last executing test programs:

4.338377314s ago: executing program 4 (id=1426):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r5}, 0x18)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r7, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1833000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000362d0085000000860000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000ff7fffff85000000060000008510000004007c"], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x68, &(0x7f0000000600)=""/104, 0x41000, 0x47, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xc, 0xffffffbc, 0xba}, 0x10, 0x0, r4, 0x0, &(0x7f0000000840)=[r1, r4, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gretap0\x00'})
r8 = socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r8, &(0x7f00000002c0)="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", 0xfc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, 0x0, 0xff00)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

4.183819562s ago: executing program 2 (id=1429):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)

3.656688428s ago: executing program 2 (id=1434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x0, 0xffe4}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x10000000, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf3, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7ffffeff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x8, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x1, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xa, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x7, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x10001, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0xb}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0x8001, 0xfff, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0xffffffff, 0xfff}, {0xc2ea, 0xd, 0x1, 0xff, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x8001, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x80, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x4, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x344, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x2, 0x8, 0x800, 0x3}, {0x4, 0xed22, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0xb, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x100}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x0, 0x8, 0xe, 0x7}, {0x10010, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0x8, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0xfff, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x45a, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x4, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x5, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x3ff, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x4, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18b, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffdfffc, 0x9, 0x5, 0x4, 0xca, 0xffffffe2}, {0x0, 0x3, 0x8, 0x4f2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x80, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x7fff, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0x2, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x45, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0xfffffffe, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x8, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0x0, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x2, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x6}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {0x4}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x2}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x6}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800)

3.495358983s ago: executing program 2 (id=1437):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x5e, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x8, 0x2077}, {@rand_addr=0x64010102, 0x4e21, 0x0, 0x4, 0x12d5f, 0x3}}, 0x44)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000180)={{r0}, 0x2, &(0x7f0000000080)=[0x7ff, 0x5], 0x3, 0x3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005005800126739c4800b0001006272696467650000480002800500590002000000deb69d372665db9452323c43247599eb1d68b1bc711af04b891f1afc148b5575ca0a7ebb7091e2d5e37c23a0bbc3d51db86bc992acee34c826e60966cba89d16940245a7701b268b"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0)

3.329617449s ago: executing program 2 (id=1438):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x50, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xf23}, &(0x7f0000000080)=0x8)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

3.328259959s ago: executing program 3 (id=1439):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739"], 0x1c}}, 0x4000054)
setsockopt(0xffffffffffffffff, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

3.258451699s ago: executing program 4 (id=1440):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (fail_nth: 50)

2.604823862s ago: executing program 4 (id=1445):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='mr_integ_alloc\x00', r0, 0x0, 0x87d9}, 0x18)
socket$inet(0x2, 0x3, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.252934876s ago: executing program 0 (id=1446):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r11, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
bind$inet(r11, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)

2.252531232s ago: executing program 1 (id=1447):
r0 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
unshare(0x2c020400)
clock_gettime(0x0, 0x0) (async)
r3 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) (async)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async)
socket$inet(0x2, 0x3, 0x6) (async)
socket$netlink(0x10, 0x3, 0x8000000004)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000000)
r8 = socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a782200", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0)

2.249966272s ago: executing program 3 (id=1448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r5)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r10, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)

2.18021919s ago: executing program 4 (id=1449):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x2c, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000200))
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@deltclass={0x48, 0x29, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xe, 0xffe0}, {0x1, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x8}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x6}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_POLICE={0x20, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x1, 0x4, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6d}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x8000, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000a6a21988644cff13708b08c217e6299036d8ba388fd8e399130b7b6c832351e411ef7f426aecaf7957f00"/63], 0x14}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900ff0f0f000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28000600)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ppoll(&(0x7f0000000000)=[{r1, 0x1034}], 0x1, &(0x7f0000000140), 0x0, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01002c0800"/14, @ANYRES32=r3], 0x14}}, 0x800)
getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, 0x0, &(0x7f0000000080))

1.923434408s ago: executing program 0 (id=1450):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000240), 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_create1(0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000})
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x3, {{0xa, 0x4e22, 0xfffffffd, @mcast2, 0x4b0}}, {{0xa, 0x4e22, 0x400, @mcast1, 0xe}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
getsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f00000000c0), &(0x7f0000000200)=0x4)

1.844815707s ago: executing program 3 (id=1451):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r5}, 0x18)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r7, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1833000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000362d0085000000860000001801000020646c2500000000002020207b1af8ff00010000f8ffffffb702000008000000b7030000ff7fffff85000000060000008510000004007c"], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x68, &(0x7f0000000600)=""/104, 0x41000, 0x47, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xc, 0xffffffbc, 0xba}, 0x10, 0x0, r4, 0x0, &(0x7f0000000840)=[r1, r4, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gretap0\x00'})
r8 = socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r8, &(0x7f00000002c0)="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", 0xfc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, 0x0, 0xff00)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

1.680669391s ago: executing program 0 (id=1452):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r11, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
bind$inet(r11, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)

1.175007044s ago: executing program 0 (id=1453):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0xff7, &(0x7f0000000280)=""/4087, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x44}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r7)
sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0)
r10 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'})
bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)
close(0x4)

1.026362862s ago: executing program 4 (id=1454):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1, @ANYBLOB="c87dd4d9ad27cfa3118c29f38b17e88ce6ffbc749cd0e8f05c4b95ab72fb2e25bf9071eb2560fb7cdc65"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x3c, 0x0, 0x1, 0x600, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
shutdown(r7, 0x1)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1032, 0xffffffffffffffff, 0x0)

873.423073ms ago: executing program 3 (id=1455):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xfff}}], 0x30}, 0x840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1d2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb2f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x27e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe000}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004080}, 0x4040000)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x6, 0x1, 0x7, 0x5, 0x9})
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r1, 0x3, 0x7, 0x6})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x2, 0x0, 0x9}, 0x20)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="090201020000000000000000030000d90000000024aa66e4fa26843367c5f9fd5ec3d1c7181bafb78469505943129995f85329f8837425f6d456ef1ab8a9c74d31aeb3edf7047ed9bb0479a1dd83806753db1ecd3ee7e0f8fe5f07987365ce5e735789ae1e9fa240622d2eb3f63b22725d87779f316fb3255a7e49594ad8"], 0x14}, 0x1, 0x0, 0x0, 0xd24f4d577862d506}, 0x4)

612.30159ms ago: executing program 3 (id=1456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x321, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x3f, 0x0, 0x80}, 0x4048010)

526.565699ms ago: executing program 1 (id=1457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, r1, 0x1, 0xfffffffd, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x3c}}, 0x48080)

514.242095ms ago: executing program 3 (id=1458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x80)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x400, 0x6, 0x59})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000040)={r5, @in={{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5}, 0x90)
connect$rose(r1, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
r6 = accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @remote, 0x1, @bcast}, &(0x7f0000000040)=0x1c, 0x0)
connect$rose(r6, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null]}, 0x40)

490.469645ms ago: executing program 2 (id=1459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r1, @ANYBLOB="c87dd4d9ad27cfa3118c29f38b17e88ce6ffbc749cd0e8f05c4b95ab72fb2e25bf9071eb2560fb7cdc65"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x3c, 0x0, 0x1, 0x600, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1405, 0x300, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4040094)
shutdown(0xffffffffffffffff, 0x1)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1032, 0xffffffffffffffff, 0x0)

477.31746ms ago: executing program 4 (id=1460):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
accept(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r2 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000440)="6eaccee79c8acb6e086fcbf078b091", &(0x7f00000000c0)=@tcp6=r1}, 0x20)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x300000000000000, 0x801d, 0x9}, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08210340000000045c0000000e0a01020000000000000000010000000900020073797a32000000000900010073"], 0xe8}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0), 0xfffffe14}], 0x1}, 0x20044180)
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@gettaction={0x14, 0x32, 0xadb49ce1c4603474, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000040)=@udp, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

352.770334ms ago: executing program 1 (id=1461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r5)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8855}, 0x2800)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r10, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10)
bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)

165.208569ms ago: executing program 0 (id=1462):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edb8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r3 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r3, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="25030200000030000000160000ff140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000ec0)={0x12bc, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x1100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0e8bdd36a17de7cd4091e4509a33c2f2d904542fefbb9635530b4442e83350a8b8e7961f"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x957}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6498cf7d9b3b5e7872b8b1bdb6d64f4533ecea15d8d87bb89f0c555946"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "11049702858727080650eae21bfc15690509226f1ee488fdc13f56e8"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6472}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x5}, 0x40010)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000e00)='connect aa:aa:aa:aa:aa:10 2', 0x1b)

162.370523ms ago: executing program 1 (id=1463):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}})
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newqdisc={0x5c, 0x14, 0xf0b, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb, 0x9}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xc5, 0x8, 0x8, 0x12, 0x2, 0x1b, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffff, 0x4e, 0x9, 0x1d, 0x18, 0x1a, 0x8}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESDEC=r2, @ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040003000000"], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r11, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

95.073324ms ago: executing program 2 (id=1464):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, 0x0, 0x0, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r6, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
write(r0, &(0x7f0000000140)="24000000010006", 0x7)
socket$unix(0x1, 0x2, 0x0)

81.46816ms ago: executing program 1 (id=1465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001ffffffe000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)

1.813523ms ago: executing program 1 (id=1466):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r4}]}}}]}, 0x38}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$bt_hci(r9, 0x0, 0x3, &(0x7f0000003040)=""/3, &(0x7f0000003080)=0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)

0s ago: executing program 0 (id=1467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x3f, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000200)=0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000012c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', <r11=>0x0, 0x4, 0x75, 0x0, 0xfffffffa, 0x7ef1058a0be9973e, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8041, 0x7ff, 0x7}})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)={0x28, r13, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xe4, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xe4}}, 0x80)
r15 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x238, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1fc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x12c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

