][T11698] RIP: 0033:0x7f4e8158d37c
[  270.246630][T11698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  270.246647][T11698] RSP: 002b:00007f4e82355030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  270.246668][T11698] RAX: ffffffffffffffda RBX: 00007f4e817b5fa0 RCX: 00007f4e8158d37c
[  270.246682][T11698] RDX: 000000000000000f RSI: 00007f4e823550a0 RDI: 0000000000000004
[  270.246710][T11698] RBP: 00007f4e82355090 R08: 0000000000000000 R09: 0000000000000000
[  270.246721][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  270.246733][T11698] R13: 0000000000000000 R14: 00007f4e817b5fa0 R15: 00007ffe3889b198
[  270.246764][T11698]  </TASK>
[  270.950189][T11714] netlink: 'syz.1.1984': attribute type 1 has an invalid length.
[  271.216920][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'.
[  271.227834][T11727] netlink: 'syz.1.1987': attribute type 4 has an invalid length.
[  271.301993][T11727] netlink: 'syz.1.1987': attribute type 4 has an invalid length.
[  271.344245][ T7313] lo speed is unknown, defaulting to 1000
[  271.379083][ T7313] s: Port: 1 Link ACTIVE
[  271.551390][T11734] netlink: 'syz.3.1989': attribute type 10 has an invalid length.
[  271.565171][T11734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1989'.
[  271.608775][T11734] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  271.969229][T11752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 38062 - 0
[  272.014213][T11752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47337 - 0
[  272.065485][ T5852] Bluetooth: hci3: link tx timeout
[  272.075249][ T5852] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  272.095667][ T5845] Bluetooth: hci3: link tx timeout
[  272.104090][ T5845] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  272.211209][T11752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 38062 - 0
[  272.242003][T11752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47337 - 0
[  272.326000][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  272.350967][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2003'.
[  272.373750][T11772] netlink: 'syz.2.2001': attribute type 4 has an invalid length.
[  272.412008][T11752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 38062 - 0
[  272.431380][T11752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47337 - 0
[  272.443041][T11779] netlink: 'syz.2.2001': attribute type 4 has an invalid length.
[  272.659872][T11752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 38062 - 0
[  272.709032][T11752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47337 - 0
[  272.744289][T11786] batadv1: entered allmulticast mode
[  272.752110][T11786] 8021q: adding VLAN 0 to HW filter on device batadv1
[  272.902546][T11752] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 47337 - 0
[  272.915710][T11752] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 38062 - 0
[  272.962498][T11752] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 47337 - 0
[  272.977937][T11752] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 38062 - 0
[  273.024843][T11752] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 47337 - 0
[  273.033372][T11752] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 38062 - 0
[  273.055349][T11752] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 47337 - 0
[  273.066768][T11752] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 38062 - 0
[  273.478513][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'.
[  273.513382][T11836] netlink: 'syz.1.2018': attribute type 11 has an invalid length.
[  274.190177][ T5852] Bluetooth: hci3: command 0x0405 tx timeout
[  274.772881][T11896] netlink: 'syz.4.2041': attribute type 282 has an invalid length.
[  275.140518][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'.
[  275.161124][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'.
[  275.323350][T11920] xt_ecn: cannot match TCP bits for non-tcp packets
[  275.363649][T11920] tipc: Cannot configure node identity twice
[  275.539911][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'.
[  275.934200][T11923] lo speed is unknown, defaulting to 1000
[  276.020903][T11939] veth0_to_bridge: entered promiscuous mode
[  276.236824][T11944] lo speed is unknown, defaulting to 1000
[  276.248326][T11950] lo speed is unknown, defaulting to 1000
[  276.440261][T11937] veth0_to_bridge: left promiscuous mode
[  276.611782][T11960] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2058'.
[  276.907431][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'.
[  276.927303][T11970] netlink: 'syz.0.2062': attribute type 4 has an invalid length.
[  276.940333][T11970] netlink: 'syz.0.2062': attribute type 4 has an invalid length.
[  277.181226][T11979] xt_ecn: cannot match TCP bits for non-tcp packets
[  277.232233][T11981] netlink: 'syz.0.2067': attribute type 1 has an invalid length.
[  277.270379][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  277.786007][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'.
[  278.076671][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'.
[  278.233440][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'.
[  278.283563][T12018] 8021q: adding VLAN 0 to HW filter on device batadv1
[  278.312356][T12018] team0: Port device batadv1 added
[  279.806792][T12040] netlink: 2716 bytes leftover after parsing attributes in process `syz.3.2088'.
[  279.868799][T12068] netlink: 'syz.0.2098': attribute type 10 has an invalid length.
[  282.434485][T12074] !
: renamed from veth1_to_batadv
[  282.517987][T12063] lo speed is unknown, defaulting to 1000
[  282.574774][T12098] lo speed is unknown, defaulting to 1000
[  283.148391][T12147] lo speed is unknown, defaulting to 1000
[  283.273718][T12148] lo speed is unknown, defaulting to 1000
[  283.625170][T12155] netlink: 'syz.0.2115': attribute type 1 has an invalid length.
[  283.633117][T12155] netlink: 'syz.0.2115': attribute type 11 has an invalid length.
[  283.641461][T12155] __nla_validate_parse: 1 callbacks suppressed
[  283.641477][T12155] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2115'.
[  283.757580][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2116'.
[  283.819915][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2116'.
[  284.783529][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'.
[  284.798878][T12176] netlink: 'syz.3.2123': attribute type 4 has an invalid length.
[  284.854177][T12177] netlink: 'syz.3.2123': attribute type 4 has an invalid length.
[  286.098917][T12196] netlink: 'syz.0.2130': attribute type 4 has an invalid length.
[  286.130448][T12196] netlink: 'syz.0.2130': attribute type 4 has an invalid length.
[  286.141389][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'.
[  286.329175][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'.
[  286.433199][T12215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2138'.
[  286.458877][T12212] gretap1: entered promiscuous mode
[  286.464389][T12212] gretap1: entered allmulticast mode
[  286.482016][T12215] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  286.490854][T12215] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  286.500282][T12215] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  286.509101][T12215] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  286.805593][T12235] netlink: 'syz.3.2145': attribute type 1 has an invalid length.
[  286.835354][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'.
[  286.856436][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'.
[  286.865724][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2145'.
[  287.009460][T12235] bond3: entered promiscuous mode
[  287.016476][T12235] 8021q: adding VLAN 0 to HW filter on device bond3
[  287.234173][T12247] netlink: 'syz.0.2148': attribute type 11 has an invalid length.
[  287.867043][T12269] netlink: 'syz.4.2154': attribute type 1 has an invalid length.
[  288.216907][T12258] lo speed is unknown, defaulting to 1000
[  288.280015][T12279] IPVS: Error connecting to the multicast addr
[  288.351396][T12283] ip6t_srh: unknown srh match flags  5294
[  288.386121][T12283] netlink: 'syz.0.2162': attribute type 10 has an invalid length.
[  288.543792][T12292] netlink: 'syz.4.2163': attribute type 10 has an invalid length.
[  288.689802][T12296] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  289.569806][  T976] lo speed is unknown, defaulting to 1000
[  289.893974][T12325] __nla_validate_parse: 12 callbacks suppressed
[  289.893997][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'.
[  289.918000][T12328] FAULT_INJECTION: forcing a failure.
[  289.918000][T12328] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.931681][T12328] CPU: 0 UID: 0 PID: 12328 Comm: syz.0.2176 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  289.931708][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  289.931721][T12328] Call Trace:
[  289.931728][T12328]  <TASK>
[  289.931737][T12328]  dump_stack_lvl+0x189/0x250
[  289.931768][T12328]  ? __lock_acquire+0xaac/0xd20
[  289.931798][T12328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.931826][T12328]  ? __pfx__printk+0x10/0x10
[  289.931846][T12328]  ? __might_fault+0xb0/0x130
[  289.931883][T12328]  should_fail_ex+0x414/0x560
[  289.931907][T12328]  _copy_from_user+0x2d/0xb0
[  289.931950][T12328]  ___sys_recvmsg+0x12e/0x510
[  289.931984][T12328]  ? __pfx____sys_recvmsg+0x10/0x10
[  289.932038][T12328]  ? __fget_files+0x3a0/0x420
[  289.932075][T12328]  __x64_sys_recvmsg+0x198/0x260
[  289.932106][T12328]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  289.932151][T12328]  ? do_syscall_64+0xba/0x210
[  289.932175][T12328]  do_syscall_64+0xf6/0x210
[  289.932195][T12328]  ? clear_bhb_loop+0x45/0xa0
[  289.932219][T12328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.932238][T12328] RIP: 0033:0x7f4e8158e969
[  289.932254][T12328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.932271][T12328] RSP: 002b:00007f4e82355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  289.932292][T12328] RAX: ffffffffffffffda RBX: 00007f4e817b5fa0 RCX: 00007f4e8158e969
[  289.932306][T12328] RDX: 0000000040010122 RSI: 00002000000001c0 RDI: 0000000000000004
[  289.932318][T12328] RBP: 00007f4e82355090 R08: 0000000000000000 R09: 0000000000000000
[  289.932330][T12328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.932341][T12328] R13: 0000000000000000 R14: 00007f4e817b5fa0 R15: 00007ffe3889b198
[  289.932372][T12328]  </TASK>
[  290.461934][T12337] lo speed is unknown, defaulting to 1000
[  291.325564][T12369] pim6reg9: entered allmulticast mode
[  291.398884][T12363] lo speed is unknown, defaulting to 1000
[  291.540820][T12366] lo speed is unknown, defaulting to 1000
[  291.933201][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  292.371200][T12412] netlink: 'syz.0.2210': attribute type 10 has an invalid length.
[  292.379761][T12412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2210'.
[  292.535594][T12419] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2213'.
[  292.545095][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'.
[  292.712646][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'.
[  292.999988][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'.
[  293.031774][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'.
[  293.201944][T12446] netlink: 'syz.2.2222': attribute type 4 has an invalid length.
[  293.250352][T12446] netlink: 'syz.2.2222': attribute type 4 has an invalid length.
[  293.272172][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'.
[  293.707328][T12469] netlink: 'syz.0.2230': attribute type 4 has an invalid length.
