last executing test programs:

4.692915397s ago: executing program 2 (id=437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44080)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYRES64=0x0], 0x74}, 0x1, 0x0, 0x0, 0x26009094}, 0x4000)

4.155065286s ago: executing program 2 (id=440):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r5=>0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00'], 0x20)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x18207}}, 0x20}}, 0x0)

3.617471764s ago: executing program 2 (id=443):
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24044880)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

2.987693023s ago: executing program 2 (id=447):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x3)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
unshare(0x68040200)
r1 = socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000700)=ANY=[@ANYBLOB="ff29e49831e8880011aa00ff4cddd689f527e6cafe5005ed64e6"], 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001000130727"], 0xf0}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, '\x00', "d3827d26b65aaddf42d73cefb44a0479", "0200", "669f580a64d107e2"}, 0x28)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r6, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000005000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000080000000007e0000000300000095000000000000009500e8000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x68}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000bc0)=ANY=[@ANYRES8=r5, @ANYRES8=r1, @ANYRES8, @ANYRES8=r8], 0x0)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
read(r9, 0x0, 0x0)

2.60417631s ago: executing program 3 (id=452):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000104000002000000376d43810000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e0000040002800800280036ec0000"], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x21, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)
sendmsg$xdp(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x1, 0x0, 0x29}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="5b8dc36c33cbb3d351d08107fca75dc2fde51ea8a9f8d2c574aafc70a7bafa2df65d8ffd05efc5eb64b26c3f9f6e8c66ca90eed076f1c2bb15f8e5388856c93c43ed8c5d5f09bb036a51291c7f3b3119e20a1f30454cc6f505bbfa36085b1c31628af694ed17c316c628bd6e414334d836d1838d2fc8876ac5e9954fde0b62e27771e18a52342889fc9ef33869fc043963e3429ac29e929a837c62cf5dcda504cd52ba508f7c569853f5d03a78edef52f10a3f0b4b68a35256d1bb74ccdc2f2081e1f59cb85f8badc70ceccb6cac656cb1d7f2afc6b0afe8a17bb7f6966b172cc11a7468d02c", 0xe6}, {&(0x7f0000000400)="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", 0xfd}], 0x2, 0x0, 0x0, 0x1}, 0x40040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r4=>r3, 0xba5, 0x8001, 0xff})
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x4)

2.326130997s ago: executing program 4 (id=455):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x10)

2.175784317s ago: executing program 4 (id=458):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0", 0x53}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x4040810)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

2.059735104s ago: executing program 3 (id=459):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000062010c000000000095000072c4000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d00010000000000000000000300"], 0x1c}], 0x1}, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'nicvf0\x00', 0x1000})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000062010c000000000095000072c4000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async)
socket$packet(0x11, 0x3, 0x300) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d00010000000000000000000300"], 0x1c}], 0x1}, 0x300) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'nicvf0\x00', 0x1000}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)

1.880279587s ago: executing program 4 (id=461):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000021c0)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x4000800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e80100002e000305000000000000000017fe018ef5b54effe0d36fbe7dddcf7ef2dde4de3d49cc017c5a55b0828d39fe9e9a6acd6b344e93fc6519e52c2b7453648904a40d8af02ace0f09389ce53cbdb080d8598ab12f9f7bf3f9a55ed5a908dd22f7ea4f2bf2d71b2baac0f2494eb6ef6ab1ba7d7aa97f0701dcf500bf34d3aa4b3e8d6d000050f28efbece0c4e61c523601f22d8a6b69e6a3b39c4b9c1d1fdf9304b826ab58a9cc38d16826d749ffb6c840b144132b9fd33b72745a425fe08f3a0a5bc1a38fd93f91b062c0516aadad566bbe0f45772b18e82ef7fcf23c00000000000000", @ANYRES32=r4, @ANYBLOB="04000080ec005b80ee5c4e21864f48896e1bc8dbcb64793ad778573b950142d933f9c539b46e12f8ff611f1c3d04bee891b9cc77728e28ca3d25defda4ca40b6fadccf6e8fb420f30d9a4692c9c3d9a16b29f0ed6c6d4a2c7ce388cf7b16b6db23c8843da5605ffdc45d5277967ebab2a10176151f46a03e781deb07a86ee3d82420c404869e6f8a924b6d2c67afe25969cc3e492e26a3578a8e83b991494b958bb46744087241410d78f1c54012ea7e517a4fe7c8c6e2bc554abd2b2ed14df1fd44bf4b0e75a44acb9e34be3e504f0f33aeeca3e52c7fe84f2a9ea6d15f5c3eda089d076254a9a808", @ANYRES32, @ANYBLOB='\x00'], 0x1e8}], 0x1}, 0x80)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r6, &(0x7f00000000c0), 0x9)
sendfile(r6, r5, 0x0, 0x10000)
unshare(0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c)
setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
preadv(r11, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000036000000000000000000000091123700000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0)

1.823835446s ago: executing program 2 (id=462):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x118, r0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_FRAME_MATCH={0xee, 0x5b, "5176d02e67b202575b96fdc26993d9017d61c5e1e7b9228b78a808d2358b1013c87a7ee15826a18c16bef58a14d74d35dc16234d2f5a92332d775efc2d75c50a291931564052d237e42ee97896f6a14b27ea2815a1414b88c9d3341604af06c5f7ccb4b65f7a9802948aa8599ba918bb12ddf3008d3b1cd8697ca33749e774c84f1b08f9fdccbf7c740df3a091a50dc1ef21118f8dbeddfbbd6d23701df0b379bd66e959f0aae745c5c782e820a4dc5629b949616eea5b6b88c59b6ff4e15d915837e134c139c0a2404550ee5cee2f5deeed1093410e5e64500343b3036398a853e248f39b257dbc4568"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080))
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd40)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='ext4_es_shrink\x00'}, 0x18)
unshare(0x6a040000)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0xffffffff, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x10000]}}, 0x5c)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x81)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.823109392s ago: executing program 1 (id=463):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x10)

1.5837763s ago: executing program 3 (id=464):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x4)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xe20, @remote}, 0x4, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x1560000, 0x1800}}], 0x18}, 0x85)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r7, &(0x7f0000000400), 0xe)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000007737f9ebb8b73f33fa139c88fcbec253a15932b96bc2fe00879ac9b864bcce9e0a5a5299ff11000000000000", @ANYRES16=r8, @ANYBLOB="000826bd7000fddbdf25870000000c0099008200000004000000060048000b000000060048005400000004002a00"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20008000)

1.501813538s ago: executing program 1 (id=465):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4d, 0x0, 0x1, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}, 0x10)

1.473410708s ago: executing program 0 (id=466):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa000}, 0x24000004)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5000000, 0x0, 0x9, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0)

1.26345976s ago: executing program 1 (id=467):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0xf5, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0)

1.144014102s ago: executing program 0 (id=468):
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000c80)={0xa, 0x0, 0x0, @private1, 0xa832}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb3}, 0x5}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4095, 0xfff}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000080)=""/22, 0x16}], 0x7}, 0x80000000}], 0x4, 0x0, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)

937.838781ms ago: executing program 0 (id=469):
accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000000001010400fffc000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)

933.969684ms ago: executing program 1 (id=470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)

931.555991ms ago: executing program 0 (id=471):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0", 0x53}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x4040810)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