clear_bhb_loop+0x60/0xb0
[  145.455292][ T8012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.455310][ T8012] RIP: 0033:0x7f429d78f749
[  145.455328][ T8012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.455344][ T8012] RSP: 002b:00007f429e69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.455365][ T8012] RAX: ffffffffffffffda RBX: 00007f429d9e5fa0 RCX: 00007f429d78f749
[  145.455380][ T8012] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000005
[  145.455393][ T8012] RBP: 00007f429e69d090 R08: 0000000000000000 R09: 0000000000000000
[  145.455404][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.455415][ T8012] R13: 00007f429d9e6038 R14: 00007f429d9e5fa0 R15: 00007ffdc95933d8
[  145.455447][ T8012]  </TASK>
[  146.114714][ T5823] udevd[5823]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  146.142036][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  146.279608][ T8031] __nla_validate_parse: 9 callbacks suppressed
[  146.279627][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[  146.325909][ T8031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.583'.
[  146.556476][ T5837] Bluetooth: hci0: command tx timeout
[  146.594173][ T8048] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[  146.634462][ T8048] netlink: 244 bytes leftover after parsing attributes in process `syz.0.589'.
[  147.030645][ T8069] netlink: 'syz.0.592': attribute type 10 has an invalid length.
[  147.052575][ T8069] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  147.200045][ T8082] netlink: 'syz.1.594': attribute type 12 has an invalid length.
[  147.247786][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[  147.279683][ T8083] IPv6: Can't replace route, no match found
[  147.508873][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'.
[  147.524267][ T8093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.599'.
[  147.883946][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'.
[  148.219530][ T5823] udevd[5823]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  148.249300][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  148.304537][ T8123] FAULT_INJECTION: forcing a failure.
[  148.304537][ T8123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.354539][ T8123] CPU: 0 UID: 0 PID: 8123 Comm: syz.1.606 Not tainted syzkaller #0 PREEMPT(full) 
[  148.354567][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  148.354578][ T8123] Call Trace:
[  148.354586][ T8123]  <TASK>
[  148.354594][ T8123]  dump_stack_lvl+0xe8/0x150
[  148.354623][ T8123]  should_fail_ex+0x414/0x560
[  148.354656][ T8123]  _copy_from_iter+0x1cd/0x1630
[  148.354686][ T8123]  ? __pfx__copy_from_iter+0x10/0x10
[  148.354702][ T8123]  ? sock_alloc_send_pskb+0x86b/0x980
[  148.354731][ T8123]  ? __pfx__copy_from_iter+0x10/0x10
[  148.354753][ T8123]  ? page_copy_sane+0x16a/0x280
[  148.354774][ T8123]  copy_page_from_iter+0xdd/0x170
[  148.354798][ T8123]  skb_copy_datagram_from_iter+0x306/0x720
[  148.354833][ T8123]  tun_get_user+0x1683/0x3dc0
[  148.354874][ T8123]  ? aa_file_perm+0x44c/0x1530
[  148.354907][ T8123]  ? __pfx_tun_get_user+0x10/0x10
[  148.354929][ T8123]  ? __lock_acquire+0x6b6/0x2cf0
[  148.354949][ T8123]  ? kstrtoull+0x12f/0x1d0
[  148.354981][ T8123]  ? ref_tracker_alloc+0x318/0x460
[  148.354996][ T8123]  ? get_pid_task+0x20/0x1f0
[  148.355021][ T8123]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  148.355040][ T8123]  ? tun_get+0x1c/0x2f0
[  148.355061][ T8123]  ? tun_get+0x1c/0x2f0
[  148.355087][ T8123]  ? tun_get+0x1c/0x2f0
[  148.355108][ T8123]  ? tun_get+0x1c/0x2f0
[  148.355133][ T8123]  tun_chr_write_iter+0x113/0x200
[  148.355159][ T8123]  vfs_write+0x5c9/0xb30
[  148.355182][ T8123]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  148.355205][ T8123]  ? __pfx_vfs_write+0x10/0x10
[  148.355235][ T8123]  ? __fget_files+0x2a/0x420
[  148.355268][ T8123]  ksys_write+0x145/0x250
[  148.355290][ T8123]  ? __pfx_ksys_write+0x10/0x10
[  148.355321][ T8123]  do_syscall_64+0xec/0xf80
[  148.355341][ T8123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.355359][ T8123]  ? trace_irq_disable+0x37/0x100
[  148.355384][ T8123]  ? clear_bhb_loop+0x60/0xb0
[  148.355408][ T8123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.355426][ T8123] RIP: 0033:0x7fb49038f749
[  148.355443][ T8123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.355459][ T8123] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  148.355480][ T8123] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  148.355494][ T8123] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003
[  148.355507][ T8123] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  148.355519][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  148.355530][ T8123] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  148.355564][ T8123]  </TASK>
[  148.626768][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'.
[  148.658901][ T8128] IPv6: Can't replace route, no match found
[  148.738451][ T8130] wg1 speed is unknown, defaulting to 1000
[  148.970548][ T8138] bond1: option resend_igmp: invalid value (2846)
[  148.980519][ T8138] bond1: option resend_igmp: allowed values 0 - 255
[  149.040424][ T8138] bond1 (unregistering): Released all slaves
[  149.050945][ T8148] FAULT_INJECTION: forcing a failure.
[  149.050945][ T8148] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.062124][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'.
[  149.065028][ T8148] CPU: 1 UID: 0 PID: 8148 Comm: syz.0.612 Not tainted syzkaller #0 PREEMPT(full) 
[  149.065053][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  149.065064][ T8148] Call Trace:
[  149.065072][ T8148]  <TASK>
[  149.065080][ T8148]  dump_stack_lvl+0xe8/0x150
[  149.065109][ T8148]  should_fail_ex+0x414/0x560
[  149.065142][ T8148]  _copy_from_user+0x2d/0xb0
[  149.065165][ T8148]  ___sys_sendmsg+0x158/0x2a0
[  149.065190][ T8148]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.065247][ T8148]  ? __fget_files+0x2a/0x420
[  149.065269][ T8148]  ? __fget_files+0x3a0/0x420
[  149.065302][ T8148]  __x64_sys_sendmsg+0x19b/0x260
[  149.065326][ T8148]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.065357][ T8148]  ? __pfx_ksys_write+0x10/0x10
[  149.065387][ T8148]  do_syscall_64+0xec/0xf80
[  149.065406][ T8148]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.065423][ T8148]  ? trace_irq_disable+0x37/0x100
[  149.065447][ T8148]  ? clear_bhb_loop+0x60/0xb0
[  149.065469][ T8148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.065486][ T8148] RIP: 0033:0x7f520738f749
[  149.065503][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.065518][ T8148] RSP: 002b:00007f52082ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.065537][ T8148] RAX: ffffffffffffffda RBX: 00007f52075e6090 RCX: 00007f520738f749
[  149.065551][ T8148] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000008
[  149.065572][ T8148] RBP: 00007f52082ac090 R08: 0000000000000000 R09: 0000000000000000
[  149.065583][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.065594][ T8148] R13: 00007f52075e6128 R14: 00007f52075e6090 R15: 00007ffe489057c8
[  149.065625][ T8148]  </TASK>
[  149.832241][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'.
[  150.134616][ T8186] wg1 speed is unknown, defaulting to 1000
[  150.143772][ T8192] IPv6: Can't replace route, no match found
[  150.218619][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  151.599902][ T8251] __nla_validate_parse: 3 callbacks suppressed
[  151.599919][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'.
[  151.752709][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'.
[  152.217566][ T8270] netlink: 'syz.1.640': attribute type 12 has an invalid length.
[  152.469065][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'.
[  152.493356][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[  152.925078][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  153.079108][ T8303] netlink: 'syz.3.650': attribute type 12 has an invalid length.
[  153.089785][ T8303] netlink: 'syz.3.650': attribute type 29 has an invalid length.
[  153.101212][ T8303] netlink: 148 bytes leftover after parsing attributes in process `syz.3.650'.
[  153.111514][ T8303] netlink: 'syz.3.650': attribute type 2 has an invalid length.
[  153.120558][ T8303] netlink: 23 bytes leftover after parsing attributes in process `syz.3.650'.
[  153.147380][ T8307] netlink: 'syz.0.649': attribute type 12 has an invalid length.
[  153.520213][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[  153.643603][ T8323] FAULT_INJECTION: forcing a failure.
[  153.643603][ T8323] name failslab, interval 1, probability 0, space 0, times 0
[  153.658813][ T8323] CPU: 1 UID: 0 PID: 8323 Comm: syz.1.656 Not tainted syzkaller #0 PREEMPT(full) 
[  153.658829][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  153.658835][ T8323] Call Trace:
[  153.658840][ T8323]  <TASK>
[  153.658844][ T8323]  dump_stack_lvl+0xe8/0x150
[  153.658862][ T8323]  should_fail_ex+0x414/0x560
[  153.658882][ T8323]  should_failslab+0xa8/0x100
[  153.658896][ T8323]  kmem_cache_alloc_noprof+0x88/0x710
[  153.658913][ T8323]  ? __netlink_lookup+0xbd/0x8a0
[  153.658927][ T8323]  ? skb_clone+0x212/0x3a0
[  153.658943][ T8323]  skb_clone+0x212/0x3a0
[  153.658957][ T8323]  __netlink_deliver_tap+0x404/0x850
[  153.658976][ T8323]  ? netlink_deliver_tap+0x2e/0x1b0
[  153.658989][ T8323]  netlink_deliver_tap+0x19c/0x1b0
[  153.659003][ T8323]  netlink_unicast+0x7fa/0x9e0
[  153.659018][ T8323]  ? __pfx_netlink_unicast+0x10/0x10
[  153.659029][ T8323]  ? __alloc_skb+0x198/0x3a0
[  153.659039][ T8323]  ? netlink_sendmsg+0x642/0xb30
[  153.659050][ T8323]  ? skb_put+0x11b/0x210
[  153.659063][ T8323]  netlink_sendmsg+0x805/0xb30
[  153.659080][ T8323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.659094][ T8323]  ? aa_sock_msg_perm+0xf1/0x1b0
[  153.659109][ T8323]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.659118][ T8323]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.659143][ T8323]  __sock_sendmsg+0x21c/0x270
[  153.659159][ T8323]  ____sys_sendmsg+0x505/0x820
[  153.659174][ T8323]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.659191][ T8323]  ? import_iovec+0x74/0xa0
[  153.659205][ T8323]  ___sys_sendmsg+0x21f/0x2a0
[  153.659218][ T8323]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.659249][ T8323]  ? __fget_files+0x2a/0x420
[  153.659261][ T8323]  ? __fget_files+0x3a0/0x420
[  153.659279][ T8323]  __x64_sys_sendmsg+0x19b/0x260
[  153.659292][ T8323]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.659309][ T8323]  ? __pfx_ksys_write+0x10/0x10
[  153.659325][ T8323]  do_syscall_64+0xec/0xf80
[  153.659336][ T8323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.659345][ T8323]  ? trace_irq_disable+0x37/0x100
[  153.659359][ T8323]  ? clear_bhb_loop+0x60/0xb0
[  153.659373][ T8323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.659384][ T8323] RIP: 0033:0x7fb49038f749
[  153.659394][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.659402][ T8323] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.659415][ T8323] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  153.659429][ T8323] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000006
[  153.659435][ T8323] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  153.659441][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.659447][ T8323] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  153.659474][ T8323]  </TASK>
[  153.944534][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'.
[  154.227619][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.661'.
[  154.341237][ T8335] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.359327][ T8335] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  154.370462][ T8340] FAULT_INJECTION: forcing a failure.
[  154.370462][ T8340] name failslab, interval 1, probability 0, space 0, times 0
[  154.403977][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT(full) 
[  154.404004][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.404015][ T8340] Call Trace:
[  154.404022][ T8340]  <TASK>
[  154.404029][ T8340]  dump_stack_lvl+0xe8/0x150
[  154.404057][ T8340]  should_fail_ex+0x414/0x560
[  154.404094][ T8340]  should_failslab+0xa8/0x100
[  154.404121][ T8340]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  154.404153][ T8340]  ? __alloc_skb+0x1dc/0x3a0
[  154.404170][ T8340]  ? __local_bh_enable_ip+0xd0/0x130
[  154.404191][ T8340]  ? __alloc_skb+0x198/0x3a0
[  154.404211][ T8340]  __alloc_skb+0x1dc/0x3a0
[  154.404233][ T8340]  netlink_dump+0x1b7/0xe90
[  154.404261][ T8340]  ? __netlink_lookup+0xbd/0x8a0
[  154.404289][ T8340]  ? __pfx_netlink_dump+0x10/0x10
[  154.404316][ T8340]  ? __netlink_lookup+0x7db/0x8a0
[  154.404354][ T8340]  ? netlink_lookup+0x30/0x200
[  154.404374][ T8340]  ? netlink_lookup+0x30/0x200
[  154.404392][ T8340]  ? netlink_lookup+0x30/0x200
[  154.404416][ T8340]  __netlink_dump_start+0x5cb/0x7e0
[  154.404446][ T8340]  rtnetlink_rcv_msg+0x9eb/0xb70
[  154.404466][ T8340]  ? __pfx_tc_dump_chain+0x10/0x10
[  154.404490][ T8340]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  154.404508][ T8340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  154.404527][ T8340]  ? __pfx_rtnl_dumpit+0x10/0x10
[  154.404545][ T8340]  ? __pfx_tc_dump_chain+0x10/0x10
[  154.404581][ T8340]  netlink_rcv_skb+0x208/0x470
[  154.404605][ T8340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  154.404627][ T8340]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  154.404662][ T8340]  ? netlink_deliver_tap+0x2e/0x1b0
[  154.404694][ T8340]  netlink_unicast+0x82f/0x9e0
[  154.404721][ T8340]  ? __pfx_netlink_unicast+0x10/0x10
[  154.404739][ T8340]  ? __alloc_skb+0x198/0x3a0
[  154.404757][ T8340]  ? netlink_sendmsg+0x642/0xb30
[  154.404778][ T8340]  ? skb_put+0x11b/0x210
[  154.404799][ T8340]  netlink_sendmsg+0x805/0xb30
[  154.404830][ T8340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.404857][ T8340]  ? aa_sock_msg_perm+0xf1/0x1b0
[  154.404881][ T8340]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.404896][ T8340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.404920][ T8340]  __sock_sendmsg+0x21c/0x270
[  154.404950][ T8340]  ____sys_sendmsg+0x505/0x820
[  154.404979][ T8340]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.405009][ T8340]  ? import_iovec+0x74/0xa0
[  154.405033][ T8340]  ___sys_sendmsg+0x21f/0x2a0
[  154.405058][ T8340]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.405114][ T8340]  ? __fget_files+0x2a/0x420
[  154.405136][ T8340]  ? __fget_files+0x3a0/0x420
[  154.405169][ T8340]  __x64_sys_sendmsg+0x19b/0x260
[  154.405194][ T8340]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.405225][ T8340]  ? __pfx_ksys_write+0x10/0x10
[  154.405256][ T8340]  do_syscall_64+0xec/0xf80
[  154.405275][ T8340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.405290][ T8340]  ? trace_irq_disable+0x37/0x100
[  154.405322][ T8340]  ? clear_bhb_loop+0x60/0xb0
[  154.405345][ T8340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.405362][ T8340] RIP: 0033:0x7fc93f98f749
[  154.405380][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.405395][ T8340] RSP: 002b:00007fc94082e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.405416][ T8340] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98f749
[  154.405430][ T8340] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  154.405441][ T8340] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  154.405452][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.405463][ T8340] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  154.405497][ T8340]  </TASK>
[  154.478047][ T8335] bond0: (slave gre0): Error -95 calling set_mac_address
[  154.783358][ T8344] netlink: 'syz.0.660': attribute type 12 has an invalid length.
[  154.975901][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'.
[  155.227043][ T8381] netlink: 'syz.2.670': attribute type 12 has an invalid length.
[  155.245083][ T8381] netlink: 'syz.2.670': attribute type 29 has an invalid length.
[  155.273208][ T8380] ip6gre0: entered promiscuous mode
[  155.278840][ T8380] ip6gre0: entered allmulticast mode
[  155.392032][ T8388] vlan2: entered promiscuous mode
[  155.400030][ T8388] bond0: entered promiscuous mode
[  155.405190][ T8388] bond_slave_0: entered promiscuous mode
[  155.411748][ T8388] bond_slave_1: entered promiscuous mode
[  155.710195][ T8404] gre1: entered allmulticast mode
[  155.868218][ T8413] netlink: 'syz.2.680': attribute type 13 has an invalid length.
[  155.957240][ T8417] netlink: 'syz.3.679': attribute type 12 has an invalid length.
[  156.076861][ T8422] IPv6: Can't replace route, no match found
[  156.473545][ T8434] wg1 speed is unknown, defaulting to 1000
[  156.729559][ T5878] IPVS: starting estimator thread 0...
[  156.842384][ T8453] IPVS: using max 31 ests per chain, 74400 per kthread
[  157.068917][ T8468] __nla_validate_parse: 7 callbacks suppressed
[  157.068935][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'.
[  157.118581][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'.
[  157.485549][ T8491] wg1 speed is unknown, defaulting to 1000
[  157.673191][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'.
[  157.712034][ T8505] FAULT_INJECTION: forcing a failure.
[  157.712034][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.725600][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.4.703 Not tainted syzkaller #0 PREEMPT(full) 
[  157.725626][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  157.725637][ T8505] Call Trace:
[  157.725645][ T8505]  <TASK>
[  157.725653][ T8505]  dump_stack_lvl+0xe8/0x150
[  157.725683][ T8505]  should_fail_ex+0x414/0x560
[  157.725754][ T8505]  _copy_to_user+0x31/0xb0
[  157.725779][ T8505]  simple_read_from_buffer+0xe1/0x170
[  157.725805][ T8505]  proc_fail_nth_read+0x1b3/0x220
[  157.725829][ T8505]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.725851][ T8505]  ? rw_verify_area+0x2a6/0x4d0
[  157.725866][ T8505]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.725887][ T8505]  vfs_read+0x200/0xa30
[  157.725903][ T8505]  ? fdget_pos+0x247/0x320
[  157.725927][ T8505]  ? __pfx___mutex_lock+0x10/0x10
[  157.725947][ T8505]  ? __pfx_vfs_read+0x10/0x10
[  157.725964][ T8505]  ? __fget_files+0x2a/0x420
[  157.725989][ T8505]  ? __fget_files+0x3a0/0x420
[  157.726008][ T8505]  ? __fget_files+0x2a/0x420
