last executing test programs:

5.641116813s ago: executing program 4 (id=1979):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x8080)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7800000002010100000000000300000108000c00000000040c00068008000200ac1414aa0c001080080003400000000308000c400000000308000c400000000308000340000000061400198008000100a000000008000200000800000800084000000003100005800b000100616d616e64610000b613367de04599c5bb11a15736e6444920f823dacc53a1dea34ac9ef2c633c2b71e392d98b9c7d1aebd481110ee6d46017aad849bf053cc5839a13e6364c64d1ee975f4ac279368ebed61c532c14826a2f209d927c00000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
listen(r0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0xfffffffffffffe55, &(0x7f0000000000), 0x3}}], 0x40002b2, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f97a2c21ac25f1a4d81a3a19408a80c5854d7c70"}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x82}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8800}, 0x800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r8, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
pipe(0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)

4.144781557s ago: executing program 2 (id=1994):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x40020000) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r2, 0x0, 0x8000) (async)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x40) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
unshare(0x20000400) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000940)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r4, &(0x7f0000000000), 0x8)
connect$inet(r3, 0x0, 0x0)

2.381727137s ago: executing program 2 (id=2007):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 32)
sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="101000000000000000000000090000004c94d1d37405888cc2"], 0x1070}}], 0x1, 0x4000004) (async)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5) (async)
recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000105000000000000000100000000000000fffff7"], 0x20}}, 0x8000)

2.229131196s ago: executing program 3 (id=2009):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000a00000000000000cfbd876eae4cc284ce8025337e9c4456c3803ca2ee90df8a6f29d5850095548e4c87597be4e82c6f19348972d61c455008ced089305abec0f5bdb555f42ee5a3c609e68096ce7803818bb27a68e4cf4081a311a11680540c017e6b28bdac67c1211473eb593c4eb91c523b6b94df46229d150432ef5913972eb1df62026a9910a423c69cc778050000007893376cf2df8c767e8faa8c403bb10f60a3008857a9fe93a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x6e)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2a, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x23}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @jmp={0x5, 0x1, 0xc, 0xa, 0x7, 0x20, 0xfffffffffffffffc}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r7)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000100", @ANYRES16=r8, @ANYBLOB="0100fcff7f00000000002100000009001f0070687930000000000c000500000000000000000005002000fd000000"], 0x34}}, 0x0)

2.045314036s ago: executing program 2 (id=2011):
unshare(0x22020600)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
close(0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
pread64(r2, 0x0, 0x0, 0x100000000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x9, [@fwd={0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x4}}, @enum64={0x4, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x9, 0x3, 0x1000}, {0x4, 0x6, 0x6000}, {0xe, 0x1, 0x3}, {0x10, 0x5, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7f}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x2a, 0x4}, @fwd={0x8}]}, {0x0, [0x30, 0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000240)=""/161, 0xc1, 0xa1, 0x1, 0x5, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xe399}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.030423478s ago: executing program 3 (id=2012):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002075400000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010) (async, rerun: 64)
r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
r8 = socket(0x22, 0x800, 0x0) (async, rerun: 32)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x521, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4094}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030428bf70000000000000000400", @ANYRES32=r12, @ANYBLOB="ef030100c000577108000500", @ANYRES32=r12, @ANYBLOB="2c0012800b0001006970766c616e00001c0002"], 0x54}, 0x1, 0x0, 0x0, 0x4040002}, 0x4004850)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6a0}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069060000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb70200000800e500b703000000400000850000001000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.912736982s ago: executing program 2 (id=2014):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x1e, 0x0, 0x0, 0x0, "a15b348d540a8454234d2b582392bd484d6a60bfd0ac9dfc46b6ca1a8277a317f455af05f889fa21ad77addc0ed867868afc42e8d8dbab6ee43fc868e26a3562"}}, 0x80}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
unshare(0x400)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r8, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@private0, r8}, 0x14)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r3, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4008044)
r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000700)={{0x3, @null}, [@rose, @remote, @remote, @rose, @null, @remote, @bcast, @default]}, &(0x7f00000004c0)=0x48, 0x80800)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x24, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x13, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8a6ef34"}]}, 0x24}], 0x1}, 0x0)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r12 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000640)={0xa8, 0x24, 0x810, 0x70bd25, 0x25dfdbff, "", [@generic="e04ce12072de3bde588187ba096676552347be1e2fa3be20d20b63f8b4f834f54b422c7e96768afe3fd466244a08fd8ae85c7020d31c7dfb016ac8945b70eb4a06bc05d0ced49846fd24ac176de5eee19244191de3f513dd3dc946917594ea422c71c8784fad22611b287e2ba1afc998cb00b08612dcfebc46047bdf87d182d5e88b0cc3", @typed={0x13, 0x40, 0x0, 0x0, @binary="e0750465f14d2be40c25f1eafcba28"}]}, 0xa8}], 0x1, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [r9, r10, r2, r11, r7]}}, @rights={{0x20, 0x1, 0x1, [r7, r5, r5, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x98, 0x20000040}, 0x8040001)
connect$can_bcm(r1, &(0x7f0000000300), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r13=>0x0})
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)='\x00!', 0x2}], 0x1, 0x3, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0xfe3a)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r13}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r13, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.853775879s ago: executing program 1 (id=2015):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000a777b2280000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

1.700362131s ago: executing program 4 (id=2017):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x2028, 0x4, @void, @void, @value=r1}, 0x20)

1.637764337s ago: executing program 1 (id=2018):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x5c8, 0x348, 0x258, 0xffffffff, 0x438, 0x348, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'pimreg0\x00', 'veth0\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @dev, @remote, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @private1, @dev, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv4=@local, @port, @icmp_id}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4=@dev, @icmp_id}}}, {{@ipv6={@dev, @empty, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@loopback, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x890)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240"], 0xa8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)

1.636788766s ago: executing program 3 (id=2019):
r0 = socket(0x1d, 0x2, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62)
listen(r1, 0x3)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4095}, 0x24044884)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}]}, 0x58}}, 0x0)

1.611873569s ago: executing program 4 (id=2020):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'ipvlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x89, 0x3}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2021, 0x0, [{0x0, 0x0, 0x80, 0x7}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1df3}, {0x0, 0x2, 0x80}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {0x0, 0x0, 0x40}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz1\x00', {0x7}}}}, {{@ip={@multicast2, @empty, 0xffffffff, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESDEC=r1], 0x50}}, 0x4c004)

1.46980147s ago: executing program 4 (id=2022):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001006f7366001c00028005"], 0x80}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb0, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x4a108f2352c51f40, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x0, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040}, 0x200000c1)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2c, r2, 0x1, 0x70b92a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854)

1.291458573s ago: executing program 1 (id=2024):
unshare(0x22020600)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
close(0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
pread64(r2, 0x0, 0x0, 0x100000000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x9, [@fwd={0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x4}}, @enum64={0x4, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x9, 0x3, 0x1000}, {0x4, 0x6, 0x6000}, {0xe, 0x1, 0x3}, {0x10, 0x5, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7f}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x2a, 0x4}, @fwd={0x8}]}, {0x0, [0x30, 0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000240)=""/161, 0xc1, 0xa1, 0x1, 0x5, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xe399}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.195609102s ago: executing program 1 (id=2025):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0xffffffffffffff9d, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97bf38b07526ba74"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a3a697f2b8349fcdbb6d28b58243ba99"}, @NL80211_REKEY_DATA_KCK={0x13, 0x2, @kck="e6df37f420b0904851816d110200"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44085}, 0x840)