[  293.716069][T12469] netlink: 'syz.0.2230': attribute type 4 has an invalid length.
[  293.909991][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'.
[  294.054239][T12473] lo speed is unknown, defaulting to 1000
[  294.177784][T12477] lo speed is unknown, defaulting to 1000
[  294.762993][T12504] lo speed is unknown, defaulting to 1000
[  295.187520][T12518] netlink: 'syz.0.2243': attribute type 4 has an invalid length.
[  295.249760][T12519] netlink: 'syz.0.2243': attribute type 4 has an invalid length.
[  295.484811][T12527] __nla_validate_parse: 1 callbacks suppressed
[  295.484830][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2246'.
[  295.829526][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2253'.
[  295.947302][T12548] Bluetooth: MGMT ver 1.23
[  295.971020][T12548] geneve2: entered promiscuous mode
[  296.086252][T12551] wireguard0: entered promiscuous mode
[  296.092674][T12551] wireguard0: entered allmulticast mode
[  296.201826][T12557] netlink: 'syz.0.2255': attribute type 4 has an invalid length.
[  296.253573][T12546] lo speed is unknown, defaulting to 1000
[  296.260806][T12557] netlink: 'syz.0.2255': attribute type 4 has an invalid length.
[  296.346268][T12559] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2256'.
[  296.479938][T12549] lo speed is unknown, defaulting to 1000
[  296.942666][T12578] netlink: 'syz.4.2263': attribute type 13 has an invalid length.
[  296.969135][T12578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2263'.
[  297.089429][T12578] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  297.221088][T12581] xt_ecn: cannot match TCP bits for non-tcp packets
[  297.255185][T12581] tipc: Cannot configure node identity twice
[  297.759578][T12600] validate_nla: 1 callbacks suppressed
[  297.759598][T12600] netlink: 'syz.0.2271': attribute type 2 has an invalid length.
[  297.774341][T12600] netlink: 'syz.0.2271': attribute type 1 has an invalid length.
[  297.782216][T12600] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2271'.
[  297.862305][T12607] netlink: 'syz.0.2271': attribute type 2 has an invalid length.
[  297.871007][T12607] netlink: 'syz.0.2271': attribute type 1 has an invalid length.
[  297.878892][T12607] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2271'.
[  298.136098][T12624] xt_hashlimit: max too large, truncated to 1048576
[  298.152677][T12624] No such timeout policy "syz1"
[  298.370740][T12617] syzkaller1: entered promiscuous mode
[  298.389997][T12617] syzkaller1: entered allmulticast mode
[  298.728269][T12630] lo speed is unknown, defaulting to 1000
[  298.803982][T12631] lo speed is unknown, defaulting to 1000
[  298.911357][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'.
[  299.005290][T12639] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  299.014533][T12639] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  299.023541][T12639] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  299.032382][T12639] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.051026][T12639] vxlan0: entered promiscuous mode
[  299.058684][T12639] vxlan0: entered allmulticast mode
[  299.850986][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  300.416570][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'.
[  300.431403][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'.
[  300.519591][T12672] __nla_validate_parse: 2 callbacks suppressed
[  300.519612][T12672] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2289'.
[  300.596312][T12676] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2289'.
[  300.841987][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'.
[  300.865422][T12682] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  301.890965][T12711] netlink: 'syz.1.2298': attribute type 10 has an invalid length.
[  301.899198][T12711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2298'.
[  301.967564][T12713] lo speed is unknown, defaulting to 1000
[  302.070480][T12718] lo speed is unknown, defaulting to 1000
[  302.597136][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'.
[  302.633011][T12737] xt_TCPMSS: Only works on TCP SYN packets
[  302.786569][T12745] netlink: 'syz.2.2313': attribute type 10 has an invalid length.
[  302.805531][T12745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2313'.
[  302.957546][T12761] sctp: [Deprecated]: syz.3.2317 (pid 12761) Use of int in maxseg socket option.
[  302.957546][T12761] Use struct sctp_assoc_value instead
[  303.280954][T12772] FAULT_INJECTION: forcing a failure.
[  303.280954][T12772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  303.294420][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.3.2320 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  303.294447][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  303.294464][T12772] Call Trace:
[  303.294476][T12772]  <TASK>
[  303.294484][T12772]  dump_stack_lvl+0x189/0x250
[  303.294516][T12772]  ? __lock_acquire+0xaac/0xd20
[  303.294547][T12772]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.294575][T12772]  ? __pfx__printk+0x10/0x10
[  303.294593][T12772]  ? __might_fault+0xb0/0x130
[  303.294631][T12772]  should_fail_ex+0x414/0x560
[  303.294654][T12772]  _copy_from_user+0x2d/0xb0
[  303.294682][T12772]  __sys_bpf+0x1ed/0x860
[  303.294709][T12772]  ? __pfx___sys_bpf+0x10/0x10
[  303.294747][T12772]  ? ksys_write+0x1f0/0x250
[  303.294767][T12772]  ? rcu_is_watching+0x15/0xb0
[  303.294825][T12772]  __x64_sys_bpf+0x7c/0x90
[  303.294847][T12772]  do_syscall_64+0xf6/0x210
[  303.294869][T12772]  ? clear_bhb_loop+0x45/0xa0
[  303.294894][T12772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.294913][T12772] RIP: 0033:0x7fd8b278e969
[  303.294931][T12772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.294949][T12772] RSP: 002b:00007fd8b05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  303.294982][T12772] RAX: ffffffffffffffda RBX: 00007fd8b29b5fa0 RCX: 00007fd8b278e969
[  303.294996][T12772] RDX: 000000000000000a RSI: 00002000000005c0 RDI: 000000000000001c
[  303.295009][T12772] RBP: 00007fd8b05f6090 R08: 0000000000000000 R09: 0000000000000000
[  303.295021][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.295032][T12772] R13: 0000000000000000 R14: 00007fd8b29b5fa0 R15: 00007fff3b7e9f38
[  303.295063][T12772]  </TASK>
[  303.740825][T12783] netlink: 'syz.3.2322': attribute type 4 has an invalid length.
[  304.010908][T12797] netlink: 'syz.1.2328': attribute type 10 has an invalid length.
[  304.066221][T12797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2328'.
[  305.162536][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2339'.
[  305.172864][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2339'.
[  305.229070][T12845] netlink: 'syz.3.2340': attribute type 4 has an invalid length.
[  305.940454][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'.
[  306.319113][T12874] lo speed is unknown, defaulting to 1000
[  306.393446][T12870] lo speed is unknown, defaulting to 1000
[  306.467828][T12887] FAULT_INJECTION: forcing a failure.
[  306.467828][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.511620][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.4.2354 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  306.511649][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  306.511662][T12887] Call Trace:
[  306.511670][T12887]  <TASK>
[  306.511679][T12887]  dump_stack_lvl+0x189/0x250
[  306.511717][T12887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.511748][T12887]  ? __pfx__printk+0x10/0x10
[  306.511794][T12887]  should_fail_ex+0x414/0x560
[  306.511821][T12887]  _copy_to_user+0x31/0xb0
[  306.511851][T12887]  simple_read_from_buffer+0xe1/0x170
[  306.511881][T12887]  proc_fail_nth_read+0x1df/0x250
[  306.511912][T12887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.511942][T12887]  ? rw_verify_area+0x258/0x650
[  306.511963][T12887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  306.511992][T12887]  vfs_read+0x1fd/0x980
[  306.512019][T12887]  ? __pfx___mutex_lock+0x10/0x10
[  306.512040][T12887]  ? __pfx_vfs_read+0x10/0x10
[  306.512063][T12887]  ? __fget_files+0x2a/0x420
[  306.512093][T12887]  ? __fget_files+0x3a0/0x420
[  306.512116][T12887]  ? __fget_files+0x2a/0x420
[  306.512151][T12887]  ksys_read+0x145/0x250
[  306.512171][T12887]  ? rcu_is_watching+0x15/0xb0
[  306.512202][T12887]  ? __pfx_ksys_read+0x10/0x10
[  306.512228][T12887]  ? do_syscall_64+0xba/0x210
[  306.512253][T12887]  do_syscall_64+0xf6/0x210
[  306.512272][T12887]  ? clear_bhb_loop+0x45/0xa0
[  306.512296][T12887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.512315][T12887] RIP: 0033:0x7f41b7b8d37c
[  306.512332][T12887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  306.512348][T12887] RSP: 002b:00007f41b8952030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  306.512369][T12887] RAX: ffffffffffffffda RBX: 00007f41b7db5fa0 RCX: 00007f41b7b8d37c
[  306.512382][T12887] RDX: 000000000000000f RSI: 00007f41b89520a0 RDI: 0000000000000009
[  306.512395][T12887] RBP: 00007f41b8952090 R08: 0000000000000000 R09: 0000000000000000
[  306.512407][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.512418][T12887] R13: 0000000000000000 R14: 00007f41b7db5fa0 R15: 00007fff489f6958
[  306.512450][T12887]  </TASK>
[  306.782694][T12894] xt_ecn: cannot match TCP bits for non-tcp packets
[  307.066085][T12897] netlink: 'syz.0.2362': attribute type 10 has an invalid length.
[  307.074620][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2362'.
[  307.096549][T12904] netlink: 'syz.4.2361': attribute type 1 has an invalid length.
[  307.169165][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2361'.
[  307.208705][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'.
[  307.273484][T12911] netlink: 32068 bytes leftover after parsing attributes in process `syz.0.2364'.
[  307.348742][T12915] lo speed is unknown, defaulting to 1000
[  307.686099][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'.
[  308.046440][T12936] xt_ecn: cannot match TCP bits for non-tcp packets
[  308.210812][T12940] tipc: Cannot configure node identity twice
[  308.629473][T12958] netlink: 'syz.4.2378': attribute type 4 has an invalid length.
[  308.693496][T12959] netlink: 'syz.4.2378': attribute type 4 has an invalid length.
[  308.765961][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'.
[  309.124083][T12967] sock: sock_timestamping_bind_phc: sock not bind to device
[  309.195966][T12971] lo speed is unknown, defaulting to 1000
[  309.313554][T12976] netlink: 'syz.4.2383': attribute type 4 has an invalid length.