923.233607ms ago: executing program 2 (id=472):
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
ioctl$SIOCAX25ADDUID(r2, 0x891c, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000", @ANYRES32=r4], 0x68}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001800)={0x9, "10aac5"}, 0x6)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)="a289e470340000000000000000", 0xd}, {&(0x7f0000000040)="2e9b3d88a8", 0x5}], 0x2)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r11 = socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet_sctp(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000000000000000b000002", @ANYRES32=r11], 0x20, 0x2400e044}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xbc, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e20, @in6=@loopback}}]}, 0xbc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xdb30}]}}]}, 0x40}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'gre0\x00', &(0x7f0000001940)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x5, 0x3, {{0x2c, 0x4, 0x3, 0x9, 0xb0, 0x66, 0x0, 0x8f, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x6, 0xf, "6e7692f7398988d252a139bdfa"}, {0x6, 0x12, "2d22622ee2028cbec6f55eb9da7ec573"}, {0x0, 0xf, "bd7721acb3f09c5f1576a3daca"}, {0x0, 0x7, "8feb4146c2"}, {0xcf62972ef24475c0, 0xe, "c798a252c6803d671d5ab7fd"}, {0x2, 0x12, "8d18c35370a956af9321a815f2671ce7"}]}, @timestamp_addr={0x44, 0x3c, 0x90, 0x1, 0x0, [{@multicast1, 0x8}, {@empty, 0x400}, {@multicast2, 0x8}, {@local, 0xe}, {@rand_addr=0x64010100, 0x9}, {@private=0xa010102, 0x42}, {@local, 0x2}]}]}}}}})

839.816879ms ago: executing program 3 (id=473):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x24, 0x200, 0x0, 0xffffffff, {0x4}, [@typed={0x8, 0x42, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="029e54893d788a08ec0052411971", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000000)={0x0, 0x4, [@local, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a2a2077e2"], 0x9)
socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00')
unshare(0x24020480)
sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="2fae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0)

739.009387ms ago: executing program 4 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010000304000000000000000000030000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000)

673.758263ms ago: executing program 0 (id=475):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, r0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x10)

600.22801ms ago: executing program 1 (id=476):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\t\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

556.544405ms ago: executing program 3 (id=477):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4d, 0x0, 0x1, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}, 0x10)

468.968549ms ago: executing program 0 (id=478):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000240)='syzkaller\x00', 0xea, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff4e)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x19, 0x7fffffff, 0xd3, 0x1, 0x0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10)
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r11, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2c, r13, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x20000000)
sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r13, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004011)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68)

419.657328ms ago: executing program 4 (id=479):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r2=>0x0, 0x32, "98530352c11490a3b721bd29cc2b48125c74e01815aa9d42373836f66c07fe14232c56d981a2ece1f7cc17854e039d1e8348"}, &(0x7f0000000040)=0x3a)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x4, @empty, 0x4}}}, &(0x7f0000000280)=0x84)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x5)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x3c}}, 0x0)

408.605763ms ago: executing program 1 (id=480):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x800)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f4}, [], {0x14, 0x3f9}}, 0x28}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x15b0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x1588, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x1578, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x1140, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "e3531fad712b1894d75c4a4d340e57e08330386f2b17f25dd9395476ffa9bf70b8701e9e4fc009fb255eafb152513da90814906800c7f5ee77a86b94415be36c665d915b4307f8ea1352d3afbe74fb2ecc0a304f121d4a9eeb62370b2365ec7755d9e4c888603f0f9f21243475835b3f754bc877446951598c74e2c536f3a50ea631015f2b8e198af716577edff0b7abf703e1baecbb2266833ff2122eefa22727706ead5dae33a6"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x8b, 0x1, "ac039b072186948bd7931d3bddba6fb2d3eecb2c34c07af3825085843b66e9e961a31758d59789c8eb05053672d51ac618f559bd083543446f2217e34a2628ec0e2bef8859f195b76f17765d569fb29e371a13ef040b061c3598572c0f404191c2fb75768acd916306461a49d24c719e42116cacfd155cb588e3b5f518d308b4188cb196714b0d"}]}, @NFTA_RANGE_FROM_DATA={0xa4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "04a7e7850f85aed543c54a08b6de95689f3a396f9e199423d6c5d377c433f6f327838703b1d514edbf0d0ca1f6921e887e6a56fbe550b10d3e7d47acae86d811ea226d34ccc450985a800df309b7ba1b9e3a5a5779b09e52a598276e9fdf17a6651cec7c42f0971fb47a673ab1dc4882fd793643"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x380, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "7ea42f7a9c19be65782c0d8f5598a167bbaf3dcfa02dd27f88dbbf56059ac082699f9ed45231e1b6eb923ec9d07101ee6854538905be49ab91dd5dabf68d7332b6ed02d08c3a9a2c62bd0938c4d9a3b2a1e32835549f2c7ee362615aacd03e5d320bf22ef5df85f31423162be5bf6e9edc0b1d3a0824a1df57f146aaeb393699be17a400528c5582dc2041a2212ee7dbdfdc36d2509baa0024e73e602986a31383987923fe8f0c1158bc189ac19170d09fb1a572a461a8b176050b1b99"}, @NFTA_DATA_VALUE={0xd2, 0x1, "7ce2ca9623dbf474f8af0c229933c369342fe26c7c2c2ca7479c1778b02df69bb11e52fe362a168c2026203fe8b83cb183fed03f1094049d4ca931ea162b469892022c63086c7bedd707cdd6ef304a962d675791bcb928a6943c5934a8884243c9a7344a0d5c434a7229f466ecb6291a9156a2b765f1527b272a738859c3ffdd1b750bc3801d67f823c4ece6313aec314640af517e7689e6f546f0c82b0b9279e0a46c1689d583150091c7e32e623e110e648e37b2035565a8ede134e429a99d81404f3febb1a362e5ecfca5e297"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "69776ea391cf89a4307deb0716378b8cef2fa8b9e53d20eac3d8db2d1fad019b1e62c35f01b7ad7f431d2043da42bf7a420fb561215175d83803a47c6350970703a789882a22e1dd6fa72dca1f89ca5026740b7f3c48ea25c49f92744f533e235271a43871a0f3b8380eb87a12e22c3cace144ba3a1d30a700f49bcb8246a845bf1f31a5c30243efae25f3b5649aaa65d56967cd60ff14c9aa84193c8ee75884db49611a0d76eb9e6495d91a9b52494cce0112644045442344411f351aefcf9d387c33a2408afad1c80f4f5972602e5cd09aa401942462a408a4e7edd05e618161765f3d9638c3621bf87d6c378ffbbc56ed379dde57c7e8"}, @NFTA_DATA_VALUE={0xa2, 0x1, "c80cb6274a59e2a9a78f5ecb98b579482684100e78c030e65166c4721f0d36fe136a692601f955903d45d1023904b3c3c185339885c1ef0dc8063b5bb8e1d44b125e2be7825ac3ca02ecdd431e3d1ad8330bc4d1246b52c045bcd2e39fdcd74123fe138fa83a61a9c416526be62e8bc8046c1aed23c38a70d61dcfc42edf9b52cae5795d65438b7a2dc5ab9d4045fd6c5dd38b57b133d2260aaf6b9cfcfb"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x105, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x207, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x1620}}, 0x20048000)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x70}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000)
setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f00000000c0)=0x1, 0x4)

299.862134ms ago: executing program 3 (id=481):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x8, {0x2, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x1f00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x60}}}}}]}, 0x3c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33)
r2 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="c687a061", @ANYRES16=r3, @ANYBLOB="000827bd7000ffdbdf2520000000"], 0x14}}, 0x8008)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', <r4=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000240)={'syzkaller0\x00', @random="2b10000010d4"})
close(0x3)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000040)=0x2, 0x4)