1.167031437s ago: executing program 2 (id=2026):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2bc0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x3}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2b90, 0x2, [@TCA_FLOW_ACT={0x1654, 0x9, 0x0, 0x1, [@m_ctinfo={0xfc, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x2, 0x7, 0x401}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x7f, 0x7, 0x2, 0xfffffffb}}]}, {0x86, 0x6, "b82547b967238b9271bbd5642115bb3f963701f068b1533c04e744adb4f26c55899c9e0ba3b817bace6a4a6801534f59962816d7fdea857db21a28d743d3b2a81b3eb9d1be87865258d8079ddda5bb60d5245fe2cb77e1ad75a1433a573af24e02791cfb13b07c8aa7b351a93af005606dddee3734b13a6165f50c52c0eba100a762"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x50, 0x12, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0x9, 0x6, "caec4cb7ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x150, 0x1e, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="bd8f91edc5b4"}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x100000}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7f}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}]}, {0xd1, 0x6, "48fb362265f95d6e6ef84cbc24e4f623d4e0428050dd702d25e1269a7147772b58005ddb2f2544f83076c84996c84fe7857231ddafde63f203424d43838d9e78ee282537e4d741072e224d29d71a7499de90880d01ba62cba16b107c50e42d7b52b18fa29dab27bb78d59ba641bf2628268ff74816f5a5d18452b4086f6cecebf386d6573ecef87b1637cbb51afec9e4eed5bcdf52c97dd6743e7ae50e16667ab50f44d646cbd8fc6fffa68cc89eb6990387195408e5afcdb50f911664077639fc1d9b180a93774e0f203041b2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xe8, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x10000000, 0x2, 0xfffffffc}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x890d}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8809}, @TCA_MPLS_LABEL={0x8, 0x5, 0x42640}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1f43d}, @TCA_MPLS_TTL={0x5, 0x7, 0x89}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}]}, {0x65, 0x6, "2840bad8a0c2b7b24a2388a5727b439e5389962e19afd84eecd4936dbc717a05e562f207a93793d25618b31c8a6df2fd4a3d8b5459dc9b83dd06acb732abf1dd25699b7c8f5c9299b86b45a15bfbc41cc68907314b3e4981600d2129003bbc99d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x48, 0x1a, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xf}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0x9, 0x6, "029d1fba99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_pedit={0xfb0, 0x6, 0x0, 0x0, {{0xa}, {0xf30, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x94, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xe2f, 0x10001, 0xffffffffffffffff, 0x1, 0xf}, 0x8, 0x7, [{0x8e0, 0x0, 0x6, 0xfff, 0xa7, 0x1}, {0x800, 0x401, 0x0, 0xfffffffc, 0x8, 0x1000}, {0xa1b, 0x53d, 0x1, 0xffff, 0x0, 0x9}, {0x4, 0x0, 0x2, 0x8, 0x2, 0x3}, {0x69, 0x9, 0x8, 0x0, 0x3}]}, [{0x4, 0x80000001, 0x7fffffff, 0x8f21, 0x1, 0x8001}, {0x5, 0x3b, 0x4, 0x3, 0x10000, 0x8}, {0x8000, 0x8, 0x25a, 0x2, 0x1, 0x31}, {0x54, 0x9, 0x80000001, 0x8f, 0x3, 0x9}, {0x6, 0x2, 0x9, 0x9, 0xc, 0x4}, {0x4, 0x3, 0xffffff4f, 0x9, 0x0, 0x1}, {0x27800000, 0x8, 0x7, 0x17e, 0x4, 0x3}, {0x2, 0xf65, 0x0, 0x0, 0xff, 0x5}, {0x7, 0x4, 0xe, 0x7, 0x7ff, 0x5}, {0x5, 0x1, 0x7, 0x4e, 0xffffff15}, {0xe59b, 0xffff, 0x8, 0x1ff, 0x9, 0x4}, {0x2, 0x9, 0x7ff, 0x1, 0x1ff, 0x2}, {0x0, 0xe, 0x5, 0x53, 0xdcb, 0x7}, {0x3ff, 0x1, 0x9, 0x5, 0x5, 0xffffff6b}, {0x2, 0x80000001, 0xb, 0x1000, 0x200, 0x10000}, {0xcef, 0xffff, 0xfffffffe, 0x5, 0x8, 0x7}, {0x4, 0x5, 0x5, 0x80000000, 0x5, 0x53}, {0x9, 0x4, 0x10000, 0x2e295647, 0x200, 0x9}, {0x8, 0x0, 0x1, 0x7fffffff, 0x3ff}, {0x8, 0x3ff, 0x0, 0x1, 0xd, 0x9}, {0x2, 0x6e, 0x3, 0x5, 0xa, 0x16000547}, {0x9, 0x5, 0xffffffff, 0x4, 0x7, 0x4}, {0xc00000, 0x5, 0x1220, 0x2, 0xdc5, 0x8}, {0xb68, 0x8, 0xf, 0x4, 0x9, 0x3}, {0x80000000, 0x8001, 0x4, 0x10, 0x7, 0x9}, {0x36a341f7, 0x2, 0x570, 0xcb, 0x60000, 0xcf9c}, {0x8, 0x2, 0x3, 0x0, 0x4, 0x7ff}, {0x3000000, 0x4, 0x4, 0x1, 0x200, 0x100}, {0x20a, 0x3, 0x0, 0x6b77, 0x6, 0x1}, {0x9, 0x40, 0xffffff20, 0x3, 0x5557, 0x695}, {0x1, 0x4, 0x3a5, 0x7fffffff, 0x2, 0xf42b}, {0x2, 0x1, 0x7, 0x1, 0x6, 0x1}, {0x2, 0xb, 0x1, 0x101, 0x8e27, 0x7}, {0x9, 0x101, 0xee, 0x81, 0x400, 0xf5}, {0x8, 0x5c1c, 0xb, 0x391d, 0x5, 0x8001}, {0x5dd1f513, 0x3, 0xfffffffd, 0x7, 0x800, 0x3}, {0xd1bf, 0xf, 0x2, 0x6, 0x9, 0x1}, {0x7, 0x6, 0x3, 0x2, 0x57c6, 0x8}, {0x2, 0xfffffe01, 0x5, 0x1, 0x97, 0x5}, {0x8, 0x8, 0xb, 0x4, 0x2, 0x154d}, {0x2, 0x8, 0xfffffffc, 0x3, 0xc4a, 0x3}, {0x16, 0xfffffff0, 0x800, 0x2, 0x0, 0x64}, {0x7, 0x5, 0x4, 0x3, 0x1, 0x8}, {0x8000, 0x8, 0x0, 0x7, 0x36d}, {0xf69a, 0x5, 0x80000000, 0x3, 0x1, 0xfffffff7}, {0xf9, 0x3, 0x7, 0x3, 0x1, 0x6}, {0x40, 0x1, 0xfffffffb, 0x2, 0x80000001, 0x3ff}, {0x7, 0x2, 0x4, 0x2c4, 0x4, 0x101dc1e0}, {0x40, 0x0, 0x8001, 0x40, 0x4, 0x6}, {0x1, 0xb, 0xcad, 0xcea, 0xb, 0x1}, {0x4158, 0x10000, 0x6, 0xfffffffe, 0xfff, 0x7}, {0xe4a6, 0x3ff, 0x8, 0xe, 0x1, 0x4}, {0x2, 0x8000, 0x4, 0x3, 0x0, 0x10000}, {0x1d7d1242, 0x426, 0x8, 0xc, 0x8, 0x3}, {0x4753b853, 0x80000000, 0x4, 0x7, 0xfec, 0x7}, {0x100, 0x7, 0x6, 0x8, 0x9, 0x5}, {0x7, 0xfffffff7, 0x6, 0x5, 0x3, 0x2}, {0x8, 0x9, 0x80, 0x3, 0x9, 0x2}, {0x9, 0x401, 0x0, 0xe, 0xf, 0x80000001}, {0x4, 0xd, 0x9, 0x3, 0x4ee7, 0x3}, {0xb, 0x7bd, 0x5, 0xa10f, 0x1, 0x9}, {0xc, 0x67, 0x9, 0x6, 0x8, 0x9}, {0x9, 0x6, 0x6, 0x73eb765, 0x8}, {0xa0a4, 0x1, 0x3, 0x94, 0x6, 0x80}, {0x7f, 0x3, 0x84f, 0xfffffffb, 0x9, 0x10000}, {0xce47, 0x3661, 0x2, 0x8, 0x8}, {0x7, 0xb7d, 0x2, 0x4, 0x5, 0x30}, {0x3, 0x3, 0x0, 0x10, 0x2e, 0x80}, {0x8, 0x8, 0xfffffff8, 0x8, 0xa, 0x8}, {0x4, 0x0, 0x5, 0x2, 0x5c14, 0x6}, {0x4, 0x1000, 0x9, 0x6, 0x8f66, 0x1}, {0x100, 0x1, 0x96, 0x2, 0x4ff1cd28, 0xffffffff}, {0x6, 0x6, 0x2, 0xd72, 0xffffffc0, 0x8}, {0x1, 0x14d77d24, 0x5, 0x4, 0x6}, {0x8d37, 0x80000001, 0x4c1, 0xffffffff, 0x2, 0xfffffff7}, {0x0, 0x6, 0x1ff, 0x3, 0x4, 0xd297}, {0x3, 0x4, 0x7fff, 0x8, 0x400, 0x5d}, {0x7be7cd7d, 0xffff, 0x8, 0x1, 0x2, 0x5}, {0x400, 0x3, 0x0, 0xb140, 0xffffffff, 0xfff}, {0x7, 0x5, 0x7, 0x7fffffff, 0x9, 0x80000000}, {0x8, 0xd, 0xff, 0xfffffffe, 0x2, 0x22db}, {0x5, 0x3, 0x87, 0x5, 0x2, 0x3ff}, {0xc41e, 0x1, 0x9, 0x2, 0x9, 0x10}, {0x7, 0x2, 0x9, 0x200, 0x9, 0x7f}, {0x6, 0x2d, 0x401, 0x3ff, 0x101, 0x8}, {0x5, 0x200, 0x6, 0x6, 0xfffff07e, 0x7}, {0x7ff, 0x5, 0xc, 0x3ff, 0x8601, 0x41}, {0xd, 0xe5, 0x5, 0xfffffff8, 0xfffffff7, 0x74}, {0x8, 0x4, 0x4, 0xab2, 0xb, 0x8000}, {0xe, 0x200, 0x409, 0xdce29abd, 0xfffffffb, 0x2}, {0x2, 0x8, 0x7, 0x7, 0x8001, 0xede6}, {0x6, 0x3, 0x2, 0x4, 0x8001, 0xbfa}, {0x1, 0x0, 0xfffffffc, 0x1, 0x8, 0x80000001}, {0x4, 0x5, 0x4, 0x1, 0x9, 0xffff}, {0x8, 0x3, 0x7, 0x0, 0x1, 0xffffffff}, {0x7, 0x7, 0x1000, 0x7fff, 0x4, 0x7}, {0x4000, 0x4, 0x4, 0x2, 0x1, 0xb1e}, {0x9, 0x3, 0xc, 0x6, 0x2, 0x80000001}, {0x8, 0x0, 0x4, 0xfffffffd, 0x5, 0x80000000}, {0xfffffffe, 0x0, 0x2, 0x7f, 0x7, 0x2}, {0x5, 0x1, 0x3, 0x10000, 0xd, 0xd30}, {0xffff, 0x4800, 0x4, 0x6f, 0x2}, {0x5, 0x80000000, 0x5, 0x7, 0x7, 0x3}, {0x0, 0x5, 0x0, 0x4, 0x100, 0x2}, {0x4, 0x7ff, 0x5, 0x8000, 0x2, 0x5}, {0x9, 0x3, 0x6, 0x602a, 0x5, 0xa73}, {0x6, 0x401, 0x6, 0xff, 0xffffff01, 0x5}, {0x8, 0x2, 0x3ff, 0x1, 0x10000, 0xffffffff}, {0x46, 0x7fffffff, 0x7, 0x9, 0x6, 0x3}, {0x4, 0x6, 0x13e8, 0x5, 0x1, 0x8}, {0x91, 0xe, 0x3ff, 0xee5, 0xfffffffe, 0x9}, {0x99, 0x9, 0x0, 0x101, 0x0, 0x10000}, {0x7fff, 0x1, 0x4, 0x9, 0xdb7b, 0x10001}, {0x4, 0x8, 0x5, 0x8, 0x2, 0x80000000}, {0xe77, 0x7, 0x8, 0x4, 0x4, 0x10001}, {0x4, 0x5, 0x9, 0x6, 0x2, 0x7fffffff}, {0x1, 0x7ff, 0x0, 0x4, 0x0, 0x1ff}, {0x6, 0xffffffff, 0x4, 0x7, 0x6, 0x3}, {0x1, 0x7, 0xf471, 0x5, 0x583, 0x4}, {0x9b, 0x9, 0x2, 0x7fff, 0xfffffffd, 0x2}, {0x4, 0x9, 0x5, 0x2, 0x1, 0x2f4}, {0x98, 0x6, 0x5, 0x79d893d4, 0xfffffffb, 0x9}, {0x81, 0x800000, 0x101, 0x9, 0x83e, 0x60000000}, {0x1fac4d63, 0x2, 0x3, 0x447a, 0x81, 0x401}, {0x1, 0x2, 0x80000001, 0x1, 0x3f, 0x401}, {0x400, 0x480000, 0x7f, 0x6, 0x3, 0x1}, {0x7, 0x5, 0x8, 0x0, 0x1, 0x4}, {0x0, 0xb84, 0x0, 0x63dd, 0x2, 0x20}], [{0x5}, {0x1, 0x1}, {0xf}, {0x7}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x3c1084b6350e3797}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x5}, {0x4}, {0xa, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x7, 0x1}, {0x1}, {0x3}, {0x2}, {}, {}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x2}, {0x7, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x9e0c84fc5f1e9e36, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}]}}]}, {0x55, 0x6, "e20c084edb317972bbc51854dd644d06b59ae81ceab94ceb700d76775c5d0064c2f3a4e478b365858a408239237e8aeea75abefc1267fdbd25126715dbf0bf6ab382719596a882cfea070dda26424b1ca7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x120, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfb8c, 0x118, 0x4, 0x3}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffd, 0x470, 0x10000000, 0xe0d6, 0x3}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf, 0x2, 0x3, 0xe012}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x0, 0xffffffff, 0x2}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x8, 0x689b8fbd, 0x6}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xffff, 0x3, 0x1ed, 0x1000}, 0x5d}}]}, {0x49, 0x6, "0598edcfd4a75febd08547c034f3d0082178150dc58f0deb6f2dbc337cfc40b3498d9b1be9f97492b3acc9ace113b49222ce3df6a68e2d13b61b91c5669cd45f783dc67b4f"}, {0xc}, {0xc, 0x8, {0x7, 0x1}}}}, @m_csum={0x1b4, 0xd, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x0, 0x7cd, 0x100}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x3, 0x7, 0x7, 0x9}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff894, 0x3ff6111a, 0xfffffffffffffffd, 0x2, 0x7}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffffc, 0x3, 0x9, 0x1}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1bf61c2e, 0x1, 0x1, 0x7fff, 0x9}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x5, 0x0, 0x7fff, 0x9}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x9, 0x4, 0x7, 0x400}, 0x7b}}]}, {0xc3, 0x6, "b992dbad55cc0928b80cef59ef57dd5f47da501d621bc4742eee748ab5188cc676c885d6c66e3027226310555217812dcba6c27e2386844552b0dae7966c9823f13c8f21c5ec6c5046b9305f96ffd1a841ece09c8875d73a0ab56ce23d7cc3b4b0f02abf93f010c4a4cfc12f0e99bd8bdf0ea419ecaf9b6419b90e0f52654e07cb78b69255e1741071f7ee0ea8b3c2802953c0f6479efe2756ff810f8be683e08f15ab9c012221b0656c94372a21b452cd675c7c46ec2b70457015a8881988"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FLOW_POLICE={0x520, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x0, 0xfffffffc, {0xf2, 0x0, 0x79, 0x2, 0x2, 0x5}, {0x1, 0x0, 0xa3b8, 0x81, 0x7f2e, 0x3e1}, 0xfffffe01, 0x2, 0x7a23}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0xe, 0x8, 0xfab, 0xa840, 0x0, 0x0, 0x9, 0x8, 0x15, 0x10000, 0x81, 0xb65a, 0xb0, 0xf, 0xfffffffd, 0x1, 0x5, 0x1, 0xfffffff7, 0x7, 0x8, 0x6, 0xade, 0xffff, 0xfffffffd, 0x200, 0x8, 0x3, 0x9, 0x8, 0x8, 0x4, 0x7, 0x10, 0xe, 0x800, 0xfffff801, 0x0, 0x80000001, 0x0, 0x3, 0x5, 0xfffffff9, 0x400, 0xfffffff8, 0x2, 0xc, 0xd, 0x6, 0xd773, 0x42, 0x3, 0x9, 0xff, 0x4, 0xf, 0x2, 0x6d8, 0x72, 0x352, 0x5, 0x401, 0x1, 0x7fff, 0x1, 0x800, 0x3, 0x80000001, 0xf, 0x4, 0x8, 0x8001, 0x81, 0x400, 0x1000, 0x6, 0x0, 0x5, 0x0, 0x7fff, 0x8, 0xc, 0x59, 0xfffffff7, 0x8, 0x0, 0x1, 0x3, 0x1, 0x1, 0x7, 0xff, 0x8, 0x6, 0x4, 0xbe, 0x400000, 0x8, 0x2, 0x0, 0x7, 0x3ff, 0x3ff, 0x40, 0x6, 0x10001, 0x7, 0x8000, 0x618e, 0xfffffc01, 0x800, 0x7, 0xb, 0xa, 0xfffffff7, 0x1, 0x7, 0x2, 0x7, 0xb, 0x2, 0x0, 0x1, 0x74, 0x7, 0x9, 0x0, 0x7, 0x0, 0x7, 0x1, 0x8fc, 0x80000000, 0x7, 0x1, 0x1, 0x0, 0x4, 0x8385, 0x9, 0x1, 0x3, 0x5, 0x8, 0x8, 0x2, 0x7, 0x5, 0xce, 0x800, 0x7, 0x3ff, 0x1, 0x0, 0x4, 0x3, 0x7e, 0x2bfa, 0x800, 0xc9e7, 0x81, 0x1, 0x3, 0x80000001, 0x2, 0xa65, 0x53, 0x5de, 0x3, 0x6, 0x1, 0x80000001, 0xc, 0x2, 0x8, 0x1, 0xc42e, 0x2f, 0x7ff, 0x9, 0xc132, 0x3, 0x4, 0x6, 0x400, 0xe, 0x7, 0x3, 0x9, 0x5, 0x11, 0x7, 0x9c5, 0x0, 0x9a22, 0xfffffff9, 0x8001, 0x3, 0x7, 0x120, 0xaf, 0x6, 0x9, 0xffff, 0x2, 0xe, 0x0, 0x6, 0x4, 0x41f6, 0x3ff, 0x5, 0x9, 0xfffffffe, 0xd83, 0x9, 0x7, 0xdc4, 0x401, 0x80000000, 0x7fffffff, 0x3, 0x5, 0x2e, 0xff, 0x4, 0x5, 0x9, 0x8, 0x2, 0x7fff, 0xfffffff4, 0x81, 0x8, 0x2400000, 0x9, 0x3, 0x6, 0x0, 0x712, 0xb, 0x10000, 0x2, 0x80000001, 0x2, 0x401, 0x6, 0x4, 0x5, 0x5, 0x81b6, 0xec, 0x4, 0x59c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x3, 0x53, 0x8, 0x5, {0x8, 0x1, 0x80, 0x4, 0x0, 0x6}, {0x2, 0x2, 0x0, 0x3be1, 0x8, 0x8}, 0x3, 0x7f, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x837}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x3, 0x8000, 0x7f, {0x0, 0x2, 0x4fe1, 0xffff, 0x3, 0x5}, {0xfe, 0x1, 0x7, 0x2, 0x6, 0x1}, 0x1, 0x9, 0xa}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x60}, @TCA_POLICE_TBF={0x3c, 0x1, {0x221, 0x7, 0x4ce, 0x7, 0x18, {0x9e, 0x0, 0x8001, 0x2d3a, 0x1, 0x85a0}, {0x1, 0x0, 0x80, 0xa658, 0xfc4, 0x1}, 0x89, 0x4, 0x6b8}}]}, @TCA_FLOW_POLICE={0x420, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xfdaa7550, 0xb, 0xff, 0x0, 0x2, 0x9, 0x1, 0x4, 0x8001, 0xf988, 0x9, 0x4, 0x3, 0x3, 0x4, 0x9, 0x6, 0xfffffffe, 0x2, 0xc, 0x7, 0x0, 0x5, 0x7, 0x3, 0x8373, 0x628019dd, 0x0, 0x0, 0x401, 0x80, 0x7, 0x8, 0xfeb5, 0xdd0d, 0x6, 0x0, 0x6, 0x0, 0x5630df14, 0xd4, 0x2, 0x4, 0x4, 0x9, 0x4, 0x1, 0x7, 0x4, 0x40, 0x1, 0x4, 0x5, 0x6, 0x1, 0x7, 0x7, 0x0, 0x8, 0x6, 0x6, 0xf, 0x7, 0xce76, 0x2, 0x3, 0xe, 0xffffffff, 0x8, 0xfff, 0xcd4, 0x400, 0x3, 0x427, 0x2, 0x2, 0x9, 0x3, 0x1, 0xe4, 0x1, 0x1000, 0x7f, 0x7fff, 0x83b, 0xfff, 0x4, 0xe, 0x9, 0x8, 0x6ea9, 0x5, 0x7, 0x9, 0xffff, 0xf, 0x0, 0xfffffff8, 0x6, 0x0, 0x9, 0x8, 0x7f, 0x7, 0x2d, 0x101, 0x0, 0x3, 0x7, 0x6cc, 0x5, 0x2, 0x1, 0x8, 0x1, 0x2, 0x2, 0xffffff62, 0x1, 0x2, 0x2, 0x6, 0x1, 0xfffffbff, 0xffff, 0x4, 0x3, 0x80000000, 0x8, 0x5, 0x0, 0xc, 0x100, 0x6, 0x800, 0xfffffffe, 0x948, 0xa4d, 0x4, 0x9, 0x1, 0x3, 0x5, 0xdc, 0x4, 0x8, 0x3, 0x0, 0xd, 0x1, 0x2, 0xc8, 0x7fffffff, 0xa, 0x8, 0x3f0, 0x7, 0xe, 0x5, 0x4, 0xa7e, 0x2, 0x5, 0x10, 0x1, 0xddf, 0xffffff71, 0x9, 0xfffffff7, 0x3, 0x7f, 0x3, 0x40, 0x7, 0x5, 0x6, 0x100, 0x7fffffff, 0x21, 0x7ff, 0x40, 0x400, 0xeb3, 0x6, 0x8aa, 0xffff, 0x3, 0x10000, 0x2, 0x2, 0x3, 0x7, 0xd, 0xd, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0xe3d, 0x9, 0x7, 0x1, 0x1ff, 0x2, 0x1, 0x18, 0x1000, 0xce, 0x2, 0x200, 0x7, 0x2, 0x8353, 0x2, 0x7, 0x5197, 0x8000, 0x9, 0x2, 0x1, 0x80000000, 0x6, 0x5e074e31, 0x300000, 0x0, 0x8, 0x2, 0x6, 0x6, 0x5961, 0x101, 0x8ca, 0x6, 0x8e4, 0x8, 0x200, 0x6, 0x7, 0x5, 0x9, 0x100, 0xc, 0x5, 0x1, 0x8, 0xffffffe3, 0x81, 0x5, 0x6, 0x9, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xbc4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x398, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x40}, "5f8d5a0fbd9bccbe003368223b21df45e485eed67db13e665aba2bae7ef156540a816922eb0670833e9dbdcc8b1727b5a1176fb4070b24c87fb0c8e0b5f1a14af83efc8005d594cc277cc2c8ad21f13d7d271cf986e2a27203701208d4cfd2f738992a5b56ad85faa6940decf8eba3bbab566b7571c8a5600ab1b446f2f5e17ff643c785bc2a289a"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x2f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xa4, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x784, 0x25, 0x2}, {0x8, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x0, 0x2}, {0x7f, 0x9f}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xb, 0x2}, {0xeed, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0x3}, {0x9, 0xc9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x6, 0x2}, {0x2f, 0x1}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="657f5e16", @TCF_META_TYPE_VAR="ca17"]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="1f", @TCF_META_TYPE_VAR="6f1f84f60200d5fa26cd", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x34, 0x3, [@TCF_META_TYPE_VAR="0419eb76c7", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="d6a1e9050cea", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="47104b51c1f00a83", @TCF_META_TYPE_VAR="6793de05589aa720", @TCF_META_TYPE_VAR="a66a3a9c44"]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x40}, {0x3, 0x2, 0x4}}}, @TCF_EM_IPT={0x100, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x526}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xe6, 0x5, "8565d556bad3687dec28867045a1d1b6a20d87a0875b51abe24db824435e7ff9740dcbf0cfab2d8085a2b0f70f3380dda2138a16fd60078aa5235e1a2175866abc4ae5929646f925bce1da3a25071ccc34daa43b1d7ec39da848bf203797342d85707010f258e16215f3c8fc5185a123a511dcb95d07136e2efe938708fa30b73d505e8faba64c26df701356972ccd92a63c7158bd0695f7e289066f8822c236394b363056c0c82b87eeb5aa1a22c8a293911cdf0fc510c6aabb000a65df0e30971ba4d8d0b6423d81466e31b2e8de04db8f079f1324c3f03eae7c81bc748fe52198"}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x6}, {0xc8c5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3cfa}, {0xffffffffffffffff, 0x6}}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="3a31faa3c6ef"]}, @TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="8e90ba0ee56012", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="20a6", @TCF_META_TYPE_VAR="bdb070780867f4c1f1ad", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="8fe691fb24b67617a5cf"]}]}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0xf81d, 0x0, 0x3}, "7df2f58ccd0e357ff0a5a79cf36ca84f5d507f2c2fa2b9ed619ba21cdd030394b53df1ee7bab13443f4f1e147b9ad1d64fc79223003a215d79a430391e11b212bf7cc014fbaf80711976d4e728d475d467fd3bee582fb8a7a3d75e45c838d15cfae9e29639be8e9ca601cdc3a5bcdc9b196bd6b47a034282ba1a317122474626"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x609}, {0x0, 0x8, 0x3, 0x7}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x2}, {0x2, 0x2, 0x3}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x401}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_POLICE={0x838, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x7f, 0x52, 0xed2, 0xdb76, 0x8001, 0x6, 0x8000, 0x80000000, 0x3, 0xfffffff7, 0x6, 0x80000001, 0x576, 0x62f4, 0x1, 0x0, 0x9, 0xffffffff, 0xfffffe00, 0x3, 0x6, 0x1, 0x6, 0xebc, 0x9, 0xa, 0x0, 0x7, 0x4, 0x6, 0xced, 0x4, 0x81, 0xfffffffc, 0x0, 0x8, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0xfffffff7, 0xc, 0x100, 0x0, 0xffffffff, 0x0, 0xfffffc01, 0x6, 0x2, 0x1, 0x8, 0xa, 0x8, 0x3, 0x3, 0x1, 0x20, 0x2, 0x7, 0xf, 0x8, 0x7, 0x8, 0xb5f, 0x5, 0xfffffffe, 0x9, 0xff, 0x8000, 0x2, 0x0, 0x0, 0x6, 0x7, 0x101, 0x8000, 0x4, 0x8, 0x9, 0x2, 0x6, 0x4, 0x40, 0x5, 0x6, 0xfffffff9, 0x6, 0x5, 0x6c4, 0x1, 0x6, 0x0, 0x1, 0x80, 0xb, 0x4, 0xff, 0x5cb6, 0x5, 0x4, 0xfffffff7, 0x4, 0x8, 0x10000, 0x8, 0x48, 0x1, 0x5, 0x80000001, 0x0, 0xffffffff, 0x80000000, 0x4, 0x7fff, 0x5, 0x4, 0x4, 0x7f, 0xfffffff9, 0x60a, 0x0, 0x22f8942, 0x2e, 0x4, 0x8, 0x0, 0x400, 0xfffffffb, 0xe, 0x81, 0x11e5, 0x80000000, 0x6, 0x7ff, 0x3, 0x100, 0x40, 0x7, 0x80000001, 0x1, 0xe, 0x81, 0x1, 0x2, 0x8404, 0x87dc, 0x5, 0x3, 0x200, 0x2, 0xf, 0x100, 0xe, 0x1, 0x7, 0x4, 0x73, 0x0, 0x6, 0x1, 0x7f, 0x8, 0x3, 0xd1, 0x2, 0x101, 0x3, 0x7, 0x9, 0xfc, 0xfffffffc, 0x5, 0xffffffff, 0x10001, 0x1, 0x1, 0x0, 0x401, 0x4, 0x1, 0x1, 0x60000000, 0x7, 0x2, 0x9, 0x8, 0x6, 0x4, 0x0, 0x100, 0x4, 0xf9, 0x9, 0x4, 0x8, 0x4, 0x10, 0x1, 0x6, 0x6, 0xa67, 0x7fff, 0x7, 0x2, 0x30, 0x6, 0x3, 0xbff, 0x9, 0x10, 0x5, 0x6, 0x9, 0x101, 0x5, 0x2, 0x2, 0x3, 0x2, 0x1000, 0x2, 0x9, 0xa, 0x2, 0x61, 0xa3, 0x4, 0x72, 0x2, 0x3, 0x7f, 0x8, 0xf7, 0x4, 0x80000001, 0x7, 0x1ff, 0x1, 0x38fc, 0x3, 0x3, 0x0, 0x7, 0xfffffffc, 0x3, 0x8, 0x88, 0x1d, 0x8, 0xea, 0x5, 0x0, 0xa109]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xc, 0x5, 0x1ff, 0x848e, 0xb1cc, 0x7, 0x6, 0x4, 0x10001, 0x7fffffff, 0x4, 0x2, 0x3, 0x2, 0x1, 0x6, 0xff, 0x7, 0x4, 0x7ff, 0x1, 0x1, 0xd517, 0x1ff, 0x0, 0x7, 0x338c, 0x4cff, 0x4, 0x80000001, 0x8, 0x3, 0xffffffff, 0x7, 0xfffff91f, 0x9, 0x103261a3, 0x7, 0x0, 0x8, 0x0, 0x2, 0x8, 0x5, 0x2, 0x2, 0x8, 0x34, 0x0, 0x5, 0x2, 0x3e2, 0x7fffffff, 0xe8, 0x2, 0x3, 0x1, 0x79f7, 0x10, 0x5, 0xffff7489, 0x3, 0x1, 0x8, 0x6, 0x5, 0xfffffffb, 0x80000000, 0x4, 0x0, 0xbf23, 0x8865, 0xe613, 0x80000000, 0x1ff, 0x2, 0x1, 0x9, 0x8, 0xfff, 0x8, 0x9, 0xbc9, 0x7, 0x1, 0x5, 0x9d6, 0x8, 0x6, 0x2, 0x80000000, 0xf07, 0x3, 0x2, 0x1, 0xb, 0x800, 0x9, 0x55, 0x8, 0xffff, 0x7fff, 0x1, 0x4, 0xffffffff, 0x6, 0xf7b, 0x9, 0x8, 0x3ff, 0x3, 0x8, 0x7, 0x4, 0x1, 0x8, 0x0, 0x3, 0x4, 0x8, 0xfb, 0x8, 0x0, 0x0, 0x2, 0x2857, 0x0, 0x9, 0x5, 0x3, 0x561, 0x6, 0x2, 0x10, 0x0, 0x1, 0xe, 0x6, 0x1, 0x800, 0x3, 0x31f, 0x2, 0xfffffff9, 0x200, 0x6, 0x2, 0x4, 0x9, 0x7, 0x5, 0x7, 0x9, 0x1ff, 0x2, 0x7f, 0x6, 0x4, 0x4, 0x8000, 0x2, 0xa2e, 0xe, 0x4, 0x8, 0x3cc, 0x8, 0x3, 0x7, 0x8, 0xb995, 0xd, 0x40, 0x6, 0x100, 0x4, 0x7ff, 0x3, 0x5, 0x7, 0x20d, 0x0, 0x8, 0x6, 0x8, 0x2, 0x8, 0x3ff, 0x3, 0x2, 0xb2, 0x3, 0xffffff45, 0x3, 0x588d, 0x2, 0x7fff, 0x3, 0x7, 0x8000, 0x8001, 0x7, 0x5, 0x7, 0x3f892d4d, 0x9, 0xff, 0x7, 0x3, 0x400, 0x5, 0xa, 0x101, 0x7c8, 0x0, 0x3, 0x7fffffff, 0x5, 0x8, 0x0, 0x400, 0x4, 0x0, 0x1, 0x3, 0xb29, 0x24c, 0x4, 0x2, 0x8001, 0x81, 0x5b, 0x6, 0x9, 0xf1, 0x1, 0x6eb2a867, 0x1, 0x4, 0x2, 0x1, 0xea5, 0x7, 0x8000, 0x180000, 0xf38, 0x1, 0x800, 0xffffe274, 0x2, 0x10, 0x1, 0x9, 0x4, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x62ff}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0xffe0}}]}}]}, 0x2bc0}, 0x1, 0x0, 0x0, 0x10}, 0x408c014)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4eaa00000000000071102d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000004c0)=0x27)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff})
bind$unix(r10, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000000)={r9}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r9, 0x6}, 0x8)
socket$inet_sctp(0x2, 0x1, 0x84)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@cswp={0x58, 0x114, 0x7, {{0x40, 0x6}, 0x0, 0x0, 0x7, 0x9, 0x7, 0x1000000000004b, 0x72, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xbe6}], 0x70}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfd}]}, 0x28}}, 0x0)