[  309.894732][T12999] xt_ecn: cannot match TCP bits for non-tcp packets
[  310.427854][T13024] FAULT_INJECTION: forcing a failure.
[  310.427854][T13024] name failslab, interval 1, probability 0, space 0, times 0
[  310.516508][T13024] CPU: 0 UID: 0 PID: 13024 Comm: syz.4.2398 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  310.516538][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  310.516551][T13024] Call Trace:
[  310.516560][T13024]  <TASK>
[  310.516568][T13024]  dump_stack_lvl+0x189/0x250
[  310.516613][T13024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.516642][T13024]  ? __pfx__printk+0x10/0x10
[  310.516667][T13024]  ? __pfx___might_resched+0x10/0x10
[  310.516691][T13024]  should_fail_ex+0x414/0x560
[  310.516715][T13024]  should_failslab+0xa8/0x100
[  310.516744][T13024]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  310.516771][T13024]  ? __alloc_skb+0x112/0x2d0
[  310.516801][T13024]  __alloc_skb+0x112/0x2d0
[  310.516830][T13024]  __ip6_append_data+0x2b5a/0x3dc0
[  310.516876][T13024]  ? __lock_acquire+0xaac/0xd20
[  310.516908][T13024]  ? __pfx_raw6_getfrag+0x10/0x10
[  310.516949][T13024]  ? __pfx___ip6_append_data+0x10/0x10
[  310.516974][T13024]  ? __pfx_ip6_mtu+0x10/0x10
[  310.517010][T13024]  ip6_append_data+0x1c4/0x380
[  310.517042][T13024]  ? __pfx_raw6_getfrag+0x10/0x10
[  310.517063][T13024]  rawv6_sendmsg+0x1245/0x17f0
[  310.517110][T13024]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  310.517189][T13024]  ? __pfx_aa_sk_perm+0x10/0x10
[  310.517213][T13024]  ? sock_rps_record_flow+0x19/0x410
[  310.517235][T13024]  ? inet_sendmsg+0x2f4/0x370
[  310.517252][T13024]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  310.517279][T13024]  __sock_sendmsg+0x19c/0x270
[  310.517303][T13024]  ____sys_sendmsg+0x505/0x830
[  310.517335][T13024]  ? __pfx_____sys_sendmsg+0x10/0x10
[  310.517372][T13024]  ? import_iovec+0x74/0xa0
[  310.517404][T13024]  ___sys_sendmsg+0x21f/0x2a0
[  310.517435][T13024]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.517502][T13024]  ? __fget_files+0x2a/0x420
[  310.517526][T13024]  ? __fget_files+0x3a0/0x420
[  310.517569][T13024]  __x64_sys_sendmsg+0x19b/0x260
[  310.517618][T13024]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  310.517666][T13024]  ? do_syscall_64+0xba/0x210
[  310.517690][T13024]  do_syscall_64+0xf6/0x210
[  310.517712][T13024]  ? clear_bhb_loop+0x45/0xa0
[  310.517736][T13024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.517756][T13024] RIP: 0033:0x7f41b7b8e969
[  310.517774][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.517792][T13024] RSP: 002b:00007f41b8931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.517813][T13024] RAX: ffffffffffffffda RBX: 00007f41b7db6080 RCX: 00007f41b7b8e969
[  310.517828][T13024] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000012
[  310.517841][T13024] RBP: 00007f41b8931090 R08: 0000000000000000 R09: 0000000000000000
[  310.517853][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.517866][T13024] R13: 0000000000000000 R14: 00007f41b7db6080 R15: 00007fff489f6958
[  310.517897][T13024]  </TASK>
[  310.885005][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2402'.
[  310.970662][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'.
[  311.223605][T13037] lo speed is unknown, defaulting to 1000
[  311.287248][T13035] lo speed is unknown, defaulting to 1000
[  311.639689][T13051] block nbd0: server does not support multiple connections per device.
[  311.663499][T13051] block nbd0: shutting down sockets
[  312.651518][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.667248][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.687009][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.708364][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.716841][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.950816][T13080] lo speed is unknown, defaulting to 1000
[  313.189289][T13104] batadv_slave_0: entered promiscuous mode
[  313.231435][T13103] batadv_slave_0: left promiscuous mode
[  313.533673][T13111] !
: renamed from dummy0 (while UP)
[  313.865773][T13116] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  314.046329][T13116] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 47337 - 0
[  314.085452][T13116] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 47337 - 0
[  314.130689][T13116] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 47337 - 0
[  314.139715][T13116] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 47337 - 0
[  314.173813][T13116] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 38062 - 0
[  314.183700][T13116] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 38062 - 0
[  314.206238][T13116] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 38062 - 0
[  314.225055][T13116] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 38062 - 0
[  314.236881][T13116] geneve3: left promiscuous mode
[  314.242966][T13116] geneve3: left allmulticast mode
[  314.264766][T13116] gtp0: left promiscuous mode
[  314.272770][T13116] gtp0: left allmulticast mode
[  314.356291][T13116] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  314.364731][T13116] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  314.382542][T13116] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  314.391922][T13116] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  314.459876][ T7313] lo speed is unknown, defaulting to 1000
[  314.465685][ T7313] s: Port: 1 Link DOWN
[  314.581370][T13111] lo speed is unknown, defaulting to 1000
[  314.600036][T13114] lo speed is unknown, defaulting to 1000
[  314.818071][ T5852] Bluetooth: hci2: command tx timeout
[  315.322735][ T8397] bond0 (unregistering): Released all slaves
[  315.405352][ T8397] bond1 (unregistering): Released all slaves
[  315.497563][ T8397] bond2 (unregistering): Released all slaves
[  315.585287][ T8397] bond3 (unregistering): Released all slaves
[  315.676591][ T8397] bond4 (unregistering): Released all slaves
[  315.760864][ T8397] bond5 (unregistering): Released all slaves
[  315.845028][ T8397] bond6 (unregistering): Released all slaves
[  315.859571][ T8397] bond7 (unregistering): Released all slaves
[  315.972252][T13146] bond5: entered promiscuous mode
[  316.004910][T13146] bond5: entered allmulticast mode
[  316.039834][T13146] 8021q: adding VLAN 0 to HW filter on device bond5
[  316.273588][ T8397] tipc: Left network mode
[  316.617549][T13152] lo speed is unknown, defaulting to 1000
[  316.788164][T13080] chnl_net:caif_netlink_parms(): no params data found
[  316.896249][ T5852] Bluetooth: hci2: command tx timeout
[  317.066363][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.574591][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'.
[  317.586181][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'.
[  317.653379][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  317.669254][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  317.688522][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  317.722907][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  317.731347][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.122236][ T8397] hsr_slave_0: left promiscuous mode
[  318.135344][ T8397] hsr_slave_1: left promiscuous mode
[  318.143284][ T8397] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  318.151820][ T8397] batman_adv: batadv0: Removing interface: virt_wifi0
[  318.187588][ T8397] pim6reg9 (unregistering): left allmulticast mode
[  318.214585][ T8397] team0 (unregistering): Port device batadv1 removed
[  318.975525][T13080] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.977939][ T5852] Bluetooth: hci2: command tx timeout
[  318.987248][T13080] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.995519][T13080] bridge_slave_0: entered allmulticast mode
[  319.004036][T13080] bridge_slave_0: entered promiscuous mode
[  319.042583][T13080] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.057639][T13080] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.064853][T13080] bridge_slave_1: entered allmulticast mode
[  319.072759][T13080] bridge_slave_1: entered promiscuous mode
[  319.105122][T13173] lo speed is unknown, defaulting to 1000
[  319.144260][T13080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.164232][T13080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.175199][T13182] lo speed is unknown, defaulting to 1000
[  319.238029][T13080] team0: Port device team_slave_0 added
[  319.257627][T13080] team0: Port device team_slave_1 added
[  319.327684][T13080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.334745][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.393377][T13080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.424487][T13080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.437614][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.472602][T13080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.605235][T13080] hsr_slave_0: entered promiscuous mode
[  319.615601][T13080] hsr_slave_1: entered promiscuous mode
[  319.777235][ T5852] Bluetooth: hci3: command tx timeout
[  320.074422][T13195] tipc: New replicast peer: 255.255.255.255
[  320.081424][T13195] tipc: Enabled bearer <udp:syz2>, priority 10
[  320.310232][T13173] chnl_net:caif_netlink_parms(): no params data found
[  320.655874][T13207] netlink: 'syz.4.2452': attribute type 1 has an invalid length.
[  320.707204][T13173] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.714442][T13173] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.724542][T13173] bridge_slave_0: entered allmulticast mode
[  320.732434][T13173] bridge_slave_0: entered promiscuous mode
[  320.743711][T13173] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.758609][T13173] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.765828][T13173] bridge_slave_1: entered allmulticast mode
[  320.777853][T13173] bridge_slave_1: entered promiscuous mode
[  320.926935][T13173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.003414][T13173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.005854][T13216] FAULT_INJECTION: forcing a failure.