0s ago: executing program 4 (id=482):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x40, 0x7fffffff}, {0x6, 0x0, 0x0, 0x1ff}]}, 0x10)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff97}}], 0x1, 0x50d41de21d476b07)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts.
[   84.064914][ T5836] cgroup: Unknown subsys name 'net'
[   84.156622][ T5836] cgroup: Unknown subsys name 'cpuset'
[   84.166287][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.869254][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.878717][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.889292][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.920323][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.930912][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.951218][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.975018][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.985103][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.993963][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.011467][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.030080][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.064312][ T5169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.071801][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.089417][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.094895][ T5169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.104649][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.111828][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.112957][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.124530][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.127145][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.134488][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.168804][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.178985][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.187161][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.195982][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.204437][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.800537][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   90.931036][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   90.972587][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   91.082862][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.090684][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.098654][ T5847] bridge_slave_0: entered allmulticast mode
[   91.106636][ T5847] bridge_slave_0: entered promiscuous mode
[   91.114929][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   91.165614][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.173148][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.180397][ T5847] bridge_slave_1: entered allmulticast mode
[   91.187546][ T5847] bridge_slave_1: entered promiscuous mode
[   91.309123][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.379476][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.413937][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.421361][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.428518][ T5851] bridge_slave_0: entered allmulticast mode
[   91.435986][ T5851] bridge_slave_0: entered promiscuous mode
[   91.489639][ T5847] team0: Port device team_slave_0 added
[   91.518084][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.526209][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.535247][ T5851] bridge_slave_1: entered allmulticast mode
[   91.543184][ T5851] bridge_slave_1: entered promiscuous mode
[   91.552148][ T5847] team0: Port device team_slave_1 added
[   91.573727][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   91.597713][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.605073][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.613279][ T5856] bridge_slave_0: entered allmulticast mode
[   91.621538][ T5856] bridge_slave_0: entered promiscuous mode
[   91.688069][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.717745][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.725609][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.732970][ T5856] bridge_slave_1: entered allmulticast mode
[   91.740157][ T5856] bridge_slave_1: entered promiscuous mode
[   91.747981][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.756333][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.784715][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.804908][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.822761][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.830762][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.838132][ T5860] bridge_slave_0: entered allmulticast mode
[   91.846494][ T5860] bridge_slave_0: entered promiscuous mode
[   91.883105][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.890206][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.918340][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.955647][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.963016][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.970618][ T5860] bridge_slave_1: entered allmulticast mode
[   91.977809][ T5860] bridge_slave_1: entered promiscuous mode
[   91.987271][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.990765][ T5854] Bluetooth: hci0: command tx timeout
[   92.044002][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.071992][ T5854] Bluetooth: hci1: command tx timeout
[   92.079685][ T2152] cfg80211: failed to load regulatory.db
[   92.106704][ T5851] team0: Port device team_slave_0 added
[   92.160074][ T5854] Bluetooth: hci3: command tx timeout
[   92.173653][ T5851] team0: Port device team_slave_1 added
[   92.191894][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.206066][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.217106][ T5856] team0: Port device team_slave_0 added
[   92.228821][ T5847] hsr_slave_0: entered promiscuous mode
[   92.230187][ T5854] Bluetooth: hci2: command tx timeout
[   92.239874][ T5847] hsr_slave_1: entered promiscuous mode
[   92.300675][ T5856] team0: Port device team_slave_1 added
[   92.310782][ T5854] Bluetooth: hci4: command tx timeout
[   92.325437][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.333041][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.359368][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.428196][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.435428][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.462606][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.474274][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.481708][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.488870][ T5855] bridge_slave_0: entered allmulticast mode
[   92.496774][ T5855] bridge_slave_0: entered promiscuous mode
[   92.505939][ T5860] team0: Port device team_slave_0 added
[   92.520528][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.527795][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.553872][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.574597][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.581890][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.589052][ T5855] bridge_slave_1: entered allmulticast mode
[   92.597019][ T5855] bridge_slave_1: entered promiscuous mode
[   92.605673][ T5860] team0: Port device team_slave_1 added
[   92.641824][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.648898][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.675895][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.776974][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.790158][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.797225][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.823392][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.836630][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.843703][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.869864][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.905311][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.956348][ T5851] hsr_slave_0: entered promiscuous mode
[   92.964590][ T5851] hsr_slave_1: entered promiscuous mode
[   92.971322][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.979030][ T5851] Cannot create hsr debugfs directory
[   93.061790][ T5855] team0: Port device team_slave_0 added
[   93.075859][ T5856] hsr_slave_0: entered promiscuous mode
[   93.082476][ T5856] hsr_slave_1: entered promiscuous mode
[   93.089227][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.099544][ T5856] Cannot create hsr debugfs directory
[   93.135261][ T5855] team0: Port device team_slave_1 added
[   93.176745][ T5860] hsr_slave_0: entered promiscuous mode
[   93.183483][ T5860] hsr_slave_1: entered promiscuous mode
[   93.190159][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.197870][ T5860] Cannot create hsr debugfs directory
[   93.328478][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.337673][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.365494][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.413115][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.420345][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.447291][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.673898][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.708455][ T5855] hsr_slave_0: entered promiscuous mode