1.084408738s ago: executing program 1 (id=2027):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40}, {0xb1, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0)

977.592233ms ago: executing program 1 (id=2028):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x4, 0x20, 0x0, 0xfffff024}, {0x6}]}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00010008000300", @ANYRES32=r4], 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0x4, 0x0, &(0x7f0000000580)="b80022ab", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mmap(&(0x7f000094f000/0x4000)=nil, 0x4000, 0xe, 0x11, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x3)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)

869.682101ms ago: executing program 0 (id=2029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0xffffffffffffff9d, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97bf38b07526ba74"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a3a697f2b8349fcdbb6d28b58243ba99"}, @NL80211_REKEY_DATA_KCK={0x13, 0x2, @kck="e6df37f420b0904851816d110200"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44085}, 0x840) (fail_nth: 2)

490.337964ms ago: executing program 0 (id=2030):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x2028, 0x4, @void, @void, @value=r1}, 0x20)

441.897577ms ago: executing program 4 (id=2031):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x48, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40905}, 0x0)

417.990731ms ago: executing program 3 (id=2032):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000003e000701fcffffff70f6fddbdf25047c00000400"], 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRESOCT=r1], 0x54}, 0x1, 0x0, 0x0, 0x44085}, 0x840)

410.982033ms ago: executing program 0 (id=2033):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0x9}, 0x39)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4)
writev(r0, &(0x7f0000000080), 0x0)

309.602955ms ago: executing program 0 (id=2034):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x5c8, 0x348, 0x258, 0xffffffff, 0x438, 0x348, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'pimreg0\x00', 'veth0\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @dev, @remote, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @private1, @dev, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'pim6reg1\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv4=@local, @port, @icmp_id}}}, {{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv4=@dev, @icmp_id}}}, {{@ipv6={@dev, @empty, [], [], 'pimreg1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@loopback, @ipv4=@loopback, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x890)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240"], 0xa8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)

298.654516ms ago: executing program 4 (id=2035):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x880d0062}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) (async)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)={0x8}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0)

246.872115ms ago: executing program 0 (id=2036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'vxcan1\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000012d00090225bd700000320099b8000000"], 0x14}}, 0x84)
socket$kcm(0x29, 0x5, 0x0)

197.80254ms ago: executing program 3 (id=2037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0xffffffffffffff9d, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97bf38b07526ba74"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a3a697f2b8349fcdbb6d28b58243ba99"}, @NL80211_REKEY_DATA_KCK={0x13, 0x2, @kck="e6df37f420b0904851816d110200"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44085}, 0x840)

196.922991ms ago: executing program 2 (id=2038):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x75}, 0x40000020)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r5)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000040))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="1e2c030234c564efb8ebfbce6ed764b64390055078b5ee"], 0x1c}}, 0x4000054)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x1c, 0x1e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}]}, 0x1c}], 0x1}, 0x80d0)
r10 = socket(0x2, 0x80805, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)

111.595058ms ago: executing program 0 (id=2039):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0xffff, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xbd5, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010100, @broadcast}, "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"}}, 0xbe3)

0s ago: executing program 3 (id=2040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0xffffffffffffff9d, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97bf38b07526ba74"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a3a697f2b8349fcdbb6d28b58243ba99"}, @NL80211_REKEY_DATA_KCK={0x13, 0x2, @kck="e6df37f420b0904851816d110200"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44085}, 0x840) (fail_nth: 3)

kernel console output (not intermixed with test programs):