[  321.005854][T13216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.041933][T13216] CPU: 0 UID: 0 PID: 13216 Comm: syz.3.2455 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  321.041962][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.041974][T13216] Call Trace:
[  321.041981][T13216]  <TASK>
[  321.041989][T13216]  dump_stack_lvl+0x189/0x250
[  321.042020][T13216]  ? __lock_acquire+0xaac/0xd20
[  321.042050][T13216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.042078][T13216]  ? __pfx__printk+0x10/0x10
[  321.042098][T13216]  ? __might_fault+0xb0/0x130
[  321.042146][T13216]  should_fail_ex+0x414/0x560
[  321.042169][T13216]  _copy_from_user+0x2d/0xb0
[  321.042195][T13216]  csum_and_copy_from_iter_full+0x1d8/0x1d20
[  321.042239][T13216]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  321.042278][T13216]  ? trace_kmalloc+0x1f/0xd0
[  321.042302][T13216]  ip_generic_getfrag+0x12f/0x2b0
[  321.042334][T13216]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  321.042364][T13216]  ? skb_put+0x11b/0x210
[  321.042392][T13216]  __ip6_append_data+0x3826/0x3dc0
[  321.042433][T13216]  ? __lock_acquire+0xaac/0xd20
[  321.042460][T13216]  ? __pfx_raw6_getfrag+0x10/0x10
[  321.042499][T13216]  ? __pfx___ip6_append_data+0x10/0x10
[  321.042522][T13216]  ? __pfx_ip6_mtu+0x10/0x10
[  321.042555][T13216]  ip6_append_data+0x1c4/0x380
[  321.042584][T13216]  ? __pfx_raw6_getfrag+0x10/0x10
[  321.042603][T13216]  rawv6_sendmsg+0x1245/0x17f0
[  321.042646][T13216]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  321.042699][T13216]  ? __pfx_aa_sk_perm+0x10/0x10
[  321.042742][T13216]  ? sock_rps_record_flow+0x19/0x410
[  321.042763][T13216]  ? inet_sendmsg+0x2f4/0x370
[  321.042779][T13216]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  321.042804][T13216]  __sock_sendmsg+0x19c/0x270
[  321.042826][T13216]  ____sys_sendmsg+0x505/0x830
[  321.042857][T13216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  321.042892][T13216]  ? import_iovec+0x74/0xa0
[  321.042920][T13216]  ___sys_sendmsg+0x21f/0x2a0
[  321.042947][T13216]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.043009][T13216]  ? __fget_files+0x2a/0x420
[  321.043031][T13216]  ? __fget_files+0x3a0/0x420
[  321.043065][T13216]  __x64_sys_sendmsg+0x19b/0x260
[  321.043093][T13216]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  321.043135][T13216]  ? do_syscall_64+0xba/0x210
[  321.043157][T13216]  do_syscall_64+0xf6/0x210
[  321.043176][T13216]  ? clear_bhb_loop+0x45/0xa0
[  321.043199][T13216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.043216][T13216] RIP: 0033:0x7fd8b278e969
[  321.043233][T13216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.043248][T13216] RSP: 002b:00007fd8b05d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  321.043267][T13216] RAX: ffffffffffffffda RBX: 00007fd8b29b6080 RCX: 00007fd8b278e969
[  321.043281][T13216] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000012
[  321.043292][T13216] RBP: 00007fd8b05d5090 R08: 0000000000000000 R09: 0000000000000000
[  321.043302][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.043313][T13216] R13: 0000000000000000 R14: 00007fd8b29b6080 R15: 00007fff3b7e9f38
[  321.043342][T13216]  </TASK>
[  321.362521][ T7313] tipc: Node number set to 3758096385
[  321.386550][T13212] netlink: 'syz.4.2454': attribute type 303 has an invalid length.
[  321.396109][ T5852] Bluetooth: hci2: command tx timeout
[  321.594109][T13173] team0: Port device team_slave_0 added
[  321.603142][T13173] team0: Port device team_slave_1 added
[  321.690278][T13173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.697370][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.727545][T13173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.740356][T13080] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  321.754715][T13173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.762209][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.789702][T13173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.809736][T13080] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  321.846757][T13080] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  321.862370][ T5852] Bluetooth: hci3: command tx timeout
[  321.890514][T13173] hsr_slave_0: entered promiscuous mode
[  321.897998][T13173] hsr_slave_1: entered promiscuous mode
[  321.919706][T13173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  321.932403][T13173] Cannot create hsr debugfs directory
[  321.938300][T13080] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  322.501684][T13173] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.581892][T13250] pim6reg9: entered allmulticast mode
[  322.607426][T13173] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.677898][T13254] xt_hashlimit: max too large, truncated to 1048576
[  322.682303][T13173] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.693096][T13254] No such timeout policy "syz1"
[  322.792735][T13080] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.815248][T13173] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.839956][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'.
[  322.855712][T13080] 8021q: adding VLAN 0 to HW filter on device team0
[  323.034951][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.042829][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.106702][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.113878][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.238882][T13080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  323.275278][T13173] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  323.294859][T13173] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  323.328996][T13173] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  323.343245][T13173] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  323.513813][T13173] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.577306][T13173] 8021q: adding VLAN 0 to HW filter on device team0
[  323.601856][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.609063][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.619352][T13289] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2477'.
[  323.661068][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.668270][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.795041][T13289] netlink: 'syz.4.2477': attribute type 10 has an invalid length.
[  323.839817][T13289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2477'.
[  323.871871][T13289] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  323.881669][T13289] team0: Failed to send options change via netlink (err -105)
[  323.890273][T13289] team0: Port device geneve0 added
[  323.913390][T13080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.942861][ T5852] Bluetooth: hci3: command tx timeout
[  324.078836][T13080] veth0_vlan: entered promiscuous mode
[  324.126184][T13080] veth1_vlan: entered promiscuous mode
[  324.258785][T13080] veth0_macvtap: entered promiscuous mode
[  324.323462][T13080] veth1_macvtap: entered promiscuous mode
[  324.411275][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.442943][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.471985][T13080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.496001][T13173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.541636][T13318] erspan0: left allmulticast mode
[  324.557503][T13318] erspan0: left promiscuous mode
[  324.567321][T13318] bridge0: port 3(erspan0) entered disabled state
[  324.583849][T13318] bridge_slave_1: left allmulticast mode
[  324.590001][T13318] bridge_slave_1: left promiscuous mode
[  324.595849][T13318] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.614054][T13318] bridge_slave_0: left allmulticast mode
[  324.620706][T13318] bridge_slave_0: left promiscuous mode
[  324.631410][T13318] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.701620][T13080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.712388][T13080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.725472][T13080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.768997][T13080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.797299][T13080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.806048][T13080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.829109][T13080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.020487][T13173] veth0_vlan: entered promiscuous mode
[  325.043666][T13333] netlink: 'syz.3.2489': attribute type 10 has an invalid length.
[  325.048974][T13173] veth1_vlan: entered promiscuous mode
[  325.078533][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.106427][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.167047][ T8398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.185470][ T8398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.218798][T13173] veth0_macvtap: entered promiscuous mode
[  325.253615][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'.
[  325.269096][T13173] veth1_macvtap: entered promiscuous mode
[  325.343336][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.362173][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.373037][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.378127][T13338] netlink: 32068 bytes leftover after parsing attributes in process `syz.3.2490'.
[  325.394324][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.412269][T13173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.470593][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.484012][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.495630][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.522763][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.534371][T13173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.564773][T13173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.581150][T13173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.590657][T13173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.603657][T13173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.672800][T13343] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  325.735681][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'.
[  325.755293][T13345] bond4: entered allmulticast mode
[  325.762143][T13345] 8021q: adding VLAN 0 to HW filter on device bond4
[  326.016481][ T5852] Bluetooth: hci3: command tx timeout
[  326.040177][ T8398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.107318][ T8393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.124957][ T8393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.214323][ T8398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.299968][T13360] netlink: 'syz.1.2497': attribute type 10 has an invalid length.
[  326.316267][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2497'.
[  326.411753][ T8398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.451083][T13360] batman_adv: batadv0: Interface activated: virt_wifi0
[  326.462682][T13367] FAULT_INJECTION: forcing a failure.
[  326.462682][T13367] name failslab, interval 1, probability 0, space 0, times 0
[  326.499478][T13367] CPU: 1 UID: 0 PID: 13367 Comm: syz.4.2498 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  326.499533][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  326.499552][T13367] Call Trace:
[  326.499559][T13367]  <TASK>
[  326.499567][T13367]  dump_stack_lvl+0x189/0x250
[  326.499599][T13367]  ? is_bpf_text_address+0x26/0x2b0
[  326.499631][T13367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.499660][T13367]  ? __pfx__printk+0x10/0x10
[  326.499676][T13367]  ? is_bpf_text_address+0x26/0x2b0
[  326.499706][T13367]  ? kernel_text_address+0xa5/0xe0
[  326.499735][T13367]  ? unwind_get_return_address+0x4d/0x90
[  326.499759][T13367]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  326.499785][T13367]  should_fail_ex+0x414/0x560
[  326.499811][T13367]  should_failslab+0xa8/0x100
[  326.499839][T13367]  kmem_cache_alloc_noprof+0x73/0x3c0
[  326.499863][T13367]  ? inet_frag_find+0x894/0x1e70
[  326.499888][T13367]  inet_frag_find+0x894/0x1e70
[  326.499915][T13367]  ? __pfx_ip6frag_obj_cmpfn+0x10/0x10
[  326.499945][T13367]  ? __pfx_inet_frag_find+0x10/0x10
[  326.499972][T13367]  ? nf_frag_pernet+0x23/0x240
[  326.499997][T13367]  nf_ct_frag6_gather+0x86d/0x2010
[  326.500038][T13367]  ? nf_ct_frag6_gather+0x661/0x2010
[  326.500082][T13367]  ? __pfx_nf_ct_frag6_gather+0x10/0x10
[  326.500117][T13367]  ? __get_hash_from_flowi6+0x1e1/0x410
[  326.500151][T13367]  ? __lock_acquire+0xaac/0xd20
[  326.500190][T13367]  ipv6_defrag+0x2a9/0x3b0
[  326.500220][T13367]  ? __pfx_ipv6_defrag+0x10/0x10
[  326.500252][T13367]  nf_hook_slow+0xc2/0x220
[  326.500282][T13367]  __ip6_local_out+0x763/0x870
[  326.500315][T13367]  ? __ip6_local_out+0x609/0x870
[  326.500336][T13367]  ? __pfx___ip6_local_out+0x10/0x10
[  326.500360][T13367]  ? __pfx_dst_output+0x10/0x10
[  326.500378][T13367]  ? ip6_send_skb+0x10f/0x390
[  326.500416][T13367]  ip6_local_out+0x26/0x70
[  326.500435][T13367]  ? ip6_send_skb+0x10f/0x390
[  326.500462][T13367]  ip6_send_skb+0x1d5/0x390
[  326.500493][T13367]  rawv6_push_pending_frames+0x6e9/0x8d0
[  326.500520][T13367]  ? __pfx_rawv6_push_pending_frames+0x10/0x10
[  326.500544][T13367]  ? __pfx_raw6_getfrag+0x10/0x10
[  326.500568][T13367]  rawv6_sendmsg+0x12f9/0x17f0
[  326.500620][T13367]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  326.500683][T13367]  ? __pfx_aa_sk_perm+0x10/0x10
[  326.500729][T13367]  ? sock_rps_record_flow+0x19/0x410
[  326.500752][T13367]  ? inet_sendmsg+0x2f4/0x370
[  326.500770][T13367]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  326.500796][T13367]  __sock_sendmsg+0x19c/0x270
[  326.500828][T13367]  ____sys_sendmsg+0x505/0x830
[  326.500875][T13367]  ? __pfx_____sys_sendmsg+0x10/0x10
[  326.500917][T13367]  ? import_iovec+0x74/0xa0
[  326.500949][T13367]  ___sys_sendmsg+0x21f/0x2a0
[  326.500978][T13367]  ? __pfx____sys_sendmsg+0x10/0x10
[  326.501048][T13367]  ? __fget_files+0x2a/0x420
[  326.501072][T13367]  ? __fget_files+0x3a0/0x420
[  326.501109][T13367]  __x64_sys_sendmsg+0x19b/0x260
[  326.501141][T13367]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  326.501188][T13367]  ? do_syscall_64+0xba/0x210
[  326.501213][T13367]  do_syscall_64+0xf6/0x210
[  326.501234][T13367]  ? clear_bhb_loop+0x45/0xa0
[  326.501258][T13367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.501276][T13367] RIP: 0033:0x7f41b7b8e969
[  326.501299][T13367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.501316][T13367] RSP: 002b:00007f41b8931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  326.501336][T13367] RAX: ffffffffffffffda RBX: 00007f41b7db6080 RCX: 00007f41b7b8e969
[  326.501350][T13367] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000012
[  326.501362][T13367] RBP: 00007f41b8931090 R08: 0000000000000000 R09: 0000000000000000
[  326.501373][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.501385][T13367] R13: 0000000000000000 R14: 00007f41b7db6080 R15: 00007fff489f6958
[  326.501421][T13367]  </TASK>
[  326.513009][ T8397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.898151][ T8397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.984502][T13372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2500'.