[   93.715624][ T5855] hsr_slave_1: entered promiscuous mode
[   93.722855][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.730624][ T5855] Cannot create hsr debugfs directory
[   93.752365][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.792099][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.807048][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.045012][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.070568][ T5854] Bluetooth: hci0: command tx timeout
[   94.089509][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.116520][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.146939][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.150222][ T5854] Bluetooth: hci1: command tx timeout
[   94.211884][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.226462][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.230199][ T5854] Bluetooth: hci3: command tx timeout
[   94.253094][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.266578][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.310514][ T5854] Bluetooth: hci2: command tx timeout
[   94.364015][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.376224][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.390127][ T5854] Bluetooth: hci4: command tx timeout
[   94.397897][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.416939][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.447243][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.507852][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   94.554866][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.567772][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.585191][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.596412][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.614835][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.622147][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.667638][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.674894][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.831783][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.879704][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.938889][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.977308][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   94.992838][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   95.048334][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.055545][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.105221][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.112476][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.128030][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.135396][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.153092][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   95.178439][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.185726][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.227722][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.238382][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.245579][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.262344][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.269525][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.374607][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   95.418734][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.443887][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.451179][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.475736][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.498540][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.505776][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.814933][ T5847] veth0_vlan: entered promiscuous mode
[   95.863730][ T5847] veth1_vlan: entered promiscuous mode
[   96.052324][ T5847] veth0_macvtap: entered promiscuous mode
[   96.103012][ T5847] veth1_macvtap: entered promiscuous mode
[   96.153567][ T5854] Bluetooth: hci0: command tx timeout
[   96.226886][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.230827][ T5854] Bluetooth: hci1: command tx timeout
[   96.255257][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.271759][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.305760][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.313186][ T5854] Bluetooth: hci3: command tx timeout
[   96.367492][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.378335][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.392050][ T5854] Bluetooth: hci2: command tx timeout
[   96.405630][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.428451][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.444702][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.454178][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.470733][ T5854] Bluetooth: hci4: command tx timeout
[   96.688499][ T5856] veth0_vlan: entered promiscuous mode
[   96.764950][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.776023][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.828145][ T5856] veth1_vlan: entered promiscuous mode
[   96.842373][ T5860] veth0_vlan: entered promiscuous mode
[   96.849705][  T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.858410][ T5851] veth0_vlan: entered promiscuous mode
[   96.860094][  T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.935755][ T5851] veth1_vlan: entered promiscuous mode
[   96.944695][ T5860] veth1_vlan: entered promiscuous mode
[   96.966475][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.048057][ T5855] veth0_vlan: entered promiscuous mode
[   97.095757][ T5860] veth0_macvtap: entered promiscuous mode
[   97.125796][ T5856] veth0_macvtap: entered promiscuous mode
[   97.154311][ T5855] veth1_vlan: entered promiscuous mode
[   97.179353][ T5856] veth1_macvtap: entered promiscuous mode
[   97.228699][ T5860] veth1_macvtap: entered promiscuous mode
[   97.287537][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.297907][ T5851] veth0_macvtap: entered promiscuous mode
[   97.324313][ T5963] netlink: 'syz.0.6': attribute type 27 has an invalid length.
[   97.342673][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.359433][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.374244][ T5851] veth1_macvtap: entered promiscuous mode
[   97.397937][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.427494][ T5855] veth0_macvtap: entered promiscuous mode
[   97.443381][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.458106][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.476102][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.489416][ T5855] veth1_macvtap: entered promiscuous mode
[   97.499269][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.512280][ T2981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.535130][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.587400][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.641702][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.649880][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.677862][ T2981] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.705714][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.768392][ T2981] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.857906][ T2981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.929097][ T2981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.941942][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.970056][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.999267][ T2981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.069093][ T2981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.134713][  T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.156732][ T2981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.164795][  T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.185870][ T2981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.218650][ T5966] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7'.
[   98.230609][ T5854] Bluetooth: hci0: command tx timeout
[   98.244380][ T2981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.256141][ T2981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.290717][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.298588][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.318901][ T5854] Bluetooth: hci1: command tx timeout
[   98.363979][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.389826][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.392999][ T5854] Bluetooth: hci3: command tx timeout
[   98.436262][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.471397][ T5854] Bluetooth: hci2: command tx timeout
[   98.481422][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.551152][ T5854] Bluetooth: hci4: command tx timeout
[   98.560994][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.578487][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.680868][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.688855][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.899860][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.926053][ T5975] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2'.
[   98.953155][ T5977] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10'.
[   98.978080][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.047887][ T5979] Zero length message leads to an empty skb