type 10 has an invalid length.
[  152.994944][ T8937] lo speed is unknown, defaulting to 1000
[  153.063241][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.852'.
[  153.122761][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.852'.
[  153.218688][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'.
[  153.254772][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.852'.
[  153.303819][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.852'.
[  153.771658][ T8972] pim6reg: entered allmulticast mode
[  153.791845][ T8968] netlink: 676 bytes leftover after parsing attributes in process `syz.4.855'.
[  153.807183][ T8973] team0: entered allmulticast mode
[  153.814834][ T8973] team_slave_0: entered allmulticast mode
[  153.820668][ T8973] team_slave_1: entered allmulticast mode
[  153.826859][ T8973] geneve0: entered allmulticast mode
[  154.117756][ T8992] netlink: 'syz.3.860': attribute type 3 has an invalid length.
[  154.143264][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.862'.
[  154.377873][ T8998] xt_socket: unknown flags 0xd4
[  154.478425][ T9000] wireguard0: entered promiscuous mode
[  154.484300][ T9000] wireguard0: entered allmulticast mode
[  154.677296][ T9013] netlink: 'syz.3.867': attribute type 4 has an invalid length.
[  154.703049][ T9011] lo speed is unknown, defaulting to 1000
[  154.705490][ T8508] lo speed is unknown, defaulting to 1000
[  154.723433][ T8508] ¢: Port: 1 Link DOWN
[  154.816312][ T9015] netlink: 'syz.3.867': attribute type 4 has an invalid length.
[  154.837961][ T8508] lo speed is unknown, defaulting to 1000
[  154.847972][ T8508] ¢: Port: 1 Link ACTIVE
[  154.933882][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.868'.
[  155.042425][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  155.159603][ T9029] bond_slave_0: entered promiscuous mode
[  155.165503][ T9029] bond_slave_1: entered promiscuous mode
[  155.172080][ T9029] macsec1: entered promiscuous mode
[  155.190346][ T9029] bond0: entered promiscuous mode
[  155.198961][ T9029] bond0: left promiscuous mode
[  155.206410][ T9029] bond_slave_0: left promiscuous mode
[  155.211833][ T9029] bond_slave_1: left promiscuous mode
[  155.487503][ T9039] macsec0: entered allmulticast mode
[  155.582085][ T9046] lo speed is unknown, defaulting to 1000
[  156.013372][ T5151] Bluetooth: hci4: command 0x0405 tx timeout
[  162.882517][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  178.242449][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  194.249708][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.256138][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  196.328631][ T5850] Bluetooth: hci3: command 0x0406 tx timeout
[  196.330835][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  196.334981][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  207.682404][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  210.974747][ T9053] sctp: [Deprecated]: syz.1.877 (pid 9053) Use of int in maxseg socket option.
[  210.974747][ T9053] Use struct sctp_assoc_value instead
[  210.990080][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'.
[  211.018437][ T9052] netlink: 31 bytes leftover after parsing attributes in process `syz.4.880'.
[  211.031405][ T9052] netlink: 'syz.4.880': attribute type 3 has an invalid length.
[  211.040006][ T9052] netlink: 'syz.4.880': attribute type 2 has an invalid length.
[  211.058988][ T9052] netlink: 31 bytes leftover after parsing attributes in process `syz.4.880'.
[  211.065170][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'.
[  211.343276][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'.
[  211.364819][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'.
[  211.393746][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'.
[  211.485278][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'.
[  211.495697][ T9091] lo speed is unknown, defaulting to 1000
[  211.503484][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'.
[  211.631275][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'.
[  212.130665][ T9124] veth1_macvtap: left promiscuous mode
[  212.178275][ T9127] bpq0: entered allmulticast mode
[  212.902100][ T9172] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  213.109220][ T9179] xt_hashlimit: size too large, truncated to 1048576
[  213.365285][ T9191] bond0: (slave bond_slave_0): Releasing backup interface
[  213.406701][ T9191] bond_slave_0: left promiscuous mode
[  213.466005][ T9191] bond0: (slave bond_slave_1): Releasing backup interface
[  213.503515][ T9191] bond_slave_1: left promiscuous mode
[  213.508473][ T9210] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  213.525585][ T9191] team_slave_0: left allmulticast mode
[  213.540358][ T9191] team0: Failed to send options change via netlink (err -105)
[  213.558838][ T9191] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  213.577244][ T9191] team0: Port device team_slave_0 removed
[  213.594545][ T9191] team_slave_1: left allmulticast mode
[  213.623885][ T9191] team0: Failed to send options change via netlink (err -105)
[  213.631907][ T9191] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  213.647547][ T9191] team0: Port device team_slave_1 removed
[  213.654516][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.662007][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.678506][ T9191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.688734][ T9191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.707699][ T9191] geneve0: left allmulticast mode
[  213.741681][ T9191] team0: Failed to send options change via netlink (err -105)
[  213.751312][ T9191] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  213.767149][ T9191] team0: Port device geneve0 removed
[  214.042910][ T9228] netlink: 'syz.2.923': attribute type 30 has an invalid length.
[  214.483717][ T9255] unsupported nlmsg_type 40
[  214.876993][ T9257] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.094351][ T9257] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.201662][ T9257] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.326288][ T9257] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.506807][ T9278] wireguard1: entered promiscuous mode
[  215.512895][ T9278] wireguard1: entered allmulticast mode
[  215.638328][ T9257] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.660916][ T9257] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.708595][ T9257] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.749891][ T9257] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.787201][ T9303] netlink: 'syz.3.944': attribute type 21 has an invalid length.
[  215.925247][ T9305] pimreg: entered allmulticast mode
[  216.016356][ T9316] pimreg: left allmulticast mode
[  216.139354][ T9327] __nla_validate_parse: 19 callbacks suppressed
[  216.139373][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[  216.157390][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.952'.
[  216.236588][ T9327] lo speed is unknown, defaulting to 1000
[  216.302919][ T9335] sctp: [Deprecated]: syz.2.955 (pid 9335) Use of int in maxseg socket option.
[  216.302919][ T9335] Use struct sctp_assoc_value instead
[  216.348482][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.956'.
[  216.893767][ T9352] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  216.897505][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'.
[  216.914478][ T9352] batman_adv: batadv0: Adding interface: gretap1
[  216.921223][ T9352] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.926850][ T9354] netlink: 'syz.4.963': attribute type 1 has an invalid length.
[  216.951377][ T9352] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  216.962142][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'.
[  217.297280][ T2155] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0
[  217.334727][ T2155] hid-multitouch 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  217.589079][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[  217.634755][ T9377] netlink: 128 bytes leftover after parsing attributes in process `syz.3.969'.
[  217.673588][ T9377] netlink: 128 bytes leftover after parsing attributes in process `syz.3.969'.
[  217.713125][ T9377] netlink: 82 bytes leftover after parsing attributes in process `syz.3.969'.
[  217.831261][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'.
[  217.872552][ T9381] netlink: 'syz.2.970': attribute type 8 has an invalid length.
[  218.347751][ T9403] macsec1: entered promiscuous mode
[  218.384421][ T9403] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  218.403076][ T9403] macsec1: entered allmulticast mode
[  218.422425][ T9403] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  218.500685][ T9412] netlink: 'syz.3.980': attribute type 11 has an invalid length.
[  218.872795][ T9442] netlink: 'syz.0.991': attribute type 12 has an invalid length.
[  218.886707][ T9442] netlink: 'syz.0.991': attribute type 29 has an invalid length.
[  219.301892][ T9464] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  219.873523][ T9518] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  219.947104][ T9523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  219.959542][ T9523] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  221.276687][ T9578] __nla_validate_parse: 13 callbacks suppressed
[  221.276709][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'.
[  221.282637][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  221.397932][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'.
[  221.841221][ T9600] lo speed is unknown, defaulting to 1000
[  222.245681][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'.
[  222.921613][ T9634] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  222.959602][ T9634] netlink: 'syz.3.1043': attribute type 15 has an invalid length.
[  222.969579][ T9637] netlink: 'syz.3.1043': attribute type 39 has an invalid length.
[  223.037109][ T9629] macvlan1: entered promiscuous mode
[  223.043897][ T9629] ipvlan0: entered promiscuous mode
[  223.050348][ T9629] ipvlan0: left promiscuous mode
[  223.057695][ T9629] macvlan1: left promiscuous mode
[  223.287997][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'.
[  223.289148][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'.
[  223.314473][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'.
[  223.386752][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'.
[  223.571274][ T9664] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1051'.
[  223.956520][ T9696] netlink: 'syz.4.1059': attribute type 1 has an invalid length.
[  224.133493][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.141227][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.182065][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'.
[  224.480951][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.524095][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.752389][ T9664] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.761348][ T9664] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.770815][ T9664] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.780344][ T9664] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  224.873679][ T9664] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  224.880830][ T9664] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  224.898817][ T9664] bond1: left promiscuous mode
[  224.920602][ T9664] veth2: left promiscuous mode
[  224.938891][ T9697] netlink: 'syz.0.1060': attribute type 1 has an invalid length.
[  225.331477][ T9738] netlink: 'syz.3.1071': attribute type 1 has an invalid length.
[  225.385161][ T9732] lo speed is unknown, defaulting to 1000
[  225.423610][ T9735] lo speed is unknown, defaulting to 1000
[  225.721906][ T9758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1077'.
[  225.762578][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[  226.190498][ T9777] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  226.444230][ T9788] __nla_validate_parse: 2 callbacks suppressed
[  226.444247][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1086'.
[  226.483593][ T9784] lo speed is unknown, defaulting to 1000
[  226.937297][ T9804] netlink: 'syz.3.1091': attribute type 2 has an invalid length.
[  226.956299][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  226.971169][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  227.252672][ T9812] lo speed is unknown, defaulting to 1000
[  227.270143][ T9812] lo speed is unknown, defaulting to 1000
[  227.325614][ T9812] lo speed is unknown, defaulting to 1000
[  227.409737][ T9812] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  227.467570][ T9812] lo speed is unknown, defaulting to 1000
[  227.482558][   T30] audit: type=1800 audit(1743697387.828:4): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1094" name="(" dev="tmpfs" ino=1132 res=0 errno=0
[  227.745977][ T9812] lo speed is unknown, defaulting to 1000
[  227.767535][ T9819] syzkaller1: entered promiscuous mode
[  227.778708][ T9819] syzkaller1: entered allmulticast mode
[  227.788640][ T9812] lo speed is unknown, defaulting to 1000
[  227.830708][ T9812] lo speed is unknown, defaulting to 1000
[  227.880816][ T9812] lo speed is unknown, defaulting to 1000
[  227.891355][ T9827] netlink: 'syz.3.1096': attribute type 10 has an invalid length.
[  227.916648][ T9812] lo speed is unknown, defaulting to 1000
[  228.167116][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'.
[  228.202668][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'.
[  228.281776][ T9833] team0: entered promiscuous mode
[  228.298202][ T9833] team_slave_0: entered promiscuous mode
[  228.342641][ T9833] team_slave_1: entered promiscuous mode
[  228.364801][ T9833] team0: left promiscuous mode
[  228.369610][ T9833] team_slave_0: left promiscuous mode
[  228.392603][ T9833] team_slave_1: left promiscuous mode
[  228.431562][ T9839] lo speed is unknown, defaulting to 1000
[  228.439508][ T9843] bridge0: port 3(veth1_to_bridge) entered blocking state
[  228.448212][ T9843] bridge0: port 3(veth1_to_bridge) entered disabled state
[  228.462967][ T9843] veth1_to_bridge: entered allmulticast mode
[  228.470630][ T9843] veth1_to_bridge: entered promiscuous mode
[  228.502814][ T9843] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  228.526320][ T9843] bridge0: port 3(veth1_to_bridge) entered blocking state
[  228.533825][ T9843] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  228.691313][ T9859] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  228.701258][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1106'.
[  228.769946][ T9861] netlink: 146872 bytes leftover after parsing attributes in process `syz.2.1107'.
[  228.789321][ T9861] netlink: zone id is out of range
[  228.830018][ T9861] netlink: zone id is out of range
[  228.838726][ T9861] netlink: get zone limit has 8 unknown bytes
[  228.875951][ T9859] x_tables: duplicate underflow at hook 3
[  229.018847][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'.
[  229.088049][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'.
[  229.101125][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'.
[  229.164815][ T9839] lo speed is unknown, defaulting to 1000
[  229.330331][ T9891] ieee802154 phy0 wpan0: encryption failed: -22
[  229.665826][ T9908] FAULT_INJECTION: forcing a failure.
[  229.665826][ T9908] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  229.762553][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1121 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  229.762578][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  229.762587][ T9908] Call Trace:
[  229.762594][ T9908]  <TASK>
[  229.762601][ T9908]  dump_stack_lvl+0x241/0x360
[  229.762633][ T9908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.762654][ T9908]  ? __pfx__printk+0x10/0x10
[  229.762688][ T9908]  should_fail_ex+0x424/0x570
[  229.762713][ T9908]  _copy_to_user+0x31/0xb0
[  229.762734][ T9908]  bpf_verifier_vlog+0x4c6/0x900
[  229.762772][ T9908]  __btf_verifier_log+0xd7/0x120
[  229.762791][ T9908]  ? btf_parse_hdr+0x219/0x710
[  229.762810][ T9908]  ? __pfx___btf_verifier_log+0x10/0x10
[  229.762832][ T9908]  ? btf_parse_hdr+0x1e3/0x710
[  229.762855][ T9908]  btf_parse_hdr+0x2a3/0x710
[  229.762880][ T9908]  btf_new_fd+0x38d/0xcf0
[  229.762911][ T9908]  ? __pfx_btf_new_fd+0x10/0x10
[  229.762935][ T9908]  ? bpf_btf_load+0xcf/0x1a0
[  229.762955][ T9908]  __sys_bpf+0x72f/0x8b0
[  229.762974][ T9908]  ? __pfx___sys_bpf+0x10/0x10
[  229.763003][ T9908]  ? ksys_write+0x275/0x2d0
[  229.763030][ T9908]  __x64_sys_bpf+0x7c/0x90
[  229.763057][ T9908]  do_syscall_64+0xf3/0x230
[  229.763072][ T9908]  ? clear_bhb_loop+0x45/0xa0
[  229.763088][ T9908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.763100][ T9908] RIP: 0033:0x7fcd3ed8d169
[  229.763115][ T9908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.763125][ T9908] RSP: 002b:00007fcd3fc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  229.763140][ T9908] RAX: ffffffffffffffda RBX: 00007fcd3efa5fa0 RCX: 00007fcd3ed8d169
[  229.763151][ T9908] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  229.763160][ T9908] RBP: 00007fcd3fc53090 R08: 0000000000000000 R09: 0000000000000000
[  229.763168][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.763175][ T9908] R13: 0000000000000001 R14: 00007fcd3efa5fa0 R15: 00007ffcd4197f48
[  229.763200][ T9908]  </TASK>
[  230.046041][ T9907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.089643][ T9907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.231540][ T9907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.317635][ T9907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.399228][ T9938] x_tables: duplicate underflow at hook 3
[  230.462107][ T9907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.507352][ T9907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.523486][ T9946] netlink: 'syz.0.1132': attribute type 15 has an invalid length.
[  230.620125][ T9950] FAULT_INJECTION: forcing a failure.
[  230.620125][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.646236][ T9950] CPU: 1 UID: 0 PID: 9950 Comm: syz.4.1134 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  230.646262][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  230.646271][ T9950] Call Trace:
[  230.646278][ T9950]  <TASK>
[  230.646285][ T9950]  dump_stack_lvl+0x241/0x360
[  230.646315][ T9950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.646337][ T9950]  ? __pfx__printk+0x10/0x10
[  230.646370][ T9950]  should_fail_ex+0x424/0x570
[  230.646401][ T9950]  _copy_to_user+0x31/0xb0
[  230.646424][ T9950]  bpf_verifier_vlog+0x4c6/0x900
[  230.646461][ T9950]  __btf_verifier_log+0xd7/0x120
[  230.646481][ T9950]  ? bpf_verifier_vlog+0x4d3/0x900
[  230.646502][ T9950]  ? __pfx___btf_verifier_log+0x10/0x10
[  230.646526][ T9950]  ? btf_parse_hdr+0x1e3/0x710
[  230.646550][ T9950]  btf_parse_hdr+0x2ce/0x710
[  230.646574][ T9950]  btf_new_fd+0x38d/0xcf0
[  230.646605][ T9950]  ? __pfx_btf_new_fd+0x10/0x10
[  230.646631][ T9950]  ? bpf_btf_load+0xcf/0x1a0
[  230.646651][ T9950]  __sys_bpf+0x72f/0x8b0
[  230.646669][ T9950]  ? __pfx___sys_bpf+0x10/0x10
[  230.646699][ T9950]  ? ksys_write+0x275/0x2d0
[  230.646731][ T9950]  __x64_sys_bpf+0x7c/0x90
[  230.646755][ T9950]  do_syscall_64+0xf3/0x230
[  230.646772][ T9950]  ? clear_bhb_loop+0x45/0xa0
[  230.646792][ T9950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.646807][ T9950] RIP: 0033:0x7f702e98d169
[  230.646822][ T9950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.646834][ T9950] RSP: 002b:00007f702f850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  230.646853][ T9950] RAX: ffffffffffffffda RBX: 00007f702eba5fa0 RCX: 00007f702e98d169
[  230.646864][ T9950] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  230.646873][ T9950] RBP: 00007f702f850090 R08: 0000000000000000 R09: 0000000000000000
[  230.646883][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.646892][ T9950] R13: 0000000000000001 R14: 00007f702eba5fa0 R15: 00007ffe1808b258
[  230.646920][ T9950]  </TASK>
[  230.855077][   T56] Bluetooth: hci0: command tx timeout
[  230.862664][ T9907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  230.895878][ T9907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.137677][ T9907] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  231.165813][ T9907] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.185488][ T9968] netlink: 'syz.0.1139': attribute type 5 has an invalid length.
[  231.201715][ T9907] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  231.212126][ T9907] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.250674][ T9907] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  231.275561][ T9907] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.317775][ T9907] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  231.328281][ T9907] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.497244][ T9987] __nla_validate_parse: 35 callbacks suppressed
[  231.497261][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'.
[  231.524278][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  231.525830][ T9982] netem: incorrect gi model size
[  231.670472][ T9997] FAULT_INJECTION: forcing a failure.
[  231.670472][ T9997] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.689103][ T9997] CPU: 1 UID: 0 PID: 9997 Comm: syz.4.1146 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  231.689129][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  231.689139][ T9997] Call Trace:
[  231.689146][ T9997]  <TASK>
[  231.689153][ T9997]  dump_stack_lvl+0x241/0x360
[  231.689183][ T9997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.689206][ T9997]  ? __pfx__printk+0x10/0x10
[  231.689240][ T9997]  should_fail_ex+0x424/0x570
[  231.689270][ T9997]  _copy_to_user+0x31/0xb0
[  231.689294][ T9997]  bpf_verifier_vlog+0x4c6/0x900
[  231.689330][ T9997]  __btf_verifier_log+0xd7/0x120
[  231.689350][ T9997]  ? bpf_verifier_vlog+0x4d3/0x900
[  231.689372][ T9997]  ? __pfx___btf_verifier_log+0x10/0x10
[  231.689395][ T9997]  ? btf_parse_hdr+0x1e3/0x710
[  231.689420][ T9997]  btf_parse_hdr+0x2f9/0x710
[  231.689445][ T9997]  btf_new_fd+0x38d/0xcf0
[  231.689476][ T9997]  ? __pfx_btf_new_fd+0x10/0x10
[  231.689501][ T9997]  ? bpf_btf_load+0xcf/0x1a0
[  231.689520][ T9997]  __sys_bpf+0x72f/0x8b0
[  231.689539][ T9997]  ? __pfx___sys_bpf+0x10/0x10
[  231.689568][ T9997]  ? ksys_write+0x275/0x2d0
[  231.689600][ T9997]  __x64_sys_bpf+0x7c/0x90
[  231.689624][ T9997]  do_syscall_64+0xf3/0x230
[  231.689641][ T9997]  ? clear_bhb_loop+0x45/0xa0
[  231.689661][ T9997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.689676][ T9997] RIP: 0033:0x7f702e98d169
[  231.689691][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.689704][ T9997] RSP: 002b:00007f702f850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  231.689722][ T9997] RAX: ffffffffffffffda RBX: 00007f702eba5fa0 RCX: 00007f702e98d169
[  231.689734][ T9997] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  231.689744][ T9997] RBP: 00007f702f850090 R08: 0000000000000000 R09: 0000000000000000
[  231.689753][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.689762][ T9997] R13: 0000000000000001 R14: 00007f702eba5fa0 R15: 00007ffe1808b258
[  231.689787][ T9997]  </TASK>
[  231.948595][T10003] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1149'.
[  232.383384][T10009] netlink: 'syz.1.1151': attribute type 29 has an invalid length.
[  232.396650][T10009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1151'.
[  232.473476][T10016] team0: Device ipvlan2 failed to register rx_handler
[  232.579473][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.598806][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'.
[  232.642861][T10021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.679696][T10028] FAULT_INJECTION: forcing a failure.
[  232.679696][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.696672][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.3.1159 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  232.696699][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  232.696708][T10028] Call Trace:
[  232.696716][T10028]  <TASK>
[  232.696723][T10028]  dump_stack_lvl+0x241/0x360
[  232.696755][T10028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.696777][T10028]  ? __pfx__printk+0x10/0x10