[  157.726040][ T8505]  ksys_read+0x145/0x250
[  157.726058][ T8505]  ? __pfx_ksys_read+0x10/0x10
[  157.726084][ T8505]  do_syscall_64+0xec/0xf80
[  157.726103][ T8505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.726121][ T8505]  ? trace_irq_disable+0x37/0x100
[  157.726144][ T8505]  ? clear_bhb_loop+0x60/0xb0
[  157.726167][ T8505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.726185][ T8505] RIP: 0033:0x7fc93f98e15c
[  157.726200][ T8505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  157.726216][ T8505] RSP: 002b:00007fc94082e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  157.726234][ T8505] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98e15c
[  157.726247][ T8505] RDX: 000000000000000f RSI: 00007fc94082e0a0 RDI: 0000000000000005
[  157.726257][ T8505] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  157.726267][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  157.726276][ T8505] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  157.726305][ T8505]  </TASK>
[  158.240972][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.709'.
[  158.694575][ T8540] netlink: 260 bytes leftover after parsing attributes in process `syz.4.714'.
[  158.771234][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  158.781925][ T8540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.808018][ T8540] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  158.838900][ T8540] syzkaller0: mtu greater than device maximum
[  158.858888][ T8539] tipc: Disabling bearer <eth:syzkaller0>
[  158.889242][ T8549] validate_nla: 2 callbacks suppressed
[  158.889262][ T8549] netlink: 'syz.2.716': attribute type 6 has an invalid length.
[  159.023524][ T8554] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[  159.031669][ T8554] netlink: 244 bytes leftover after parsing attributes in process `syz.2.719'.
[  159.149904][ T8557] wg1 speed is unknown, defaulting to 1000
[  159.739884][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'.
[  159.944523][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'.
[  159.968203][ T8582] nbd: device at index 64 is going down
[  160.181460][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  160.586898][ T8611] 
@0Ù: renamed from bond_slave_1 (while UP)
[  160.714838][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'.
[  160.735819][ T8621] x_tables: unsorted entry at hook 2
[  160.815038][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.732'.
[  161.520594][ T8643] syzkaller0: entered promiscuous mode
[  161.526867][ T8643] syzkaller0: entered allmulticast mode
[  161.580645][ T8645] wg1 speed is unknown, defaulting to 1000
[  161.603868][ T8651] FAULT_INJECTION: forcing a failure.
[  161.603868][ T8651] name failslab, interval 1, probability 0, space 0, times 0
[  161.617130][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.2.742 Not tainted syzkaller #0 PREEMPT(full) 
[  161.617155][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  161.617166][ T8651] Call Trace:
[  161.617174][ T8651]  <TASK>
[  161.617182][ T8651]  dump_stack_lvl+0xe8/0x150
[  161.617212][ T8651]  should_fail_ex+0x414/0x560
[  161.617246][ T8651]  should_failslab+0xa8/0x100
[  161.617271][ T8651]  __kmalloc_cache_noprof+0x84/0x700
[  161.617289][ T8651]  ? netlink_lookup+0x30/0x200
[  161.617311][ T8651]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0
[  161.617340][ T8651]  ? genl_start+0x1c9/0x6c0
[  161.617359][ T8651]  genl_start+0x1c9/0x6c0
[  161.617375][ T8651]  ? netlink_lookup+0x30/0x200
[  161.617405][ T8651]  __netlink_dump_start+0x469/0x7e0
[  161.617436][ T8651]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  161.617459][ T8651]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  161.617476][ T8651]  ? genl_get_cmd+0x7d9/0x910
[  161.617509][ T8651]  ? __pfx_genl_start+0x10/0x10
[  161.617524][ T8651]  ? __pfx_genl_dumpit+0x10/0x10
[  161.617539][ T8651]  ? __pfx_genl_done+0x10/0x10
[  161.617571][ T8651]  genl_rcv_msg+0x5da/0x790
[  161.617594][ T8651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.617610][ T8651]  ? __pfx_tcp_metrics_nl_dump+0x10/0x10
[  161.617639][ T8651]  ? __asan_memcpy+0x40/0x70
[  161.617654][ T8651]  ? __pfx_ref_tracker_free+0x10/0x10
[  161.617681][ T8651]  netlink_rcv_skb+0x208/0x470
[  161.617706][ T8651]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.617725][ T8651]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.617746][ T8651]  ? genl_rcv+0x19/0x40
[  161.617791][ T8651]  ? down_read+0x274/0x2e0
[  161.617811][ T8651]  ? genl_rcv+0xd/0x40
[  161.617838][ T8651]  genl_rcv+0x28/0x40
[  161.617863][ T8651]  netlink_unicast+0x82f/0x9e0
[  161.617890][ T8651]  ? __pfx_netlink_unicast+0x10/0x10
[  161.617909][ T8651]  ? __alloc_skb+0x198/0x3a0
[  161.617928][ T8651]  ? netlink_sendmsg+0x642/0xb30
[  161.617949][ T8651]  ? skb_put+0x11b/0x210
[  161.617972][ T8651]  netlink_sendmsg+0x805/0xb30
[  161.618006][ T8651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.618033][ T8651]  ? aa_sock_msg_perm+0xf1/0x1b0
[  161.618058][ T8651]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.618074][ T8651]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.618094][ T8651]  __sock_sendmsg+0x21c/0x270
[  161.618120][ T8651]  ____sys_sendmsg+0x505/0x820
[  161.618144][ T8651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.618170][ T8651]  ? import_iovec+0x74/0xa0
[  161.618193][ T8651]  ___sys_sendmsg+0x21f/0x2a0
[  161.618216][ T8651]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.618273][ T8651]  ? __fget_files+0x2a/0x420
[  161.618294][ T8651]  ? __fget_files+0x3a0/0x420
[  161.618331][ T8651]  __x64_sys_sendmsg+0x19b/0x260
[  161.618346][ T8651]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.618363][ T8651]  ? __pfx_ksys_write+0x10/0x10
[  161.618379][ T8651]  do_syscall_64+0xec/0xf80
[  161.618390][ T8651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.618399][ T8651]  ? trace_irq_disable+0x37/0x100
[  161.618413][ T8651]  ? clear_bhb_loop+0x60/0xb0
[  161.618425][ T8651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.618434][ T8651] RIP: 0033:0x7f429d78f749
[  161.618444][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.618453][ T8651] RSP: 002b:00007f429e67c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.618465][ T8651] RAX: ffffffffffffffda RBX: 00007f429d9e6090 RCX: 00007f429d78f749
[  161.618472][ T8651] RDX: 000000000000c004 RSI: 0000200000000000 RDI: 0000000000000009
[  161.618479][ T8651] RBP: 00007f429e67c090 R08: 0000000000000000 R09: 0000000000000000
[  161.618485][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.618490][ T8651] R13: 00007f429d9e6128 R14: 00007f429d9e6090 R15: 00007ffdc95933d8
[  161.618507][ T8651]  </TASK>
[  162.140651][ T8655] netlink: 'syz.4.743': attribute type 12 has an invalid length.
[  162.505876][ T8665] __nla_validate_parse: 1 callbacks suppressed
[  162.505894][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.747'.
[  162.664498][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.752'.
[  162.792133][ T8683] wg1 speed is unknown, defaulting to 1000
[  162.810724][ T8686] netlink: 'syz.1.751': attribute type 12 has an invalid length.
[  162.907976][ T8685] wg1 speed is unknown, defaulting to 1000
[  163.239411][ T8702] netlink: 'syz.3.758': attribute type 12 has an invalid length.
[  163.363237][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'.
[  163.408098][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'.
[  163.434936][ T8709] netlink: 'syz.2.759': attribute type 12 has an invalid length.
[  163.652347][ T8714] FAULT_INJECTION: forcing a failure.
[  163.652347][ T8714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.673113][ T8713] netlink: 204 bytes leftover after parsing attributes in process `syz.0.762'.
[  163.691935][ T8713] FAULT_INJECTION: forcing a failure.
[  163.691935][ T8713] name failslab, interval 1, probability 0, space 0, times 0
[  163.705540][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.1.763 Not tainted syzkaller #0 PREEMPT(full) 
[  163.705564][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  163.705575][ T8714] Call Trace:
[  163.705583][ T8714]  <TASK>
[  163.705590][ T8714]  dump_stack_lvl+0xe8/0x150
[  163.705619][ T8714]  should_fail_ex+0x414/0x560
[  163.705654][ T8714]  _copy_to_user+0x31/0xb0
[  163.705679][ T8714]  simple_read_from_buffer+0xe1/0x170
[  163.705707][ T8714]  proc_fail_nth_read+0x1b3/0x220
[  163.705734][ T8714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.705756][ T8714]  ? rw_verify_area+0x2a6/0x4d0
[  163.705772][ T8714]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.705792][ T8714]  vfs_read+0x200/0xa30
[  163.705809][ T8714]  ? fdget_pos+0x247/0x320
[  163.705836][ T8714]  ? __pfx___mutex_lock+0x10/0x10
[  163.705855][ T8714]  ? __pfx_vfs_read+0x10/0x10
[  163.705873][ T8714]  ? __fget_files+0x2a/0x420
[  163.705898][ T8714]  ? __fget_files+0x3a0/0x420
[  163.705920][ T8714]  ? __fget_files+0x2a/0x420
[  163.705951][ T8714]  ksys_read+0x145/0x250
[  163.705973][ T8714]  ? __pfx_ksys_read+0x10/0x10
[  163.706017][ T8714]  do_syscall_64+0xec/0xf80
[  163.706036][ T8714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.706054][ T8714]  ? trace_irq_disable+0x37/0x100
[  163.706078][ T8714]  ? clear_bhb_loop+0x60/0xb0
[  163.706100][ T8714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.706118][ T8714] RIP: 0033:0x7fb49038e15c
[  163.706136][ T8714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  163.706152][ T8714] RSP: 002b:00007fb49121c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.706172][ T8714] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038e15c
[  163.706186][ T8714] RDX: 000000000000000f RSI: 00007fb49121c0a0 RDI: 0000000000000003
[  163.706196][ T8714] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  163.706207][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.706218][ T8714] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  163.706250][ T8714]  </TASK>
[  163.914264][ T8713] CPU: 1 UID: 0 PID: 8713 Comm: syz.0.762 Not tainted syzkaller #0 PREEMPT(full) 
[  163.914290][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  163.914302][ T8713] Call Trace:
[  163.914309][ T8713]  <TASK>
[  163.914317][ T8713]  dump_stack_lvl+0xe8/0x150
[  163.914345][ T8713]  should_fail_ex+0x414/0x560
[  163.914380][ T8713]  should_failslab+0xa8/0x100
[  163.914406][ T8713]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  163.914445][ T8713]  ? __alloc_skb+0x1dc/0x3a0
[  163.914463][ T8713]  ? __local_bh_enable_ip+0xd0/0x130
[  163.914485][ T8713]  ? __alloc_skb+0x198/0x3a0
[  163.914505][ T8713]  __alloc_skb+0x1dc/0x3a0
[  163.914530][ T8713]  netlink_ack+0x146/0xa50
[  163.914551][ T8713]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.914567][ T8713]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  163.914595][ T8713]  ? __pfx_nl802154_post_doit+0x10/0x10
[  163.914636][ T8713]  netlink_rcv_skb+0x28c/0x470
[  163.914662][ T8713]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.914681][ T8713]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.914702][ T8713]  ? genl_rcv+0x19/0x40
[  163.914748][ T8713]  ? down_read+0x274/0x2e0
[  163.914768][ T8713]  ? genl_rcv+0xd/0x40
[  163.914797][ T8713]  genl_rcv+0x28/0x40
[  163.914824][ T8713]  netlink_unicast+0x82f/0x9e0
[  163.914854][ T8713]  ? __pfx_netlink_unicast+0x10/0x10
[  163.914875][ T8713]  ? __alloc_skb+0x198/0x3a0
[  163.914894][ T8713]  ? netlink_sendmsg+0x642/0xb30
[  163.914917][ T8713]  ? skb_put+0x11b/0x210
[  163.914941][ T8713]  netlink_sendmsg+0x805/0xb30
[  163.914975][ T8713]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.915002][ T8713]  ? aa_sock_msg_perm+0xf1/0x1b0
[  163.915029][ T8713]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.915048][ T8713]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.915073][ T8713]  __sock_sendmsg+0x21c/0x270
[  163.915111][ T8713]  ____sys_sendmsg+0x505/0x820
[  163.915140][ T8713]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.915171][ T8713]  ? import_iovec+0x74/0xa0
[  163.915198][ T8713]  ___sys_sendmsg+0x21f/0x2a0
[  163.915223][ T8713]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.915283][ T8713]  ? __fget_files+0x2a/0x420
[  163.915311][ T8713]  ? __fget_files+0x3a0/0x420
[  163.915346][ T8713]  __x64_sys_sendmsg+0x19b/0x260
[  163.915372][ T8713]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.915405][ T8713]  ? __pfx_ksys_write+0x10/0x10
[  163.915442][ T8713]  do_syscall_64+0xec/0xf80
[  163.915462][ T8713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.915480][ T8713]  ? trace_irq_disable+0x37/0x100
[  163.915505][ T8713]  ? clear_bhb_loop+0x60/0xb0
[  163.915528][ T8713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.915547][ T8713] RIP: 0033:0x7f520738f749
[  163.915565][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.915583][ T8713] RSP: 002b:00007f52082cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.915603][ T8713] RAX: ffffffffffffffda RBX: 00007f52075e5fa0 RCX: 00007f520738f749
[  163.915618][ T8713] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004
[  163.915630][ T8713] RBP: 00007f52082cd090 R08: 0000000000000000 R09: 0000000000000000
[  163.915642][ T8713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.915654][ T8713] R13: 00007f52075e6038 R14: 00007f52075e5fa0 R15: 00007ffe489057c8
[  163.915687][ T8713]  </TASK>
[  164.373297][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.764'.
[  164.463287][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'.
[  164.521226][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'.
[  164.600120][ T8730] FAULT_INJECTION: forcing a failure.
[  164.600120][ T8730] name failslab, interval 1, probability 0, space 0, times 0
[  164.642959][ T8728] openvswitch: netlink: Message has 4 unknown bytes.
[  164.658237][ T8730] CPU: 0 UID: 0 PID: 8730 Comm: syz.4.770 Not tainted syzkaller #0 PREEMPT(full) 
[  164.658267][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  164.658278][ T8730] Call Trace:
[  164.658285][ T8730]  <TASK>
[  164.658292][ T8730]  dump_stack_lvl+0xe8/0x150
[  164.658318][ T8730]  should_fail_ex+0x414/0x560
[  164.658347][ T8730]  should_failslab+0xa8/0x100
[  164.658368][ T8730]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  164.658394][ T8730]  ? __alloc_skb+0x1dc/0x3a0
[  164.658409][ T8730]  ? __local_bh_enable_ip+0xd0/0x130
[  164.658426][ T8730]  ? __alloc_skb+0x198/0x3a0
[  164.658443][ T8730]  __alloc_skb+0x1dc/0x3a0
[  164.658463][ T8730]  netlink_ack+0x146/0xa50
[  164.658482][ T8730]  ? kasan_quarantine_put+0xbb/0x1f0
[  164.658497][ T8730]  ? lockdep_hardirqs_on+0x7b/0x110
[  164.658517][ T8730]  ? nfnetlink_rcv+0x1724/0x2590
[  164.658535][ T8730]  ? __nla_parse+0x40/0x60
[  164.658556][ T8730]  nfnetlink_rcv+0x176a/0x2590
[  164.658602][ T8730]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  164.658658][ T8730]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.658679][ T8730]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.658713][ T8730]  netlink_unicast+0x82f/0x9e0
[  164.658738][ T8730]  ? __pfx_netlink_unicast+0x10/0x10
[  164.658754][ T8730]  ? __alloc_skb+0x198/0x3a0
[  164.658771][ T8730]  ? netlink_sendmsg+0x642/0xb30
[  164.658788][ T8730]  ? skb_put+0x11b/0x210
[  164.658808][ T8730]  netlink_sendmsg+0x805/0xb30
[  164.658836][ T8730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.658859][ T8730]  ? aa_sock_msg_perm+0xf1/0x1b0
[  164.658882][ T8730]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.658897][ T8730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.658917][ T8730]  __sock_sendmsg+0x21c/0x270
[  164.658943][ T8730]  ____sys_sendmsg+0x505/0x820
[  164.658966][ T8730]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.658992][ T8730]  ? import_iovec+0x74/0xa0
[  164.659015][ T8730]  ___sys_sendmsg+0x21f/0x2a0
[  164.659036][ T8730]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.659085][ T8730]  ? __fget_files+0x2a/0x420
[  164.659104][ T8730]  ? __fget_files+0x3a0/0x420
[  164.659133][ T8730]  __x64_sys_sendmsg+0x19b/0x260
[  164.659154][ T8730]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.659180][ T8730]  ? __pfx_ksys_write+0x10/0x10
[  164.659206][ T8730]  do_syscall_64+0xec/0xf80
[  164.659222][ T8730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.659237][ T8730]  ? trace_irq_disable+0x37/0x100
[  164.659262][ T8730]  ? clear_bhb_loop+0x60/0xb0
[  164.659282][ T8730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.659297][ T8730] RIP: 0033:0x7fc93f98f749
[  164.659312][ T8730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.659326][ T8730] RSP: 002b:00007fc94082e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.659344][ T8730] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98f749
[  164.659356][ T8730] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  164.659366][ T8730] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  164.659376][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  164.659385][ T8730] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  164.659412][ T8730]  </TASK>
[  164.663162][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.019191][ T8734] netlink: 'syz.1.769': attribute type 12 has an invalid length.
[  165.368183][ T8738] wg1 speed is unknown, defaulting to 1000
[  165.377149][ T8739] wg1 speed is unknown, defaulting to 1000
[  165.814695][ T8766] netlink: 428 bytes leftover after parsing attributes in process `syz.1.778'.
[  165.905477][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.778'.
[  167.019989][ T8799] syzkaller0: entered promiscuous mode
[  167.025509][ T8799] syzkaller0: entered allmulticast mode
[  167.184413][ T5902] IPVS: starting estimator thread 0...
[  167.276398][ T8805] IPVS: using max 31 ests per chain, 74400 per kthread
[  167.358226][ T8811] netlink: 'syz.3.791': attribute type 32 has an invalid length.
[  167.798568][ T8822] netlink: 'syz.1.795': attribute type 12 has an invalid length.
[  169.323588][ T8850] netlink: 'syz.4.806': attribute type 2 has an invalid length.
[  169.350502][ T8850] netlink: 'syz.4.806': attribute type 2 has an invalid length.
[  169.443655][ T8850] wg1 speed is unknown, defaulting to 1000
[  169.657300][ T8856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.835017][ T8860] FAULT_INJECTION: forcing a failure.
[  169.835017][ T8860] name failslab, interval 1, probability 0, space 0, times 0