[   99.342112][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'.
[   99.554921][ T5996] netlink: 'syz.4.5': attribute type 4 has an invalid length.
[   99.576721][ T5996] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5'.
[   99.657011][ T5987] team0: Port device team_slave_0 removed
[   99.744521][ T5992] warning: `syz.3.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.764078][ T5994] veth1_to_bond: entered allmulticast mode
[   99.873907][ T5993] veth1_to_bond: left allmulticast mode
[  100.185876][ T6009] netlink: 'syz.1.19': attribute type 32 has an invalid length.
[  100.208582][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'.
[  100.213590][ T6015] Bluetooth: MGMT ver 1.23
[  100.253863][ T6009] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET)
[  100.329573][ T6009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19'.
[  100.718542][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'.
[  100.750170][ T6025] netlink: 'syz.3.24': attribute type 30 has an invalid length.
[  100.758053][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'.
[  100.759882][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'.
[  100.925275][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.238894][ T6035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  101.560420][  T977] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82
[  102.087329][ T6048] syzkaller0: entered promiscuous mode
[  102.093284][ T6048] syzkaller0: entered allmulticast mode
[  102.332187][ T6069] FAULT_INJECTION: forcing a failure.
[  102.332187][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  102.349874][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.2.36 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  102.349902][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  102.349913][ T6069] Call Trace:
[  102.349927][ T6069]  <TASK>
[  102.349936][ T6069]  dump_stack_lvl+0x189/0x250
[  102.349965][ T6069]  ? __pfx____ratelimit+0x10/0x10
[  102.349988][ T6069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.350010][ T6069]  ? __pfx__printk+0x10/0x10
[  102.350035][ T6069]  ? __might_fault+0xb0/0x130
[  102.350070][ T6069]  should_fail_ex+0x414/0x560
[  102.350103][ T6069]  _copy_from_iter+0x1db/0x16f0
[  102.350128][ T6069]  ? rcu_is_watching+0x15/0xb0
[  102.350151][ T6069]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  102.350176][ T6069]  ? __pfx__copy_from_iter+0x10/0x10
[  102.350198][ T6069]  ? __build_skb_around+0x257/0x3e0
[  102.350227][ T6069]  ? netlink_sendmsg+0x642/0xb30
[  102.350251][ T6069]  ? skb_put+0x11b/0x210
[  102.350280][ T6069]  netlink_sendmsg+0x6b2/0xb30
[  102.350316][ T6069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  102.350344][ T6069]  ? aa_sock_msg_perm+0x94/0x160
[  102.350373][ T6069]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  102.350389][ T6069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  102.350414][ T6069]  __sock_sendmsg+0x219/0x270
[  102.350439][ T6069]  ____sys_sendmsg+0x505/0x830
[  102.350483][ T6069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  102.350524][ T6069]  ? import_iovec+0x74/0xa0
[  102.350552][ T6069]  ___sys_sendmsg+0x21f/0x2a0
[  102.350573][ T6069]  ? __pfx____sys_sendmsg+0x10/0x10
[  102.350632][ T6069]  ? __fget_files+0x2a/0x420
[  102.350657][ T6069]  ? __fget_files+0x3a0/0x420
[  102.350695][ T6069]  __x64_sys_sendmsg+0x19b/0x260
[  102.350718][ T6069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  102.350748][ T6069]  ? __pfx_ksys_write+0x10/0x10
[  102.350769][ T6069]  ? rcu_is_watching+0x15/0xb0
[  102.350796][ T6069]  ? do_syscall_64+0xbe/0x3b0
[  102.350826][ T6069]  do_syscall_64+0xfa/0x3b0
[  102.350851][ T6069]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.350876][ T6069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.350894][ T6069]  ? clear_bhb_loop+0x60/0xb0
[  102.350916][ T6069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.350934][ T6069] RIP: 0033:0x7f5b3578e929
[  102.350952][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.350969][ T6069] RSP: 002b:00007f5b36553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  102.350991][ T6069] RAX: ffffffffffffffda RBX: 00007f5b359b5fa0 RCX: 00007f5b3578e929
[  102.351005][ T6069] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005
[  102.351017][ T6069] RBP: 00007f5b36553090 R08: 0000000000000000 R09: 0000000000000000
[  102.351030][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.351041][ T6069] R13: 0000000000000000 R14: 00007f5b359b5fa0 R15: 00007fff4a148a88
[  102.351073][ T6069]  </TASK>
[  104.285943][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.604508][ T6106] __nla_validate_parse: 2 callbacks suppressed
[  104.604527][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'.
[  106.353373][ T6110] 8021q: VLANs not supported on wg0
[  106.562672][ T6118] FAULT_INJECTION: forcing a failure.
[  106.562672][ T6118] name failslab, interval 1, probability 0, space 0, times 1
[  106.604123][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.4.49 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  106.604160][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  106.604172][ T6118] Call Trace:
[  106.604180][ T6118]  <TASK>
[  106.604189][ T6118]  dump_stack_lvl+0x189/0x250
[  106.604220][ T6118]  ? __pfx____ratelimit+0x10/0x10
[  106.604246][ T6118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.604270][ T6118]  ? __pfx__printk+0x10/0x10
[  106.604303][ T6118]  ? __lock_acquire+0xab9/0xd20
[  106.604330][ T6118]  should_fail_ex+0x414/0x560
[  106.604365][ T6118]  should_failslab+0xa8/0x100
[  106.604394][ T6118]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  106.604418][ T6118]  ? __alloc_skb+0x112/0x2d0
[  106.604452][ T6118]  __alloc_skb+0x112/0x2d0
[  106.604484][ T6118]  __netdev_alloc_skb+0x108/0x970
[  106.604523][ T6118]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  106.604551][ T6118]  ? __lock_acquire+0xab9/0xd20
[  106.604581][ T6118]  ieee80211_probereq_get+0x60/0x270
[  106.604608][ T6118]  ieee80211_build_probe_req+0x178/0x480
[  106.604641][ T6118]  ? __pfx_ieee80211_build_probe_req+0x10/0x10
[  106.604665][ T6118]  ? mac80211_hwsim_config+0x588/0xcb0
[  106.604692][ T6118]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  106.604723][ T6118]  ? __pfx___mutex_lock+0x10/0x10
[  106.604749][ T6118]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  106.604786][ T6118]  ieee80211_scan_state_send_probe+0x3bf/0xa10
[  106.604843][ T6118]  __ieee80211_start_scan+0x1c2e/0x1e20
[  106.604870][ T6118]  ? rcu_is_watching+0x15/0xb0
[  106.604943][ T6118]  rdev_scan+0x14d/0x2f0
[  106.604977][ T6118]  cfg80211_wext_siwscan+0xe43/0x1270
[  106.605030][ T6118]  ioctl_standard_iw_point+0x689/0xd40
[  106.605077][ T6118]  ? __pfx_cfg80211_wext_siwscan+0x10/0x10
[  106.605100][ T6118]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  106.605131][ T6118]  ? __pfx___mutex_lock+0x10/0x10
[  106.605177][ T6118]  ? full_name_hash+0x92/0xe0
[  106.605208][ T6118]  ? __pfx_cfg80211_wext_siwscan+0x10/0x10
[  106.605231][ T6118]  ioctl_standard_call+0xaf/0x1b0
[  106.605263][ T6118]  ? __pfx_cfg80211_wext_siwscan+0x10/0x10
[  106.605283][ T6118]  wext_ioctl_dispatch+0xee/0x410
[  106.605309][ T6118]  ? __pfx_ioctl_standard_call+0x10/0x10
[  106.605341][ T6118]  wext_handle_ioctl+0x100/0x1c0
[  106.605374][ T6118]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  106.605399][ T6118]  ? __lock_acquire+0xab9/0xd20
[  106.605437][ T6118]  sock_ioctl+0x15f/0x790
[  106.605463][ T6118]  ? __pfx_sock_ioctl+0x10/0x10
[  106.605485][ T6118]  ? __fget_files+0x2a/0x420
[  106.605511][ T6118]  ? __fget_files+0x3a0/0x420
[  106.605536][ T6118]  ? __fget_files+0x2a/0x420
[  106.605566][ T6118]  ? bpf_lsm_file_ioctl+0x9/0x20
[  106.605588][ T6118]  ? __pfx_sock_ioctl+0x10/0x10
[  106.605609][ T6118]  __se_sys_ioctl+0xf9/0x170
[  106.605635][ T6118]  do_syscall_64+0xfa/0x3b0
[  106.605659][ T6118]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.605683][ T6118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.605703][ T6118]  ? clear_bhb_loop+0x60/0xb0
[  106.605727][ T6118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.605747][ T6118] RIP: 0033:0x7fd97b58e929
[  106.605765][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.605782][ T6118] RSP: 002b:00007fd97c39e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  106.605805][ T6118] RAX: ffffffffffffffda RBX: 00007fd97b7b5fa0 RCX: 00007fd97b58e929
[  106.605819][ T6118] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003
[  106.605831][ T6118] RBP: 00007fd97c39e090 R08: 0000000000000000 R09: 0000000000000000
[  106.605843][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.605854][ T6118] R13: 0000000000000000 R14: 00007fd97b7b5fa0 R15: 00007fff8e34f848
[  106.605887][ T6118]  </TASK>
[  107.401372][ T6130] Illegal XDP return value 4294967282 on prog  (id 13) dev N/A, expect packet loss!
[  107.729313][ T6140] Cannot find add_set index 0 as target
[  108.014205][ T6152] sctp: [Deprecated]: syz.4.58 (pid 6152) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.014205][ T6152] Use struct sctp_sack_info instead
[  108.617464][ T6167] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[  108.702825][ T6167] team0: Device veth0_vlan is up. Set it down before adding it as a team port