[  232.696812][T10028]  should_fail_ex+0x424/0x570
[  232.696842][T10028]  _copy_to_user+0x31/0xb0
[  232.696865][T10028]  bpf_verifier_vlog+0x4c6/0x900
[  232.696910][T10028]  __btf_verifier_log+0xd7/0x120
[  232.696930][T10028]  ? bpf_verifier_vlog+0x4d3/0x900
[  232.696952][T10028]  ? __pfx___btf_verifier_log+0x10/0x10
[  232.696975][T10028]  ? btf_parse_hdr+0x1e3/0x710
[  232.697000][T10028]  btf_parse_hdr+0x323/0x710
[  232.697025][T10028]  btf_new_fd+0x38d/0xcf0
[  232.697056][T10028]  ? __pfx_btf_new_fd+0x10/0x10
[  232.697082][T10028]  ? bpf_btf_load+0xcf/0x1a0
[  232.697102][T10028]  __sys_bpf+0x72f/0x8b0
[  232.697120][T10028]  ? __pfx___sys_bpf+0x10/0x10
[  232.697150][T10028]  ? ksys_write+0x275/0x2d0
[  232.697182][T10028]  __x64_sys_bpf+0x7c/0x90
[  232.697206][T10028]  do_syscall_64+0xf3/0x230
[  232.697223][T10028]  ? clear_bhb_loop+0x45/0xa0
[  232.697243][T10028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.697258][T10028] RIP: 0033:0x7fa66bd8d169
[  232.697273][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.697287][T10028] RSP: 002b:00007fa66cc2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  232.697305][T10028] RAX: ffffffffffffffda RBX: 00007fa66bfa5fa0 RCX: 00007fa66bd8d169
[  232.697316][T10028] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  232.697327][T10028] RBP: 00007fa66cc2c090 R08: 0000000000000000 R09: 0000000000000000
[  232.697337][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.697346][T10028] R13: 0000000000000001 R14: 00007fa66bfa5fa0 R15: 00007fff8586ede8
[  232.697374][T10028]  </TASK>
[  233.135563][T10030] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  233.178694][T10050] macsec0: left allmulticast mode
[  233.191395][T10050] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  233.208841][T10050] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  233.216426][T10050] macsec1: left promiscuous mode
[  233.221898][T10050] macsec1: left allmulticast mode
[  233.224163][T10057] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1160'.
[  233.307547][T10057] batadv2: entered promiscuous mode
[  233.320664][T10057] batadv2: entered allmulticast mode
[  233.600297][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'.
[  233.721288][T10081] FAULT_INJECTION: forcing a failure.
[  233.721288][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.771009][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.2.1173 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  233.771042][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  233.771051][T10081] Call Trace:
[  233.771058][T10081]  <TASK>
[  233.771066][T10081]  dump_stack_lvl+0x241/0x360
[  233.771098][T10081]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.771120][T10081]  ? __pfx__printk+0x10/0x10
[  233.771154][T10081]  should_fail_ex+0x424/0x570
[  233.771183][T10081]  _copy_to_user+0x31/0xb0
[  233.771207][T10081]  bpf_verifier_vlog+0x4c6/0x900
[  233.771241][T10081]  __btf_verifier_log+0xd7/0x120
[  233.771258][T10081]  ? bpf_verifier_vlog+0x4d3/0x900
[  233.771278][T10081]  ? __pfx___btf_verifier_log+0x10/0x10
[  233.771299][T10081]  ? btf_parse_hdr+0x1e3/0x710
[  233.771321][T10081]  btf_parse_hdr+0x34d/0x710
[  233.771344][T10081]  btf_new_fd+0x38d/0xcf0
[  233.771373][T10081]  ? __pfx_btf_new_fd+0x10/0x10
[  233.771398][T10081]  ? bpf_btf_load+0xcf/0x1a0
[  233.771419][T10081]  __sys_bpf+0x72f/0x8b0
[  233.771437][T10081]  ? __pfx___sys_bpf+0x10/0x10
[  233.771466][T10081]  ? ksys_write+0x275/0x2d0
[  233.771496][T10081]  __x64_sys_bpf+0x7c/0x90
[  233.771519][T10081]  do_syscall_64+0xf3/0x230
[  233.771535][T10081]  ? clear_bhb_loop+0x45/0xa0
[  233.771555][T10081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.771570][T10081] RIP: 0033:0x7f000b98d169
[  233.771584][T10081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.771596][T10081] RSP: 002b:00007f000c828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  233.771613][T10081] RAX: ffffffffffffffda RBX: 00007f000bba5fa0 RCX: 00007f000b98d169
[  233.771623][T10081] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  233.771633][T10081] RBP: 00007f000c828090 R08: 0000000000000000 R09: 0000000000000000
[  233.771641][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  233.771649][T10081] R13: 0000000000000001 R14: 00007f000bba5fa0 R15: 00007ffebe484d98
[  233.771676][T10081]  </TASK>
[  234.039459][T10083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1175'.
[  234.051165][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'.
[  234.060650][T10083] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1175'.
[  234.207808][ T9205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.212251][T10095] netlink: 'syz.1.1179': attribute type 10 has an invalid length.
[  234.223985][ T9205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.226312][T10096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.246363][T10095] lo: entered promiscuous mode
[  234.257003][T10095] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  234.387551][T10111] syz.4.1180 uses old SIOCAX25GETINFO
[  234.449681][T10112] lo: left promiscuous mode
[  234.678508][T10112] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.686511][T10112] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.846023][T10127] ieee802154 phy0 wpan0: encryption failed: -126
[  234.864737][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.889027][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.950822][T10112] 0·: left allmulticast mode
[  235.148458][T10112] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.192535][T10112] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.202073][T10112] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.227056][T10112] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.318643][T10140] FAULT_INJECTION: forcing a failure.
[  235.318643][T10140] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.337733][T10140] CPU: 0 UID: 0 PID: 10140 Comm: syz.0.1188 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  235.337759][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  235.337768][T10140] Call Trace:
[  235.337775][T10140]  <TASK>
[  235.337782][T10140]  dump_stack_lvl+0x241/0x360
[  235.337812][T10140]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.337834][T10140]  ? __pfx__printk+0x10/0x10
[  235.337868][T10140]  should_fail_ex+0x424/0x570
[  235.337897][T10140]  _copy_to_user+0x31/0xb0
[  235.337926][T10140]  bpf_verifier_vlog+0x4c6/0x900
[  235.337960][T10140]  __btf_verifier_log+0xd7/0x120
[  235.337978][T10140]  ? bpf_verifier_vlog+0x4d3/0x900
[  235.338000][T10140]  ? __pfx___btf_verifier_log+0x10/0x10
[  235.338022][T10140]  ? btf_parse_hdr+0x1e3/0x710
[  235.338047][T10140]  btf_parse_hdr+0x377/0x710
[  235.338073][T10140]  btf_new_fd+0x38d/0xcf0
[  235.338103][T10140]  ? __pfx_btf_new_fd+0x10/0x10
[  235.338132][T10140]  ? bpf_btf_load+0xcf/0x1a0
[  235.338153][T10140]  __sys_bpf+0x72f/0x8b0
[  235.338172][T10140]  ? __pfx___sys_bpf+0x10/0x10
[  235.338202][T10140]  ? ksys_write+0x275/0x2d0
[  235.338234][T10140]  __x64_sys_bpf+0x7c/0x90
[  235.338259][T10140]  do_syscall_64+0xf3/0x230
[  235.338276][T10140]  ? clear_bhb_loop+0x45/0xa0
[  235.338296][T10140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.338311][T10140] RIP: 0033:0x7fcd3ed8d169
[  235.338326][T10140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.338338][T10140] RSP: 002b:00007fcd3fc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  235.338356][T10140] RAX: ffffffffffffffda RBX: 00007fcd3efa5fa0 RCX: 00007fcd3ed8d169
[  235.338368][T10140] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  235.338379][T10140] RBP: 00007fcd3fc53090 R08: 0000000000000000 R09: 0000000000000000
[  235.338389][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  235.338398][T10140] R13: 0000000000000001 R14: 00007fcd3efa5fa0 R15: 00007ffcd4197f48
[  235.338426][T10140]  </TASK>
[  235.584823][T10112] ip6tnl1: left promiscuous mode
[  235.595437][T10112] ip6tnl1: left allmulticast mode
[  235.613470][T10112] bond1: left promiscuous mode
[  235.618331][T10112] bond1: left allmulticast mode
[  235.628107][T10112] bond2: left promiscuous mode
[  235.632983][T10112] bridge3: left promiscuous mode
[  235.677382][T10130] bridge3: entered promiscuous mode
[  235.690983][T10130] bridge3: entered allmulticast mode
[  235.714939][T10130] team0: Port device bridge3 added
[  235.721266][T10128] pim6reg1: entered promiscuous mode
[  235.728917][T10128] pim6reg1: entered allmulticast mode
[  235.985458][T10165] netlink: 'syz.2.1195': attribute type 1 has an invalid length.
[  236.110945][T10165] 8021q: adding VLAN 0 to HW filter on device bond4
[  236.153226][T10169] bond4: (slave gretap2): making interface the new active one
[  236.174569][T10169] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  236.184328][T10158] lo speed is unknown, defaulting to 1000
[  236.195608][T10175] x_tables: duplicate underflow at hook 1
[  236.591948][T10198] lo speed is unknown, defaulting to 1000
[  236.690895][T10202] lo speed is unknown, defaulting to 1000
[  236.696670][T10158] lo speed is unknown, defaulting to 1000
[  236.726719][T10205] netlink: 'syz.4.1206': attribute type 1 has an invalid length.
[  236.738244][T10205] __nla_validate_parse: 8 callbacks suppressed
[  236.738258][T10205] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1206'.
[  236.762696][T10204] netlink: 'syz.4.1206': attribute type 1 has an invalid length.
[  236.796461][T10204] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1206'.
[  237.114347][T10202] lo speed is unknown, defaulting to 1000
[  237.165231][T10198] lo speed is unknown, defaulting to 1000
[  237.459865][T10217] syz.3.1209: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  237.475443][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.3.1209 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  237.475468][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  237.475489][T10217] Call Trace:
[  237.475497][T10217]  <TASK>
[  237.475505][T10217]  dump_stack_lvl+0x241/0x360
[  237.475537][T10217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.475560][T10217]  ? __pfx__printk+0x10/0x10
[  237.475582][T10217]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  237.475607][T10217]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  237.475630][T10217]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  237.475649][T10217]  warn_alloc+0x27c/0x410
[  237.475664][T10217]  ? __vmalloc_node_range_noprof+0x108/0x1390
[  237.475677][T10217]  ? __pfx_warn_alloc+0x10/0x10
[  237.475693][T10217]  ? kasan_save_track+0x3f/0x80
[  237.475708][T10217]  ? __kasan_kmalloc+0x9d/0xb0
[  237.475726][T10217]  ? xsk_setsockopt+0x449/0x840
[  237.475746][T10217]  ? do_sock_setsockopt+0x3b1/0x710
[  237.475767][T10217]  ? __x64_sys_setsockopt+0x1ee/0x280
[  237.475786][T10217]  ? do_syscall_64+0xf3/0x230
[  237.475801][T10217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.475826][T10217]  __vmalloc_node_range_noprof+0x128/0x1390
[  237.475872][T10217]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  237.475892][T10217]  ? __kasan_kmalloc+0x9d/0xb0
[  237.475917][T10217]  vmalloc_user_noprof+0x74/0x80
[  237.475932][T10217]  ? xskq_create+0xb6/0x170
[  237.475955][T10217]  xskq_create+0xb6/0x170
[  237.475979][T10217]  xsk_init_queue+0xa1/0x100
[  237.476001][T10217]  xsk_setsockopt+0x449/0x840
[  237.476024][T10217]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.476043][T10217]  ? __lock_acquire+0xad5/0xd80
[  237.476060][T10217]  ? __pfx_aa_sk_perm+0x10/0x10
[  237.476082][T10217]  ? aa_sock_opt_perm+0x79/0x120
[  237.476110][T10217]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.476132][T10217]  do_sock_setsockopt+0x3b1/0x710
[  237.476160][T10217]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  237.476180][T10217]  ? __fget_files+0x2a/0x420
[  237.476199][T10217]  ? __fget_files+0x39d/0x420
[  237.476213][T10217]  ? __fget_files+0x2a/0x420
[  237.476237][T10217]  __x64_sys_setsockopt+0x1ee/0x280
[  237.476269][T10217]  do_syscall_64+0xf3/0x230
[  237.476287][T10217]  ? clear_bhb_loop+0x45/0xa0
[  237.476307][T10217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.476322][T10217] RIP: 0033:0x7fa66bd8d169
[  237.476338][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.476352][T10217] RSP: 002b:00007fa66cc2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.476371][T10217] RAX: ffffffffffffffda RBX: 00007fa66bfa5fa0 RCX: 00007fa66bd8d169
[  237.476383][T10217] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  237.476393][T10217] RBP: 00007fa66be0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  237.476404][T10217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.476415][T10217] R13: 0000000000000000 R14: 00007fa66bfa5fa0 R15: 00007fff8586ede8
[  237.476444][T10217]  </TASK>
[  237.476451][T10217] Mem-Info:
[  237.782324][T10217] active_anon:8368 inactive_anon:0 isolated_anon:0
[  237.782324][T10217]  active_file:1523 inactive_file:38363 isolated_file:0
[  237.782324][T10217]  unevictable:768 dirty:206 writeback:0
[  237.782324][T10217]  slab_reclaimable:10445 slab_unreclaimable:104535
[  237.782324][T10217]  mapped:31574 shmem:1430 pagetables:810
[  237.782324][T10217]  sec_pagetables:0 bounce:0
[  237.782324][T10217]  kernel_misc_reclaimable:0
[  237.782324][T10217]  free:1327676 free_pcp:727 free_cma:0
[  237.827958][T10217] Node 0 active_anon:33472kB inactive_anon:0kB active_file:6092kB inactive_file:153380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126296kB dirty:824kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12472kB pagetables:3240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  237.861558][T10217] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  237.907638][T10217] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  237.937722][T10217] lowmem_reserve[]: 0 2487 2487 2487 2487
[  237.944021][T10217] Node 0 DMA32 free:1387740kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:33476kB inactive_anon:0kB active_file:6092kB inactive_file:153292kB unevictable:1536kB writepending:852kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:2196kB local_pcp:0kB free_cma:0kB
[  238.012304][T10217] lowmem_reserve[]: 0 0 0 0 0
[  238.020895][T10217] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  238.049371][T10217] lowmem_reserve[]: 0 0 0 0 0
[  238.054257][T10217] Node 1 Normal free:3908420kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  238.122813][T10217] lowmem_reserve[]: 0 0 0 0 0
[  238.127585][T10217] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  238.148840][T10217] Node 0 DMA32: 326*4kB (UME) 679*8kB (UME) 410*16kB (UME) 1066*32kB (UME) 210*64kB (UME) 34*128kB (UME) 10*256kB (UM) 49*512kB (UME) 27*1024kB (UM) 7*2048kB (UM) 307*4096kB (UM) = 1392304kB
[  238.183278][T10217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  238.201701][T10217] Node 1 Normal: 195*4kB (UME) 53*8kB (UME) 43*16kB (UME) 198*32kB (UME) 95*64kB (UME) 25*128kB (UME) 9*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3908452kB
[  238.207125][T10228] netlink: 'syz.1.1211': attribute type 11 has an invalid length.
[  238.237036][T10228] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1211'.
[  238.253325][T10230] netlink: 'syz.4.1212': attribute type 9 has an invalid length.
[  238.261071][T10230] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.1212'.
[  238.272482][T10217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  238.302394][T10217] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.311731][T10217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  238.331921][T10228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1211'.
[  238.355423][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'.
[  238.374636][T10217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.384364][T10217] 41318 total pagecache pages
[  238.389075][T10217] 0 pages in swap cache
[  238.396476][T10217] Free swap  = 124996kB
[  238.438483][T10217] Total swap = 124996kB
[  238.455482][T10230] x_tables: duplicate underflow at hook 2
[  238.473369][T10217] 2097051 pages RAM
[  238.489647][T10217] 0 pages HighMem/MovableOnly
[  238.517732][T10217] 428567 pages reserved
[  238.550584][T10217] 0 pages cma reserved
[  238.597532][T10241] netlink: 'syz.1.1214': attribute type 39 has an invalid length.
[  238.677570][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'.
[  238.767327][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  238.777880][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  239.018932][T10258] ipip0: entered promiscuous mode
[  239.135456][T10270] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1225'.
[  239.735530][T10309] bond3 (unregistering): Released all slaves
[  239.830275][T10314] nlmon0: Master is either lo or non-ether device
[  240.103387][T10335] x_tables: duplicate underflow at hook 1
[  240.531365][T10370] GUP no longer grows the stack in syz.3.1250 (10370): 200000006000-20000000a000 (200000005000)
[  240.546203][T10370] CPU: 0 UID: 0 PID: 10370 Comm: syz.3.1250 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  240.546230][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  240.546240][T10370] Call Trace:
[  240.546265][T10370]  <TASK>
[  240.546273][T10370]  dump_stack_lvl+0x241/0x360
[  240.546313][T10370]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.546336][T10370]  ? __pfx__printk+0x10/0x10
[  240.546354][T10370]  ? find_vma+0xfa/0x170
[  240.546392][T10370]  __get_user_pages+0x3b46/0x4180
[  240.546455][T10370]  ? __lock_acquire+0xad5/0xd80
[  240.546476][T10370]  ? __pfx___get_user_pages+0x10/0x10
[  240.546499][T10370]  ? __gup_longterm_locked+0xd86/0x1850
[  240.546525][T10370]  ? __pfx_down_read_killable+0x10/0x10
[  240.546547][T10370]  ? __lock_acquire+0xad5/0xd80
[  240.546582][T10370]  __gup_longterm_locked+0xec1/0x1850
[  240.546611][T10370]  ? try_get_folio+0xf2/0x680
[  240.546631][T10370]  ? try_get_folio+0xf2/0x680
[  240.546657][T10370]  ? try_grab_folio_fast+0x1d6/0x500
[  240.546671][T10370]  ? __pfx___gup_longterm_locked+0x10/0x10
[  240.546703][T10370]  ? gup_fast_fallback+0x203f/0x2980
[  240.546730][T10370]  gup_fast_fallback+0x2227/0x2980
[  240.546791][T10370]  ? __pfx_gup_fast_fallback+0x10/0x10
[  240.546824][T10370]  ? cgroup_rstat_updated+0x144/0xc40
[  240.546867][T10370]  ? __lock_acquire+0xad5/0xd80
[  240.546889][T10370]  ? is_valid_gup_args+0x124/0x200
[  240.546916][T10370]  get_user_pages_fast+0xd2/0x160
[  240.546944][T10370]  ? __pfx_get_user_pages_fast+0x10/0x10
[  240.546970][T10370]  ? rcu_is_watching+0x15/0xb0
[  240.546991][T10370]  ? trace_contention_end+0x3c/0x120
[  240.547018][T10370]  __iov_iter_get_pages_alloc+0x39d/0xa90
[  240.547052][T10370]  ? __se_sys_vmsplice+0x4bc/0x1430
[  240.547079][T10370]  iov_iter_get_pages2+0xd1/0x130
[  240.547105][T10370]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  240.547140][T10370]  __se_sys_vmsplice+0x6c6/0x1430
[  240.547187][T10370]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  240.547215][T10370]  ? __pfx_futex_wake+0x10/0x10
[  240.547239][T10370]  ? __lock_acquire+0xad5/0xd80
[  240.547319][T10370]  ? do_syscall_64+0xb6/0x230
[  240.547340][T10370]  do_syscall_64+0xf3/0x230
[  240.547359][T10370]  ? clear_bhb_loop+0x45/0xa0
[  240.547381][T10370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.547398][T10370] RIP: 0033:0x7fa66bd8d169
[  240.547414][T10370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.547428][T10370] RSP: 002b:00007fa66cc2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  240.547447][T10370] RAX: ffffffffffffffda RBX: 00007fa66bfa5fa0 RCX: 00007fa66bd8d169
[  240.547460][T10370] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000012
[  240.547471][T10370] RBP: 00007fa66be0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  240.547482][T10370] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  240.547492][T10370] R13: 0000000000000000 R14: 00007fa66bfa5fa0 R15: 00007fff8586ede8
[  240.547523][T10370]  </TASK>
[  241.048986][T10379] syzkaller1: entered promiscuous mode
[  241.054717][T10379] syzkaller1: entered allmulticast mode
[  241.170022][T10384] 8021q: VLANs not supported on ipvlan1
[  241.248873][T10387] Cannot find add_set index 1 as target
[  241.567975][T10402] lo speed is unknown, defaulting to 1000
[  241.647392][T10408] ip6t_rpfilter: unknown options
[  241.947290][T10422] __nla_validate_parse: 4 callbacks suppressed
[  241.947307][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'.
[  241.993465][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1264'.
[  242.052504][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'.
[  242.061458][T10422] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1264'.
[  242.123096][T10422] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  242.204397][T10427] vxcan3: entered allmulticast mode
[  242.470514][T10449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'.
[  242.504450][T10449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1268'.
[  242.641496][T10402] lo speed is unknown, defaulting to 1000
[  242.797664][T10475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1276'.
[  242.797787][T10470] netlink: 'syz.0.1276': attribute type 16 has an invalid length.
[  242.842976][T10470] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1276'.
[  242.946234][T10475] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1276'.
[  242.956390][T10475] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1276'.
[  242.968799][T10475] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  243.577329][T10513] vlan2: entered promiscuous mode
[  243.585637][T10513] bond0: (slave vlan2): Opening slave failed
[  243.761179][T10528] sch_fq: defrate 2048 ignored.
[  244.287793][T10548] lo speed is unknown, defaulting to 1000
[  244.551653][T10548] lo speed is unknown, defaulting to 1000
[  244.747601][T10567] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  244.762658][T10567] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  244.771326][T10567] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  244.779735][T10567] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  245.068063][   T30] audit: type=1800 audit(1743697405.408:5): pid=10582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1305" name="memory.events" dev="tmpfs" ino=1323 res=0 errno=0
[  245.155577][T10572] lo speed is unknown, defaulting to 1000
[  245.162070][   T30] audit: type=1804 audit(1743697405.508:6): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1305" name="/newroot/254/memory.events" dev="tmpfs" ino=1323 res=1 errno=0
[  245.218776][T10588] netlink: 'syz.3.1307': attribute type 2 has an invalid length.
[  245.250777][T10590] bond0: option miimon: invalid value (18446744072363079428)
[  245.259716][T10590] bond0: option miimon: allowed values 0 - 2147483647
[  245.365554][T10599] FAULT_INJECTION: forcing a failure.
[  245.365554][T10599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.379770][T10590] xt_CT: No such helper "netbios-ns"
[  245.430237][T10599] CPU: 1 UID: 0 PID: 10599 Comm: syz.4.1310 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  245.430265][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  245.430288][T10599] Call Trace:
[  245.430295][T10599]  <TASK>
[  245.430303][T10599]  dump_stack_lvl+0x241/0x360
[  245.430333][T10599]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.430356][T10599]  ? __pfx__printk+0x10/0x10
[  245.430391][T10599]  should_fail_ex+0x424/0x570
[  245.430421][T10599]  _copy_to_user+0x31/0xb0
[  245.430446][T10599]  bpf_verifier_vlog+0x4c6/0x900
[  245.430480][T10599]  __btf_verifier_log+0xd7/0x120
[  245.430500][T10599]  ? bpf_verifier_vlog+0x4d3/0x900
[  245.430521][T10599]  ? __pfx___btf_verifier_log+0x10/0x10
[  245.430550][T10599]  __btf_verifier_log_type+0x533/0x6c0
[  245.430575][T10599]  ? btf_struct_check_meta+0x3c9/0xcf0
[  245.430591][T10599]  ? sort_r+0x1d16/0x2970
[  245.430610][T10599]  ? __pfx___btf_verifier_log_type+0x10/0x10
[  245.430643][T10599]  btf_struct_check_meta+0x3f7/0xcf0
[  245.430674][T10599]  btf_parse_type_sec+0x4d9/0x2660
[  245.430702][T10599]  ? bpf_verifier_vlog+0x4d3/0x900
[  245.430732][T10599]  ? btf_check_sec_info+0x37d/0x4f0
[  245.430755][T10599]  ? __pfx_btf_parse_type_sec+0x10/0x10