[  326.991578][ T8398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.089045][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  327.116433][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  327.124253][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  327.133741][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  327.146485][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  327.251740][T13373] lo speed is unknown, defaulting to 1000
[  327.674495][T13383] bond0: Unable to set down delay as MII monitoring is disabled
[  327.781346][T13397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2509'.
[  327.825348][ T8398] bridge_slave_1: left allmulticast mode
[  327.838089][ T8398] bridge_slave_1: left promiscuous mode
[  327.867656][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.914418][ T8398] bridge_slave_0: left allmulticast mode
[  327.922200][ T8398] bridge_slave_0: left promiscuous mode
[  327.930468][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.183683][T13405] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  328.463083][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  328.479869][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  328.488566][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  328.497491][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.501282][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  328.516563][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  328.524676][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.541579][ T8398] bond0 (unregistering): Released all slaves
[  328.672964][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2513'.
[  328.753530][T13417] xt_hashlimit: max too large, truncated to 1048576
[  328.775658][T13417] No such timeout policy "syz1"
[  328.787223][T13418] netlink: 32068 bytes leftover after parsing attributes in process `syz.3.2513'.
[  328.846709][T13410] lo speed is unknown, defaulting to 1000
[  329.165326][T13373] chnl_net:caif_netlink_parms(): no params data found
[  329.216702][ T5845] Bluetooth: hci2: command tx timeout
[  329.332798][T13436] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  329.356339][T13436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2518'.
[  329.370922][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'.
[  329.604515][T13443] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2522'.
[  329.622671][T13444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2522'.
[  329.673967][T13373] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.686277][T13373] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.693498][T13373] bridge_slave_0: entered allmulticast mode
[  329.722738][T13373] bridge_slave_0: entered promiscuous mode
[  329.737871][T13373] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.745106][T13373] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.752418][T13373] bridge_slave_1: entered allmulticast mode
[  329.763513][T13373] bridge_slave_1: entered promiscuous mode
[  329.825936][ T8398] hsr_slave_0: left promiscuous mode
[  329.844638][ T8398] hsr_slave_1: left promiscuous mode
[  329.855713][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.872972][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.897268][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.921282][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.044441][ T8398] veth1_macvtap: left promiscuous mode
[  330.050460][ T8398] veth0_macvtap: left promiscuous mode
[  330.059444][ T8398] veth1_vlan: left promiscuous mode
[  330.064881][ T8398] veth0_vlan: left promiscuous mode
[  330.102658][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'.
[  330.234125][T13463] netlink: 32068 bytes leftover after parsing attributes in process `syz.3.2527'.
[  330.522528][ T8398] team0 (unregistering): Port device team_slave_1 removed
[  330.566032][ T8398] team0 (unregistering): Port device team_slave_0 removed
[  330.581117][ T5845] Bluetooth: hci3: command tx timeout
[  331.230683][T13373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.240008][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'.
[  331.267657][T13373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.297248][ T5845] Bluetooth: hci2: command tx timeout
[  331.333932][T13473] netlink: 'syz.3.2531': attribute type 1 has an invalid length.
[  331.362187][T13471] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  331.541169][T13477] netlink: 'syz.3.2532': attribute type 10 has an invalid length.
[  331.557366][T13468] lo speed is unknown, defaulting to 1000
[  331.560924][T13477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2532'.
[  331.578948][T13373] team0: Port device team_slave_0 added
[  331.600784][T13477] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  331.625063][T13373] team0: Port device team_slave_1 added
[  331.638070][T13467] lo speed is unknown, defaulting to 1000
[  331.850961][T13373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.862767][T13373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.922799][T13373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.955153][T13373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.970695][T13373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.001119][T13373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.332702][T13373] hsr_slave_0: entered promiscuous mode
[  332.339632][T13373] hsr_slave_1: entered promiscuous mode
[  332.666323][ T5845] Bluetooth: hci3: command tx timeout
[  332.677380][ T8398] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.824107][ T8398] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.025447][ T8398] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.051433][T13410] chnl_net:caif_netlink_parms(): no params data found
[  333.381992][ T5845] Bluetooth: hci2: command tx timeout
[  333.389471][ T8398] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.411572][T13503] lo speed is unknown, defaulting to 1000
[  333.589039][T13410] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.606740][T13410] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.613990][T13410] bridge_slave_0: entered allmulticast mode
[  333.633858][T13410] bridge_slave_0: entered promiscuous mode
[  333.716885][T13410] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.724062][T13410] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.754799][T13410] bridge_slave_1: entered allmulticast mode
[  333.762948][T13410] bridge_slave_1: entered promiscuous mode
[  333.769578][T13515] FAULT_INJECTION: forcing a failure.
[  333.769578][T13515] name failslab, interval 1, probability 0, space 0, times 0
[  333.795054][T13515] CPU: 1 UID: 0 PID: 13515 Comm: syz.3.2543 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  333.795080][T13515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.795092][T13515] Call Trace:
[  333.795100][T13515]  <TASK>
[  333.795108][T13515]  dump_stack_lvl+0x189/0x250
[  333.795145][T13515]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.795174][T13515]  ? __pfx__printk+0x10/0x10
[  333.795195][T13515]  ? __pfx___might_resched+0x10/0x10
[  333.795214][T13515]  ? fs_reclaim_acquire+0x7d/0x100
[  333.795248][T13515]  should_fail_ex+0x414/0x560
[  333.795271][T13515]  ? __pfx_sock_alloc_inode+0x10/0x10
[  333.795290][T13515]  should_failslab+0xa8/0x100
[  333.795317][T13515]  ? __pfx_sock_alloc_inode+0x10/0x10
[  333.795352][T13515]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  333.795377][T13515]  ? sock_alloc_inode+0x28/0xc0
[  333.795400][T13515]  ? __pfx_sock_alloc_inode+0x10/0x10
[  333.795418][T13515]  sock_alloc_inode+0x28/0xc0
[  333.795435][T13515]  alloc_inode+0x67/0x1b0
[  333.795461][T13515]  __sock_create+0x12d/0x9f0
[  333.795480][T13515]  ? fput+0xa0/0xd0
[  333.795516][T13515]  ? rcu_is_watching+0x15/0xb0
[  333.795549][T13515]  __sys_socket+0xd7/0x1b0
[  333.795575][T13515]  __x64_sys_socket+0x7a/0x90
[  333.795597][T13515]  do_syscall_64+0xf6/0x210
[  333.795618][T13515]  ? clear_bhb_loop+0x45/0xa0
[  333.795642][T13515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.795660][T13515] RIP: 0033:0x7fd8b278e969
[  333.795677][T13515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.795693][T13515] RSP: 002b:00007fd8b05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  333.795713][T13515] RAX: ffffffffffffffda RBX: 00007fd8b29b5fa0 RCX: 00007fd8b278e969
[  333.795745][T13515] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002
[  333.795757][T13515] RBP: 00007fd8b05f6090 R08: 0000000000000000 R09: 0000000000000000
[  333.795769][T13515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.795780][T13515] R13: 0000000000000000 R14: 00007fd8b29b5fa0 R15: 00007fff3b7e9f38
[  333.795812][T13515]  </TASK>
[  333.795822][T13515] socket: no more sockets
[  334.199828][T13410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.269184][T13410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.424908][T13410] team0: Port device team_slave_0 added
[  334.460683][ T8398] bridge_slave_1: left allmulticast mode
[  334.471751][ T8398] bridge_slave_1: left promiscuous mode
[  334.477824][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.488545][ T8398] bridge_slave_0: left allmulticast mode
[  334.494205][ T8398] bridge_slave_0: left promiscuous mode
[  334.500291][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.740214][ T5845] Bluetooth: hci3: command tx timeout
[  334.793517][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.805461][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.815797][ T8398] bond0 (unregistering): Released all slaves
[  334.834166][T13410] team0: Port device team_slave_1 added
[  335.009562][T13410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.025551][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.061580][T13410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.080815][T13535] __nla_validate_parse: 2 callbacks suppressed
[  335.080832][T13535] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2548'.
[  335.155078][T13410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.180184][T13410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.207144][T13410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.456284][ T5845] Bluetooth: hci2: command tx timeout
[  335.488807][T13410] hsr_slave_0: entered promiscuous mode
[  335.495628][T13410] hsr_slave_1: entered promiscuous mode
[  335.502378][T13410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.510463][T13410] Cannot create hsr debugfs directory
[  335.699636][T13543] netlink: 'syz.1.2550': attribute type 10 has an invalid length.