[  169.872510][ T8860] CPU: 0 UID: 0 PID: 8860 Comm: syz.1.809 Not tainted syzkaller #0 PREEMPT(full) 
[  169.872539][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  169.872551][ T8860] Call Trace:
[  169.872559][ T8860]  <TASK>
[  169.872567][ T8860]  dump_stack_lvl+0xe8/0x150
[  169.872598][ T8860]  should_fail_ex+0x414/0x560
[  169.872633][ T8860]  should_failslab+0xa8/0x100
[  169.872659][ T8860]  __kmalloc_noprof+0xdf/0x800
[  169.872679][ T8860]  ? tomoyo_encode+0x28b/0x550
[  169.872709][ T8860]  tomoyo_encode+0x28b/0x550
[  169.872740][ T8860]  tomoyo_realpath_from_path+0x58d/0x5d0
[  169.872775][ T8860]  ? tomoyo_domain+0xd8/0x130
[  169.872806][ T8860]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  169.872828][ T8860]  tomoyo_path_number_perm+0x1e8/0x5a0
[  169.872852][ T8860]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  169.872872][ T8860]  ? __lock_acquire+0x6b6/0x2cf0
[  169.872908][ T8860]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  169.872950][ T8860]  ? __fget_files+0x2a/0x420
[  169.872977][ T8860]  ? __fget_files+0x2a/0x420
[  169.872999][ T8860]  ? __fget_files+0x3a0/0x420
[  169.873021][ T8860]  ? __fget_files+0x2a/0x420
[  169.873048][ T8860]  security_file_ioctl+0xcb/0x2d0
[  169.873070][ T8860]  __se_sys_ioctl+0x47/0x170
[  169.873091][ T8860]  do_syscall_64+0xec/0xf80
[  169.873111][ T8860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.873129][ T8860]  ? trace_irq_disable+0x37/0x100
[  169.873153][ T8860]  ? clear_bhb_loop+0x60/0xb0
[  169.873177][ T8860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.873195][ T8860] RIP: 0033:0x7fb49038f749
[  169.873212][ T8860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.873228][ T8860] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.873249][ T8860] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  169.873264][ T8860] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004
[  169.873277][ T8860] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  169.873289][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.873300][ T8860] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  169.873334][ T8860]  </TASK>
[  169.873356][ T8860] ERROR: Out of memory at tomoyo_realpath_from_path.
[  170.326923][ T8881] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  170.389027][ T8886] netlink: 'syz.1.817': attribute type 13 has an invalid length.
[  170.481484][ T8888] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  170.739426][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.746969][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.070134][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.095709][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.682215][ T8890] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  171.693746][ T8890] bond0: (slave gre0): Error -95 calling set_mac_address
[  171.703806][   T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.712991][ T5941] wg1 speed is unknown, defaulting to 1000
[  171.737039][ T5941] syz0: Port: 1 Link DOWN
[  171.798556][ T8905] netlink: 104 bytes leftover after parsing attributes in process `syz.1.822'.
[  171.814692][   T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.854487][   T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.878106][ T8905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.907753][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'.
[  171.917668][   T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.944015][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.825'.
[  172.092682][ T8914] wg1 speed is unknown, defaulting to 1000
[  172.226997][   T30] audit: type=1800 audit(1767722164.582:3): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.830" name="memory.events" dev="tmpfs" ino=831 res=0 errno=0
[  172.317358][ T5828] Bluetooth: hci4: command 0x0405 tx timeout
[  172.362159][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  172.541692][ T8941] wg1 speed is unknown, defaulting to 1000
[  172.577457][ T8949] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  172.591829][ T8949] bond0: (slave gre0): Error -95 calling set_mac_address
[  172.711570][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  172.995619][ T8958] bond1: Removing last arp target with arp_interval on
[  173.005652][ T8958] bond1: entered promiscuous mode
[  173.011106][ T8958] bond1: entered allmulticast mode
[  173.017003][ T8958] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.378000][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  173.756475][ T8981] wg1 speed is unknown, defaulting to 1000
[  174.051680][ T9007] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  174.067882][ T9007] bond0: (slave gre0): Error -95 calling set_mac_address
[  174.161414][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'.
[  174.190222][ T9015] netlink: 'syz.4.848': attribute type 12 has an invalid length.
[  174.286679][ T9019] IPv6: Can't replace route, no match found
[  174.295477][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'.
[  174.328843][ T9021] wireguard0: entered promiscuous mode
[  174.334515][ T9021] wireguard0: entered allmulticast mode
[  174.343272][ T9021] team0: Device wireguard0 is of different type
[  174.374846][ T9025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.853'.
[  174.764716][ T9037] netlink: 416 bytes leftover after parsing attributes in process `syz.2.856'.
[  174.788212][ T9037] FAULT_INJECTION: forcing a failure.
[  174.788212][ T9037] name failslab, interval 1, probability 0, space 0, times 0
[  174.801526][ T9037] CPU: 1 UID: 0 PID: 9037 Comm: syz.2.856 Not tainted syzkaller #0 PREEMPT(full) 
[  174.801554][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.801566][ T9037] Call Trace:
[  174.801574][ T9037]  <TASK>
[  174.801582][ T9037]  dump_stack_lvl+0xe8/0x150
[  174.801612][ T9037]  should_fail_ex+0x414/0x560
[  174.801646][ T9037]  should_failslab+0xa8/0x100
[  174.801673][ T9037]  __kmalloc_noprof+0xdf/0x800
[  174.801691][ T9037]  ? __raw_spin_lock_init+0x45/0x100
[  174.801715][ T9037]  ? pfkey_add+0xf65/0x2e00
[  174.801741][ T9037]  pfkey_add+0xf65/0x2e00
[  174.801779][ T9037]  ? __pfx_pfkey_add+0x10/0x10
[  174.801798][ T9037]  ? pfkey_broadcast+0x3c2/0x3e0
[  174.801829][ T9037]  pfkey_sendmsg+0xbfe/0x1090
[  174.801849][ T9037]  ? unwind_next_frame+0xa5/0x23d0
[  174.801888][ T9037]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  174.801937][ T9037]  ? aa_sock_msg_perm+0xf1/0x1b0
[  174.801965][ T9037]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  174.801982][ T9037]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  174.802003][ T9037]  __sock_sendmsg+0x21c/0x270
[  174.802033][ T9037]  ____sys_sendmsg+0x505/0x820
[  174.802060][ T9037]  ? __pfx_____sys_sendmsg+0x10/0x10
[  174.802100][ T9037]  ? import_iovec+0x74/0xa0
[  174.802126][ T9037]  ___sys_sendmsg+0x21f/0x2a0
[  174.802150][ T9037]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.802211][ T9037]  ? __fget_files+0x2a/0x420
[  174.802235][ T9037]  ? __fget_files+0x3a0/0x420
[  174.802268][ T9037]  __x64_sys_sendmsg+0x19b/0x260
[  174.802293][ T9037]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  174.802323][ T9037]  ? __pfx_ksys_write+0x10/0x10
[  174.802353][ T9037]  do_syscall_64+0xec/0xf80
[  174.802373][ T9037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.802391][ T9037]  ? trace_irq_disable+0x37/0x100
[  174.802416][ T9037]  ? clear_bhb_loop+0x60/0xb0
[  174.802439][ T9037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.802456][ T9037] RIP: 0033:0x7f429d78f749
[  174.802473][ T9037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.802489][ T9037] RSP: 002b:00007f429e67c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.802507][ T9037] RAX: ffffffffffffffda RBX: 00007f429d9e6090 RCX: 00007f429d78f749
[  174.802521][ T9037] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  174.802533][ T9037] RBP: 00007f429e67c090 R08: 0000000000000000 R09: 0000000000000000
[  174.802544][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.802554][ T9037] R13: 00007f429d9e6128 R14: 00007f429d9e6090 R15: 00007ffdc95933d8
[  174.802586][ T9037]  </TASK>
[  175.106333][ T9037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.856'.
[  175.348109][ T9049] wg1 speed is unknown, defaulting to 1000
[  175.670625][ T9059] wg1 speed is unknown, defaulting to 1000
[  175.794794][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  175.868398][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  176.051019][ T9084] IPv6: NLM_F_CREATE should be specified when creating new route
[  176.255150][ T9089] netlink: 'syz.2.870': attribute type 6 has an invalid length.
[  176.499380][ T9099] netlink: 'syz.3.873': attribute type 1 has an invalid length.
[  176.679440][ T9103] wg1 speed is unknown, defaulting to 1000
[  176.951239][ T9119] __nla_validate_parse: 3 callbacks suppressed
[  176.951256][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.879'.
[  177.275404][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  177.342289][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  177.407097][ T9136] netlink: 'syz.3.881': attribute type 12 has an invalid length.
[  177.918500][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  177.928549][ T9162] netlink: 'syz.2.892': attribute type 30 has an invalid length.
[  177.950917][ T1346] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.961963][ T1346] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.970735][ T1346] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.994557][ T1346] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.114912][ T9166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.894'.
[  178.129087][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.894'.
[  178.139394][ T9166] netlink: 'syz.3.894': attribute type 33 has an invalid length.
[  178.147496][ T9166] netlink: 152 bytes leftover after parsing attributes in process `syz.3.894'.
[  178.157761][ T9166] `: renamed from team0
[  178.173703][ T9166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.894'.
[  178.633247][ T9184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.828725][ T9192] wg1 speed is unknown, defaulting to 1000
[  178.831044][ T9195] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  178.893681][ T9195] bond0: (slave gre0): Error -95 calling set_mac_address
[  179.007063][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'.
[  179.032920][ T9199] IPv6: Can't replace route, no match found
[  179.475362][ T9212] tipc: Started in network mode
[  179.480522][ T9212] tipc: Node identity 6e69bbc7ed88, cluster identity 4711
[  179.488821][ T9212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.556348][ T9211] tipc: Disabling bearer <eth:syzkaller0>
[  179.783562][ T9221] netlink: 'syz.0.911': attribute type 12 has an invalid length.
[  179.834545][ T9224] wg1 speed is unknown, defaulting to 1000
[  180.202202][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[  180.215640][ T9236] IPv6: Can't replace route, no match found
[  180.513467][ T9244] team0: Caught tx_queue_len zero misconfig
[  180.835957][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.923'.
[  181.131130][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  181.221454][ T9268] FAULT_INJECTION: forcing a failure.
[  181.221454][ T9268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  181.267307][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.0.928 Not tainted syzkaller #0 PREEMPT(full) 
[  181.267331][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  181.267341][ T9268] Call Trace:
[  181.267348][ T9268]  <TASK>
[  181.267355][ T9268]  dump_stack_lvl+0xe8/0x150
[  181.267380][ T9268]  should_fail_ex+0x414/0x560
[  181.267410][ T9268]  _copy_from_user+0x2d/0xb0
[  181.267431][ T9268]  __sys_bpf+0x1e3/0x860
[  181.267456][ T9268]  ? __pfx___sys_bpf+0x10/0x10
[  181.267499][ T9268]  ? ksys_write+0x22a/0x250
[  181.267517][ T9268]  ? __pfx_ksys_write+0x10/0x10
[  181.267539][ T9268]  __x64_sys_bpf+0x7c/0x90
[  181.267559][ T9268]  do_syscall_64+0xec/0xf80
[  181.267576][ T9268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.267590][ T9268]  ? trace_irq_disable+0x37/0x100
[  181.267611][ T9268]  ? clear_bhb_loop+0x60/0xb0
[  181.267630][ T9268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.267645][ T9268] RIP: 0033:0x7f520738f749
[  181.267660][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.267675][ T9268] RSP: 002b:00007f52082cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  181.267692][ T9268] RAX: ffffffffffffffda RBX: 00007f52075e5fa0 RCX: 00007f520738f749
[  181.267704][ T9268] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  181.267715][ T9268] RBP: 00007f52082cd090 R08: 0000000000000000 R09: 0000000000000000
[  181.267725][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.267734][ T9268] R13: 00007f52075e6038 R14: 00007f52075e5fa0 R15: 00007ffe489057c8
[  181.267761][ T9268]  </TASK>
[  181.575430][ T9279] netlink: 'syz.0.932': attribute type 12 has an invalid length.
[  181.683186][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.930'.
[  181.709387][ T9273] wg1 speed is unknown, defaulting to 1000
[  182.022667][ T9291] syzkaller0: entered promiscuous mode
[  182.028677][ T9291] syzkaller0: entered allmulticast mode
[  182.142043][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  182.174775][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  182.854694][ T9310] FAULT_INJECTION: forcing a failure.
[  182.854694][ T9310] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.888655][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.1.939 Not tainted syzkaller #0 PREEMPT(full) 
[  182.888683][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  182.888695][ T9310] Call Trace:
[  182.888703][ T9310]  <TASK>
[  182.888712][ T9310]  dump_stack_lvl+0xe8/0x150
[  182.888742][ T9310]  should_fail_ex+0x414/0x560
[  182.888777][ T9310]  _copy_from_iter+0x1cd/0x1630
[  182.888809][ T9310]  ? __pfx__copy_from_iter+0x10/0x10
[  182.888830][ T9310]  ? __build_skb_around+0x22d/0x3c0
[  182.888852][ T9310]  ? __alloc_skb+0x198/0x3a0
[  182.888872][ T9310]  ? netlink_sendmsg+0x642/0xb30
[  182.888895][ T9310]  ? skb_put+0x11b/0x210
[  182.888919][ T9310]  netlink_sendmsg+0x6b2/0xb30
[  182.888953][ T9310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.888981][ T9310]  ? aa_sock_msg_perm+0xf1/0x1b0
[  182.889008][ T9310]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.889027][ T9310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  182.889052][ T9310]  __sock_sendmsg+0x21c/0x270
[  182.889083][ T9310]  ____sys_sendmsg+0x505/0x820
[  182.889110][ T9310]  ? __pfx_____sys_sendmsg+0x10/0x10
[  182.889141][ T9310]  ? import_iovec+0x74/0xa0
[  182.889167][ T9310]  ___sys_sendmsg+0x21f/0x2a0
[  182.889193][ T9310]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.889251][ T9310]  ? __fget_files+0x2a/0x420
[  182.889274][ T9310]  ? __fget_files+0x3a0/0x420
[  182.889316][ T9310]  __x64_sys_sendmsg+0x19b/0x260
[  182.889340][ T9310]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  182.889370][ T9310]  ? __pfx_ksys_write+0x10/0x10
[  182.889399][ T9310]  do_syscall_64+0xec/0xf80
[  182.889416][ T9310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.889432][ T9310]  ? trace_irq_disable+0x37/0x100
[  182.889454][ T9310]  ? clear_bhb_loop+0x60/0xb0
[  182.889475][ T9310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.889492][ T9310] RIP: 0033:0x7fb49038f749
[  182.889509][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.889525][ T9310] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  182.889545][ T9310] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  182.889558][ T9310] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  182.889570][ T9310] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  182.889582][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.889593][ T9310] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  182.889624][ T9310]  </TASK>
[  183.508688][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.942'.
[  183.709716][ T9328] netlink: 'syz.2.946': attribute type 1 has an invalid length.
[  183.753865][ T9328] netlink: 80 bytes leftover after parsing attributes in process `syz.2.946'.
[  183.822482][ T9330] netlink: 'syz.0.947': attribute type 39 has an invalid length.
[  183.868936][ T9330] hsr_slave_1 (unregistering): left promiscuous mode
[  184.022343][ T9337] wireguard0: entered promiscuous mode
[  184.030147][ T9337] wireguard0: entered allmulticast mode
[  184.049254][ T9337] team0: Device wireguard0 is of different type
[  184.194231][ T9342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'.
[  184.567647][ T9348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'.
[  185.271588][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  185.342951][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  185.529042][ T9379] FAULT_INJECTION: forcing a failure.
[  185.529042][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.563239][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.1.959 Not tainted syzkaller #0 PREEMPT(full) 
[  185.563266][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  185.563277][ T9379] Call Trace:
[  185.563284][ T9379]  <TASK>
[  185.563292][ T9379]  dump_stack_lvl+0xe8/0x150
[  185.563328][ T9379]  should_fail_ex+0x414/0x560
[  185.563360][ T9379]  _copy_from_iter+0x1cd/0x1630
[  185.563389][ T9379]  ? __pfx__copy_from_iter+0x10/0x10
[  185.563406][ T9379]  ? sock_alloc_send_pskb+0x86b/0x980
[  185.563435][ T9379]  ? __pfx__copy_from_iter+0x10/0x10
[  185.563457][ T9379]  ? page_copy_sane+0x16a/0x280
[  185.563476][ T9379]  copy_page_from_iter+0xdd/0x170
[  185.563498][ T9379]  skb_copy_datagram_from_iter+0x306/0x720
[  185.563535][ T9379]  tun_get_user+0x1683/0x3dc0
[  185.563576][ T9379]  ? aa_file_perm+0x44c/0x1530
[  185.563599][ T9379]  ? __pfx_tun_get_user+0x10/0x10
[  185.563625][ T9379]  ? __lock_acquire+0x6b6/0x2cf0
[  185.563646][ T9379]  ? kstrtoull+0x12f/0x1d0
[  185.563679][ T9379]  ? ref_tracker_alloc+0x318/0x460
[  185.563696][ T9379]  ? get_pid_task+0x20/0x1f0
[  185.563720][ T9379]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  185.563739][ T9379]  ? tun_get+0x1c/0x2f0
[  185.563761][ T9379]  ? tun_get+0x1c/0x2f0
[  185.563788][ T9379]  ? tun_get+0x1c/0x2f0
[  185.563810][ T9379]  ? tun_get+0x1c/0x2f0