[  109.040637][ T6171] netlink: 'syz.0.66': attribute type 11 has an invalid length.
[  109.076298][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'.
[  109.288611][ T6171] hsr_slave_1 (unregistering): left promiscuous mode
[  109.381572][ T6179] FAULT_INJECTION: forcing a failure.
[  109.381572][ T6179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  109.421869][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.2.68 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  109.421895][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  109.421904][ T6179] Call Trace:
[  109.421911][ T6179]  <TASK>
[  109.421918][ T6179]  dump_stack_lvl+0x189/0x250
[  109.421944][ T6179]  ? __pfx____ratelimit+0x10/0x10
[  109.421964][ T6179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.421982][ T6179]  ? __pfx__printk+0x10/0x10
[  109.422014][ T6179]  should_fail_ex+0x414/0x560
[  109.422042][ T6179]  _copy_to_user+0x31/0xb0
[  109.422063][ T6179]  simple_read_from_buffer+0xe1/0x170
[  109.422087][ T6179]  proc_fail_nth_read+0x1df/0x250
[  109.422113][ T6179]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  109.422138][ T6179]  ? rw_verify_area+0x258/0x650
[  109.422155][ T6179]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  109.422177][ T6179]  vfs_read+0x200/0x980
[  109.422200][ T6179]  ? __pfx___mutex_lock+0x10/0x10
[  109.422223][ T6179]  ? __pfx_vfs_read+0x10/0x10
[  109.422242][ T6179]  ? __fget_files+0x2a/0x420
[  109.422267][ T6179]  ? __fget_files+0x3a0/0x420
[  109.422285][ T6179]  ? __fget_files+0x2a/0x420
[  109.422314][ T6179]  ksys_read+0x145/0x250
[  109.422334][ T6179]  ? __pfx_ksys_read+0x10/0x10
[  109.422349][ T6179]  ? rcu_is_watching+0x15/0xb0
[  109.422373][ T6179]  ? do_syscall_64+0xbe/0x3b0
[  109.422397][ T6179]  do_syscall_64+0xfa/0x3b0
[  109.422415][ T6179]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.422433][ T6179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.422448][ T6179]  ? clear_bhb_loop+0x60/0xb0
[  109.422477][ T6179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.422491][ T6179] RIP: 0033:0x7f5b3578d33c
[  109.422506][ T6179] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  109.422518][ T6179] RSP: 002b:00007f5b36532030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  109.422536][ T6179] RAX: ffffffffffffffda RBX: 00007f5b359b6080 RCX: 00007f5b3578d33c
[  109.422547][ T6179] RDX: 000000000000000f RSI: 00007f5b365320a0 RDI: 000000000000000a
[  109.422556][ T6179] RBP: 00007f5b36532090 R08: 0000000000000000 R09: 0000000000000000
[  109.422565][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.422574][ T6179] R13: 0000000000000001 R14: 00007f5b359b6080 R15: 00007fff4a148a88
[  109.422599][ T6179]  </TASK>
[  109.785745][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'.
[  109.880925][ T6189] ieee802154 phy0 wpan0: encryption failed: -22
[  110.032970][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.042377][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.275407][ T6200] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  110.424787][ T6213] FAULT_INJECTION: forcing a failure.
[  110.424787][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.440795][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.3.80 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  110.440823][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  110.440835][ T6213] Call Trace:
[  110.440842][ T6213]  <TASK>
[  110.440849][ T6213]  dump_stack_lvl+0x189/0x250
[  110.440878][ T6213]  ? __pfx____ratelimit+0x10/0x10
[  110.440903][ T6213]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.440926][ T6213]  ? __pfx__printk+0x10/0x10
[  110.440954][ T6213]  ? __might_fault+0xb0/0x130
[  110.440992][ T6213]  should_fail_ex+0x414/0x560
[  110.441027][ T6213]  _copy_from_user+0x2d/0xb0
[  110.441053][ T6213]  csum_and_copy_from_iter_full+0x4a1/0x1eb0
[  110.441097][ T6213]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  110.441187][ T6213]  ? rcu_is_watching+0x15/0xb0
[  110.441213][ T6213]  ? trace_kmalloc+0x1f/0xd0
[  110.441233][ T6213]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  110.441264][ T6213]  ? __build_skb_around+0x257/0x3e0
[  110.441294][ T6213]  ping_getfrag+0x72/0x260
[  110.441317][ T6213]  ? skb_put+0x11b/0x210
[  110.441348][ T6213]  __ip6_append_data+0x36bc/0x3c50
[  110.441399][ T6213]  ? __pfx_ping_getfrag+0x10/0x10
[  110.441446][ T6213]  ? __pfx___ip6_append_data+0x10/0x10
[  110.441473][ T6213]  ? __pfx_ip6_mtu+0x10/0x10
[  110.441511][ T6213]  ip6_append_data+0x1c4/0x380
[  110.441545][ T6213]  ? __pfx_ping_getfrag+0x10/0x10
[  110.441571][ T6213]  ping_v6_sendmsg+0xe0e/0x1210
[  110.441603][ T6213]  ? look_up_lock_class+0x74/0x170
[  110.441634][ T6213]  ? __pfx_ping_v6_sendmsg+0x10/0x10
[  110.441683][ T6213]  ? __local_bh_enable_ip+0x12d/0x1c0
[  110.441711][ T6213]  ? __local_bh_enable_ip+0x12d/0x1c0
[  110.441733][ T6213]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  110.441758][ T6213]  ? do_raw_spin_unlock+0x122/0x240
[  110.441786][ T6213]  ? inet_sendmsg+0x14f/0x370
[  110.441812][ T6213]  ? inet_sendmsg+0x2f4/0x370
[  110.441838][ T6213]  __sock_sendmsg+0x19c/0x270
[  110.441866][ T6213]  ____sys_sendmsg+0x52d/0x830
[  110.441903][ T6213]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.441944][ T6213]  ? import_iovec+0x74/0xa0
[  110.441972][ T6213]  ___sys_sendmsg+0x21f/0x2a0
[  110.441994][ T6213]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.442055][ T6213]  ? __fget_files+0x2a/0x420
[  110.442081][ T6213]  ? __fget_files+0x3a0/0x420
[  110.442129][ T6213]  __sys_sendmmsg+0x227/0x430
[  110.442156][ T6213]  ? __pfx___sys_sendmmsg+0x10/0x10
[  110.442173][ T6213]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  110.442231][ T6213]  ? ksys_write+0x22a/0x250
[  110.442258][ T6213]  ? __pfx_ksys_write+0x10/0x10
[  110.442277][ T6213]  ? rcu_is_watching+0x15/0xb0
[  110.442307][ T6213]  __x64_sys_sendmmsg+0xa0/0xc0
[  110.442329][ T6213]  do_syscall_64+0xfa/0x3b0
[  110.442353][ T6213]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.442376][ T6213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.442395][ T6213]  ? clear_bhb_loop+0x60/0xb0
[  110.442419][ T6213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.442438][ T6213] RIP: 0033:0x7f095c38e929
[  110.442457][ T6213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.442473][ T6213] RSP: 002b:00007f095d153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  110.442495][ T6213] RAX: ffffffffffffffda RBX: 00007f095c5b5fa0 RCX: 00007f095c38e929
[  110.442509][ T6213] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003
[  110.442521][ T6213] RBP: 00007f095d153090 R08: 0000000000000000 R09: 0000000000000000
[  110.442532][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  110.442543][ T6213] R13: 0000000000000000 R14: 00007f095c5b5fa0 R15: 00007ffcf95dce08
[  110.442576][ T6213]  </TASK>
[  111.000728][ T6220] netlink: 'syz.3.81': attribute type 16 has an invalid length.
[  111.064036][ T6220] netlink: 'syz.3.81': attribute type 17 has an invalid length.
[  111.089610][ T6220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.238460][ T6222] netlink: 'syz.0.82': attribute type 11 has an invalid length.
[  111.246046][ T6224] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.83'.
[  111.267334][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.85'.
[  111.286185][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'.
[  111.338224][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[  111.686949][ T6241] netlink: 144 bytes leftover after parsing attributes in process `syz.3.88'.
[  112.017697][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.91'.
[  112.492875][ T6266] sctp: [Deprecated]: syz.2.95 (pid 6266) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.492875][ T6266] Use struct sctp_sack_info instead
[  112.929176][ T6277] FAULT_INJECTION: forcing a failure.
[  112.929176][ T6277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.040336][ T6277] CPU: 0 UID: 0 PID: 6277 Comm: syz.2.98 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  113.040368][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  113.040378][ T6277] Call Trace:
[  113.040386][ T6277]  <TASK>
[  113.040394][ T6277]  dump_stack_lvl+0x189/0x250
[  113.040422][ T6277]  ? __pfx____ratelimit+0x10/0x10
[  113.040448][ T6277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.040470][ T6277]  ? __pfx__printk+0x10/0x10
[  113.040495][ T6277]  ? __might_fault+0xb0/0x130
[  113.040531][ T6277]  should_fail_ex+0x414/0x560
[  113.040573][ T6277]  _copy_from_user+0x2d/0xb0
[  113.040598][ T6277]  ___sys_sendmsg+0x158/0x2a0
[  113.040621][ T6277]  ? __pfx____sys_sendmsg+0x10/0x10
[  113.040681][ T6277]  ? __fget_files+0x2a/0x420
[  113.040708][ T6277]  ? __fget_files+0x3a0/0x420
[  113.040746][ T6277]  __x64_sys_sendmsg+0x19b/0x260
[  113.040769][ T6277]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  113.040799][ T6277]  ? __pfx_ksys_write+0x10/0x10
[  113.040820][ T6277]  ? rcu_is_watching+0x15/0xb0
[  113.040850][ T6277]  ? do_syscall_64+0xbe/0x3b0
[  113.040880][ T6277]  do_syscall_64+0xfa/0x3b0
[  113.040902][ T6277]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.040925][ T6277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.040943][ T6277]  ? clear_bhb_loop+0x60/0xb0