[  335.721212][T13543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2550'.
[  335.861882][T13373] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  335.892102][T13373] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  335.937249][ T8398] hsr_slave_0: left promiscuous mode
[  335.944336][ T8398] hsr_slave_1: left promiscuous mode
[  335.950991][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.959103][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.970384][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.979260][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.024178][ T8398] veth1_macvtap: left promiscuous mode
[  336.030173][ T8398] veth0_macvtap: left promiscuous mode
[  336.040025][ T8398] veth1_vlan: left promiscuous mode
[  336.045750][ T8398] veth0_vlan: left promiscuous mode
[  336.146038][T13546] netlink: 'syz.1.2551': attribute type 32 has an invalid length.
[  336.161322][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'.
[  336.604326][ T8398] team0 (unregistering): Port device team_slave_1 removed
[  336.647909][ T8398] team0 (unregistering): Port device team_slave_0 removed
[  336.818617][ T5845] Bluetooth: hci3: command tx timeout
[  337.082728][T13373] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  337.100564][T13373] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  337.139737][T13546] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  337.148826][T13546] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  337.637277][T13373] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.804443][T13570] bond0: (slave bond_slave_0): Releasing backup interface
[  337.900974][T13570] bond0: (slave bond_slave_1): Releasing backup interface
[  337.955889][T13570] team0: Failed to send options change via netlink (err -105)
[  337.964360][T13570] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  337.975312][T13570] team0: Port device team_slave_0 removed
[  337.989616][T13570] team0: Failed to send options change via netlink (err -105)
[  338.018764][T13570] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  338.028764][T13576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2557'.
[  338.029587][T13570] team0: Port device team_slave_1 removed
[  338.044290][T13576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2557'.
[  338.051822][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.061437][T13570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.072192][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.080152][T13570] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.092088][T13570] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  338.114314][T13570] batman_adv: batadv0: Removing interface: virt_wifi0
[  338.143638][T13570] team0: Failed to send options change via netlink (err -105)
[  338.161805][T13570] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  338.182604][T13570] team0: Port device geneve0 removed
[  338.199507][T13570] bond0: (slave bridge1): Releasing backup interface
[  338.293930][T13373] 8021q: adding VLAN 0 to HW filter on device team0
[  338.356143][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.363369][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.514024][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.521222][ T8393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.574941][T13410] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  338.595111][T13410] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  338.648165][T13410] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  338.732226][T13410] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  338.910880][T13410] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.919357][T13600] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  338.963093][T13410] 8021q: adding VLAN 0 to HW filter on device team0
[  338.985657][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.992830][ T8398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.018771][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.025978][ T8398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.154386][T13373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.215444][T13373] veth0_vlan: entered promiscuous mode
[  339.254013][T13373] veth1_vlan: entered promiscuous mode
[  339.429965][T13373] veth0_macvtap: entered promiscuous mode
[  339.469457][T13373] veth1_macvtap: entered promiscuous mode
[  339.498535][T13410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.550532][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'.
[  339.567219][T13373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.608292][T13373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.634152][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2568'.
[  339.662643][T13373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.677497][T13615] netlink: 32068 bytes leftover after parsing attributes in process `syz.3.2567'.
[  339.693044][T13373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.705614][T13373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.721318][T13373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.824034][T13620] bond3: entered promiscuous mode
[  339.830665][T13620] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  339.858831][T13620] bond3: left promiscuous mode
[  339.917842][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'.
[  340.080205][T13410] veth0_vlan: entered promiscuous mode
[  340.191192][T13410] veth1_vlan: entered promiscuous mode
[  340.193918][T13629] netlink: 'syz.1.2570': attribute type 4 has an invalid length.
[  340.213466][ T8398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.224900][ T8398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.247904][T13629] netlink: 'syz.1.2570': attribute type 4 has an invalid length.
[  340.307923][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  340.323230][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.342073][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.351841][T13410] veth0_macvtap: entered promiscuous mode
[  340.389832][T13410] veth1_macvtap: entered promiscuous mode
[  340.479862][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.538036][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.553136][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'.
[  340.560821][T13410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.642011][T13410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.654818][T13410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.668405][T13410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.711685][T13410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.720976][T13410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.729959][T13410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.739206][T13410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.824898][T13646] xt_ecn: cannot match TCP bits for non-tcp packets
[  340.882831][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.034295][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.205754][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.289901][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.317730][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.470246][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.569291][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.583687][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.841515][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  341.852453][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  341.861130][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  341.870060][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  341.879106][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  341.930981][   T36] bridge_slave_1: left allmulticast mode
[  341.938215][   T36] bridge_slave_1: left promiscuous mode
[  341.946642][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.964892][   T36] bridge_slave_0: left allmulticast mode
[  341.970678][   T36] bridge_slave_0: left promiscuous mode
[  341.976810][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.513150][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'.
[  342.790212][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.808672][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.825062][   T36] bond0 (unregistering): Released all slaves
[  342.954105][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.969222][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.983744][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.994854][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  343.004071][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  343.092176][T13666] lo speed is unknown, defaulting to 1000
[  343.308579][T13698] lo speed is unknown, defaulting to 1000
[  343.458615][T13708] xt_ecn: cannot match TCP bits for non-tcp packets
[  343.638037][T13718] netlink: 'syz.4.2595': attribute type 1 has an invalid length.
[  343.711287][T13722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2593'.
[  343.720603][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'.
[  343.761403][T13718] bond7: entered allmulticast mode
[  343.777769][T13718] 8021q: adding VLAN 0 to HW filter on device bond7
[  343.939114][ T5845] Bluetooth: hci2: command tx timeout
[  344.095378][T13666] chnl_net:caif_netlink_parms(): no params data found
[  344.226676][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'.
[  344.261948][T13740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2597'.
[  344.354731][T13742] netlink: 32068 bytes leftover after parsing attributes in process `syz.3.2598'.
[  344.449165][   T36] hsr_slave_0: left promiscuous mode
[  344.460661][   T36] hsr_slave_1: left promiscuous mode
[  344.467424][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.474979][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.491174][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.508276][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.555520][   T36] veth1_macvtap: left promiscuous mode
[  344.561219][   T36] veth0_macvtap: left promiscuous mode
[  344.566981][   T36] veth1_vlan: left promiscuous mode
[  344.572379][   T36] veth0_vlan: left promiscuous mode
[  344.604911][T13748] FAULT_INJECTION: forcing a failure.
[  344.604911][T13748] name failslab, interval 1, probability 0, space 0, times 0
[  344.626226][T13748] CPU: 1 UID: 0 PID: 13748 Comm: syz.3.2600 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  344.626255][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.626267][T13748] Call Trace:
[  344.626275][T13748]  <TASK>
[  344.626284][T13748]  dump_stack_lvl+0x189/0x250
[  344.626322][T13748]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.626352][T13748]  ? __pfx__printk+0x10/0x10
[  344.626374][T13748]  ? __pfx___might_resched+0x10/0x10
[  344.626393][T13748]  ? fs_reclaim_acquire+0x7d/0x100
[  344.626428][T13748]  should_fail_ex+0x414/0x560
[  344.626454][T13748]  should_failslab+0xa8/0x100
[  344.626483][T13748]  kmem_cache_alloc_noprof+0x73/0x3c0
[  344.626506][T13748]  ? security_inode_alloc+0x39/0x330
[  344.626536][T13748]  security_inode_alloc+0x39/0x330
[  344.626574][T13748]  inode_init_always_gfp+0x9ed/0xdc0
[  344.626605][T13748]  ? __pfx_sock_alloc_inode+0x10/0x10