[  185.563834][ T9379]  tun_chr_write_iter+0x113/0x200
[  185.563858][ T9379]  vfs_write+0x5c9/0xb30
[  185.563880][ T9379]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  185.563903][ T9379]  ? __pfx_vfs_write+0x10/0x10
[  185.563929][ T9379]  ? __fget_files+0x2a/0x420
[  185.563959][ T9379]  ksys_write+0x145/0x250
[  185.563980][ T9379]  ? __pfx_ksys_write+0x10/0x10
[  185.564009][ T9379]  do_syscall_64+0xec/0xf80
[  185.564028][ T9379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.564046][ T9379]  ? trace_irq_disable+0x37/0x100
[  185.564069][ T9379]  ? clear_bhb_loop+0x60/0xb0
[  185.564090][ T9379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.564107][ T9379] RIP: 0033:0x7fb49038f749
[  185.564124][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.564138][ T9379] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  185.564157][ T9379] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  185.564168][ T9379] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003
[  185.564179][ T9379] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  185.564188][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  185.564197][ T9379] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  185.564221][ T9379]  </TASK>
[  185.861339][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.960'.
[  185.924311][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'.
[  186.104056][ T9390] veth5: entered promiscuous mode
[  186.153146][ T9390] erspan0: entered allmulticast mode
[  186.196191][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'.
[  186.385653][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  186.470398][ T9415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.971'.
[  186.486273][ T9415] nbd: must specify at least one socket
[  186.636259][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.974'.
[  186.655983][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.974'.
[  187.050069][ T9431] netlink: 'syz.3.975': attribute type 13 has an invalid length.
[  187.149710][ T9433] 8021q: adding VLAN 0 to HW filter on device bond2
[  187.402128][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  187.535997][ T9456] netlink: 'syz.3.982': attribute type 1 has an invalid length.
[  187.635540][ T9462] netlink: 'syz.4.985': attribute type 1 has an invalid length.
[  188.192490][ T9478] wg1 speed is unknown, defaulting to 1000
[  188.612173][ T9498] netlink: 'syz.4.998': attribute type 1 has an invalid length.
[  188.623864][ T9493] netlink: 'syz.1.996': attribute type 12 has an invalid length.
[  188.683940][ T9495] vlan0: entered allmulticast mode
[  188.728018][ T9504] __nla_validate_parse: 8 callbacks suppressed
[  188.728036][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'.
[  188.903682][ T9498] 8021q: adding VLAN 0 to HW filter on device bond2
[  188.931967][ T9502] bond2: (slave gretap1): making interface the new active one
[  188.961680][ T9502] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  189.112829][ T9504] bond2 (unregistering): (slave gretap1): Releasing active interface
[  189.128504][ T9504] bond2 (unregistering): Released all slaves
[  189.215768][ T5828] Bluetooth: hci4: command 0x0405 tx timeout
[  189.480539][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1007'.
[  189.781774][ T9532] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  189.803419][ T9532] bond0: (slave gre0): Error -95 calling set_mac_address
[  190.353413][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1013'.
[  190.429135][ T9547] IPv6: Can't replace route, no match found
[  190.536509][ T9552] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  190.743503][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1017'.
[  191.373816][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1022'.
[  191.411373][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  191.673037][ T9598] netlink: 'syz.1.1027': attribute type 12 has an invalid length.
[  192.144098][ T9605] netlink: 'syz.4.1030': attribute type 6 has an invalid length.
[  192.312866][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'.
[  192.450838][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.458776][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.482783][ T9615] netlink: 'syz.2.1034': attribute type 2 has an invalid length.
[  192.505239][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'.
[  192.515075][ T9615] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  192.544508][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1038'.
[  192.694702][ T9631] wg1 speed is unknown, defaulting to 1000
[  192.951845][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1043'.
[  193.164297][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  193.343306][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1048'.
[  193.562164][ T9671] gretap1: entered promiscuous mode
[  193.662782][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  193.720097][ T9679] netlink: 'syz.4.1053': attribute type 1 has an invalid length.
[  194.019491][ T9697] __nla_validate_parse: 3 callbacks suppressed
[  194.019509][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1061'.
[  194.163893][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.294041][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  194.303981][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1062'.
[  195.224409][ T9707] bond0: (slave wlan1): Releasing backup interface
[  195.273916][ T9709] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  195.407144][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'.
[  195.426026][ T9724] x_tables: duplicate underflow at hook 2
[  195.510977][ T9723] ieee802154 phy1 wpan1: encryption failed: -22
[  195.580703][ T9728] netlink: 'syz.3.1065': attribute type 21 has an invalid length.
[  195.606548][ T9728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1065'.
[  195.696416][ T9733] wg1 speed is unknown, defaulting to 1000
[  195.842798][ T9739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.884671][ T9735] tipc: Resetting bearer <eth:syzkaller0>
[  195.938837][ T9734] tipc: Disabling bearer <eth:syzkaller0>
[  195.992672][ T9745] wg1 speed is unknown, defaulting to 1000
[  196.239769][ T5148] Bluetooth: hci2: command 0x0406 tx timeout
[  196.245918][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  196.251990][ T9706] Bluetooth: hci1: command 0x0406 tx timeout
[  196.341734][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1078'.
[  196.350951][ T9761] nbd: must specify at least one socket
[  196.450021][ T9764] wg1 speed is unknown, defaulting to 1000
[  196.590997][ T9771] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  196.602921][ T9771] bond0: (slave gre0): Error -95 calling set_mac_address
[  196.720273][ T9775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'.
[  196.982999][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'.
[  197.169387][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  197.190150][ T9796] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  197.193832][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  197.221288][ T9796] netlink: 'syz.1.1088': attribute type 13 has an invalid length.
[  197.246828][ T9799] netlink: 'syz.0.1089': attribute type 3 has an invalid length.
[  197.389870][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1091'.
[  197.411122][ T9802] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  197.418471][ T9807] nbd: must specify at least one socket
[  197.613223][ T9819] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  197.656350][ T9819] bond0: (slave gre0): Error -95 calling set_mac_address
[  197.748625][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'.
[  197.760287][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'.
[  197.778062][ T9828] sctp: [Deprecated]: syz.3.1096 (pid 9828) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.778062][ T9828] Use struct sctp_sack_info instead
[  197.847146][ T9834] tipc: Enabling of bearer <eph:syzkaller0> rejected, media not registered
[  197.858783][ T9834] syzkaller0: entered promiscuous mode
[  197.864275][ T9834] syzkaller0: entered allmulticast mode
[  197.873793][ T9834] xt_HMARK: spi-set and port-set can't be combined
[  198.030715][ T9840] netlink: 'syz.3.1101': attribute type 3 has an invalid length.
[  198.040072][ T9840] netlink: 'syz.3.1101': attribute type 4 has an invalid length.
[  198.080259][ T9840] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  198.118137][ T9842] netlink: 'syz.4.1100': attribute type 12 has an invalid length.
[  198.372312][ T9847] nbd: must specify at least one socket
[  198.731796][ T9858] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  198.775475][ T9858] bond0: (slave gre0): Error -95 calling set_mac_address
[  198.828038][ T9864] wireguard0: entered promiscuous mode
[  198.844940][ T9864] wireguard0: entered allmulticast mode
[  198.883044][ T9864] team0: Device wireguard0 is of different type
[  199.928450][ T9907] netlink: 'syz.3.1120': attribute type 12 has an invalid length.
[  200.004784][ T9908] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  200.052068][ T9908] bond0: (slave gre0): Error -95 calling set_mac_address
[  200.642230][ T9939] netlink: 'syz.0.1127': attribute type 9 has an invalid length.
[  200.662235][ T9939] __nla_validate_parse: 6 callbacks suppressed
[  200.662254][ T9939] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.1127'.
[  200.958445][ T9965] FAULT_INJECTION: forcing a failure.
[  200.958445][ T9965] name failslab, interval 1, probability 0, space 0, times 0
[  200.971441][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.1.1133 Not tainted syzkaller #0 PREEMPT(full) 
[  200.971468][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.971480][ T9965] Call Trace:
[  200.971488][ T9965]  <TASK>
[  200.971497][ T9965]  dump_stack_lvl+0xe8/0x150
[  200.971527][ T9965]  should_fail_ex+0x414/0x560
[  200.971562][ T9965]  should_failslab+0xa8/0x100
[  200.971588][ T9965]  kmem_cache_alloc_noprof+0x88/0x710
[  200.971618][ T9965]  ? skb_clone+0x212/0x3a0
[  200.971649][ T9965]  skb_clone+0x212/0x3a0
[  200.971684][ T9965]  ? __neigh_event_send+0xebc/0x1520
[  200.971708][ T9965]  __neigh_event_send+0xec9/0x1520
[  200.971743][ T9965]  neigh_resolve_output+0x198/0x750
[  200.971767][ T9965]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  200.971803][ T9965]  ip_finish_output2+0xbb6/0x1000
[  200.971832][ T9965]  ? ip_skb_dst_mtu+0x917/0xb70
[  200.971855][ T9965]  ? ip_finish_output2+0x3d0/0x1000
[  200.971876][ T9965]  ? ip_finish_output+0x33a/0x3f0
[  200.971901][ T9965]  ip_output+0x29f/0x450
[  200.971922][ T9965]  ? ip_output+0x5b/0x450
[  200.971945][ T9965]  ip_push_pending_frames+0xbe/0x150
[  200.971968][ T9965]  raw_sendmsg+0x1440/0x18b0
[  200.972008][ T9965]  ? __pfx_raw_sendmsg+0x10/0x10
[  200.972052][ T9965]  ? aa_sk_perm+0x7ee/0x920
[  200.972081][ T9965]  ? __pfx_aa_sk_perm+0x10/0x10
[  200.972102][ T9965]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  200.972134][ T9965]  ? sock_rps_record_flow+0x19/0x410
[  200.972163][ T9965]  ? inet_sendmsg+0x2f4/0x370
[  200.972186][ T9965]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  200.972209][ T9965]  __sock_sendmsg+0x19c/0x270
[  200.972241][ T9965]  ____sys_sendmsg+0x52d/0x820
[  200.972272][ T9965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.972305][ T9965]  ? import_iovec+0x74/0xa0
[  200.972334][ T9965]  ___sys_sendmsg+0x21f/0x2a0
[  200.972364][ T9965]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.972393][ T9965]  ? kstrtouint+0x6e/0xe0
[  200.972453][ T9965]  ? __fget_files+0x2a/0x420
[  200.972477][ T9965]  ? __fget_files+0x3a0/0x420
[  200.972513][ T9965]  __sys_sendmmsg+0x227/0x430
[  200.972543][ T9965]  ? __pfx___sys_sendmmsg+0x10/0x10
[  200.972564][ T9965]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  200.972622][ T9965]  ? ksys_write+0x22a/0x250
[  200.972645][ T9965]  ? __pfx_ksys_write+0x10/0x10
[  200.972672][ T9965]  __x64_sys_sendmmsg+0xa0/0xc0
[  200.972698][ T9965]  do_syscall_64+0xec/0xf80
[  200.972718][ T9965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.972737][ T9965]  ? trace_irq_disable+0x37/0x100
[  200.972762][ T9965]  ? clear_bhb_loop+0x60/0xb0
[  200.972785][ T9965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.972802][ T9965] RIP: 0033:0x7fb49038f749
[  200.972824][ T9965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.972840][ T9965] RSP: 002b:00007fb4911fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  200.972871][ T9965] RAX: ffffffffffffffda RBX: 00007fb4905e6090 RCX: 00007fb49038f749
[  200.972886][ T9965] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000009
[  200.972897][ T9965] RBP: 00007fb4911fb090 R08: 0000000000000000 R09: 0000000000000000
[  200.972908][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.972918][ T9965] R13: 00007fb4905e6128 R14: 00007fb4905e6090 R15: 00007ffcb27589c8
[  200.972951][ T9965]  </TASK>
[  201.434358][ T9968] netlink: 'syz.1.1133': attribute type 12 has an invalid length.
[  201.456840][ T9974] FAULT_INJECTION: forcing a failure.
[  201.456840][ T9974] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.478295][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.3.1138 Not tainted syzkaller #0 PREEMPT(full) 
[  201.478322][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  201.478335][ T9974] Call Trace:
[  201.478342][ T9974]  <TASK>
[  201.478351][ T9974]  dump_stack_lvl+0xe8/0x150
[  201.478381][ T9974]  should_fail_ex+0x414/0x560
[  201.478415][ T9974]  _copy_to_user+0x31/0xb0
[  201.478441][ T9974]  inet_gifconf+0x300/0x4f0
[  201.478477][ T9974]  ? __pfx_inet_gifconf+0x10/0x10
[  201.478515][ T9974]  dev_ifconf+0x1ea/0x2f0
[  201.478538][ T9974]  ? __pfx_dev_ifconf+0x10/0x10
[  201.478571][ T9974]  sock_ioctl+0x1d5/0x790
[  201.478600][ T9974]  ? __pfx_sock_ioctl+0x10/0x10
[  201.478627][ T9974]  ? __fget_files+0x2a/0x420
[  201.478650][ T9974]  ? __fget_files+0x3a0/0x420
[  201.478672][ T9974]  ? __fget_files+0x2a/0x420
[  201.478698][ T9974]  ? bpf_lsm_file_ioctl+0x9/0x20
[  201.478720][ T9974]  ? __pfx_sock_ioctl+0x10/0x10
[  201.478745][ T9974]  __se_sys_ioctl+0xfc/0x170
[  201.478767][ T9974]  do_syscall_64+0xec/0xf80
[  201.478787][ T9974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.478805][ T9974]  ? trace_irq_disable+0x37/0x100
[  201.478829][ T9974]  ? clear_bhb_loop+0x60/0xb0
[  201.478852][ T9974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.478871][ T9974] RIP: 0033:0x7f1abd98f749
[  201.478888][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.478911][ T9974] RSP: 002b:00007f1abe75b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  201.478931][ T9974] RAX: ffffffffffffffda RBX: 00007f1abdbe5fa0 RCX: 00007f1abd98f749
[  201.478947][ T9974] RDX: 0000200000002c00 RSI: 0000000000008912 RDI: 0000000000000003
[  201.478959][ T9974] RBP: 00007f1abe75b090 R08: 0000000000000000 R09: 0000000000000000
[  201.478971][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.478983][ T9974] R13: 00007f1abdbe6038 R14: 00007f1abdbe5fa0 R15: 00007ffc16dd4a78
[  201.479016][ T9974]  </TASK>
[  201.704158][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1139'.
[  201.714857][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1139'.
[  201.756948][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1140'.
[  201.950703][ T9981] bond3: (slave bond_slave_1): Device is not our slave
[  201.969990][ T9988] udevd[9988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  202.005900][ T9981] bond3: option active_slave: invalid value (bond_slave_1)
[  202.019916][ T9981] bond3 (unregistering): Released all slaves
[  202.023377][ T9988] udevd[9988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  202.200026][T10003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.349296][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'.
[  202.350078][T10003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.389034][T10014] IPv6: Can't replace route, no match found
[  202.446784][T10003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.532150][T10003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.682617][ T6137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.722747][ T6137] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.751708][ T2957] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.785025][ T2957] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.881288][T10034] FAULT_INJECTION: forcing a failure.
[  202.881288][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.882764][T10033] netlink: 'syz.3.1158': attribute type 12 has an invalid length.
[  202.895649][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.0.1159 Not tainted syzkaller #0 PREEMPT(full) 
[  202.895674][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  202.895686][T10034] Call Trace:
[  202.895693][T10034]  <TASK>
[  202.895702][T10034]  dump_stack_lvl+0xe8/0x150
[  202.895735][T10034]  should_fail_ex+0x414/0x560
[  202.895768][T10034]  _copy_from_user+0x2d/0xb0
[  202.895792][T10034]  ___sys_recvmsg+0x12e/0x510
[  202.895821][T10034]  ? __pfx____sys_recvmsg+0x10/0x10
[  202.895848][T10034]  ? __fget_files+0x2a/0x420
[  202.895900][T10034]  do_recvmmsg+0x307/0x770
[  202.895931][T10034]  ? __pfx_do_recvmmsg+0x10/0x10
[  202.895964][T10034]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  202.896001][T10034]  __x64_sys_recvmmsg+0x190/0x240
[  202.896028][T10034]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  202.896061][T10034]  do_syscall_64+0xec/0xf80
[  202.896079][T10034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.896097][T10034]  ? trace_irq_disable+0x37/0x100
[  202.896121][T10034]  ? clear_bhb_loop+0x60/0xb0
[  202.896143][T10034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.896160][T10034] RIP: 0033:0x7f520738f749
[  202.896177][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.896193][T10034] RSP: 002b:00007f52082cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  202.896213][T10034] RAX: ffffffffffffffda RBX: 00007f52075e5fa0 RCX: 00007f520738f749
[  202.896228][T10034] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[  202.896240][T10034] RBP: 00007f52082cd090 R08: 0000000000000000 R09: 0000000000000000
[  202.896251][T10034] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  202.896263][T10034] R13: 00007f52075e6038 R14: 00007f52075e5fa0 R15: 00007ffe489057c8