[  245.430779][T10599]  ? btf_parse_str_sec+0x21f/0x2b0
[  245.430802][T10599]  btf_new_fd+0x44c/0xcf0
[  245.430833][T10599]  ? __pfx_btf_new_fd+0x10/0x10
[  245.430860][T10599]  ? bpf_btf_load+0xcf/0x1a0
[  245.430880][T10599]  __sys_bpf+0x72f/0x8b0
[  245.430899][T10599]  ? __pfx___sys_bpf+0x10/0x10
[  245.430929][T10599]  ? ksys_write+0x275/0x2d0
[  245.430961][T10599]  __x64_sys_bpf+0x7c/0x90
[  245.430986][T10599]  do_syscall_64+0xf3/0x230
[  245.431005][T10599]  ? clear_bhb_loop+0x45/0xa0
[  245.431024][T10599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.431040][T10599] RIP: 0033:0x7f702e98d169
[  245.431055][T10599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.431069][T10599] RSP: 002b:00007f702f850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  245.431089][T10599] RAX: ffffffffffffffda RBX: 00007f702eba5fa0 RCX: 00007f702e98d169
[  245.431101][T10599] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  245.431112][T10599] RBP: 00007f702f850090 R08: 0000000000000000 R09: 0000000000000000
[  245.431122][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  245.431132][T10599] R13: 0000000000000001 R14: 00007f702eba5fa0 R15: 00007ffe1808b258
[  245.431167][T10599]  </TASK>
[  245.938674][T10572] lo speed is unknown, defaulting to 1000
[  246.199638][T10623] macsec0: entered promiscuous mode
[  246.206165][T10623] batadv0: entered promiscuous mode
[  246.233401][T10623] batadv0: left promiscuous mode
[  246.409977][T10637] netlink: 'syz.1.1318': attribute type 10 has an invalid length.
[  246.418786][T10637] veth1_macvtap: left promiscuous mode
[  246.427951][T10637] team0: Device veth1_macvtap failed to register rx_handler
[  246.470888][T10645] netlink: 'syz.1.1318': attribute type 11 has an invalid length.
[  246.820850][T10667] lo speed is unknown, defaulting to 1000
[  247.160004][T10679] netlink: 'syz.1.1329': attribute type 1 has an invalid length.
[  247.195169][T10679] 8021q: adding VLAN 0 to HW filter on device bond3
[  247.257990][T10679] bond3: (slave veth5): Enslaving as an active interface with a down link
[  247.296237][T10667] lo speed is unknown, defaulting to 1000
[  247.321153][T10681] bond3: (slave veth7): Enslaving as an active interface with a down link
[  247.344456][T10686] __nla_validate_parse: 12 callbacks suppressed
[  247.344474][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'.
[  247.379072][T10683] vlan2: entered promiscuous mode
[  247.385115][T10683] vlan2: entered allmulticast mode
[  247.392211][T10683] hsr_slave_1: entered allmulticast mode
[  247.428936][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'.
[  247.687916][T10702] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  247.705358][T10698] netlink: zone id is out of range
[  247.792103][T10696] team0 (unregistering): Port device team_slave_0 removed
[  247.823123][T10696] team0 (unregistering): Port device team_slave_1 removed
[  247.848553][T10696] team0 (unregistering): Port device wlan1 removed
[  247.880683][T10696] team0 (unregistering): Port device batadv1 removed
[  247.906587][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'.
[  247.966789][T10704] netlink: 'syz.1.1336': attribute type 1 has an invalid length.
[  248.020864][T10709] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.029961][T10709] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.038989][T10709] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.047914][T10709] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.065097][T10709] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.067084][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'.
[  248.074299][T10709] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.092146][T10709] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.101227][T10709] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.280714][T10722] netlink: 'syz.4.1344': attribute type 1 has an invalid length.
[  248.414716][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'.
[  248.431549][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'.
[  248.613238][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'.
[  248.638439][T10738] syzkaller0: entered promiscuous mode
[  248.652462][T10738] syzkaller0: entered allmulticast mode
[  248.921025][T10764] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1355'.
[  248.949935][T10767] netlink: 'syz.1.1356': attribute type 13 has an invalid length.
[  250.536013][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'.
[  250.693741][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'.
[  251.063383][T10818] IPVS: Error connecting to the multicast addr
[  251.187224][T10826] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  251.198107][T10826] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  251.257381][T10830] ip6tnl2: entered promiscuous mode
[  251.268358][T10830] ip6tnl2: entered allmulticast mode
[  251.316222][T10836] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  251.328525][T10836] gretap1: entered promiscuous mode
[  251.660562][T10856] bridge0: port 1(macsec1) entered blocking state
[  251.667275][T10856] bridge0: port 1(macsec1) entered disabled state
[  251.674938][T10856] macsec1: entered allmulticast mode
[  251.683863][T10856] macsec1: left allmulticast mode
[  251.818244][T10865] netlink: 'syz.1.1385': attribute type 33 has an invalid length.
[  251.895121][T10867] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[  251.995558][T10871] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  252.448992][T10893] Bluetooth: MGMT ver 1.23
[  252.729623][T10904] lo speed is unknown, defaulting to 1000
[  252.776258][T10895] netlink: 'syz.4.1395': attribute type 1 has an invalid length.
[  252.792225][T10895] netlink: 'syz.4.1395': attribute type 2 has an invalid length.
[  252.854095][T10908] netlink: 'syz.3.1398': attribute type 1 has an invalid length.
[  252.988580][T10914] syzkaller1: entered promiscuous mode
[  253.012401][T10914] syzkaller1: entered allmulticast mode
[  253.076455][T10904] lo speed is unknown, defaulting to 1000
[  253.155768][T10921] xt_NFQUEUE: number of total queues is 0
[  253.366121][T10931] ipt_REJECT: TCP_RESET invalid for non-tcp
[  253.460916][T10936] __nla_validate_parse: 11 callbacks suppressed
[  253.460935][T10936] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1405'.
[  253.487753][T10936] unsupported nla_type 65024
[  253.789663][T10952] netlink: 'syz.2.1411': attribute type 4 has an invalid length.
[  253.956552][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'.
[  254.318397][T10983] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  254.326944][T10983] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  254.335843][T10983] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  254.344185][T10983] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  254.352554][T10983] geneve3: entered promiscuous mode
[  254.358133][T10983] geneve3: entered allmulticast mode
[  254.492506][   T56] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  254.547358][T10999] netlink: 'syz.3.1432': attribute type 1 has an invalid length.
[  254.606305][T10999] 8021q: adding VLAN 0 to HW filter on device bond4
[  254.682068][T11002] bond4: (slave gretap1): making interface the new active one
[  254.706468][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1438'.
[  254.715707][T11002] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  254.949604][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'.
[  255.037504][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'.
[  255.151246][T11025] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.159701][T11025] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.168085][T11025] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.176384][T11025] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.198029][T11025] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.207242][T11025] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.216500][T11025] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.225528][T11025] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.516702][T11051] xt_hashlimit: size too large, truncated to 1048576
[  255.687338][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.693975][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.863892][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'.
[  256.299195][T11089] sctp: [Deprecated]: syz.3.1465 (pid 11089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  256.299195][T11089] Use struct sctp_sack_info instead
[  256.715657][T11114] xt_hashlimit: size too large, truncated to 1048576
[  256.974431][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1481'.
[  257.343695][T11154] tipc: Started in network mode
[  257.348622][T11154] tipc: Node identity 7f000001, cluster identity 4711
[  257.382514][T11154] tipc: Enabled bearer <udp:s>, priority 10
[  257.401463][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'.
[  257.574152][T11165] syzkaller1: entered promiscuous mode
[  257.579792][T11165] syzkaller1: entered allmulticast mode
[  257.985789][T11193] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1509'.
[  258.337919][T11216] lo speed is unknown, defaulting to 1000
[  258.505404][ T5919] tipc: Node number set to 2130706433
[  258.574631][T11226] syzkaller1: entered promiscuous mode
[  258.591522][T11226] syzkaller1: entered allmulticast mode
[  258.687907][T11216] lo speed is unknown, defaulting to 1000
[  258.998826][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'.
[  259.023277][T11239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1528'.
[  259.033409][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'.
[  259.043028][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'.
[  259.293690][T11252] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1534'.
[  259.307299][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1534'.
[  259.316563][T11252] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1534'.
[  259.419552][T11256] @: renamed from hsr0
[  259.547068][T11263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1539'.
[  259.857717][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'.
[  259.877988][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'.
[  259.910344][T11287] netlink: 'syz.0.1548': attribute type 1 has an invalid length.
[  260.164484][T11304] ipt_REJECT: TCP_RESET invalid for non-tcp
[  260.279756][T11314] netlink: 'syz.1.1555': attribute type 12 has an invalid length.
[  260.300532][T11314] netlink: 'syz.1.1555': attribute type 29 has an invalid length.
[  260.332334][T11314] netlink: 'syz.1.1555': attribute type 2 has an invalid length.
[  260.382508][T11314] netlink: 'syz.1.1555': attribute type 3 has an invalid length.
[  260.475969][T11317] lo speed is unknown, defaulting to 1000
[  260.505439][T11322] lo speed is unknown, defaulting to 1000
[  261.118929][T11317] lo speed is unknown, defaulting to 1000
[  261.528818][T11350] lo speed is unknown, defaulting to 1000
[  261.778063][T11360] pim6reg: entered allmulticast mode
[  261.796445][T11364] pim6reg: left allmulticast mode
[  261.872013][T11322] lo speed is unknown, defaulting to 1000
[  262.200835][T11384] netlink: 'syz.3.1580': attribute type 1 has an invalid length.
[  262.438169][T11384] 8021q: adding VLAN 0 to HW filter on device bond5
[  262.530840][T11389] bond5: (slave gretap2): making interface the new active one
[  262.543617][T11389] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  262.555995][T11350] lo speed is unknown, defaulting to 1000
[  262.951528][T11411] lo speed is unknown, defaulting to 1000
[  262.989115][T11411] netlink: 'syz.3.1585': attribute type 6 has an invalid length.
[  263.121185][T11417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.128508][T11417] IPv6: NLM_F_CREATE should be set when creating new route
[  263.135855][T11417] IPv6: NLM_F_CREATE should be set when creating new route
[  263.590619][T11414] syzkaller0: entered promiscuous mode
[  263.629951][T11414] syzkaller0: entered allmulticast mode
[  265.323117][T11434] __nla_validate_parse: 17 callbacks suppressed
[  265.323138][T11434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1595'.
[  265.371853][T11437] lo speed is unknown, defaulting to 1000
[  265.706809][T11458] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1601'.
[  265.746716][T11457] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1601'.
[  266.090383][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'.
[  266.133084][T11470] veth1_to_bridge: left allmulticast mode
[  266.170870][T11470] veth1_to_bridge: left promiscuous mode
[  266.185234][T11470] bridge0: port 3(veth1_to_bridge) entered disabled state
[  266.228612][T11470] bridge_slave_1: left allmulticast mode
[  266.234701][T11470] bridge_slave_1: left promiscuous mode
[  266.252547][T11470] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.295083][T11470] bridge_slave_0: left allmulticast mode
[  266.300779][T11470] bridge_slave_0: left promiscuous mode
[  266.337441][T11470] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.765325][T11480] syzkaller0: entered promiscuous mode
[  266.782751][T11480] syzkaller0: entered allmulticast mode
[  266.790017][T11437] lo speed is unknown, defaulting to 1000
[  266.825780][T11485] Bluetooth: MGMT ver 1.23
[  266.951336][T11500] xt_l2tp: missing protocol rule (udp|l2tpip)
[  267.402657][ T8508] IPVS: starting estimator thread 0...
[  267.465358][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1613'.
[  267.492296][T11507] IPVS: using max 33 ests per chain, 79200 per kthread
[  269.017036][T11485] lo speed is unknown, defaulting to 1000
[  269.159239][T11529] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20001
[  269.170895][T11528] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1616'.
[  269.504808][T11542] netlink: 'syz.0.1620': attribute type 4 has an invalid length.
[  269.594244][T11485] lo speed is unknown, defaulting to 1000
[  269.693064][T11548] pim6reg1: entered promiscuous mode
[  269.698634][T11548] pim6reg1: entered allmulticast mode
[  269.706227][T11544] lo speed is unknown, defaulting to 1000
[  269.791579][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'.
[  270.848862][T11555] lo speed is unknown, defaulting to 1000
[  270.855266][T11544] lo speed is unknown, defaulting to 1000
[  270.926496][T11563] netlink: 'syz.0.1627': attribute type 10 has an invalid length.
[  271.235051][T11570] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1628'.
[  271.286844][T11563] team0 (unregistering): Port device team_slave_0 removed
[  271.293007][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'.
[  271.313544][T11572] netlink: 'syz.2.1628': attribute type 30 has an invalid length.
[  271.351494][T11563] team0 (unregistering): Port device team_slave_1 removed
[  271.512285][T11555] lo speed is unknown, defaulting to 1000
[  271.530319][T11572] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.539514][T11572] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.548655][T11572] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.558198][T11572] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.565839][T11576] netlink: 'syz.0.1629': attribute type 4 has an invalid length.
[  271.584904][T11576] netlink: 192668 bytes leftover after parsing attributes in process `syz.0.1629'.
[  271.632071][T11574] lo speed is unknown, defaulting to 1000
[  271.940175][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1632'.
[  271.998253][T11584] ieee802154 phy0 wpan0: encryption failed: -22
[  272.009176][T11588] ieee802154 phy0 wpan0: encryption failed: -22
[  272.100375][T11586] netlink: 'syz.0.1632': attribute type 1 has an invalid length.
[  272.306768][T11596] netlink: 'syz.4.1635': attribute type 39 has an invalid length.
[  272.348357][T11574] lo speed is unknown, defaulting to 1000
[  272.542753][T11602] bond0: (slave ip6gretap1): Releasing backup interface
[  272.822328][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'.
[  272.871820][T11610] netlink: 'syz.2.1637': attribute type 10 has an invalid length.
[  273.105942][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1640'.
[  273.265161][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'.
[  273.284782][T11616] lo speed is unknown, defaulting to 1000
[  273.318630][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1639'.
[  273.465491][T11631] tipc: Can't bind to reserved service type 1
[  273.796770][T11616] nbd: socks must be embedded in a SOCK_ITEM attr
[  274.049868][T11648] netlink: 'syz.4.1647': attribute type 4 has an invalid length.
[  274.117354][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'.
[  274.136029][T11653] vxlan2: entered allmulticast mode
[  274.402699][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[  274.720163][T11697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1654'.
[  275.343329][T11728] netlink: 'syz.3.1668': attribute type 10 has an invalid length.
[  275.422642][T11728] team0: Device dummy0 failed to register rx_handler
[  275.620582][T11739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  275.642690][T11744] netlink: 'syz.3.1671': attribute type 1 has an invalid length.
[  276.170484][T11774] sctp: [Deprecated]: syz.0.1679 (pid 11774) Use of int in max_burst socket option.
[  276.170484][T11774] Use struct sctp_assoc_value instead
[  276.546918][T11810] netlink: 'syz.2.1690': attribute type 1 has an invalid length.
[  276.555391][T11810] netlink: 'syz.2.1690': attribute type 3 has an invalid length.
[  276.563720][T11810] __nla_validate_parse: 5 callbacks suppressed
[  276.563736][T11810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1690'.
[  276.597575][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1690'.
[  276.717543][T11815] lo speed is unknown, defaulting to 1000
[  276.824037][T11822] Timeout policy `syz0' can only be used by L3 protocol number 34888
[  276.953148][T11815] lo speed is unknown, defaulting to 1000
[  277.441606][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'.
[  277.462423][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'.
[  277.856782][T11858] bond2: (slave dummy0): Releasing active interface
[  277.872012][T11862] netlink: 'syz.4.1701': attribute type 9 has an invalid length.
[  277.897869][T11858] bridge_slave_0: left allmulticast mode
[  277.907159][T11858] bridge_slave_0: left promiscuous mode
[  277.919763][T11858] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.948065][T11858] bridge_slave_1: left allmulticast mode
[  277.956591][T11858] bridge_slave_1: left promiscuous mode
[  277.969794][T11858] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.987442][T11858] bond0: (slave bond_slave_0): Releasing backup interface
[  277.996106][T11858] bond_slave_0: left promiscuous mode
[  278.008625][T11858] bond0: (slave bond_slave_1): Releasing backup interface
[  278.016556][T11858] bond_slave_1: left promiscuous mode
[  278.043815][T11858] team0: Port device team_slave_0 removed
[  278.056543][T11858] team0: Port device team_slave_1 removed
[  278.062814][T11858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.070517][T11858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.082006][T11858] bond0: (slave wlan1): Releasing backup interface
[  278.090695][T11858] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  278.101115][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[  278.103851][T11858] batman_adv: batadv0: Removing interface: gretap1
[  278.117734][T11858] bond4: (slave gretap2): Releasing active interface
[  278.253124][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'.
[  278.263138][T11887] x_tables: unsorted entry at hook 2
[  278.406121][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'.
[  278.575487][T11903] syzkaller1: entered promiscuous mode
[  278.588065][T11903] syzkaller1: entered allmulticast mode
[  278.636388][ T5919] hid-multitouch 0005:0457:0009.0003: unknown main item tag 0x0
[  278.649879][ T5919] hid-multitouch 0005:0457:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  278.781659][T11914] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  278.836524][T11916] bond0: (slave bond_slave_1): Releasing backup interface
[  278.908585][T11916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.929237][T11916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.947475][T11916] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  278.954893][T11916] batman_adv: batadv0: Removing interface: ip6gretap1
[  278.968999][ T8508] lo speed is unknown, defaulting to 1000
[  278.972100][T11931] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  278.983102][T11922] IPVS: stopping backup sync thread 11931 ...
[  279.084266][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'.
[  279.151627][T11938] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  279.169616][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'.
[  279.205765][T11938] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  279.413793][T11960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.452875][T11962] FAULT_INJECTION: forcing a failure.
[  279.452875][T11962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.492247][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.3.1733 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  279.492274][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  279.492284][T11962] Call Trace:
[  279.492291][T11962]  <TASK>
[  279.492299][T11962]  dump_stack_lvl+0x241/0x360
[  279.492328][T11962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.492349][T11962]  ? __pfx__printk+0x10/0x10
[  279.492381][T11962]  should_fail_ex+0x424/0x570
[  279.492417][T11962]  _copy_from_user+0x2d/0xb0
[  279.492438][T11962]  copy_msghdr_from_user+0xb3/0x580
[  279.492463][T11962]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  279.492479][T11962]  ? __fget_files+0x2a/0x420
[  279.492497][T11962]  ? __fget_files+0x2a/0x420
[  279.492518][T11962]  __sys_sendmsg+0x20a/0x360
[  279.492537][T11962]  ? __pfx___sys_sendmsg+0x10/0x10
[  279.492603][T11962]  ? do_syscall_64+0xb6/0x230
[  279.492622][T11962]  do_syscall_64+0xf3/0x230
[  279.492637][T11962]  ? clear_bhb_loop+0x45/0xa0
[  279.492656][T11962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.492671][T11962] RIP: 0033:0x7fa66bd8d169
[  279.492685][T11962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  279.492697][T11962] RSP: 002b:00007fa66cc2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  279.492716][T11962] RAX: ffffffffffffffda RBX: 00007fa66bfa5fa0 RCX: 00007fa66bd8d169
[  279.492727][T11962] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  279.492736][T11962] RBP: 00007fa66cc2c090 R08: 0000000000000000 R09: 0000000000000000
[  279.492746][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.492755][T11962] R13: 0000000000000000 R14: 00007fa66bfa5fa0 R15: 00007fff8586ede8
[  279.492782][T11962]  </TASK>
[  279.841247][T11983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  279.912432][T11990] netlink: 'syz.4.1736': attribute type 16 has an invalid length.
[  279.921299][T11990] netlink: 'syz.4.1736': attribute type 17 has an invalid length.
[  279.989218][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1743'.
[  279.998564][T11990] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.000340][T11990] 8021q: adding VLAN 0 to HW filter on device team0
[  280.020091][T11990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.043180][T11988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.789812][T12015] FAULT_INJECTION: forcing a failure.
[  280.789812][T12015] name failslab, interval 1, probability 0, space 0, times 0
[  280.819513][T12015] CPU: 1 UID: 0 PID: 12015 Comm: syz.2.1749 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  280.819540][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  280.819549][T12015] Call Trace:
[  280.819556][T12015]  <TASK>
[  280.819563][T12015]  dump_stack_lvl+0x241/0x360
[  280.819592][T12015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.819613][T12015]  ? __pfx__printk+0x10/0x10
[  280.819640][T12015]  ? __pfx___might_resched+0x10/0x10
[  280.819663][T12015]  should_fail_ex+0x424/0x570
[  280.819693][T12015]  should_failslab+0xac/0x100
[  280.819717][T12015]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  280.819739][T12015]  ? __alloc_skb+0x1c2/0x480