[  113.040973][ T6277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.040992][ T6277] RIP: 0033:0x7f5b3578e929
[  113.041010][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.041027][ T6277] RSP: 002b:00007f5b36553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  113.041049][ T6277] RAX: ffffffffffffffda RBX: 00007f5b359b5fa0 RCX: 00007f5b3578e929
[  113.041064][ T6277] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010
[  113.041076][ T6277] RBP: 00007f5b36553090 R08: 0000000000000000 R09: 0000000000000000
[  113.041087][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.041098][ T6277] R13: 0000000000000000 R14: 00007f5b359b5fa0 R15: 00007fff4a148a88
[  113.041140][ T6277]  </TASK>
[  113.579681][ T6284] netlink: 'syz.1.101': attribute type 11 has an invalid length.
[  113.677239][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'.
[  113.866550][ T6294] hsr_slave_1 (unregistering): left promiscuous mode
[  114.044635][ T6300] sctp: [Deprecated]: syz.0.108 (pid 6300) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.044635][ T6300] Use struct sctp_sack_info instead
[  114.290606][ T6304] veth1_macvtap: left promiscuous mode
[  114.296162][ T6304] macsec0: entered promiscuous mode
[  114.314614][ T6305] veth1_macvtap: entered promiscuous mode
[  114.321671][ T6305] macsec0: left promiscuous mode
[  114.454020][ T6315] netlink: 'syz.4.112': attribute type 1 has an invalid length.
[  114.474959][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'.
[  114.916784][ T2152] IPVS: starting estimator thread 0...
[  115.033392][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'.
[  115.050176][ T6334] IPVS: using max 31 ests per chain, 74400 per kthread
[  115.081005][ T6337] netlink: 64 bytes leftover after parsing attributes in process `syz.3.118'.
[  115.266267][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'.
[  115.677699][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'.
[  116.067192][ T6371] netlink: 248 bytes leftover after parsing attributes in process `syz.1.125'.
[  116.297800][ T6378] netlink: 'syz.2.129': attribute type 1 has an invalid length.
[  116.698742][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.706180][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.714416][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.721678][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.884695][ T6395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.005407][ T6401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.133'.
[  118.524185][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'.
[  119.124204][ T6460] netlink: 'syz.2.149': attribute type 178 has an invalid length.
[  119.182706][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  119.220224][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'.
[  119.748454][ T6482] netlink: 100 bytes leftover after parsing attributes in process `syz.4.153'.
[  120.121466][ T6477] team0 (unregistering): Port device team_slave_0 removed
[  120.155705][ T6477] team0 (unregistering): Port device team_slave_1 removed
[  120.159741][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[  120.784136][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[  121.126662][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'.
[  121.144438][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'.
[  121.167638][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'.
[  121.322867][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'.
[  121.429072][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'.
[  121.804115][ T6547] netlink: 48 bytes leftover after parsing attributes in process `syz.3.177'.
[  121.970784][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[  122.038119][ T6549] dummy0: entered promiscuous mode
[  122.047677][ T6549] dummy0: left promiscuous mode
[  122.192655][ T6553] sctp: [Deprecated]: syz.1.179 (pid 6553) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.192655][ T6553] Use struct sctp_sack_info instead
[  122.589269][ T6570] netlink: 'syz.4.183': attribute type 1 has an invalid length.
[  122.654789][ T6570] netlink: 224 bytes leftover after parsing attributes in process `syz.4.183'.
[  122.804291][ T6578] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  122.832716][ T6578] macsec1: entered allmulticast mode
[  122.851296][ T6578] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  122.882806][ T6578] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  122.917533][ T6578] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  123.242628][ T6590] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  123.265895][ T6590] macsec1: entered allmulticast mode
[  123.288483][ T6590] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  123.356220][ T6590] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  123.390749][ T6590] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  123.804372][ T6604] netlink: 'syz.4.192': attribute type 1 has an invalid length.
[  123.980468][ T6608] sctp: [Deprecated]: syz.2.195 (pid 6608) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.980468][ T6608] Use struct sctp_sack_info instead
[  124.009445][ T6610] gretap0: entered promiscuous mode
[  124.056263][ T6610] vlan2: entered promiscuous mode
[  124.279336][ T6622] netlink: 'syz.0.200': attribute type 11 has an invalid length.
[  124.523079][ T6630] netlink: 'syz.3.201': attribute type 32 has an invalid length.
[  125.501645][ T6665] sctp: [Deprecated]: syz.4.214 (pid 6665) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.501645][ T6665] Use struct sctp_sack_info instead
[  125.877047][ T6677] __nla_validate_parse: 9 callbacks suppressed
[  125.877068][ T6677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.219'.
[  125.893237][ T6677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.219'.
[  126.231522][ T6682] IPv6: sit1: Disabled Multicast RS
[  126.253416][ T6682] sit1: entered allmulticast mode
[  126.830474][ T6706] sctp: [Deprecated]: syz.1.229 (pid 6706) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.830474][ T6706] Use struct sctp_sack_info instead
[  128.113520][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'.
[  128.502181][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[  128.543568][ T6768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.887331][ T6778] FAULT_INJECTION: forcing a failure.
[  128.887331][ T6778] name failslab, interval 1, probability 0, space 0, times 0
[  128.920159][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.1.245 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  128.920189][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  128.920199][ T6778] Call Trace:
[  128.920207][ T6778]  <TASK>
[  128.920216][ T6778]  dump_stack_lvl+0x189/0x250
[  128.920246][ T6778]  ? __pfx____ratelimit+0x10/0x10
[  128.920273][ T6778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.920297][ T6778]  ? __pfx__printk+0x10/0x10
[  128.920325][ T6778]  ? rhltable_lookup+0x6aa/0x780
[  128.920363][ T6778]  should_fail_ex+0x414/0x560
[  128.920397][ T6778]  should_failslab+0xa8/0x100
[  128.920427][ T6778]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  128.920452][ T6778]  ? __alloc_skb+0x112/0x2d0
[  128.920485][ T6778]  __alloc_skb+0x112/0x2d0
[  128.920518][ T6778]  mr6_netlink_event+0xb6/0x190
[  128.920543][ T6778]  ? ip6mr_mfc_add+0x1e6/0x2c90
[  128.920569][ T6778]  ip6mr_mfc_add+0x5c4/0x2c90
[  128.920602][ T6778]  ? ip6mr_mfc_add+0x1e6/0x2c90
[  128.920635][ T6778]  ? __pfx___mutex_trylock_common+0x10/0x10
[  128.920667][ T6778]  ? rcu_is_watching+0x15/0xb0
[  128.920695][ T6778]  ? __pfx_ip6mr_mfc_add+0x10/0x10
[  128.920720][ T6778]  ? __mutex_lock+0x330/0xe80
[  128.920759][ T6778]  ? __might_fault+0xb0/0x130
[  128.920781][ T6778]  ? ip6_mroute_setsockopt+0x956/0xf00
[  128.920812][ T6778]  ? __pfx___mutex_lock+0x10/0x10
[  128.920864][ T6778]  ip6_mroute_setsockopt+0xd70/0xf00
[  128.920904][ T6778]  ? __pfx_ip6_mroute_setsockopt+0x10/0x10
[  128.920984][ T6778]  do_ipv6_setsockopt+0x445/0x2fb0
[  128.921016][ T6778]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  128.921034][ T6778]  ? __might_fault+0xb0/0x130
[  128.921059][ T6778]  ? _parse_integer_limit+0x1ae/0x1f0
[  128.921097][ T6778]  ? aa_label_sk_perm+0x413/0x560
[  128.921132][ T6778]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  128.921183][ T6778]  ? __pfx___might_resched+0x10/0x10
[  128.921208][ T6778]  ? rcu_read_lock_any_held+0xb3/0x120
[  128.921234][ T6778]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  128.921263][ T6778]  ? vfs_write+0x8d8/0xa90
[  128.921298][ T6778]  ipv6_setsockopt+0x59/0x170
[  128.921322][ T6778]  rawv6_setsockopt+0x23b/0x5b0
[  128.921340][ T6778]  ? __lock_acquire+0xab9/0xd20
[  128.921363][ T6778]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  128.921385][ T6778]  ? aa_sock_opt_perm+0x74/0x110
[  128.921414][ T6778]  ? sock_common_setsockopt+0x36/0xc0
[  128.921439][ T6778]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  128.921467][ T6778]  do_sock_setsockopt+0x25a/0x3e0
[  128.921500][ T6778]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  128.921535][ T6778]  ? __fget_files+0x2a/0x420
[  128.921573][ T6778]  __x64_sys_setsockopt+0x18b/0x220
[  128.921610][ T6778]  do_syscall_64+0xfa/0x3b0