[  202.896293][T10034]  </TASK>
[  202.998895][T10037] netlink: 'syz.3.1158': attribute type 11 has an invalid length.
[  203.004361][T10033] netlink: 'syz.3.1158': attribute type 29 has an invalid length.
[  203.020077][T10037] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1158'.
[  203.035607][T10033] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1158'.
[  203.736832][T10067] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1172'.
[  203.790942][T10072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1174'.
[  204.043086][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1175'.
[  204.211687][T10092] netlink: 'syz.0.1179': attribute type 10 has an invalid length.
[  204.226825][ T9988] udevd[9988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  204.254234][T10092] bond0: entered promiscuous mode
[  204.272596][T10092] bond_slave_0: entered promiscuous mode
[  204.310617][T10092] 
@0Ù: entered promiscuous mode
[  204.327236][T10092] bridge0: port 3(bond0) entered blocking state
[  204.346686][T10092] bridge0: port 3(bond0) entered disabled state
[  204.353180][T10092] bond0: entered allmulticast mode
[  204.438275][T10092] bond_slave_0: entered allmulticast mode
[  204.464839][T10092] 
@0Ù: entered allmulticast mode
[  204.486608][T10093] netlink: 'syz.0.1179': attribute type 1 has an invalid length.
[  204.488935][T10092] bridge0: port 3(bond0) entered blocking state
[  204.501449][T10092] bridge0: port 3(bond0) entered forwarding state
[  205.682642][ T9988] udevd[9988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  205.759376][T10151] FAULT_INJECTION: forcing a failure.
[  205.759376][T10151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  205.772833][T10151] CPU: 0 UID: 0 PID: 10151 Comm: syz.4.1201 Not tainted syzkaller #0 PREEMPT(full) 
[  205.772860][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  205.772873][T10151] Call Trace:
[  205.772880][T10151]  <TASK>
[  205.772889][T10151]  dump_stack_lvl+0xe8/0x150
[  205.772919][T10151]  should_fail_ex+0x414/0x560
[  205.772954][T10151]  _copy_from_user+0x2d/0xb0
[  205.772979][T10151]  ___sys_sendmsg+0x158/0x2a0
[  205.773005][T10151]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.773066][T10151]  ? __fget_files+0x2a/0x420
[  205.773098][T10151]  ? __fget_files+0x3a0/0x420
[  205.773131][T10151]  __x64_sys_sendmsg+0x19b/0x260
[  205.773157][T10151]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.773191][T10151]  ? rcu_is_watching+0x15/0xb0
[  205.773228][T10151]  do_syscall_64+0xec/0xf80
[  205.773248][T10151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.773266][T10151]  ? trace_irq_disable+0x37/0x100
[  205.773291][T10151]  ? clear_bhb_loop+0x60/0xb0
[  205.773315][T10151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.773333][T10151] RIP: 0033:0x7fc93f98f749
[  205.773350][T10151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.773367][T10151] RSP: 002b:00007fc94082e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.773388][T10151] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98f749
[  205.773404][T10151] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004
[  205.773417][T10151] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  205.773430][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.773442][T10151] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  205.773475][T10151]  </TASK>
[  206.123484][T10167] __nla_validate_parse: 7 callbacks suppressed
[  206.123503][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'.
[  206.210837][T10173] wg1 speed is unknown, defaulting to 1000
[  206.280202][T10175] syzkaller0: entered promiscuous mode
[  206.286029][T10175] syzkaller0: entered allmulticast mode
[  206.915837][T10189] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1213'.
[  207.284758][T10194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1213'.
[  208.170914][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'.
[  208.201424][T10222] IPv6: Can't replace route, no match found
[  208.280012][T10230] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  208.296619][T10230] FAULT_INJECTION: forcing a failure.
[  208.296619][T10230] name failslab, interval 1, probability 0, space 0, times 0
[  208.309892][T10230] CPU: 1 UID: 0 PID: 10230 Comm: syz.1.1220 Not tainted syzkaller #0 PREEMPT(full) 
[  208.309918][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  208.309930][T10230] Call Trace:
[  208.309938][T10230]  <TASK>
[  208.309947][T10230]  dump_stack_lvl+0xe8/0x150
[  208.309976][T10230]  should_fail_ex+0x414/0x560
[  208.310009][T10230]  should_failslab+0xa8/0x100
[  208.310035][T10230]  kmem_cache_alloc_noprof+0x88/0x710
[  208.310065][T10230]  ? __kernfs_new_node+0xdc/0x8a0
[  208.310092][T10230]  __kernfs_new_node+0xdc/0x8a0
[  208.310120][T10230]  ? __pfx___kernfs_new_node+0x10/0x10
[  208.310144][T10230]  ? kernfs_root+0x1c/0x230
[  208.310173][T10230]  ? kernfs_root+0x1c/0x230
[  208.310192][T10230]  ? kernfs_root+0x1c/0x230
[  208.310210][T10230]  ? kernfs_root+0x1c/0x230
[  208.310235][T10230]  kernfs_new_node+0x102/0x210
[  208.310263][T10230]  kernfs_create_dir_ns+0x44/0x130
[  208.310290][T10230]  sysfs_create_dir_ns+0x123/0x280
[  208.310315][T10230]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  208.310337][T10230]  ? kobject_set_name_vargs+0xca/0x110
[  208.310360][T10230]  ? rcu_is_watching+0x15/0xb0
[  208.310388][T10230]  kobject_add_internal+0x6ab/0xcc0
[  208.310420][T10230]  kobject_init_and_add+0x125/0x190
[  208.310449][T10230]  ? __pfx_kobject_init_and_add+0x10/0x10
[  208.310479][T10230]  ? timer_init_key+0x161/0x2b0
[  208.310513][T10230]  bond_enslave+0xa7e/0x3ac0
[  208.310542][T10230]  ? __alloc_skb+0x198/0x3a0
[  208.310571][T10230]  ? __pfx_netlink_broadcast_filtered+0x10/0x10
[  208.310610][T10230]  ? __pfx_bond_enslave+0x10/0x10
[  208.310654][T10230]  ? __pfx___dev_change_flags+0x10/0x10
[  208.310682][T10230]  ? mutex_is_locked+0x17/0x50
[  208.310708][T10230]  do_set_master+0x533/0x6d0
[  208.310741][T10230]  do_setlink+0xcf0/0x41c0
[  208.310767][T10230]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  208.310809][T10230]  ? __pfx_do_setlink+0x10/0x10
[  208.310840][T10230]  ? __pfx_stack_trace_save+0x10/0x10
[  208.310891][T10230]  ? osq_unlock+0x92/0x260
[  208.310919][T10230]  ? __pfx_osq_unlock+0x10/0x10
[  208.310948][T10230]  ? rcu_is_watching+0x15/0xb0
[  208.310973][T10230]  ? trace_contention_end+0x39/0x100
[  208.310997][T10230]  ? __mutex_lock+0x335/0x1350
[  208.311032][T10230]  ? rtnl_newlink+0x8ec/0x1c90
[  208.311055][T10230]  ? __pfx___mutex_lock+0x10/0x10
[  208.311087][T10230]  ? ns_capable+0x8a/0xf0
[  208.311114][T10230]  rtnl_newlink+0x14b0/0x1c90
[  208.311149][T10230]  ? __pfx_rtnl_newlink+0x10/0x10
[  208.311173][T10230]  ? __lock_acquire+0x6b6/0x2cf0
[  208.311200][T10230]  ? __lock_acquire+0x6b6/0x2cf0
[  208.311222][T10230]  ? __lock_acquire+0x6b6/0x2cf0
[  208.311252][T10230]  ? unwind_next_frame+0xa5/0x23d0
[  208.311283][T10230]  ? unwind_next_frame+0xa5/0x23d0
[  208.311309][T10230]  ? is_bpf_text_address+0x26/0x2b0
[  208.311351][T10230]  ? __lock_acquire+0x6b6/0x2cf0
[  208.311374][T10230]  ? is_bpf_text_address+0x292/0x2b0
[  208.311401][T10230]  ? is_bpf_text_address+0x26/0x2b0
[  208.311434][T10230]  ? kernel_text_address+0xa5/0xe0
[  208.311461][T10230]  ? __kernel_text_address+0xd/0x40
[  208.311487][T10230]  ? unwind_get_return_address+0x4d/0x90
[  208.311519][T10230]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  208.311557][T10230]  ? __pfx_rtnl_newlink+0x10/0x10
[  208.311577][T10230]  rtnetlink_rcv_msg+0x7cf/0xb70
[  208.311602][T10230]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  208.311623][T10230]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  208.311643][T10230]  ? __lock_acquire+0x6b6/0x2cf0
[  208.311678][T10230]  netlink_rcv_skb+0x208/0x470
[  208.311704][T10230]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  208.311727][T10230]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.311764][T10230]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.311797][T10230]  netlink_unicast+0x82f/0x9e0
[  208.311833][T10230]  ? __pfx_netlink_unicast+0x10/0x10
[  208.311854][T10230]  ? __alloc_skb+0x198/0x3a0
[  208.311874][T10230]  ? netlink_sendmsg+0x642/0xb30
[  208.311897][T10230]  ? skb_put+0x11b/0x210
[  208.311921][T10230]  netlink_sendmsg+0x805/0xb30
[  208.311957][T10230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.311985][T10230]  ? aa_sock_msg_perm+0xf1/0x1b0
[  208.312012][T10230]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.312031][T10230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.312057][T10230]  __sock_sendmsg+0x21c/0x270
[  208.312086][T10230]  ____sys_sendmsg+0x505/0x820
[  208.312114][T10230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.312146][T10230]  ? import_iovec+0x74/0xa0
[  208.312173][T10230]  ___sys_sendmsg+0x21f/0x2a0
[  208.312200][T10230]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.312262][T10230]  ? __fget_files+0x2a/0x420
[  208.312285][T10230]  ? __fget_files+0x3a0/0x420
[  208.312321][T10230]  __x64_sys_sendmsg+0x19b/0x260
[  208.312348][T10230]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.312386][T10230]  ? __pfx_ksys_write+0x10/0x10
[  208.312419][T10230]  do_syscall_64+0xec/0xf80
[  208.312439][T10230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.312457][T10230]  ? trace_irq_disable+0x37/0x100
[  208.312482][T10230]  ? clear_bhb_loop+0x60/0xb0
[  208.312505][T10230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.312524][T10230] RIP: 0033:0x7fb49038f749
[  208.312542][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.312559][T10230] RSP: 002b:00007fb4911fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.312580][T10230] RAX: ffffffffffffffda RBX: 00007fb4905e6090 RCX: 00007fb49038f749
[  208.312595][T10230] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  208.312608][T10230] RBP: 00007fb4911fb090 R08: 0000000000000000 R09: 0000000000000000
[  208.312621][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  208.312633][T10230] R13: 00007fb4905e6128 R14: 00007fb4905e6090 R15: 00007ffcb27589c8
[  208.312667][T10230]  </TASK>
[  208.312677][T10230] kobject: kobject_add_internal failed for bonding_slave (error: -12 parent: lo)
[  208.565485][T10233] netlink: 'syz.2.1222': attribute type 10 has an invalid length.
[  208.595842][T10230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.920489][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'.
[  208.930362][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'.
[  208.969227][T10233] team0: Device veth0_macvtap failed to register rx_handler
[  209.095549][T10243] FAULT_INJECTION: forcing a failure.
[  209.095549][T10243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.110364][T10243] CPU: 1 UID: 0 PID: 10243 Comm: syz.3.1228 Not tainted syzkaller #0 PREEMPT(full) 
[  209.110390][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  209.110402][T10243] Call Trace:
[  209.110410][T10243]  <TASK>
[  209.110418][T10243]  dump_stack_lvl+0xe8/0x150
[  209.110447][T10243]  should_fail_ex+0x414/0x560
[  209.110481][T10243]  _copy_from_iter+0x1cd/0x1630
[  209.110514][T10243]  ? __pfx__copy_from_iter+0x10/0x10
[  209.110536][T10243]  ? __build_skb_around+0x22d/0x3c0
[  209.110560][T10243]  ? __alloc_skb+0x198/0x3a0
[  209.110580][T10243]  ? netlink_sendmsg+0x642/0xb30
[  209.110603][T10243]  ? skb_put+0x11b/0x210
[  209.110627][T10243]  netlink_sendmsg+0x6b2/0xb30
[  209.110662][T10243]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.110690][T10243]  ? aa_sock_msg_perm+0xf1/0x1b0
[  209.110723][T10243]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.110747][T10243]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.110773][T10243]  __sock_sendmsg+0x21c/0x270
[  209.110805][T10243]  ____sys_sendmsg+0x505/0x820
[  209.110834][T10243]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.110867][T10243]  ? import_iovec+0x74/0xa0
[  209.110894][T10243]  ___sys_sendmsg+0x21f/0x2a0
[  209.110919][T10243]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.110980][T10243]  ? __fget_files+0x2a/0x420
[  209.111004][T10243]  ? __fget_files+0x3a0/0x420
[  209.111038][T10243]  __x64_sys_sendmsg+0x19b/0x260
[  209.111065][T10243]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.111098][T10243]  ? __pfx_ksys_write+0x10/0x10
[  209.111130][T10243]  do_syscall_64+0xec/0xf80
[  209.111150][T10243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.111169][T10243]  ? trace_irq_disable+0x37/0x100
[  209.111194][T10243]  ? clear_bhb_loop+0x60/0xb0
[  209.111216][T10243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.111236][T10243] RIP: 0033:0x7f1abd98f749
[  209.111253][T10243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.111271][T10243] RSP: 002b:00007f1abe75b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.111292][T10243] RAX: ffffffffffffffda RBX: 00007f1abdbe5fa0 RCX: 00007f1abd98f749
[  209.111307][T10243] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  209.111320][T10243] RBP: 00007f1abe75b090 R08: 0000000000000000 R09: 0000000000000000
[  209.111332][T10243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.111344][T10243] R13: 00007f1abdbe6038 R14: 00007f1abdbe5fa0 R15: 00007ffc16dd4a78
[  209.111378][T10243]  </TASK>
[  209.389650][T10249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.409979][T10249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.497438][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'.
[  209.523457][T10261] veth0: entered promiscuous mode
[  209.634562][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'.
[  209.684692][T10260] veth0: left promiscuous mode
[  209.821472][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1237'.
[  209.830588][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1237'.
[  210.372135][T10312] tipc: Started in network mode
[  210.379902][T10312] tipc: Node identity aa07bdef18ac, cluster identity 4711
[  210.387944][T10312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.394886][T10313] wg1 speed is unknown, defaulting to 1000
[  210.410882][T10312] syzkaller0: MTU too low for tipc bearer
[  210.420270][T10312] tipc: Disabling bearer <eth:syzkaller0>
[  211.119035][T10344] FAULT_INJECTION: forcing a failure.
[  211.119035][T10344] name failslab, interval 1, probability 0, space 0, times 0
[  211.132809][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.1.1256 Not tainted syzkaller #0 PREEMPT(full) 
[  211.132835][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  211.132846][T10344] Call Trace:
[  211.132854][T10344]  <TASK>
[  211.132862][T10344]  dump_stack_lvl+0xe8/0x150
[  211.132893][T10344]  should_fail_ex+0x414/0x560
[  211.132928][T10344]  should_failslab+0xa8/0x100
[  211.132954][T10344]  __kmalloc_noprof+0xdf/0x800
[  211.132972][T10344]  ? iovec_from_user+0x87/0x250
[  211.133001][T10344]  iovec_from_user+0x87/0x250
[  211.133032][T10344]  __import_iovec+0x163/0x7f0
[  211.133066][T10344]  import_iovec+0x74/0xa0
[  211.133093][T10344]  ___sys_recvmsg+0x43a/0x510
[  211.133123][T10344]  ? __pfx____sys_recvmsg+0x10/0x10
[  211.133147][T10344]  ? __fget_files+0x2a/0x420
[  211.133187][T10344]  ? __fget_files+0x3a0/0x420
[  211.133222][T10344]  do_recvmmsg+0x307/0x770
[  211.133253][T10344]  ? __pfx_do_recvmmsg+0x10/0x10
[  211.133290][T10344]  ? _copy_from_user+0x94/0xb0
[  211.133330][T10344]  __x64_sys_recvmmsg+0x1af/0x240
[  211.133357][T10344]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  211.133381][T10344]  ? rcu_is_watching+0x15/0xb0
[  211.133406][T10344]  ? trace_sys_enter+0x25/0xf0
[  211.133434][T10344]  do_syscall_64+0xec/0xf80
[  211.133454][T10344]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.133473][T10344]  ? clear_bhb_loop+0x60/0xb0
[  211.133496][T10344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.133515][T10344] RIP: 0033:0x7fb49038f749
[  211.133532][T10344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.133549][T10344] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  211.133577][T10344] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  211.133592][T10344] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  211.133606][T10344] RBP: 00007fb49121c090 R08: 0000200000003700 R09: 0000000000000000
[  211.133620][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.133631][T10344] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  211.133664][T10344]  </TASK>
[  211.467974][T10360] __nla_validate_parse: 4 callbacks suppressed
[  211.467993][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'.
[  211.533622][T10365] xt_TCPMSS: Only works on TCP SYN packets
[  211.550553][T10366] netlink: 'syz.4.1262': attribute type 12 has an invalid length.
[  211.562696][T10365] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  211.726997][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'.
[  211.897557][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'.
[  212.309139][T10394] syzkaller0: entered promiscuous mode
[  212.314734][T10394] syzkaller0: entered allmulticast mode
[  212.470089][T10396] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1270'.
[  213.104681][T10405] FAULT_INJECTION: forcing a failure.
[  213.104681][T10405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.118662][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.4.1274 Not tainted syzkaller #0 PREEMPT(full) 
[  213.118687][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  213.118699][T10405] Call Trace:
[  213.118707][T10405]  <TASK>
[  213.118715][T10405]  dump_stack_lvl+0xe8/0x150
[  213.118746][T10405]  should_fail_ex+0x414/0x560
[  213.118780][T10405]  _copy_from_iter+0x1cd/0x1630
[  213.118814][T10405]  ? __pfx__copy_from_iter+0x10/0x10
[  213.118842][T10405]  ? __lock_acquire+0x6b6/0x2cf0
[  213.118869][T10405]  tun_get_user+0x219/0x3dc0
[  213.118904][T10405]  ? aa_file_perm+0x139/0x1530
[  213.118935][T10405]  ? aa_file_perm+0x44c/0x1530
[  213.118959][T10405]  ? __pfx_tun_get_user+0x10/0x10
[  213.118985][T10405]  ? __lock_acquire+0x6b6/0x2cf0
[  213.119007][T10405]  ? kstrtoull+0x12f/0x1d0
[  213.119042][T10405]  ? ref_tracker_alloc+0x318/0x460
[  213.119060][T10405]  ? get_pid_task+0x20/0x1f0
[  213.119086][T10405]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  213.119107][T10405]  ? tun_get+0x1c/0x2f0
[  213.119129][T10405]  ? tun_get+0x1c/0x2f0
[  213.119157][T10405]  ? tun_get+0x1c/0x2f0