[  280.819765][T12015]  __alloc_skb+0x1c2/0x480
[  280.819792][T12015]  ? __pfx___alloc_skb+0x10/0x10
[  280.819816][T12015]  ? netlink_autobind+0xd6/0x2f0
[  280.819834][T12015]  ? netlink_autobind+0x2b0/0x2f0
[  280.819858][T12015]  netlink_sendmsg+0x638/0xcd0
[  280.819890][T12015]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.819914][T12015]  ? aa_sock_msg_perm+0x91/0x160
[  280.819939][T12015]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.819955][T12015]  __sock_sendmsg+0x221/0x270
[  280.819976][T12015]  ____sys_sendmsg+0x523/0x860
[  280.820001][T12015]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.820012][T12015]  ? __fget_files+0x2a/0x420
[  280.820029][T12015]  ? __fget_files+0x2a/0x420
[  280.820052][T12015]  __sys_sendmsg+0x271/0x360
[  280.820074][T12015]  ? __pfx___sys_sendmsg+0x10/0x10
[  280.820142][T12015]  ? do_syscall_64+0xb6/0x230
[  280.820162][T12015]  do_syscall_64+0xf3/0x230
[  280.820178][T12015]  ? clear_bhb_loop+0x45/0xa0
[  280.820195][T12015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.820210][T12015] RIP: 0033:0x7f000b98d169
[  280.820225][T12015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.820238][T12015] RSP: 002b:00007f000c828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.820256][T12015] RAX: ffffffffffffffda RBX: 00007f000bba5fa0 RCX: 00007f000b98d169
[  280.820267][T12015] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  280.820278][T12015] RBP: 00007f000c828090 R08: 0000000000000000 R09: 0000000000000000
[  280.820296][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.820306][T12015] R13: 0000000000000000 R14: 00007f000bba5fa0 R15: 00007ffebe484d98
[  280.820332][T12015]  </TASK>
[  281.121610][T12026] netlink: 'syz.1.1746': attribute type 10 has an invalid length.
[  281.145734][T12026] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  281.262638][T12035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1754'.
[  281.264162][T12033] netlink: 'syz.4.1753': attribute type 16 has an invalid length.
[  281.303372][T12033] netlink: 'syz.4.1753': attribute type 17 has an invalid length.
[  281.335192][T12033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.382692][T12037] vlan0: entered promiscuous mode
[  281.387772][T12037] bond0: entered promiscuous mode
[  281.666736][T12053] lo speed is unknown, defaulting to 1000
[  283.499929][T12077] syz.0.1761: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  283.517980][T12077] CPU: 0 UID: 0 PID: 12077 Comm: syz.0.1761 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  283.517996][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  283.518002][T12077] Call Trace:
[  283.518007][T12077]  <TASK>
[  283.518011][T12077]  dump_stack_lvl+0x241/0x360
[  283.518032][T12077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.518045][T12077]  ? __pfx__printk+0x10/0x10
[  283.518058][T12077]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  283.518077][T12077]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  283.518090][T12077]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  283.518105][T12077]  warn_alloc+0x27c/0x410
[  283.518119][T12077]  ? __pfx_warn_alloc+0x10/0x10
[  283.518132][T12077]  ? xp_create_and_assign_umem+0x17b/0xc60
[  283.518142][T12077]  ? __get_vm_area_node+0x1c8/0x2d0
[  283.518156][T12077]  ? __get_vm_area_node+0x25c/0x2d0
[  283.518173][T12077]  __vmalloc_node_range_noprof+0x634/0x1390
[  283.518193][T12077]  ? __lruvec_stat_mod_folio+0x7d/0x300
[  283.518213][T12077]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  283.518222][T12077]  ? __kasan_kmalloc_large+0x1a/0xa0
[  283.518237][T12077]  ? xp_create_and_assign_umem+0x17b/0xc60
[  283.518248][T12077]  __kvmalloc_node_noprof+0x3b2/0x5a0
[  283.518261][T12077]  ? xp_create_and_assign_umem+0x17b/0xc60
[  283.518270][T12077]  ? xp_create_and_assign_umem+0x17b/0xc60
[  283.518282][T12077]  xp_create_and_assign_umem+0x17b/0xc60
[  283.518299][T12077]  ? dev_get_by_index+0x23/0x2d0
[  283.518312][T12077]  xsk_bind+0x435/0xfb0
[  283.518338][T12077]  __sys_bind+0x1de/0x290
[  283.518352][T12077]  ? __pfx___sys_bind+0x10/0x10
[  283.518378][T12077]  __x64_sys_bind+0x7a/0x90
[  283.518391][T12077]  do_syscall_64+0xf3/0x230
[  283.518402][T12077]  ? clear_bhb_loop+0x45/0xa0
[  283.518414][T12077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.518423][T12077] RIP: 0033:0x7fcd3ed8d169
[  283.518433][T12077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.518441][T12077] RSP: 002b:00007fcd3fbf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  283.518451][T12077] RAX: ffffffffffffffda RBX: 00007fcd3efa6240 RCX: 00007fcd3ed8d169
[  283.518458][T12077] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000009
[  283.518465][T12077] RBP: 00007fcd3ee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  283.518470][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  283.518476][T12077] R13: 0000000000000001 R14: 00007fcd3efa6240 R15: 00007ffcd4197f48
[  283.518491][T12077]  </TASK>
[  283.518495][T12077] Mem-Info:
[  283.774567][T12077] active_anon:8366 inactive_anon:0 isolated_anon:0
[  283.774567][T12077]  active_file:1557 inactive_file:38383 isolated_file:0
[  283.774567][T12077]  unevictable:768 dirty:145 writeback:0
[  283.774567][T12077]  slab_reclaimable:10699 slab_unreclaimable:112784
[  283.774567][T12077]  mapped:31619 shmem:1430 pagetables:762
[  283.774567][T12077]  sec_pagetables:0 bounce:0
[  283.774567][T12077]  kernel_misc_reclaimable:0
[  283.774567][T12077]  free:1308858 free_pcp:1004 free_cma:0
[  283.820087][T12077] Node 0 active_anon:33464kB inactive_anon:0kB active_file:6228kB inactive_file:153460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126476kB dirty:576kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12404kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  283.854506][T12077] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  283.886190][T12077] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  283.913869][T12077] lowmem_reserve[]: 0 2487 2487 2487 2487
[  283.919665][T12077] Node 0 DMA32 free:1311672kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:33456kB inactive_anon:0kB active_file:6228kB inactive_file:153364kB unevictable:1536kB writepending:580kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:4012kB local_pcp:136kB free_cma:0kB
[  283.950069][T12077] lowmem_reserve[]: 0 0 0 0 0
[  283.955243][T12077] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  283.982664][T12077] lowmem_reserve[]: 0 0 0 0 0
[  283.987497][T12077] Node 1 Normal free:3908452kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  284.016759][T12077] lowmem_reserve[]: 0 0 0 0 0
[  284.021463][T12077] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  284.034265][T12077] Node 0 DMA32: 100*4kB (UME) 53*8kB (UME) 80*16kB (UME) 132*32kB (UME) 74*64kB (UME) 99*128kB (UME) 29*256kB (UM) 57*512kB (UM) 28*1024kB (UM) 5*2048kB (UM) 296*4096kB (M) = 1311672kB
[  284.052808][T12077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  284.064505][T12077] Node 1 Normal: 195*4kB (UME) 53*8kB (UME) 43*16kB (UME) 198*32kB (UME) 95*64kB (UME) 25*128kB (UME) 9*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3908452kB
[  284.083487][T12077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  284.093557][T12077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  284.102923][T12077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  284.112572][T12077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  284.121878][T12077] 41370 total pagecache pages
[  284.126630][T12077] 0 pages in swap cache
[  284.130767][T12077] Free swap  = 124996kB
[  284.134963][T12077] Total swap = 124996kB
[  284.139118][T12077] 2097051 pages RAM
[  284.142963][T12077] 0 pages HighMem/MovableOnly
[  284.147640][T12077] 428567 pages reserved
[  284.151771][T12077] 0 pages cma reserved
[  284.186702][T12053] lo speed is unknown, defaulting to 1000
[  284.382130][T12092] sock: sock_timestamping_bind_phc: sock not bind to device
[  284.430290][T12092] lo: entered promiscuous mode
[  284.552962][T12098] FAULT_INJECTION: forcing a failure.
[  284.552962][T12098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.588614][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.3.1773 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  284.588642][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  284.588652][T12098] Call Trace:
[  284.588659][T12098]  <TASK>
[  284.588667][T12098]  dump_stack_lvl+0x241/0x360
[  284.588697][T12098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.588720][T12098]  ? __pfx__printk+0x10/0x10
[  284.588754][T12098]  should_fail_ex+0x424/0x570
[  284.588783][T12098]  _copy_from_iter+0x211/0x1c70
[  284.588809][T12098]  ? __build_skb_around+0x247/0x3d0
[  284.588836][T12098]  ? __alloc_skb+0x298/0x480
[  284.588857][T12098]  ? __pfx__copy_from_iter+0x10/0x10
[  284.588880][T12098]  ? __pfx___alloc_skb+0x10/0x10
[  284.588904][T12098]  ? skb_put+0x114/0x1f0
[  284.588932][T12098]  netlink_sendmsg+0x73c/0xcd0
[  284.588965][T12098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.588990][T12098]  ? aa_sock_msg_perm+0x91/0x160
[  284.589016][T12098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.589034][T12098]  __sock_sendmsg+0x221/0x270
[  284.589057][T12098]  ____sys_sendmsg+0x523/0x860
[  284.589082][T12098]  ? __pfx_____sys_sendmsg+0x10/0x10
[  284.589096][T12098]  ? __fget_files+0x2a/0x420
[  284.589115][T12098]  ? __fget_files+0x2a/0x420
[  284.589139][T12098]  __sys_sendmsg+0x271/0x360
[  284.589160][T12098]  ? __pfx___sys_sendmsg+0x10/0x10
[  284.589229][T12098]  ? do_syscall_64+0xb6/0x230
[  284.589250][T12098]  do_syscall_64+0xf3/0x230
[  284.589274][T12098]  ? clear_bhb_loop+0x45/0xa0
[  284.589293][T12098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.589309][T12098] RIP: 0033:0x7fa66bd8d169
[  284.589324][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.589337][T12098] RSP: 002b:00007fa66cc2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.589356][T12098] RAX: ffffffffffffffda RBX: 00007fa66bfa5fa0 RCX: 00007fa66bd8d169
[  284.589368][T12098] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  284.589379][T12098] RBP: 00007fa66cc2c090 R08: 0000000000000000 R09: 0000000000000000
[  284.589389][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.589399][T12098] R13: 0000000000000000 R14: 00007fa66bfa5fa0 R15: 00007fff8586ede8
[  284.589428][T12098]  </TASK>
[  284.938910][T12101] lo speed is unknown, defaulting to 1000
[  284.966983][T12108] __nla_validate_parse: 1 callbacks suppressed
[  284.966999][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1776'.
[  284.997071][T12110] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1777'.
[  285.200306][T12101] lo speed is unknown, defaulting to 1000
[  285.540238][T12130] sctp: [Deprecated]: syz.1.1782 (pid 12130) Use of int in max_burst socket option.
[  285.540238][T12130] Use struct sctp_assoc_value instead
[  285.550317][T12129] FAULT_INJECTION: forcing a failure.
[  285.550317][T12129] name failslab, interval 1, probability 0, space 0, times 0
[  285.572313][T12129] CPU: 0 UID: 0 PID: 12129 Comm: syz.2.1783 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  285.572338][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  285.572347][T12129] Call Trace:
[  285.572354][T12129]  <TASK>
[  285.572360][T12129]  dump_stack_lvl+0x241/0x360
[  285.572389][T12129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.572409][T12129]  ? __pfx__printk+0x10/0x10
[  285.572434][T12129]  ? __pfx___might_resched+0x10/0x10
[  285.572459][T12129]  should_fail_ex+0x424/0x570
[  285.572488][T12129]  should_failslab+0xac/0x100
[  285.572512][T12129]  __kmalloc_noprof+0xdf/0x4d0
[  285.572533][T12129]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  285.572549][T12129]  ? apparmor_capable+0x13b/0x1b0
[  285.572570][T12129]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  285.572594][T12129]  genl_rcv_msg+0x819/0xf00
[  285.572628][T12129]  ? __pfx_genl_rcv_msg+0x10/0x10
[  285.572649][T12129]  ? stack_trace_save+0x11a/0x1d0
[  285.572674][T12129]  ? __pfx_stack_trace_save+0x10/0x10
[  285.572699][T12129]  ? stack_depot_save_flags+0x44/0x940
[  285.572713][T12129]  ? stack_trace_snprint+0x11/0xf0
[  285.572750][T12129]  ? __lock_acquire+0xad5/0xd80
[  285.572769][T12129]  ? __pfx_ieee802154_add_iface+0x10/0x10
[  285.572808][T12129]  netlink_rcv_skb+0x208/0x480
[  285.572830][T12129]  ? __pfx_genl_rcv_msg+0x10/0x10
[  285.572855][T12129]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  285.572898][T12129]  ? netlink_deliver_tap+0x2e/0x1b0
[  285.572931][T12129]  genl_rcv+0x28/0x40
[  285.572953][T12129]  netlink_unicast+0x7f8/0x9a0
[  285.572981][T12129]  ? __pfx_netlink_unicast+0x10/0x10
[  285.573002][T12129]  ? skb_put+0x114/0x1f0
[  285.573029][T12129]  netlink_sendmsg+0x8c3/0xcd0
[  285.573063][T12129]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.573088][T12129]  ? aa_sock_msg_perm+0x91/0x160
[  285.573116][T12129]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.573134][T12129]  __sock_sendmsg+0x221/0x270
[  285.573158][T12129]  ____sys_sendmsg+0x523/0x860
[  285.573184][T12129]  ? __pfx_____sys_sendmsg+0x10/0x10
[  285.573197][T12129]  ? __fget_files+0x2a/0x420
[  285.573217][T12129]  ? __fget_files+0x2a/0x420
[  285.573242][T12129]  __sys_sendmsg+0x271/0x360
[  285.573265][T12129]  ? __pfx___sys_sendmsg+0x10/0x10
[  285.573341][T12129]  ? do_syscall_64+0xb6/0x230
[  285.573362][T12129]  do_syscall_64+0xf3/0x230
[  285.573379][T12129]  ? clear_bhb_loop+0x45/0xa0
[  285.573398][T12129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.573414][T12129] RIP: 0033:0x7f000b98d169
[  285.573429][T12129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.573443][T12129] RSP: 002b:00007f000c828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.573461][T12129] RAX: ffffffffffffffda RBX: 00007f000bba5fa0 RCX: 00007f000b98d169
[  285.573474][T12129] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  285.573484][T12129] RBP: 00007f000c828090 R08: 0000000000000000 R09: 0000000000000000
[  285.573495][T12129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.573505][T12129] R13: 0000000000000000 R14: 00007f000bba5fa0 R15: 00007ffebe484d98
[  285.573535][T12129]  </TASK>
[  285.972523][T12136] FAULT_INJECTION: forcing a failure.
[  285.972523][T12136] name failslab, interval 1, probability 0, space 0, times 0
[  285.986625][T12136] CPU: 0 UID: 0 PID: 12136 Comm: syz.4.1786 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  285.986650][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  285.986660][T12136] Call Trace:
[  285.986667][T12136]  <TASK>
[  285.986674][T12136]  dump_stack_lvl+0x241/0x360
[  285.986703][T12136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.986726][T12136]  ? __pfx__printk+0x10/0x10
[  285.986747][T12136]  ? __lock_acquire+0xad5/0xd80
[  285.986776][T12136]  should_fail_ex+0x424/0x570
[  285.986806][T12136]  should_failslab+0xac/0x100
[  285.986830][T12136]  kmem_cache_alloc_noprof+0x78/0x390
[  285.986851][T12136]  ? skb_clone+0x20c/0x390
[  285.986872][T12136]  skb_clone+0x20c/0x390
[  285.986892][T12136]  __netlink_deliver_tap+0x3c4/0x7f0
[  285.986933][T12136]  ? netlink_deliver_tap+0x2e/0x1b0
[  285.986955][T12136]  netlink_deliver_tap+0x19d/0x1b0
[  285.986976][T12136]  netlink_unicast+0x7c6/0x9a0
[  285.987004][T12136]  ? __pfx_netlink_unicast+0x10/0x10
[  285.987024][T12136]  ? skb_put+0x114/0x1f0
[  285.987052][T12136]  netlink_sendmsg+0x8c3/0xcd0
[  285.987085][T12136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.987110][T12136]  ? aa_sock_msg_perm+0x91/0x160
[  285.987139][T12136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  285.987157][T12136]  __sock_sendmsg+0x221/0x270
[  285.987181][T12136]  ____sys_sendmsg+0x523/0x860
[  285.987207][T12136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  285.987220][T12136]  ? __fget_files+0x2a/0x420
[  285.987240][T12136]  ? __fget_files+0x2a/0x420
[  285.987265][T12136]  __sys_sendmsg+0x271/0x360
[  285.987287][T12136]  ? __pfx___sys_sendmsg+0x10/0x10
[  285.987360][T12136]  ? do_syscall_64+0xb6/0x230
[  285.987381][T12136]  do_syscall_64+0xf3/0x230
[  285.987397][T12136]  ? clear_bhb_loop+0x45/0xa0
[  285.987417][T12136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.987433][T12136] RIP: 0033:0x7f702e98d169
[  285.987447][T12136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.987461][T12136] RSP: 002b:00007f702f850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.987479][T12136] RAX: ffffffffffffffda RBX: 00007f702eba5fa0 RCX: 00007f702e98d169
[  285.987491][T12136] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  285.987502][T12136] RBP: 00007f702f850090 R08: 0000000000000000 R09: 0000000000000000
[  285.987513][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.987523][T12136] R13: 0000000000000000 R14: 00007f702eba5fa0 R15: 00007ffe1808b258
[  285.987553][T12136]  </TASK>
[  286.503087][T12155] FAULT_INJECTION: forcing a failure.
[  286.503087][T12155] name failslab, interval 1, probability 0, space 0, times 0
[  286.529654][T12155] CPU: 1 UID: 0 PID: 12155 Comm: syz.2.1795 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  286.529681][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  286.529692][T12155] Call Trace:
[  286.529699][T12155]  <TASK>
[  286.529706][T12155]  dump_stack_lvl+0x241/0x360
[  286.529736][T12155]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.529759][T12155]  ? __pfx__printk+0x10/0x10
[  286.529787][T12155]  ? do_raw_spin_lock+0x151/0x370
[  286.529813][T12155]  should_fail_ex+0x424/0x570
[  286.529843][T12155]  should_failslab+0xac/0x100
[  286.529868][T12155]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  286.529891][T12155]  ? __alloc_skb+0x1c2/0x480
[  286.529919][T12155]  __alloc_skb+0x1c2/0x480
[  286.529948][T12155]  ? __pfx___alloc_skb+0x10/0x10
[  286.529982][T12155]  ieee802154_nl_new_reply+0x32/0xf0
[  286.530005][T12155]  ieee802154_add_iface+0x294/0x830
[  286.530033][T12155]  ? __pfx_ieee802154_add_iface+0x10/0x10
[  286.530055][T12155]  ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290
[  286.530079][T12155]  genl_rcv_msg+0xb38/0xf00
[  286.530119][T12155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.530140][T12155]  ? stack_trace_save+0x11a/0x1d0
[  286.530165][T12155]  ? __pfx_stack_trace_save+0x10/0x10
[  286.530190][T12155]  ? stack_depot_save_flags+0x44/0x940
[  286.530204][T12155]  ? stack_trace_snprint+0x11/0xf0
[  286.530240][T12155]  ? __lock_acquire+0xad5/0xd80
[  286.530259][T12155]  ? __pfx_ieee802154_add_iface+0x10/0x10
[  286.530296][T12155]  netlink_rcv_skb+0x208/0x480
[  286.530317][T12155]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.530343][T12155]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  286.530385][T12155]  ? netlink_deliver_tap+0x2e/0x1b0
[  286.530412][T12155]  genl_rcv+0x28/0x40
[  286.530433][T12155]  netlink_unicast+0x7f8/0x9a0
[  286.530460][T12155]  ? __pfx_netlink_unicast+0x10/0x10
[  286.530481][T12155]  ? skb_put+0x114/0x1f0
[  286.530508][T12155]  netlink_sendmsg+0x8c3/0xcd0
[  286.530542][T12155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.530566][T12155]  ? aa_sock_msg_perm+0x91/0x160
[  286.530593][T12155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.530611][T12155]  __sock_sendmsg+0x221/0x270
[  286.530634][T12155]  ____sys_sendmsg+0x523/0x860
[  286.530659][T12155]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.530672][T12155]  ? __fget_files+0x2a/0x420
[  286.530691][T12155]  ? __fget_files+0x2a/0x420
[  286.530713][T12155]  __sys_sendmsg+0x271/0x360
[  286.530733][T12155]  ? __pfx___sys_sendmsg+0x10/0x10
[  286.530803][T12155]  ? do_syscall_64+0xb6/0x230
[  286.530824][T12155]  do_syscall_64+0xf3/0x230
[  286.530840][T12155]  ? clear_bhb_loop+0x45/0xa0
[  286.530859][T12155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.530874][T12155] RIP: 0033:0x7f000b98d169
[  286.530890][T12155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.530903][T12155] RSP: 002b:00007f000c828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.530922][T12155] RAX: ffffffffffffffda RBX: 00007f000bba5fa0 RCX: 00007f000b98d169
[  286.530934][T12155] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  286.530945][T12155] RBP: 00007f000c828090 R08: 0000000000000000 R09: 0000000000000000
[  286.530955][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.530965][T12155] R13: 0000000000000000 R14: 00007f000bba5fa0 R15: 00007ffebe484d98
[  286.530994][T12155]  </TASK>
[  286.868926][T12158] netlink: 'syz.0.1794': attribute type 1 has an invalid length.
[  287.028982][T12158] 8021q: adding VLAN 0 to HW filter on device bond3
[  287.050162][T12176] FAULT_INJECTION: forcing a failure.
[  287.050162][T12176] name failslab, interval 1, probability 0, space 0, times 0
[  287.065914][T12175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1799'.
[  287.101002][T12160] 8021q: adding VLAN 0 to HW filter on device bond3
[  287.108697][T12160] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  287.124093][T12160] bond3: (slave vcan1): Error -95 calling set_mac_address
[  287.143324][T12176] CPU: 0 UID: 0 PID: 12176 Comm: syz.1.1800 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  287.143351][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  287.143362][T12176] Call Trace:
[  287.143369][T12176]  <TASK>
[  287.143377][T12176]  dump_stack_lvl+0x241/0x360
[  287.143409][T12176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.143431][T12176]  ? __pfx__printk+0x10/0x10
[  287.143459][T12176]  ? __pfx___might_resched+0x10/0x10
[  287.143483][T12176]  should_fail_ex+0x424/0x570
[  287.143514][T12176]  should_failslab+0xac/0x100
[  287.143538][T12176]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  287.143562][T12176]  ? __alloc_skb+0x1c2/0x480
[  287.143582][T12176]  ? stack_trace_save+0x11a/0x1d0
[  287.143608][T12176]  __alloc_skb+0x1c2/0x480
[  287.143636][T12176]  ? __pfx___alloc_skb+0x10/0x10
[  287.143665][T12176]  ? netlink_ack_tlv_len+0x6e/0x200
[  287.143687][T12176]  netlink_ack+0x147/0xa70
[  287.143707][T12176]  ? __pfx_hwsim_get_radio_nl+0x10/0x10
[  287.143739][T12176]  netlink_rcv_skb+0x296/0x480
[  287.143759][T12176]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.143785][T12176]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.143826][T12176]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.143853][T12176]  genl_rcv+0x28/0x40
[  287.143875][T12176]  netlink_unicast+0x7f8/0x9a0
[  287.143902][T12176]  ? __pfx_netlink_unicast+0x10/0x10
[  287.143923][T12176]  ? skb_put+0x114/0x1f0
[  287.143949][T12176]  netlink_sendmsg+0x8c3/0xcd0
[  287.143982][T12176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.144007][T12176]  ? aa_sock_msg_perm+0x91/0x160
[  287.144036][T12176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.144059][T12176]  __sock_sendmsg+0x221/0x270
[  287.144082][T12176]  ____sys_sendmsg+0x523/0x860
[  287.144108][T12176]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.144122][T12176]  ? __fget_files+0x2a/0x420
[  287.144141][T12176]  ? __fget_files+0x2a/0x420
[  287.144167][T12176]  __sys_sendmsg+0x271/0x360
[  287.144189][T12176]  ? __pfx___sys_sendmsg+0x10/0x10
[  287.144262][T12176]  ? do_syscall_64+0xb6/0x230
[  287.144282][T12176]  do_syscall_64+0xf3/0x230
[  287.144299][T12176]  ? clear_bhb_loop+0x45/0xa0
[  287.144319][T12176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.144335][T12176] RIP: 0033:0x7f1e39f8d169
[  287.144350][T12176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.144364][T12176] RSP: 002b:00007f1e3ad39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.144383][T12176] RAX: ffffffffffffffda RBX: 00007f1e3a1a5fa0 RCX: 00007f1e39f8d169
[  287.144396][T12176] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  287.144406][T12176] RBP: 00007f1e3ad39090 R08: 0000000000000000 R09: 0000000000000000
[  287.144417][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.144426][T12176] R13: 0000000000000000 R14: 00007f1e3a1a5fa0 R15: 00007ffe5f821638
[  287.144455][T12176]  </TASK>
[  287.461684][T12183] netlink: 'syz.3.1799': attribute type 1 has an invalid length.
[  287.470978][T12153] lo speed is unknown, defaulting to 1000
[  287.705395][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'.
[  287.759054][T12193] lo speed is unknown, defaulting to 1000