[  344.626625][T13748]  alloc_inode+0x82/0x1b0
[  344.626650][T13748]  __sock_create+0x12d/0x9f0
[  344.626669][T13748]  ? fput+0xa0/0xd0
[  344.626699][T13748]  ? rcu_is_watching+0x15/0xb0
[  344.626732][T13748]  __sys_socket+0xd7/0x1b0
[  344.626758][T13748]  __x64_sys_socket+0x7a/0x90
[  344.626780][T13748]  do_syscall_64+0xf6/0x210
[  344.626801][T13748]  ? clear_bhb_loop+0x45/0xa0
[  344.626825][T13748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.626844][T13748] RIP: 0033:0x7fd8b278e969
[  344.626879][T13748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.626895][T13748] RSP: 002b:00007fd8b05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  344.626914][T13748] RAX: ffffffffffffffda RBX: 00007fd8b29b5fa0 RCX: 00007fd8b278e969
[  344.626927][T13748] RDX: 0000000000000002 RSI: 000000000000000a RDI: 0000000000000002
[  344.626937][T13748] RBP: 00007fd8b05f6090 R08: 0000000000000000 R09: 0000000000000000
[  344.626948][T13748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.626959][T13748] R13: 0000000000000000 R14: 00007fd8b29b5fa0 R15: 00007fff3b7e9f38
[  344.626987][T13748]  </TASK>
[  344.627051][T13748] socket: no more sockets
[  345.059705][ T5845] Bluetooth: hci3: command tx timeout
[  345.231841][   T36] team0 (unregistering): Port device team_slave_1 removed
[  345.270603][   T36] team0 (unregistering): Port device team_slave_0 removed
[  345.646322][T13738] lo speed is unknown, defaulting to 1000
[  345.769023][T13666] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.784457][T13666] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.793687][T13666] bridge_slave_0: entered allmulticast mode
[  345.803888][T13666] bridge_slave_0: entered promiscuous mode
[  345.813396][T13666] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.821121][T13666] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.828587][T13666] bridge_slave_1: entered allmulticast mode
[  345.837020][T13666] bridge_slave_1: entered promiscuous mode
[  345.961602][T13763] xt_ecn: cannot match TCP bits for non-tcp packets
[  346.000140][T13666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.017247][ T5845] Bluetooth: hci2: command tx timeout
[  346.020578][T13666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.259651][T13760] lo speed is unknown, defaulting to 1000
[  346.272256][T13666] team0: Port device team_slave_0 added
[  346.299808][T13666] team0: Port device team_slave_1 added
[  346.476966][T13666] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.483956][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.510344][T13666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.523209][T13666] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.530827][T13666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.557014][T13666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.769396][T13666] hsr_slave_0: entered promiscuous mode
[  346.784390][T13666] hsr_slave_1: entered promiscuous mode
[  346.856233][T13698] chnl_net:caif_netlink_parms(): no params data found
[  347.084957][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.136772][ T5845] Bluetooth: hci3: command tx timeout
[  347.255714][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.522033][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.581948][T13698] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.593802][T13698] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.601597][T13698] bridge_slave_0: entered allmulticast mode
[  347.609827][T13698] bridge_slave_0: entered promiscuous mode
[  347.620456][T13698] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.631710][T13698] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.639067][T13698] bridge_slave_1: entered allmulticast mode
[  347.646349][T13698] bridge_slave_1: entered promiscuous mode
[  347.665997][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.728185][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.747394][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.777481][    C1] ==================================================================
[  347.785591][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  347.793507][    C1] Read of size 2 at addr ffff88801168cc2a by task kworker/u8:2/36
[  347.801404][    C1] 
[  347.803750][    C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  347.803777][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  347.803792][    C1] Workqueue: netns cleanup_net
[  347.803822][    C1] Call Trace:
[  347.803831][    C1]  <IRQ>
[  347.803840][    C1]  dump_stack_lvl+0x189/0x250
[  347.803871][    C1]  ? __virt_addr_valid+0x18c/0x540
[  347.803897][    C1]  ? rcu_is_watching+0x15/0xb0
[  347.803934][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.803961][    C1]  ? rcu_is_watching+0x15/0xb0
[  347.803991][    C1]  ? lock_release+0x4b/0x3e0
[  347.804021][    C1]  ? __virt_addr_valid+0x18c/0x540
[  347.804046][    C1]  ? __virt_addr_valid+0x469/0x540
[  347.804074][    C1]  print_report+0xb4/0x290
[  347.804099][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  347.804120][    C1]  kasan_report+0x118/0x150
[  347.804147][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  347.804176][    C1]  rose_timer_expiry+0x471/0x4b0
[  347.804192][    C1]  call_timer_fn+0x17b/0x5f0
[  347.804211][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  347.804226][    C1]  ? call_timer_fn+0xbe/0x5f0
[  347.804245][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  347.804267][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.804288][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.804309][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  347.804325][    C1]  __run_timer_base+0x61a/0x860
[  347.804342][    C1]  ? ktime_get+0x3e/0x1f0
[  347.804361][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  347.804378][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  347.804401][    C1]  run_timer_softirq+0xb7/0x180
[  347.804419][    C1]  handle_softirqs+0x283/0x870
[  347.804433][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  347.804448][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  347.804463][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  347.804482][    C1]  __irq_exit_rcu+0xca/0x1f0
[  347.804494][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  347.804511][    C1]  irq_exit_rcu+0x9/0x30
[  347.804522][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  347.804543][    C1]  </IRQ>
[  347.804567][    C1]  <TASK>
[  347.804572][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  347.804588][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  347.804611][    C1] Code: 74 05 e8 cb a2 6d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f3 24 37 f6 65 8b 05 5c 55 1c 07 85 c0 74 40 48 c7 04 24 0e 36
[  347.804630][    C1] RSP: 0018:ffffc90000ad7340 EFLAGS: 00000206
[  347.804642][    C1] RAX: 27289536417a4f00 RBX: 0000000000000a02 RCX: 27289536417a4f00
[  347.804653][    C1] RDX: 0000000000000006 RSI: ffffffff8d7517fa RDI: 0000000000000001
[  347.804663][    C1] RBP: ffffc90000ad73d0 R08: ffffffff8f7f2d77 R09: 1ffffffff1efe5ae
[  347.804674][    C1] R10: dffffc0000000000 R11: fffffbfff1efe5af R12: dffffc0000000000
[  347.804685][    C1] R13: 0000000000000a02 R14: ffff888140af8008 R15: 1ffff9200015ae68
[  347.804704][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  347.804730][    C1]  kthread_queue_work+0x111/0x180
[  347.804749][    C1]  synchronize_rcu_expedited+0x4b3/0x730
[  347.804766][    C1]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  347.804787][    C1]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  347.804809][    C1]  ? __pfx___might_resched+0x10/0x10
[  347.804824][    C1]  ? do_raw_spin_lock+0x121/0x290
[  347.804846][    C1]  synchronize_rcu+0x11a/0x310
[  347.804865][    C1]  ? __pfx_synchronize_rcu+0x10/0x10
[  347.804884][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  347.804914][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  347.804950][    C1]  ? rcu_is_watching+0x15/0xb0
[  347.804974][    C1]  atomic_notifier_chain_unregister+0x3d/0x50
[  347.804991][    C1]  nsim_fib_destroy+0x72/0x180
[  347.805010][    C1]  nsim_dev_reload_destroy+0x2e3/0x490
[  347.805028][    C1]  nsim_dev_reload_down+0x8a/0xc0
[  347.805043][    C1]  devlink_reload+0x1b3/0x8d0
[  347.805059][    C1]  ? xa_get_mark+0x67/0x7b0
[  347.805077][    C1]  ? __pfx_devlink_reload+0x10/0x10
[  347.805090][    C1]  ? xa_get_mark+0x70f/0x7b0
[  347.805111][    C1]  devlink_pernet_pre_exit+0x1d9/0x3d0
[  347.805135][    C1]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  347.805160][    C1]  ? class_remove_file_ns+0x121/0x160
[  347.805185][    C1]  ops_undo_list+0x184/0x990
[  347.805205][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  347.805227][    C1]  cleanup_net+0x4c5/0x8a0
[  347.805246][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  347.805265][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.805285][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  347.805308][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  347.805331][    C1]  process_scheduled_works+0xadb/0x17a0
[  347.805366][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  347.805398][    C1]  worker_thread+0x8a0/0xda0
[  347.805414][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  347.805439][    C1]  ? __kthread_parkme+0x7b/0x200
[  347.805457][    C1]  kthread+0x70e/0x8a0
[  347.805475][    C1]  ? __pfx_worker_thread+0x10/0x10
[  347.805489][    C1]  ? __pfx_kthread+0x10/0x10
[  347.805506][    C1]  ? __pfx_kthread+0x10/0x10
[  347.805522][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.805542][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.805565][    C1]  ? __pfx_kthread+0x10/0x10
[  347.805581][    C1]  ret_from_fork+0x4b/0x80
[  347.805596][    C1]  ? __pfx_kthread+0x10/0x10
[  347.805612][    C1]  ret_from_fork_asm+0x1a/0x30
[  347.805639][    C1]  </TASK>
[  347.805644][    C1] 
[  348.096303][ T5845] Bluetooth: hci2: command tx timeout
[  348.098097][    C1] Allocated by task 36:
[  348.334251][    C1]  kasan_save_track+0x3e/0x80
[  348.338928][    C1]  __kasan_kmalloc+0x93/0xb0
[  348.343522][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  348.349018][    C1]  igmp6_group_dropped+0x3ac/0xf10
[  348.354150][    C1]  __ipv6_dev_mc_dec+0x2d2/0x390
[  348.359096][    C1]  __ipv6_ifa_notify+0x43d/0xac0
[  348.364035][    C1]  addrconf_ifdown+0xe69/0x1880
[  348.368901][    C1]  addrconf_notify+0x1bc/0x1010
[  348.373776][    C1]  notifier_call_chain+0x1b3/0x3e0
[  348.378906][    C1]  dev_close_many+0x29c/0x410
[  348.383571][    C1]  unregister_netdevice_many_notify+0x834/0x2320
[  348.389901][    C1]  default_device_exit_batch+0x819/0x890
[  348.395546][    C1]  ops_undo_list+0x522/0x990
[  348.400132][    C1]  cleanup_net+0x4c5/0x8a0
[  348.404544][    C1]  process_scheduled_works+0xadb/0x17a0
[  348.410103][    C1]  worker_thread+0x8a0/0xda0
[  348.414705][    C1]  kthread+0x70e/0x8a0
[  348.418778][    C1]  ret_from_fork+0x4b/0x80
[  348.423204][    C1]  ret_from_fork_asm+0x1a/0x30
[  348.427971][    C1] 
[  348.430305][    C1] Freed by task 53:
[  348.434110][    C1]  kasan_save_track+0x3e/0x80
[  348.438789][    C1]  kasan_save_free_info+0x46/0x50
[  348.443842][    C1]  __kasan_slab_free+0x62/0x70