[  213.119179][T10405]  ? tun_get+0x1c/0x2f0
[  213.119207][T10405]  tun_chr_write_iter+0x113/0x200
[  213.119233][T10405]  vfs_write+0x5c9/0xb30
[  213.119257][T10405]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  213.119281][T10405]  ? __pfx_vfs_write+0x10/0x10
[  213.119310][T10405]  ? __fget_files+0x2a/0x420
[  213.119351][T10405]  ksys_write+0x145/0x250
[  213.119372][T10405]  ? __pfx_ksys_write+0x10/0x10
[  213.119390][T10405]  ? rcu_is_watching+0x15/0xb0
[  213.119414][T10405]  ? trace_sys_enter+0x25/0xf0
[  213.119441][T10405]  do_syscall_64+0xec/0xf80
[  213.119462][T10405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.119480][T10405]  ? trace_irq_disable+0x37/0x100
[  213.119504][T10405]  ? clear_bhb_loop+0x60/0xb0
[  213.119527][T10405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.119546][T10405] RIP: 0033:0x7fc93f98f749
[  213.119563][T10405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.119580][T10405] RSP: 002b:00007fc94082e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  213.119600][T10405] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98f749
[  213.119615][T10405] RDX: 000000000000007a RSI: 00002000000006c0 RDI: 0000000000000009
[  213.119627][T10405] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  213.119640][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.119652][T10405] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  213.119683][T10405]  </TASK>
[  213.414051][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'.
[  213.770875][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'.
[  213.805307][T10420] IPv6: Can't replace route, no match found
[  214.141618][T10445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1288'.
[  214.151103][T10445] FAULT_INJECTION: forcing a failure.
[  214.151103][T10445] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.165580][T10445] CPU: 1 UID: 0 PID: 10445 Comm: syz.4.1288 Not tainted syzkaller #0 PREEMPT(full) 
[  214.165605][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  214.165618][T10445] Call Trace:
[  214.165626][T10445]  <TASK>
[  214.165634][T10445]  dump_stack_lvl+0xe8/0x150
[  214.165664][T10445]  should_fail_ex+0x414/0x560
[  214.165699][T10445]  _copy_to_user+0x31/0xb0
[  214.165727][T10445]  simple_read_from_buffer+0xe1/0x170
[  214.165753][T10445]  proc_fail_nth_read+0x1b3/0x220
[  214.165777][T10445]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  214.165801][T10445]  ? rw_verify_area+0x2a6/0x4d0
[  214.165817][T10445]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  214.165837][T10445]  vfs_read+0x200/0xa30
[  214.165855][T10445]  ? fdget_pos+0x247/0x320
[  214.165884][T10445]  ? __pfx___mutex_lock+0x10/0x10
[  214.165906][T10445]  ? __pfx_vfs_read+0x10/0x10
[  214.165927][T10445]  ? __fget_files+0x2a/0x420
[  214.165955][T10445]  ? __fget_files+0x3a0/0x420
[  214.165978][T10445]  ? __fget_files+0x2a/0x420
[  214.166012][T10445]  ksys_read+0x145/0x250
[  214.166033][T10445]  ? __pfx_ksys_read+0x10/0x10
[  214.166064][T10445]  do_syscall_64+0xec/0xf80
[  214.166084][T10445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.166103][T10445]  ? clear_bhb_loop+0x60/0xb0
[  214.166127][T10445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.166146][T10445] RIP: 0033:0x7fc93f98e15c
[  214.166163][T10445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  214.166181][T10445] RSP: 002b:00007fc94082e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  214.166210][T10445] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98e15c
[  214.166225][T10445] RDX: 000000000000000f RSI: 00007fc94082e0a0 RDI: 0000000000000006
[  214.166238][T10445] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  214.166250][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.166262][T10445] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  214.166296][T10445]  </TASK>
[  214.371209][T10428] ip6gre0: left promiscuous mode
[  214.377977][T10428] ip6gre0: left allmulticast mode
[  214.742976][T10428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.780386][T10428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.071465][T10428] gre1: left allmulticast mode
[  215.090974][T10428] gretap1: left promiscuous mode
[  215.101799][T10438] FAULT_INJECTION: forcing a failure.
[  215.101799][T10438] name failslab, interval 1, probability 0, space 0, times 0
[  215.115340][T10438] CPU: 1 UID: 0 PID: 10438 Comm: syz.1.1286 Not tainted syzkaller #0 PREEMPT(full) 
[  215.115365][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  215.115376][T10438] Call Trace:
[  215.115383][T10438]  <TASK>
[  215.115391][T10438]  dump_stack_lvl+0xe8/0x150
[  215.115423][T10438]  should_fail_ex+0x414/0x560
[  215.115458][T10438]  should_failslab+0xa8/0x100
[  215.115484][T10438]  __kmalloc_cache_noprof+0x84/0x700
[  215.115505][T10438]  ? register_vlan_dev+0x33a/0x800
[  215.115545][T10438]  register_vlan_dev+0x33a/0x800
[  215.115583][T10438]  vlan_newlink+0x4b2/0x610
[  215.115607][T10438]  ? __pfx_vlan_newlink+0x10/0x10
[  215.115631][T10438]  rtnl_newlink_create+0x310/0xb00
[  215.115661][T10438]  ? __mutex_lock+0x5bb/0x1350
[  215.115688][T10438]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  215.115718][T10438]  ? __pfx___mutex_lock+0x10/0x10
[  215.115746][T10438]  ? ns_capable+0x8a/0xf0
[  215.115768][T10438]  rtnl_newlink+0x16e7/0x1c90
[  215.115790][T10438]  ? trace_sched_exit_tp+0x36/0xf0
[  215.115830][T10438]  ? __pfx_rtnl_newlink+0x10/0x10
[  215.115854][T10438]  ? __lock_acquire+0x6b6/0x2cf0
[  215.115878][T10438]  ? __lock_acquire+0x6b6/0x2cf0
[  215.115898][T10438]  ? __lock_acquire+0x6b6/0x2cf0
[  215.115925][T10438]  ? unwind_next_frame+0xa5/0x23d0
[  215.115952][T10438]  ? unwind_next_frame+0xa5/0x23d0
[  215.115977][T10438]  ? is_bpf_text_address+0x26/0x2b0
[  215.116018][T10438]  ? __lock_acquire+0x6b6/0x2cf0
[  215.116039][T10438]  ? is_bpf_text_address+0x292/0x2b0
[  215.116067][T10438]  ? is_bpf_text_address+0x26/0x2b0
[  215.116098][T10438]  ? kernel_text_address+0xa5/0xe0
[  215.116133][T10438]  ? __kernel_text_address+0xd/0x40
[  215.116156][T10438]  ? unwind_get_return_address+0x4d/0x90
[  215.116187][T10438]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  215.116224][T10438]  ? __pfx_rtnl_newlink+0x10/0x10
[  215.116244][T10438]  rtnetlink_rcv_msg+0x7cf/0xb70
[  215.116268][T10438]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  215.116288][T10438]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  215.116309][T10438]  ? __lock_acquire+0x6b6/0x2cf0
[  215.116344][T10438]  netlink_rcv_skb+0x208/0x470
[  215.116369][T10438]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  215.116391][T10438]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  215.116428][T10438]  ? netlink_deliver_tap+0x2e/0x1b0
[  215.116461][T10438]  netlink_unicast+0x82f/0x9e0
[  215.116492][T10438]  ? __pfx_netlink_unicast+0x10/0x10
[  215.116512][T10438]  ? __alloc_skb+0x198/0x3a0
[  215.116532][T10438]  ? netlink_sendmsg+0x642/0xb30
[  215.116554][T10438]  ? skb_put+0x11b/0x210
[  215.116578][T10438]  netlink_sendmsg+0x805/0xb30
[  215.116612][T10438]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.116641][T10438]  ? aa_sock_msg_perm+0xf1/0x1b0
[  215.116667][T10438]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  215.116686][T10438]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.116712][T10438]  __sock_sendmsg+0x21c/0x270
[  215.116742][T10438]  ____sys_sendmsg+0x505/0x820
[  215.116771][T10438]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.116804][T10438]  ? import_iovec+0x74/0xa0
[  215.116832][T10438]  ___sys_sendmsg+0x21f/0x2a0
[  215.116858][T10438]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.116921][T10438]  ? __fget_files+0x2a/0x420
[  215.116943][T10438]  ? __fget_files+0x3a0/0x420
[  215.116979][T10438]  __x64_sys_sendmsg+0x19b/0x260
[  215.117005][T10438]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  215.117039][T10438]  ? __pfx_ksys_write+0x10/0x10
[  215.117072][T10438]  do_syscall_64+0xec/0xf80
[  215.117092][T10438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.117109][T10438]  ? trace_irq_disable+0x37/0x100
[  215.117140][T10438]  ? clear_bhb_loop+0x60/0xb0
[  215.117164][T10438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.117182][T10438] RIP: 0033:0x7fb49038f749
[  215.117200][T10438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.117217][T10438] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.117238][T10438] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  215.117253][T10438] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[  215.117265][T10438] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  215.117278][T10438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  215.117289][T10438] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  215.117323][T10438]  </TASK>
[  215.550351][ T6137] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.642136][T10452] netlink: 'syz.3.1292': attribute type 13 has an invalid length.
[  215.651230][T10452] netlink: 'syz.3.1292': attribute type 17 has an invalid length.
[  215.675000][ T6137] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.714660][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'.
[  215.894912][T10452] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.905406][T10452] 8021q: adding VLAN 0 to HW filter on device `
[  215.933638][T10452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.953332][ T6137] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  215.999185][ T6137] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.035871][ T6137] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.044253][ T6137] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.064103][T10468] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  216.098419][ T6137] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  216.116802][ T6137] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.155227][T10480] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1300'.
[  216.204206][T10483] netlink: 'syz.3.1299': attribute type 12 has an invalid length.
[  216.317462][T10482] wg1 speed is unknown, defaulting to 1000
[  216.342511][T10492] FAULT_INJECTION: forcing a failure.
[  216.342511][T10492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.356315][T10492] CPU: 1 UID: 0 PID: 10492 Comm: syz.4.1304 Not tainted syzkaller #0 PREEMPT(full) 
[  216.356340][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  216.356352][T10492] Call Trace:
[  216.356360][T10492]  <TASK>
[  216.356368][T10492]  dump_stack_lvl+0xe8/0x150
[  216.356393][T10492]  should_fail_ex+0x414/0x560
[  216.356423][T10492]  _copy_to_user+0x31/0xb0
[  216.356445][T10492]  inet_gifconf+0x300/0x4f0
[  216.356467][T10492]  ? __pfx_inet_gifconf+0x10/0x10
[  216.356497][T10492]  dev_ifconf+0x1ea/0x2f0
[  216.356517][T10492]  ? __pfx_dev_ifconf+0x10/0x10
[  216.356544][T10492]  sock_ioctl+0x1d5/0x790
[  216.356567][T10492]  ? __pfx_sock_ioctl+0x10/0x10
[  216.356589][T10492]  ? __fget_files+0x2a/0x420
[  216.356608][T10492]  ? __fget_files+0x3a0/0x420
[  216.356626][T10492]  ? __fget_files+0x2a/0x420
[  216.356649][T10492]  ? bpf_lsm_file_ioctl+0x9/0x20
[  216.356666][T10492]  ? __pfx_sock_ioctl+0x10/0x10
[  216.356687][T10492]  __se_sys_ioctl+0xfc/0x170
[  216.356704][T10492]  do_syscall_64+0xec/0xf80
[  216.356721][T10492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.356736][T10492]  ? trace_irq_disable+0x37/0x100
[  216.356756][T10492]  ? clear_bhb_loop+0x60/0xb0
[  216.356775][T10492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.356790][T10492] RIP: 0033:0x7fc93f98f749
[  216.356805][T10492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.356819][T10492] RSP: 002b:00007fc94082e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  216.356837][T10492] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98f749
[  216.356850][T10492] RDX: 0000200000002c00 RSI: 0000000000008912 RDI: 0000000000000003
[  216.356860][T10492] RBP: 00007fc94082e090 R08: 0000000000000000 R09: 0000000000000000
[  216.356870][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.356880][T10492] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  216.356908][T10492]  </TASK>
[  216.636541][T10495] syzkaller0: entered promiscuous mode
[  216.642291][T10495] syzkaller0: entered allmulticast mode
[  217.699309][T10546] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  217.710484][T10546] bond0: (slave gre0): Error -95 calling set_mac_address
[  217.774620][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1326'.
[  217.917790][T10552] netlink: 'syz.4.1328': attribute type 10 has an invalid length.
[  218.155487][T10564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'.
[  218.449881][T10578] udevd[10578]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  218.478394][T10486] udevd[10486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  218.484595][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'.
[  218.505440][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'.
[  218.544422][T10589] netlink: 'syz.0.1340': attribute type 12 has an invalid length.
[  218.660379][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  218.689169][T10597] syzkaller1: entered promiscuous mode
[  218.694819][T10597] syzkaller1: entered allmulticast mode
[  218.976384][T10606] netlink: 'syz.1.1347': attribute type 12 has an invalid length.
[  219.403338][T10611] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1349'.
[  219.516655][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1353'.
[  219.606612][T10623] netlink: 'syz.0.1352': attribute type 12 has an invalid length.
[  219.622890][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'.
[  219.872286][T10634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1358'.
[  220.132308][T10486] udevd[10486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  220.154774][T10486] udevd[10486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  220.432051][T10662] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1369'.
[  220.542333][T10668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.678357][T10659] tipc: Disabling bearer <eth:syzkaller0>
[  221.556654][T10692] netlink: 'syz.0.1381': attribute type 12 has an invalid length.
[  221.708506][T10704] netlink: 'syz.3.1380': attribute type 12 has an invalid length.
[  223.028314][T10745] __nla_validate_parse: 2 callbacks suppressed
[  223.028334][T10745] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1399'.
[  223.090884][T10747] wg1 speed is unknown, defaulting to 1000
[  223.097649][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1402'.
[  223.147119][T10752] wg1 speed is unknown, defaulting to 1000
[  223.203849][T10756] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  223.342376][T10756] syzkaller0: mtu less than device minimum
[  223.433222][T10486] udevd[10486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  223.452511][T10486] udevd[10486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  223.499151][T10775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'.
[  223.841255][T10789] netlink: 'syz.1.1405': attribute type 12 has an invalid length.
[  223.978837][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1409'.
[  224.191446][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  224.200849][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  224.788468][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  224.990477][T10838] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  225.266610][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1421'.
[  225.462316][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1424'.
[  225.596766][ T5830] Bluetooth: hci4: command 0x0405 tx timeout
[  225.751118][T10877] netlink: 'syz.4.1426': attribute type 12 has an invalid length.
[  225.804472][T10811] udevd[10811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  225.816641][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'.
[  225.921670][T10884] netlink: 'syz.0.1427': attribute type 12 has an invalid length.
[  226.152547][T10811] udevd[10811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  226.328877][T10896] wireguard0: entered promiscuous mode
[  226.334764][T10896] wireguard0: entered allmulticast mode
[  226.344270][T10896] team0: Device wireguard0 is of different type
[  226.582174][T10907] wg1 speed is unknown, defaulting to 1000
[  226.664926][T10913] FAULT_INJECTION: forcing a failure.
[  226.664926][T10913] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  226.710231][T10913] CPU: 0 UID: 0 PID: 10913 Comm: syz.4.1440 Not tainted syzkaller #0 PREEMPT(full) 
[  226.710259][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  226.710270][T10913] Call Trace:
[  226.710284][T10913]  <TASK>
[  226.710291][T10913]  dump_stack_lvl+0xe8/0x150
[  226.710321][T10913]  should_fail_ex+0x414/0x560
[  226.710356][T10913]  prepare_alloc_pages+0x22b/0x650
[  226.710387][T10913]  __alloc_frozen_pages_noprof+0x123/0x370
[  226.710415][T10913]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  226.710444][T10913]  ? lruvec_stat_mod_folio+0x6f/0x2e0
[  226.710472][T10913]  ? policy_nodemask+0x27c/0x720
[  226.710500][T10913]  alloc_pages_mpol+0x232/0x4a0
[  226.710529][T10913]  vma_alloc_folio_noprof+0xe4/0x200
[  226.710552][T10913]  ? page_table_check_set+0x148/0x610
[  226.710572][T10913]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  226.710592][T10913]  ? css_rstat_updated+0x239/0x520
[  226.710627][T10913]  ? ___pte_offset_map+0x29/0x240
[  226.710658][T10913]  folio_prealloc+0x30/0x180
[  226.710679][T10913]  do_pte_missing+0x14e8/0x3330
[  226.710721][T10913]  handle_mm_fault+0x1b26/0x32b0
[  226.710746][T10913]  ? __pte_offset_map_lock+0x13e/0x210
[  226.710785][T10913]  ? handle_mm_fault+0xdb/0x32b0
[  226.710821][T10913]  ? __pfx_handle_mm_fault+0x10/0x10
[  226.710850][T10913]  ? follow_page_pte+0x7ef/0x13e0
[  226.710886][T10913]  ? __pfx_follow_page_pte+0x10/0x10
[  226.710923][T10913]  __get_user_pages+0x1650/0x29f0
[  226.710983][T10913]  __gup_longterm_locked+0x3dc/0x1660
[  226.711019][T10913]  ? xdp_umem_pin_pages+0xcb/0x350
[  226.711060][T10913]  pin_user_pages+0x9e/0xd0
[  226.711089][T10913]  xdp_umem_pin_pages+0x11c/0x350
[  226.711121][T10913]  xdp_umem_create+0x677/0x8e0
[  226.711161][T10913]  xsk_setsockopt+0x7b0/0x8d0
[  226.711190][T10913]  ? __pfx_xsk_setsockopt+0x10/0x10