[  287.933551][T12153] lo speed is unknown, defaulting to 1000
[  288.661233][T12193] lo speed is unknown, defaulting to 1000
[  288.935488][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'.
[  289.342901][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'.
[  289.408297][T12237] lo speed is unknown, defaulting to 1000
[  289.448142][T12241] Unsupported ieee802154 address type: 0
[  290.296024][T12250] IPVS: Unknown mcast interface: macvlan0
[  290.502458][T12254] tun0: tun_chr_ioctl cmd 1074025677
[  290.572549][T12254] tun0: linktype set to 773
[  290.603241][T12254] tun0: tun_chr_ioctl cmd 1074025675
[  290.641232][T12254] tun0: persist disabled
[  290.721302][T12237] lo speed is unknown, defaulting to 1000
[  290.964201][T12265] 8021q: adding VLAN 0 to HW filter on device bond4
[  290.990839][T12269] netlink: 'syz.2.1829': attribute type 21 has an invalid length.
[  291.001977][T12265] team0: Port device bond4 added
[  291.039318][T12267] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  291.052926][T12267] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  291.202458][T12269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1829'.
[  291.213926][T12267] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  291.224660][T12267] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  291.315347][T12267] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  291.330406][T12267] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  291.521694][T12267] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  291.531982][T12267] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  291.751537][T12267] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.761210][T12267] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  291.794367][T12267] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.803946][T12267] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  291.853466][T12267] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.877758][T12267] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  291.944763][T12267] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.957810][T12267] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  292.130286][T12297] netlink: 'syz.3.1838': attribute type 39 has an invalid length.
[  292.145550][T12292] netem: change failed
[  292.249776][T12301] lo speed is unknown, defaulting to 1000
[  293.741951][T12316] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1842'.
[  293.908735][T12333] netlink: 'syz.1.1847': attribute type 29 has an invalid length.
[  293.927512][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1847'.
[  293.961579][T12333] netlink: 'syz.1.1847': attribute type 29 has an invalid length.
[  293.994386][T12301] lo speed is unknown, defaulting to 1000
[  294.064799][T12338] FAULT_INJECTION: forcing a failure.
[  294.064799][T12338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.078439][T12338] CPU: 0 UID: 0 PID: 12338 Comm: syz.2.1850 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  294.078465][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  294.078476][T12338] Call Trace:
[  294.078483][T12338]  <TASK>
[  294.078490][T12338]  dump_stack_lvl+0x241/0x360
[  294.078522][T12338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.078544][T12338]  ? __pfx__printk+0x10/0x10
[  294.078575][T12338]  should_fail_ex+0x424/0x570
[  294.078604][T12338]  _copy_to_user+0x31/0xb0
[  294.078625][T12338]  simple_read_from_buffer+0xc4/0x170
[  294.078647][T12338]  proc_fail_nth_read+0x1ef/0x260
[  294.078663][T12338]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  294.078679][T12338]  ? rw_verify_area+0x246/0x630
[  294.078692][T12338]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  294.078707][T12338]  vfs_read+0x21f/0xb90
[  294.078725][T12338]  ? __pfx___mutex_lock+0x10/0x10
[  294.078740][T12338]  ? __pfx_vfs_read+0x10/0x10
[  294.078757][T12338]  ? __fget_files+0x2a/0x420
[  294.078770][T12338]  ? __fget_files+0x39d/0x420
[  294.078780][T12338]  ? __fget_files+0x2a/0x420
[  294.078800][T12338]  ksys_read+0x19d/0x2d0
[  294.078816][T12338]  ? __pfx_ksys_read+0x10/0x10
[  294.078836][T12338]  ? do_syscall_64+0xb6/0x230
[  294.078851][T12338]  do_syscall_64+0xf3/0x230
[  294.078864][T12338]  ? clear_bhb_loop+0x45/0xa0
[  294.078880][T12338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.078892][T12338] RIP: 0033:0x7f000b98bb7c
[  294.078905][T12338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  294.078916][T12338] RSP: 002b:00007f000c828030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  294.078931][T12338] RAX: ffffffffffffffda RBX: 00007f000bba5fa0 RCX: 00007f000b98bb7c
[  294.078940][T12338] RDX: 000000000000000f RSI: 00007f000c8280a0 RDI: 0000000000000003
[  294.078948][T12338] RBP: 00007f000c828090 R08: 0000000000000000 R09: 0000000000000000
[  294.078956][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  294.078964][T12338] R13: 0000000000000000 R14: 00007f000bba5fa0 R15: 00007ffebe484d98
[  294.078988][T12338]  </TASK>
[  294.589883][T12353] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1852'.
[  294.615454][T12353] netlink: 'syz.2.1852': attribute type 4 has an invalid length.
[  294.625141][T12353] netlink: 'syz.2.1852': attribute type 4 has an invalid length.
[  294.772029][T12359] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1853'.
[  294.823836][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'.
[  295.155947][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'.
[  295.501850][T12405] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  295.709372][T12417] x_tables: duplicate underflow at hook 3
[  295.758426][T12423] IPv6: sit2: Disabled Multicast RS
[  295.928682][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'.
[  295.951562][T12433] lo speed is unknown, defaulting to 1000
[  296.096848][T12438] vlan3: entered promiscuous mode
[  296.281998][T12448] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1885'.
[  296.296188][T12433] lo speed is unknown, defaulting to 1000
[  296.478418][T12458] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  296.519133][T12459] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1889'.
[  296.757048][T12469] tun0: tun_chr_ioctl cmd 1074025677
[  296.763718][T12469] tun0: linktype set to 773
[  296.782500][T12469] tun0: tun_chr_ioctl cmd 1074025675
[  296.787925][T12469] tun0: persist disabled
[  297.181366][T12489] netlink: 'syz.3.1895': attribute type 6 has an invalid length.
[  297.429428][T12497] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  297.448870][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'.
[  297.465387][T12500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1901'.
[  298.136210][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'.
[  298.155376][T12532] lo speed is unknown, defaulting to 1000
[  298.176115][T12534] batadv1: entered allmulticast mode
[  298.374865][T12547] syzkaller1: entered promiscuous mode
[  298.380379][T12547] syzkaller1: entered allmulticast mode
[  298.436586][T12545] lo speed is unknown, defaulting to 1000
[  298.570827][T12555] netlink: 'syz.1.1922': attribute type 12 has an invalid length.
[  298.587174][T12555] netlink: 'syz.1.1922': attribute type 29 has an invalid length.
[  298.614772][T12555] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1922'.
[  298.635771][T12555] netlink: 'syz.1.1922': attribute type 2 has an invalid length.
[  298.648351][T12555] netlink: 'syz.1.1922': attribute type 3 has an invalid length.
[  298.660970][T12555] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1922'.
[  298.879100][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'.
[  298.880848][T12532] lo speed is unknown, defaulting to 1000
[  298.957127][T12567] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.962468][T12572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1914'.
[  298.965494][T12567] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.982688][T12567] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.990908][T12567] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.124792][T12563] 8021q: adding VLAN 0 to HW filter on device bond4
[  299.314669][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'.
[  299.381708][T12545] lo speed is unknown, defaulting to 1000
[  300.037603][T12598] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  300.597853][T12613] syzkaller1: entered promiscuous mode
[  300.613820][T12613] syzkaller1: entered allmulticast mode
[  301.159351][T12642] vlan0: entered promiscuous mode
[  301.177285][T12642] gretap0: entered promiscuous mode
[  301.192971][T12642] vlan0: left promiscuous mode
[  301.213398][T12642] gretap0: left promiscuous mode
[  301.770493][T12683] __nla_validate_parse: 1 callbacks suppressed
[  301.770511][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'.
[  301.787949][T12677] xt_socket: unknown flags 0x8
[  301.852525][T12686] Can't find ip_set type haih:net
[  302.108234][T12704] netlink: 'syz.4.1966': attribute type 1 has an invalid length.
[  302.312447][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'.
[  302.324376][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1970'.
[  302.784590][T12727] IPVS: Error connecting to the multicast addr
[  302.877462][T12725] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1974'.
[  302.981713][T12735] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1979'.
[  303.450951][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'.
[  303.536081][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'.
[  303.575384][T12762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1987'.
[  303.844281][T12770] FAULT_INJECTION: forcing a failure.
[  303.844281][T12770] name failslab, interval 1, probability 0, space 0, times 0
[  303.876900][T12770] CPU: 0 UID: 0 PID: 12770 Comm: syz.1.1990 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  303.876928][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  303.876938][T12770] Call Trace:
[  303.876944][T12770]  <TASK>
[  303.876952][T12770]  dump_stack_lvl+0x241/0x360
[  303.876981][T12770]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.877002][T12770]  ? __pfx__printk+0x10/0x10
[  303.877027][T12770]  ? __pfx___might_resched+0x10/0x10
[  303.877050][T12770]  should_fail_ex+0x424/0x570
[  303.877082][T12770]  should_failslab+0xac/0x100
[  303.877106][T12770]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  303.877129][T12770]  ? __alloc_skb+0x1c2/0x480
[  303.877149][T12770]  ? stack_trace_save+0x11a/0x1d0
[  303.877175][T12770]  __alloc_skb+0x1c2/0x480
[  303.877204][T12770]  ? __pfx___alloc_skb+0x10/0x10
[  303.877232][T12770]  ? netlink_ack_tlv_len+0x6e/0x200
[  303.877255][T12770]  netlink_ack+0x147/0xa70
[  303.877275][T12770]  ? __pfx_hwsim_get_radio_nl+0x10/0x10
[  303.877308][T12770]  netlink_rcv_skb+0x296/0x480
[  303.877329][T12770]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.877354][T12770]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.877398][T12770]  ? netlink_deliver_tap+0x2e/0x1b0
[  303.877424][T12770]  genl_rcv+0x28/0x40
[  303.877446][T12770]  netlink_unicast+0x7f8/0x9a0
[  303.877474][T12770]  ? __pfx_netlink_unicast+0x10/0x10
[  303.877494][T12770]  ? skb_put+0x114/0x1f0
[  303.877520][T12770]  netlink_sendmsg+0x8c3/0xcd0
[  303.877552][T12770]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.877576][T12770]  ? aa_sock_msg_perm+0x91/0x160
[  303.877604][T12770]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.877622][T12770]  __sock_sendmsg+0x221/0x270
[  303.877646][T12770]  ____sys_sendmsg+0x523/0x860
[  303.877672][T12770]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.877685][T12770]  ? __fget_files+0x2a/0x420
[  303.877705][T12770]  ? __fget_files+0x2a/0x420
[  303.877730][T12770]  __sys_sendmsg+0x271/0x360
[  303.877752][T12770]  ? __pfx___sys_sendmsg+0x10/0x10
[  303.877832][T12770]  ? do_syscall_64+0xb6/0x230
[  303.877853][T12770]  do_syscall_64+0xf3/0x230
[  303.877870][T12770]  ? clear_bhb_loop+0x45/0xa0
[  303.877890][T12770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.877905][T12770] RIP: 0033:0x7f1e39f8d169
[  303.877921][T12770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.877935][T12770] RSP: 002b:00007f1e3ad39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.877953][T12770] RAX: ffffffffffffffda RBX: 00007f1e3a1a5fa0 RCX: 00007f1e39f8d169
[  303.877966][T12770] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  303.877977][T12770] RBP: 00007f1e3ad39090 R08: 0000000000000000 R09: 0000000000000000
[  303.877987][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.877997][T12770] R13: 0000000000000000 R14: 00007f1e3a1a5fa0 R15: 00007ffe5f821638
[  303.878025][T12770]  </TASK>
[  304.568510][T12779] lo speed is unknown, defaulting to 1000
[  304.738383][T12776] lo speed is unknown, defaulting to 1000
[  305.027630][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'.
[  305.139148][T12779] lo speed is unknown, defaulting to 1000
[  305.177094][T12797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2000'.
[  305.606385][T12776] lo speed is unknown, defaulting to 1000
[  306.831031][T12848] __nla_validate_parse: 4 callbacks suppressed
[  306.831051][T12848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2014'.
[  306.940255][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'.
[  307.063107][T12854] netlink: 'syz.1.2018': attribute type 12 has an invalid length.
[  307.072780][T12854] netlink: 'syz.1.2018': attribute type 29 has an invalid length.
[  307.089769][T12854] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2018'.
[  307.099319][T12854] netlink: 'syz.1.2018': attribute type 2 has an invalid length.
[  307.110044][T12854] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2018'.
[  307.162349][T12857] IPVS: Unknown mcast interface: pim6reg
[  307.454568][T12871] syzkaller1: entered promiscuous mode
[  307.460154][T12871] syzkaller1: entered allmulticast mode
[  307.794919][T12887] FAULT_INJECTION: forcing a failure.
[  307.794919][T12887] name failslab, interval 1, probability 0, space 0, times 0
[  307.827749][T12887] CPU: 0 UID: 0 PID: 12887 Comm: syz.0.2029 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  307.827777][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  307.827787][T12887] Call Trace:
[  307.827794][T12887]  <TASK>
[  307.827801][T12887]  dump_stack_lvl+0x241/0x360
[  307.827831][T12887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.827854][T12887]  ? __pfx__printk+0x10/0x10
[  307.827882][T12887]  ? __pfx___might_resched+0x10/0x10
[  307.827906][T12887]  should_fail_ex+0x424/0x570
[  307.827937][T12887]  should_failslab+0xac/0x100
[  307.827962][T12887]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  307.827985][T12887]  ? __alloc_skb+0x1c2/0x480
[  307.828011][T12887]  __alloc_skb+0x1c2/0x480
[  307.828040][T12887]  ? __pfx___alloc_skb+0x10/0x10
[  307.828072][T12887]  netlink_sendmsg+0x638/0xcd0
[  307.828106][T12887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.828131][T12887]  ? aa_sock_msg_perm+0x91/0x160
[  307.828158][T12887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.828176][T12887]  __sock_sendmsg+0x221/0x270
[  307.828199][T12887]  ____sys_sendmsg+0x523/0x860
[  307.828224][T12887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.828238][T12887]  ? __fget_files+0x2a/0x420
[  307.828256][T12887]  ? __fget_files+0x2a/0x420
[  307.828281][T12887]  __sys_sendmsg+0x271/0x360
[  307.828303][T12887]  ? __pfx___sys_sendmsg+0x10/0x10
[  307.828371][T12887]  ? do_syscall_64+0xb6/0x230
[  307.828392][T12887]  do_syscall_64+0xf3/0x230
[  307.828409][T12887]  ? clear_bhb_loop+0x45/0xa0
[  307.828428][T12887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.828444][T12887] RIP: 0033:0x7fcd3ed8d169
[  307.828459][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.828473][T12887] RSP: 002b:00007fcd3fc53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.828491][T12887] RAX: ffffffffffffffda RBX: 00007fcd3efa5fa0 RCX: 00007fcd3ed8d169
[  307.828503][T12887] RDX: 0000000000000840 RSI: 0000200000000780 RDI: 0000000000000003
[  307.828515][T12887] RBP: 00007fcd3fc53090 R08: 0000000000000000 R09: 0000000000000000
[  307.828524][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.828534][T12887] R13: 0000000000000000 R14: 00007fcd3efa5fa0 R15: 00007ffcd4197f48
[  307.828563][T12887]  </TASK>
[  308.199973][T12889] lo speed is unknown, defaulting to 1000
[  308.391363][T12900] netlink: 'syz.4.2035': attribute type 10 has an invalid length.
[  308.432005][T12900] ieee802154 phy0 wpan0: entered promiscuous mode
[  308.501946][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'.
[  308.515572][T12900] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.541550][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'.
[  308.551602][T12900] bond0: (slave wpan0): Enslaving as an active interface with an up link
[  308.562681][ T5888] ==================================================================
[  308.570774][ T5888] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x16a/0x940
[  308.578773][ T5888] Write of size 4 at addr 000000000000004c by task kworker/0:3/5888
[  308.582984][T12904] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  308.586744][ T5888] 
[  308.586757][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:3 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  308.586777][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  308.586788][ T5888] Workqueue: mld mld_ifc_work
[  308.586812][ T5888] Call Trace:
[  308.586819][ T5888]  <TASK>
[  308.586826][ T5888]  dump_stack_lvl+0x241/0x360
[  308.586852][ T5888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.586872][ T5888]  ? __pfx__printk+0x10/0x10
[  308.586890][ T5888]  ? _printk+0xd5/0x120
[  308.586911][ T5888]  print_report+0xe3/0x5b0
[  308.586931][ T5888]  ? __virt_addr_valid+0x58/0x530
[  308.586955][ T5888]  ? mac802154_header_create+0x16a/0x940
[  308.586972][ T5888]  kasan_report+0x143/0x180
[  308.586993][ T5888]  ? mac802154_header_create+0x16a/0x940
[  308.587014][ T5888]  kasan_check_range+0x28f/0x2a0
[  308.587035][ T5888]  mac802154_header_create+0x16a/0x940
[  308.587056][ T5888]  ? __pfx_mac802154_header_create+0x10/0x10
[  308.587073][ T5888]  ? neigh_connected_output+0x1d5/0x450
[  308.587093][ T5888]  ? read_seqbegin+0x15c/0x2c0
[  308.587110][ T5888]  ? lockdep_hardirqs_on+0x9d/0x150
[  308.587127][ T5888]  ? read_seqbegin+0x202/0x2c0
[  308.587149][ T5888]  ? ___neigh_create+0x1d8c/0x2360
[  308.587168][ T5888]  ? __pfx_mac802154_header_create+0x10/0x10
[  308.587185][ T5888]  neigh_connected_output+0x27f/0x450
[  308.587211][ T5888]  ip6_finish_output2+0x1296/0x1750
[  308.587233][ T5888]  ? ip6_finish_output2+0x701/0x1750
[  308.587256][ T5888]  ? __pfx_ip6_finish_output2+0x10/0x10
[  308.587277][ T5888]  ? ip6_mtu+0x81/0x3f0
[  308.587294][ T5888]  ? ip6_mtu+0x81/0x3f0
[  308.587312][ T5888]  ip6_finish_output+0x421/0x840
[  308.587333][ T5888]  NF_HOOK+0xa0/0x440
[  308.587350][ T5888]  ? NF_HOOK+0xfe/0x440
[  308.587366][ T5888]  ? __pfx_NF_HOOK+0x10/0x10
[  308.587384][ T5888]  ? __pfx_dst_output+0x10/0x10
[  308.587404][ T5888]  ? icmp6_dst_alloc+0x3aa/0x420
[  308.587423][ T5888]  mld_sendpack+0x84a/0xdc0
[  308.587447][ T5888]  ? mld_sendpack+0x1ea/0xdc0
[  308.587465][ T5888]  ? __pfx_mld_sendpack+0x10/0x10
[  308.587497][ T5888]  mld_ifc_work+0x7d9/0xd90
[  308.587517][ T5888]  ? process_scheduled_works+0x9cb/0x18e0
[  308.587534][ T5888]  process_scheduled_works+0xac3/0x18e0
[  308.587563][ T5888]  ? __pfx_process_scheduled_works+0x10/0x10
[  308.587584][ T5888]  ? assign_work+0x367/0x3d0
[  308.587603][ T5888]  worker_thread+0x870/0xd50
[  308.587625][ T5888]  ? __kthread_parkme+0x1a8/0x200
[  308.587645][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  308.587662][ T5888]  kthread+0x7b7/0x940
[  308.587683][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  308.587700][ T5888]  ? __pfx_kthread+0x10/0x10
[  308.587718][ T5888]  ? __pfx_kthread+0x10/0x10
[  308.587736][ T5888]  ? __pfx_kthread+0x10/0x10
[  308.587755][ T5888]  ? __pfx_kthread+0x10/0x10
[  308.587773][ T5888]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.587793][ T5888]  ? lockdep_hardirqs_on+0x9d/0x150
[  308.587807][ T5888]  ? __pfx_kthread+0x10/0x10
[  308.587826][ T5888]  ret_from_fork+0x4b/0x80
[  308.587842][ T5888]  ? __pfx_kthread+0x10/0x10
[  308.587861][ T5888]  ret_from_fork_asm+0x1a/0x30
[  308.587882][ T5888]  </TASK>
[  308.587888][ T5888] ==================================================================
[  308.629936][T12904] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  308.651188][T12910] syzkaller1: entered promiscuous mode
[  308.919360][ T5888] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  308.926572][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:3 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
[  308.938300][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  308.948365][ T5888] Workqueue: mld mld_ifc_work
[  308.953064][ T5888] Call Trace:
[  308.956356][ T5888]  <TASK>
[  308.959304][ T5888]  dump_stack_lvl+0x241/0x360
[  308.964010][ T5888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.969230][ T5888]  ? __pfx__printk+0x10/0x10
[  308.973840][ T5888]  ? vscnprintf+0x5d/0x90
[  308.978194][ T5888]  panic+0x349/0x880
[  308.982107][ T5888]  ? check_panic_on_warn+0x21/0xb0
[  308.987228][ T5888]  ? __pfx_panic+0x10/0x10
[  308.991660][ T5888]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  308.997658][ T5888]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  309.004010][ T5888]  ? print_report+0xe3/0x5b0
[  309.008614][ T5888]  check_panic_on_warn+0x86/0xb0
[  309.013566][ T5888]  ? mac802154_header_create+0x16a/0x940
[  309.019208][ T5888]  end_report+0x77/0x160
[  309.023453][ T5888]  kasan_report+0x154/0x180
[  309.027970][ T5888]  ? mac802154_header_create+0x16a/0x940
[  309.033614][ T5888]  kasan_check_range+0x28f/0x2a0
[  309.038558][ T5888]  mac802154_header_create+0x16a/0x940
[  309.044013][ T5888]  ? __pfx_mac802154_header_create+0x10/0x10
[  309.049982][ T5888]  ? neigh_connected_output+0x1d5/0x450
[  309.055518][ T5888]  ? read_seqbegin+0x15c/0x2c0
[  309.060266][ T5888]  ? lockdep_hardirqs_on+0x9d/0x150
[  309.065449][ T5888]  ? read_seqbegin+0x202/0x2c0
[  309.070202][ T5888]  ? ___neigh_create+0x1d8c/0x2360
[  309.075303][ T5888]  ? __pfx_mac802154_header_create+0x10/0x10
[  309.081271][ T5888]  neigh_connected_output+0x27f/0x450
[  309.086642][ T5888]  ip6_finish_output2+0x1296/0x1750
[  309.091831][ T5888]  ? ip6_finish_output2+0x701/0x1750
[  309.097110][ T5888]  ? __pfx_ip6_finish_output2+0x10/0x10
[  309.102644][ T5888]  ? ip6_mtu+0x81/0x3f0
[  309.106787][ T5888]  ? ip6_mtu+0x81/0x3f0
[  309.110927][ T5888]  ip6_finish_output+0x421/0x840
[  309.115850][ T5888]  NF_HOOK+0xa0/0x440
[  309.119820][ T5888]  ? NF_HOOK+0xfe/0x440
[  309.123963][ T5888]  ? __pfx_NF_HOOK+0x10/0x10
[  309.128539][ T5888]  ? __pfx_dst_output+0x10/0x10
[  309.133375][ T5888]  ? icmp6_dst_alloc+0x3aa/0x420
[  309.138298][ T5888]  mld_sendpack+0x84a/0xdc0
[  309.142791][ T5888]  ? mld_sendpack+0x1ea/0xdc0
[  309.147453][ T5888]  ? __pfx_mld_sendpack+0x10/0x10
[  309.152470][ T5888]  mld_ifc_work+0x7d9/0xd90
[  309.156960][ T5888]  ? process_scheduled_works+0x9cb/0x18e0
[  309.162663][ T5888]  process_scheduled_works+0xac3/0x18e0
[  309.168204][ T5888]  ? __pfx_process_scheduled_works+0x10/0x10
[  309.174193][ T5888]  ? assign_work+0x367/0x3d0
[  309.178792][ T5888]  worker_thread+0x870/0xd50
[  309.183393][ T5888]  ? __kthread_parkme+0x1a8/0x200
[  309.188414][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  309.193517][ T5888]  kthread+0x7b7/0x940
[  309.197574][ T5888]  ? __pfx_worker_thread+0x10/0x10
[  309.202673][ T5888]  ? __pfx_kthread+0x10/0x10
[  309.207253][ T5888]  ? __pfx_kthread+0x10/0x10
[  309.211832][ T5888]  ? __pfx_kthread+0x10/0x10
[  309.216411][ T5888]  ? __pfx_kthread+0x10/0x10
[  309.220991][ T5888]  ? _raw_spin_unlock_irq+0x23/0x50
[  309.226183][ T5888]  ? lockdep_hardirqs_on+0x9d/0x150
[  309.231367][ T5888]  ? __pfx_kthread+0x10/0x10
[  309.235945][ T5888]  ret_from_fork+0x4b/0x80
[  309.240348][ T5888]  ? __pfx_kthread+0x10/0x10
[  309.244926][ T5888]  ret_from_fork_asm+0x1a/0x30
[  309.249678][ T5888]  </TASK>
[  309.252934][ T5888] Kernel Offset: disabled
[  309.257243][ T5888] Rebooting in 86400 seconds..