[  348.448608][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  348.453831][    C1]  kvfree_rcu_bulk+0xe5/0x1e0
[  348.458510][    C1]  kfree_rcu_monitor+0x211/0x2a0
[  348.463445][    C1]  process_scheduled_works+0xadb/0x17a0
[  348.469002][    C1]  worker_thread+0x8a0/0xda0
[  348.473603][    C1]  kthread+0x70e/0x8a0
[  348.477671][    C1]  ret_from_fork+0x4b/0x80
[  348.482101][    C1]  ret_from_fork_asm+0x1a/0x30
[  348.486869][    C1] 
[  348.489207][    C1] Last potentially related work creation:
[  348.494923][    C1]  kasan_save_stack+0x3e/0x60
[  348.499599][    C1]  kasan_record_aux_stack+0xbc/0xd0
[  348.504806][    C1]  kvfree_call_rcu+0xbb/0x410
[  348.509496][    C1]  mld_clear_delrec+0x193/0x5d0
[  348.514397][    C1]  ipv6_mc_destroy_dev+0x45/0x5a0
[  348.519422][    C1]  addrconf_ifdown+0x139e/0x1880
[  348.524354][    C1]  addrconf_notify+0x1bc/0x1010
[  348.529212][    C1]  notifier_call_chain+0x1b3/0x3e0
[  348.534479][    C1]  unregister_netdevice_many_notify+0x15d8/0x2320
[  348.540893][    C1]  default_device_exit_batch+0x819/0x890
[  348.546534][    C1]  ops_undo_list+0x522/0x990
[  348.551141][    C1]  cleanup_net+0x4c5/0x8a0
[  348.555570][    C1]  process_scheduled_works+0xadb/0x17a0
[  348.561127][    C1]  worker_thread+0x8a0/0xda0
[  348.565706][    C1]  kthread+0x70e/0x8a0
[  348.569780][    C1]  ret_from_fork+0x4b/0x80
[  348.574210][    C1]  ret_from_fork_asm+0x1a/0x30
[  348.578970][    C1] 
[  348.581283][    C1] The buggy address belongs to the object at ffff88801168cc00
[  348.581283][    C1]  which belongs to the cache kmalloc-512 of size 512
[  348.595329][    C1] The buggy address is located 42 bytes inside of
[  348.595329][    C1]  freed 512-byte region [ffff88801168cc00, ffff88801168ce00)
[  348.609036][    C1] 
[  348.611368][    C1] The buggy address belongs to the physical page:
[  348.617792][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1168c
[  348.626558][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  348.635067][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  348.642612][    C1] page_type: f5(slab)
[  348.646605][    C1] raw: 00fff00000000040 ffff88801a041c80 ffffea0001f8b000 dead000000000002
[  348.655225][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  348.663827][    C1] head: 00fff00000000040 ffff88801a041c80 ffffea0001f8b000 dead000000000002
[  348.672525][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  348.681202][    C1] head: 00fff00000000002 ffffea000045a301 00000000ffffffff 00000000ffffffff
[  348.689961][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  348.698637][    C1] page dumped because: kasan: bad access detected
[  348.705056][    C1] page_owner tracks the page as allocated
[  348.710787][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 93323119585, free_ts 93235514942
[  348.732170][    C1]  post_alloc_hook+0x1d8/0x230
[  348.736955][    C1]  get_page_from_freelist+0x21e0/0x22c0
[  348.742513][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  348.748334][    C1]  alloc_pages_mpol+0x232/0x4a0
[  348.753199][    C1]  allocate_slab+0x8a/0x3b0
[  348.757712][    C1]  ___slab_alloc+0xbfc/0x1480
[  348.762390][    C1]  __kmalloc_noprof+0x305/0x4f0
[  348.767246][    C1]  fib6_info_alloc+0x30/0xf0
[  348.771851][    C1]  ip6_route_info_create+0x147/0xa70
[  348.777148][    C1]  ip6_route_add+0x29/0x2f0
[  348.781652][    C1]  inet6_addr_add+0x6b2/0xc00
[  348.786347][    C1]  inet6_rtm_newaddr+0x93d/0xd20
[  348.791302][    C1]  rtnetlink_rcv_msg+0x7cc/0xb70
[  348.796260][    C1]  netlink_rcv_skb+0x219/0x490
[  348.801029][    C1]  netlink_unicast+0x758/0x8d0
[  348.805780][    C1]  netlink_sendmsg+0x805/0xb30
[  348.810547][    C1] page last free pid 5836 tgid 5836 stack trace:
[  348.816874][    C1]  __free_frozen_pages+0xb14/0xce0
[  348.821988][    C1]  __put_partials+0x161/0x1c0
[  348.826672][    C1]  put_cpu_partial+0x17c/0x250
[  348.831447][    C1]  __slab_free+0x2f7/0x400
[  348.835864][    C1]  qlist_free_all+0x9a/0x140
[  348.840444][    C1]  kasan_quarantine_reduce+0x148/0x160
[  348.845892][    C1]  __kasan_slab_alloc+0x22/0x80
[  348.850742][    C1]  __kmalloc_noprof+0x224/0x4f0
[  348.855606][    C1]  fib_create_info+0x1728/0x3210
[  348.860545][    C1]  fib_table_insert+0xc6/0x1b50
[  348.865386][    C1]  fib_magic+0x2c4/0x390
[  348.869636][    C1]  fib_add_ifaddr+0x144/0x5f0
[  348.874322][    C1]  fib_inetaddr_event+0x12e/0x190
[  348.879341][    C1]  notifier_call_chain+0x1b3/0x3e0
[  348.884460][    C1]  blocking_notifier_call_chain+0x6a/0x90
[  348.890188][    C1]  __inet_insert_ifa+0xa13/0xbf0
[  348.895145][    C1] 
[  348.897461][    C1] Memory state around the buggy address:
[  348.903073][    C1]  ffff88801168cb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  348.911128][    C1]  ffff88801168cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  348.919217][    C1] >ffff88801168cc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.927286][    C1]                                   ^
[  348.932665][    C1]  ffff88801168cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.940732][    C1]  ffff88801168cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  348.948796][    C1] ==================================================================
[  348.956958][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  348.964179][    C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) 
[  348.976179][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  348.986258][    C1] Workqueue: netns cleanup_net
[  348.991066][    C1] Call Trace:
[  348.994361][    C1]  <IRQ>
[  348.997218][    C1]  dump_stack_lvl+0x99/0x250
[  349.001833][    C1]  ? __asan_memcpy+0x40/0x70
[  349.006433][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.011657][    C1]  ? __pfx__printk+0x10/0x10
[  349.016265][    C1]  panic+0x2db/0x790
[  349.020187][    C1]  ? __pfx_panic+0x10/0x10
[  349.024609][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  349.030516][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  349.036455][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  349.042804][    C1]  ? print_memory_metadata+0x314/0x400
[  349.048373][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  349.053523][    C1]  check_panic_on_warn+0x89/0xb0
[  349.058491][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  349.063624][    C1]  end_report+0x78/0x160
[  349.067881][    C1]  kasan_report+0x129/0x150
[  349.072422][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  349.077556][    C1]  rose_timer_expiry+0x471/0x4b0
[  349.082519][    C1]  call_timer_fn+0x17b/0x5f0
[  349.087131][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  349.092624][    C1]  ? call_timer_fn+0xbe/0x5f0
[  349.097337][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  349.102475][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  349.107691][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.112915][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  349.118380][    C1]  __run_timer_base+0x61a/0x860
[  349.123251][    C1]  ? ktime_get+0x3e/0x1f0
[  349.127604][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  349.133014][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  349.139261][    C1]  run_timer_softirq+0xb7/0x180
[  349.144120][    C1]  handle_softirqs+0x283/0x870
[  349.148895][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  349.153674][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  349.158955][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  349.164168][    C1]  __irq_exit_rcu+0xca/0x1f0
[  349.168764][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  349.173980][    C1]  irq_exit_rcu+0x9/0x30
[  349.178233][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  349.183892][    C1]  </IRQ>
[  349.186823][    C1]  <TASK>
[  349.189762][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  349.195750][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  349.202257][    C1] Code: 74 05 e8 cb a2 6d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> f3 24 37 f6 65 8b 05 5c 55 1c 07 85 c0 74 40 48 c7 04 24 0e 36
[  349.221876][    C1] RSP: 0018:ffffc90000ad7340 EFLAGS: 00000206
[  349.227949][    C1] RAX: 27289536417a4f00 RBX: 0000000000000a02 RCX: 27289536417a4f00
[  349.235932][    C1] RDX: 0000000000000006 RSI: ffffffff8d7517fa RDI: 0000000000000001
[  349.243910][    C1] RBP: ffffc90000ad73d0 R08: ffffffff8f7f2d77 R09: 1ffffffff1efe5ae
[  349.251913][    C1] R10: dffffc0000000000 R11: fffffbfff1efe5af R12: dffffc0000000000
[  349.259891][    C1] R13: 0000000000000a02 R14: ffff888140af8008 R15: 1ffff9200015ae68
[  349.267883][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  349.274245][    C1]  kthread_queue_work+0x111/0x180
[  349.279279][    C1]  synchronize_rcu_expedited+0x4b3/0x730
[  349.284926][    C1]  ? __pfx_synchronize_rcu_expedited+0x10/0x10
[  349.291079][    C1]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  349.296373][    C1]  ? __pfx___might_resched+0x10/0x10
[  349.301677][    C1]  ? do_raw_spin_lock+0x121/0x290
[  349.306730][    C1]  synchronize_rcu+0x11a/0x310
[  349.311504][    C1]  ? __pfx_synchronize_rcu+0x10/0x10
[  349.316788][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  349.322712][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  349.329048][    C1]  ? rcu_is_watching+0x15/0xb0
[  349.333829][    C1]  atomic_notifier_chain_unregister+0x3d/0x50
[  349.339890][    C1]  nsim_fib_destroy+0x72/0x180
[  349.344654][    C1]  nsim_dev_reload_destroy+0x2e3/0x490
[  349.350118][    C1]  nsim_dev_reload_down+0x8a/0xc0
[  349.355149][    C1]  devlink_reload+0x1b3/0x8d0
[  349.359823][    C1]  ? xa_get_mark+0x67/0x7b0
[  349.364327][    C1]  ? __pfx_devlink_reload+0x10/0x10
[  349.369544][    C1]  ? xa_get_mark+0x70f/0x7b0
[  349.374173][    C1]  devlink_pernet_pre_exit+0x1d9/0x3d0
[  349.379631][    C1]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  349.385611][    C1]  ? class_remove_file_ns+0x121/0x160
[  349.390985][    C1]  ops_undo_list+0x184/0x990
[  349.395582][    C1]  ? __pfx_ops_undo_list+0x10/0x10
[  349.400706][    C1]  cleanup_net+0x4c5/0x8a0
[  349.405119][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  349.410065][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  349.415366][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  349.421104][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  349.426834][    C1]  process_scheduled_works+0xadb/0x17a0
[  349.432412][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  349.438421][    C1]  worker_thread+0x8a0/0xda0
[  349.443024][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  349.449370][    C1]  ? __kthread_parkme+0x7b/0x200
[  349.454322][    C1]  kthread+0x70e/0x8a0
[  349.458403][    C1]  ? __pfx_worker_thread+0x10/0x10
[  349.463530][    C1]  ? __pfx_kthread+0x10/0x10
[  349.468131][    C1]  ? __pfx_kthread+0x10/0x10
[  349.472748][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  349.477961][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.483197][    C1]  ? __pfx_kthread+0x10/0x10
[  349.487799][    C1]  ret_from_fork+0x4b/0x80
[  349.492226][    C1]  ? __pfx_kthread+0x10/0x10
[  349.496821][    C1]  ret_from_fork_asm+0x1a/0x30
[  349.501606][    C1]  </TASK>
[  349.504766][    C1] Kernel Offset: disabled
[  349.509086][    C1] Rebooting in 86400 seconds..