[  226.711224][T10913]  ? __fget_files+0x2a/0x420
[  226.711246][T10913]  ? aa_sock_opt_perm+0xff/0x1a0
[  226.711282][T10913]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  226.711300][T10913]  ? __pfx_xsk_setsockopt+0x10/0x10
[  226.711328][T10913]  do_sock_setsockopt+0x17c/0x1b0
[  226.711356][T10913]  __x64_sys_setsockopt+0x13f/0x1b0
[  226.711383][T10913]  do_syscall_64+0xec/0xf80
[  226.711403][T10913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.711420][T10913]  ? trace_irq_disable+0x37/0x100
[  226.711446][T10913]  ? clear_bhb_loop+0x60/0xb0
[  226.711470][T10913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.711489][T10913] RIP: 0033:0x7fc93f98f749
[  226.711507][T10913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.711524][T10913] RSP: 002b:00007fc94082e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  226.711545][T10913] RAX: ffffffffffffffda RBX: 00007fc93fbe5fa0 RCX: 00007fc93f98f749
[  226.711560][T10913] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[  226.711572][T10913] RBP: 00007fc94082e090 R08: 000000000000001c R09: 0000000000000000
[  226.711584][T10913] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002
[  226.711597][T10913] R13: 00007fc93fbe6038 R14: 00007fc93fbe5fa0 R15: 00007fff69ba7a38
[  226.711632][T10913]  </TASK>
[  227.128732][T10922] FAULT_INJECTION: forcing a failure.
[  227.128732][T10922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.223283][T10922] CPU: 1 UID: 0 PID: 10922 Comm: syz.1.1444 Not tainted syzkaller #0 PREEMPT(full) 
[  227.223311][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  227.223323][T10922] Call Trace:
[  227.223331][T10922]  <TASK>
[  227.223340][T10922]  dump_stack_lvl+0xe8/0x150
[  227.223370][T10922]  should_fail_ex+0x414/0x560
[  227.223409][T10922]  _copy_to_user+0x31/0xb0
[  227.223435][T10922]  bpf_test_finish+0x1dd/0x6d0
[  227.223466][T10922]  ? __pfx____migrate_enable+0x10/0x10
[  227.223490][T10922]  ? __pfx_bpf_test_finish+0x10/0x10
[  227.223512][T10922]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  227.223541][T10922]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  227.223578][T10922]  bpf_prog_test_run_flow_dissector+0x450/0x5c0
[  227.223619][T10922]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  227.223648][T10922]  ? __fget_files+0x2a/0x420
[  227.223678][T10922]  ? __fget_files+0x2a/0x420
[  227.223707][T10922]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  227.223734][T10922]  bpf_prog_test_run+0x2c7/0x340
[  227.223767][T10922]  __sys_bpf+0x562/0x860
[  227.223795][T10922]  ? __pfx___sys_bpf+0x10/0x10
[  227.223836][T10922]  ? ksys_write+0x22a/0x250
[  227.223857][T10922]  ? __pfx_ksys_write+0x10/0x10
[  227.223884][T10922]  __x64_sys_bpf+0x7c/0x90
[  227.223910][T10922]  do_syscall_64+0xec/0xf80
[  227.223929][T10922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.223954][T10922]  ? trace_irq_disable+0x37/0x100
[  227.223979][T10922]  ? clear_bhb_loop+0x60/0xb0
[  227.224003][T10922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.224021][T10922] RIP: 0033:0x7fb49038f749
[  227.224038][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.224055][T10922] RSP: 002b:00007fb49121c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  227.224077][T10922] RAX: ffffffffffffffda RBX: 00007fb4905e5fa0 RCX: 00007fb49038f749
[  227.224092][T10922] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  227.224104][T10922] RBP: 00007fb49121c090 R08: 0000000000000000 R09: 0000000000000000
[  227.224117][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.224128][T10922] R13: 00007fb4905e6038 R14: 00007fb4905e5fa0 R15: 00007ffcb27589c8
[  227.224161][T10922]  </TASK>
[  228.202998][T10952] __nla_validate_parse: 2 callbacks suppressed
[  228.203017][T10952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1452'.
[  228.236620][T10954] netlink: 'syz.3.1451': attribute type 12 has an invalid length.
[  228.568097][T10486] udevd[10486]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  228.613434][T10811] udevd[10811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  228.899051][T10968] wireguard0: entered promiscuous mode
[  228.904564][T10968] wireguard0: entered allmulticast mode
[  228.928260][T10970] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'.
[  228.947710][T10968] team0: Device wireguard0 is of different type
[  229.136815][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1455'.
[  229.217064][T10966] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  229.414380][T10985] wireguard0: entered promiscuous mode
[  229.420340][T10985] wireguard0: entered allmulticast mode
[  229.432086][T10985] team0: Device wireguard0 is of different type
[  229.466966][T10991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'.
[  229.849896][T11008] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1466'.
[  229.869783][T11008] gtp0: entered promiscuous mode
[  229.875281][T11010] netlink: 'syz.0.1467': attribute type 1 has an invalid length.
[  229.875542][T11008] gtp0: entered allmulticast mode
[  229.908079][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'.
[  229.916783][T11010] bond1: entered promiscuous mode
[  229.923835][T11010] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.947264][T11013] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.954519][T11013] bond1: (slave gre2): The slave device specified does not support setting the MAC address
[  229.964882][T11013] bond1: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  229.977690][T11013] bond1: (slave gre2): making interface the new active one
[  229.985662][T11013] gre2: entered promiscuous mode
[  230.001482][T11013] bond1: (slave gre2): Enslaving as an active interface with an up link
[  230.026978][T11010] netlink: 'syz.0.1467': attribute type 11 has an invalid length.
[  230.035196][T11010] netlink: 'syz.0.1467': attribute type 4 has an invalid length.
[  230.044032][T11010] netlink: 'syz.0.1467': attribute type 5 has an invalid length.
[  230.052579][T11010] netlink: 'syz.0.1467': attribute type 6 has an invalid length.
[  230.063177][T11010] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.1467'.
[  230.173569][T11019] wg1 speed is unknown, defaulting to 1000
[  230.401573][T11028] wireguard0: entered promiscuous mode
[  230.408525][T11028] wireguard0: entered allmulticast mode
[  230.417559][T11028] team0: Device wireguard0 is of different type
[  230.456037][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1472'.
[  230.944208][T11048] bond1: Unable to set down delay as MII monitoring is disabled
[  230.954334][T11048] bond1 (unregistering): Released all slaves
[  255.599217][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  313.995918][ T5830] Bluetooth: hci4: command 0x0405 tx timeout
[  317.038569][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  352.877012][    C0] ==================================================================
[  352.885107][    C0] BUG: KASAN: slab-use-after-free in timer_is_static_object+0x35/0x80
[  352.893255][    C0] Read of size 8 at addr ffff88807932cc98 by task swapper/0/0
[  352.900692][    C0] 
[  352.903000][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  352.903013][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.903030][    C0] Call Trace:
[  352.903037][    C0]  <IRQ>
[  352.903044][    C0]  dump_stack_lvl+0xe8/0x150
[  352.903061][    C0]  print_report+0xca/0x240
[  352.903072][    C0]  ? timer_is_static_object+0x35/0x80
[  352.903084][    C0]  kasan_report+0x118/0x150
[  352.903099][    C0]  ? timer_is_static_object+0x35/0x80
[  352.903113][    C0]  timer_is_static_object+0x35/0x80
[  352.903125][    C0]  debug_object_activate+0x146/0x540
[  352.903144][    C0]  __mod_timer+0xa4f/0xf30
[  352.903163][    C0]  call_timer_fn+0x16e/0x590
[  352.903174][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  352.903185][    C0]  ? call_timer_fn+0xbe/0x590
[  352.903196][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  352.903210][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.903225][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  352.903235][    C0]  __run_timer_base+0x61a/0x860
[  352.903250][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  352.903259][    C0]  ? clockevents_program_event+0x247/0x350
[  352.903273][    C0]  ? sched_clock_cpu+0x74/0x430
[  352.903286][    C0]  run_timer_softirq+0xb7/0x180
[  352.903298][    C0]  handle_softirqs+0x22b/0x7c0
[  352.903310][    C0]  ? __irq_exit_rcu+0x60/0x150
[  352.903322][    C0]  __irq_exit_rcu+0x60/0x150
[  352.903332][    C0]  irq_exit_rcu+0x9/0x30
[  352.903342][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  352.903352][    C0]  </IRQ>
[  352.903356][    C0]  <TASK>
[  352.903360][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.903372][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  352.903384][    C0] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  352.903393][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2
[  352.903404][    C0] RAX: 00000000001d7a77 RBX: ffffffff819713ee RCX: 0000000080000001
[  352.903412][    C0] RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0
[  352.903419][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  352.903427][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270
[  352.903435][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  352.903443][    C0]  ? do_idle+0x1be/0x4d0
[  352.903458][    C0]  default_idle+0x13/0x20
[  352.903470][    C0]  default_idle_call+0x73/0xb0
[  352.903481][    C0]  do_idle+0x1be/0x4d0
[  352.903491][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  352.903504][    C0]  ? __pfx_do_idle+0x10/0x10
[  352.903517][    C0]  cpu_startup_entry+0x44/0x60
[  352.903528][    C0]  rest_init+0x2de/0x300
[  352.903542][    C0]  start_kernel+0x381/0x3d0
[  352.903559][    C0]  x86_64_start_reservations+0x24/0x30
[  352.903573][    C0]  x86_64_start_kernel+0x143/0x1c0
[  352.903586][    C0]  common_startup_64+0x13e/0x147
[  352.903603][    C0]  </TASK>
[  352.903607][    C0] 
[  353.192708][    C0] Allocated by task 8487:
[  353.197021][    C0]  kasan_save_track+0x3e/0x80
[  353.201688][    C0]  __kasan_kmalloc+0x93/0xb0
[  353.206272][    C0]  __kmalloc_cache_noprof+0x3e2/0x700
[  353.211630][    C0]  rose_add_node+0x23a/0xeb0
[  353.216209][    C0]  rose_rt_ioctl+0xce2/0x1240
[  353.220868][    C0]  rose_ioctl+0x3ce/0x8b0
[  353.225184][    C0]  sock_do_ioctl+0xdc/0x300
[  353.229688][    C0]  sock_ioctl+0x576/0x790
[  353.234097][    C0]  __se_sys_ioctl+0xfc/0x170
[  353.238682][    C0]  do_syscall_64+0xec/0xf80
[  353.243196][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.249092][    C0] 
[  353.251400][    C0] Freed by task 0:
[  353.255101][    C0]  kasan_save_track+0x3e/0x80
[  353.259764][    C0]  kasan_save_free_info+0x46/0x50
[  353.264794][    C0]  __kasan_slab_free+0x5c/0x80
[  353.269567][    C0]  kfree+0x1c0/0x660
[  353.273473][    C0]  rose_timer_expiry+0x4cb/0x600
[  353.278410][    C0]  call_timer_fn+0x16e/0x590
[  353.283004][    C0]  __run_timer_base+0x61a/0x860
[  353.287866][    C0]  run_timer_softirq+0xb7/0x180
[  353.292714][    C0]  handle_softirqs+0x22b/0x7c0
[  353.297465][    C0]  __irq_exit_rcu+0x60/0x150
[  353.302045][    C0]  irq_exit_rcu+0x9/0x30
[  353.306271][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  353.311889][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  353.317861][    C0] 
[  353.320171][    C0] The buggy address belongs to the object at ffff88807932cc00
[  353.320171][    C0]  which belongs to the cache kmalloc-512 of size 512
[  353.334207][    C0] The buggy address is located 152 bytes inside of
[  353.334207][    C0]  freed 512-byte region [ffff88807932cc00, ffff88807932ce00)
[  353.347987][    C0] 
[  353.350312][    C0] The buggy address belongs to the physical page:
[  353.356741][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7932c
[  353.365504][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  353.373995][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  353.381527][    C0] page_type: f5(slab)
[  353.385495][    C0] raw: 00fff00000000040 ffff88813ffa6c80 ffffea00015a9c00 dead000000000002
[  353.394064][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  353.402634][    C0] head: 00fff00000000040 ffff88813ffa6c80 ffffea00015a9c00 dead000000000002
[  353.411293][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  353.420034][    C0] head: 00fff00000000002 ffffea0001e4cb01 00000000ffffffff 00000000ffffffff
[  353.428689][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  353.437338][    C0] page dumped because: kasan: bad access detected
[  353.443744][    C0] page_owner tracks the page as allocated
[  353.449439][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5212, tgid 5212 (udevadm), ts 30523232550, free_ts 30491066337
[  353.470444][    C0]  post_alloc_hook+0x234/0x290
[  353.475200][    C0]  get_page_from_freelist+0x24e0/0x2580
[  353.480780][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  353.486601][    C0]  alloc_pages_mpol+0x232/0x4a0
[  353.491455][    C0]  allocate_slab+0x86/0x3b0
[  353.495955][    C0]  ___slab_alloc+0xe53/0x1820
[  353.500624][    C0]  __slab_alloc+0x65/0x100
[  353.505030][    C0]  __kmalloc_cache_noprof+0x41e/0x700
[  353.510384][    C0]  kernfs_fop_open+0x397/0xca0
[  353.515139][    C0]  do_dentry_open+0x7ce/0x1420
[  353.519891][    C0]  vfs_open+0x3b/0x340
[  353.523947][    C0]  path_openat+0x340e/0x3dd0
[  353.528518][    C0]  do_filp_open+0x1fa/0x410
[  353.533002][    C0]  do_sys_openat2+0x121/0x200
[  353.537666][    C0]  __x64_sys_openat+0x138/0x170
[  353.542511][    C0]  do_syscall_64+0xec/0xf80
[  353.547009][    C0] page last free pid 5226 tgid 5226 stack trace:
[  353.553403][    C0]  __free_frozen_pages+0xbc8/0xd30
[  353.558498][    C0]  __slab_free+0x2ce/0x320
[  353.562905][    C0]  qlist_free_all+0x97/0x100
[  353.567475][    C0]  kasan_quarantine_reduce+0x148/0x160
[  353.572919][    C0]  __kasan_slab_alloc+0x22/0x80
[  353.577764][    C0]  kmem_cache_alloc_noprof+0x37d/0x710
[  353.583219][    C0]  getname_flags+0xb8/0x540
[  353.587709][    C0]  do_sys_openat2+0xbc/0x200
[  353.592295][    C0]  __x64_sys_openat+0x138/0x170
[  353.597152][    C0]  do_syscall_64+0xec/0xf80
[  353.601666][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.607566][    C0] 
[  353.609885][    C0] Memory state around the buggy address:
[  353.615512][    C0]  ffff88807932cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  353.623557][    C0]  ffff88807932cc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.631603][    C0] >ffff88807932cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.639656][    C0]                             ^
[  353.644493][    C0]  ffff88807932cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.652539][    C0]  ffff88807932cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.660579][    C0] ==================================================================
[  353.668636][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  353.675828][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  353.684759][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.694811][    C0] Call Trace:
[  353.698090][    C0]  <IRQ>
[  353.700930][    C0]  vpanic+0x1e0/0x670
[  353.704920][    C0]  panic+0xb9/0xc0
[  353.708631][    C0]  ? __pfx_panic+0x10/0x10
[  353.713041][    C0]  ? timer_is_static_object+0x35/0x80
[  353.718404][    C0]  ? rcu_is_watching+0x15/0xb0
[  353.723162][    C0]  ? timer_is_static_object+0x35/0x80
[  353.728524][    C0]  ? timer_is_static_object+0x35/0x80
[  353.733886][    C0]  check_panic_on_warn+0x89/0xb0
[  353.738824][    C0]  ? timer_is_static_object+0x35/0x80
[  353.744184][    C0]  end_report+0x6f/0x140
[  353.748417][    C0]  kasan_report+0x129/0x150
[  353.752912][    C0]  ? timer_is_static_object+0x35/0x80
[  353.758280][    C0]  timer_is_static_object+0x35/0x80
[  353.763466][    C0]  debug_object_activate+0x146/0x540
[  353.768749][    C0]  __mod_timer+0xa4f/0xf30
[  353.773168][    C0]  call_timer_fn+0x16e/0x590
[  353.777746][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  353.783366][    C0]  ? call_timer_fn+0xbe/0x590
[  353.788033][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  353.793141][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.798333][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  353.803956][    C0]  __run_timer_base+0x61a/0x860
[  353.808799][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  353.814167][    C0]  ? clockevents_program_event+0x247/0x350
[  353.819964][    C0]  ? sched_clock_cpu+0x74/0x430
[  353.824808][    C0]  run_timer_softirq+0xb7/0x180
[  353.829647][    C0]  handle_softirqs+0x22b/0x7c0
[  353.834408][    C0]  ? __irq_exit_rcu+0x60/0x150
[  353.839164][    C0]  __irq_exit_rcu+0x60/0x150
[  353.843753][    C0]  irq_exit_rcu+0x9/0x30
[  353.847983][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  353.853604][    C0]  </IRQ>
[  353.856526][    C0]  <TASK>
[  353.859445][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  353.865413][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  353.871118][    C0] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  353.890718][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2
[  353.896790][    C0] RAX: 00000000001d7a77 RBX: ffffffff819713ee RCX: 0000000080000001
[  353.904757][    C0] RDX: 0000000000000001 RSI: ffffffff8d792055 RDI: ffffffff8bc083e0
[  353.912719][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  353.920679][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270
[  353.928640][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  353.936605][    C0]  ? do_idle+0x1be/0x4d0
[  353.940849][    C0]  default_idle+0x13/0x20
[  353.945173][    C0]  default_idle_call+0x73/0xb0
[  353.949928][    C0]  do_idle+0x1be/0x4d0
[  353.953990][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  353.960135][    C0]  ? __pfx_do_idle+0x10/0x10
[  353.964739][    C0]  cpu_startup_entry+0x44/0x60
[  353.969492][    C0]  rest_init+0x2de/0x300
[  353.973725][    C0]  start_kernel+0x381/0x3d0
[  353.978227][    C0]  x86_64_start_reservations+0x24/0x30
[  353.983782][    C0]  x86_64_start_kernel+0x143/0x1c0
[  353.988884][    C0]  common_startup_64+0x13e/0x147
[  353.993825][    C0]  </TASK>
[  353.997217][    C0] Kernel Offset: disabled
[  354.001525][    C0] Rebooting in 86400 seconds..