[  128.921635][ T6778]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.921659][ T6778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.921679][ T6778]  ? clear_bhb_loop+0x60/0xb0
[  128.921704][ T6778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.921723][ T6778] RIP: 0033:0x7fe61798e929
[  128.921742][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.921758][ T6778] RSP: 002b:00007fe6157f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  128.921781][ T6778] RAX: ffffffffffffffda RBX: 00007fe617bb5fa0 RCX: 00007fe61798e929
[  128.921795][ T6778] RDX: 00000000000000d2 RSI: 0000000000000029 RDI: 0000000000000003
[  128.921806][ T6778] RBP: 00007fe6157f6090 R08: 000000000000005c R09: 0000000000000000
[  128.921818][ T6778] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  128.921830][ T6778] R13: 0000000000000000 R14: 00007fe617bb5fa0 R15: 00007ffe4499e908
[  128.921864][ T6778]  </TASK>
[  129.815507][ T6795] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.400615][ T6829] netlink: 'syz.4.252': attribute type 58 has an invalid length.
[  130.459883][ T6835] netlink: 'syz.4.252': attribute type 58 has an invalid length.
[  130.661124][ T6840] netlink: 'syz.2.255': attribute type 2 has an invalid length.
[  130.700662][ T6840] netlink: 119 bytes leftover after parsing attributes in process `syz.2.255'.
[  130.814473][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  130.851000][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  130.914763][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  130.969559][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  131.023016][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  131.060649][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  131.092972][ T6840] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  131.439843][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'.
[  131.448170][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.567202][ T6869] netlink: 64 bytes leftover after parsing attributes in process `syz.4.263'.
[  131.654523][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'.
[  131.792272][ T6880] FAULT_INJECTION: forcing a failure.
[  131.792272][ T6880] name failslab, interval 1, probability 0, space 0, times 0
[  131.814259][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.3.268 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  131.814290][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  131.814302][ T6880] Call Trace:
[  131.814310][ T6880]  <TASK>
[  131.814320][ T6880]  dump_stack_lvl+0x189/0x250
[  131.814350][ T6880]  ? __pfx____ratelimit+0x10/0x10
[  131.814378][ T6880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.814402][ T6880]  ? __pfx__printk+0x10/0x10
[  131.814437][ T6880]  ? __pfx___might_resched+0x10/0x10
[  131.814465][ T6880]  should_fail_ex+0x414/0x560
[  131.814501][ T6880]  should_failslab+0xa8/0x100
[  131.814529][ T6880]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  131.814554][ T6880]  ? __alloc_skb+0x112/0x2d0
[  131.814587][ T6880]  __alloc_skb+0x112/0x2d0
[  131.814620][ T6880]  __ip6_append_data+0x2adb/0x3c50
[  131.814676][ T6880]  ? __pfx_ping_getfrag+0x10/0x10
[  131.814728][ T6880]  ? __pfx___ip6_append_data+0x10/0x10
[  131.814756][ T6880]  ? __pfx_ip6_mtu+0x10/0x10
[  131.814797][ T6880]  ip6_append_data+0x1c4/0x380
[  131.814833][ T6880]  ? __pfx_ping_getfrag+0x10/0x10
[  131.814860][ T6880]  ping_v6_sendmsg+0xe0e/0x1210
[  131.814893][ T6880]  ? look_up_lock_class+0x74/0x170
[  131.814924][ T6880]  ? __pfx_ping_v6_sendmsg+0x10/0x10
[  131.814974][ T6880]  ? __local_bh_enable_ip+0x12d/0x1c0
[  131.815002][ T6880]  ? __local_bh_enable_ip+0x12d/0x1c0
[  131.815024][ T6880]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  131.815050][ T6880]  ? do_raw_spin_unlock+0x122/0x240
[  131.815079][ T6880]  ? inet_sendmsg+0x14f/0x370
[  131.815103][ T6880]  ? inet_sendmsg+0x2f4/0x370
[  131.815131][ T6880]  __sock_sendmsg+0x19c/0x270
[  131.815159][ T6880]  ____sys_sendmsg+0x52d/0x830
[  131.815210][ T6880]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.815252][ T6880]  ? import_iovec+0x74/0xa0
[  131.815282][ T6880]  ___sys_sendmsg+0x21f/0x2a0
[  131.815305][ T6880]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.815368][ T6880]  ? __fget_files+0x2a/0x420
[  131.815394][ T6880]  ? __fget_files+0x3a0/0x420
[  131.815434][ T6880]  __sys_sendmmsg+0x227/0x430
[  131.815461][ T6880]  ? __pfx___sys_sendmmsg+0x10/0x10
[  131.815478][ T6880]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  131.815537][ T6880]  ? ksys_write+0x22a/0x250
[  131.815563][ T6880]  ? __pfx_ksys_write+0x10/0x10
[  131.815596][ T6880]  __x64_sys_sendmmsg+0xa0/0xc0
[  131.815618][ T6880]  do_syscall_64+0xfa/0x3b0
[  131.815643][ T6880]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.815667][ T6880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.815687][ T6880]  ? clear_bhb_loop+0x60/0xb0
[  131.815712][ T6880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.815730][ T6880] RIP: 0033:0x7f095c38e929
[  131.815748][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.815765][ T6880] RSP: 002b:00007f095d153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  131.815787][ T6880] RAX: ffffffffffffffda RBX: 00007f095c5b5fa0 RCX: 00007f095c38e929
[  131.815801][ T6880] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003
[  131.815813][ T6880] RBP: 00007f095d153090 R08: 0000000000000000 R09: 0000000000000000
[  131.815825][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  131.815837][ T6880] R13: 0000000000000000 R14: 00007f095c5b5fa0 R15: 00007ffcf95dce08
[  131.815870][ T6880]  </TASK>
[  132.182935][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  132.192978][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  132.221107][ T6867] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.493237][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'.
[  132.537602][ T6892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'.
[  133.039441][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.046090][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.307999][ T6894] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  133.639723][ T6934] xt_time: invalid argument - start or stop time greater than 23:59:59
[  134.149772][ T6950] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  134.368781][ T6962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.289'.
[  134.656303][ T6968] bond_slave_0: entered promiscuous mode
[  134.662268][ T6968] bond_slave_1: entered promiscuous mode
[  134.693194][ T6968] vlan2: entered promiscuous mode
[  134.716732][ T6968] bond0: entered promiscuous mode
[  135.405724][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'.
[  135.451704][ T6980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.294'.
[  135.472270][ T6984] FAULT_INJECTION: forcing a failure.
[  135.472270][ T6984] name failslab, interval 1, probability 0, space 0, times 0
[  135.518685][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.1.295 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  135.518715][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.518726][ T6984] Call Trace:
[  135.518734][ T6984]  <TASK>
[  135.518743][ T6984]  dump_stack_lvl+0x189/0x250
[  135.518773][ T6984]  ? __pfx____ratelimit+0x10/0x10
[  135.518798][ T6984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.518821][ T6984]  ? __pfx__printk+0x10/0x10
[  135.518865][ T6984]  should_fail_ex+0x414/0x560
[  135.518901][ T6984]  should_failslab+0xa8/0x100
[  135.518930][ T6984]  kmem_cache_alloc_noprof+0x73/0x3c0
[  135.518953][ T6984]  ? skb_clone+0x212/0x3a0
[  135.518990][ T6984]  skb_clone+0x212/0x3a0
[  135.519015][ T6984]  __netlink_deliver_tap+0x404/0x850
[  135.519057][ T6984]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.519085][ T6984]  netlink_deliver_tap+0x19c/0x1b0
[  135.519112][ T6984]  netlink_sendskb+0x68/0x140
[  135.519140][ T6984]  nfnetlink_rcv+0x2290/0x2520
[  135.519199][ T6984]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  135.519240][ T6984]  ? ref_tracker_free+0x63a/0x7d0
[  135.519294][ T6984]  ? __netlink_deliver_tap+0x807/0x850
[  135.519331][ T6984]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.519357][ T6984]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.519388][ T6984]  netlink_unicast+0x758/0x8d0
[  135.519426][ T6984]  netlink_sendmsg+0x805/0xb30
[  135.519464][ T6984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.519495][ T6984]  ? aa_sock_msg_perm+0x94/0x160
[  135.519526][ T6984]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.519543][ T6984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.519570][ T6984]  __sock_sendmsg+0x219/0x270
[  135.519598][ T6984]  ____sys_sendmsg+0x505/0x830
[  135.519633][ T6984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.519681][ T6984]  ? import_iovec+0x74/0xa0
[  135.519710][ T6984]  ___sys_sendmsg+0x21f/0x2a0
[  135.519732][ T6984]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.519796][ T6984]  ? __fget_files+0x2a/0x420
[  135.519821][ T6984]  ? __fget_files+0x3a0/0x420
[  135.519860][ T6984]  __x64_sys_sendmsg+0x19b/0x260
[  135.519883][ T6984]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  135.519913][ T6984]  ? __pfx_ksys_write+0x10/0x10
[  135.519932][ T6984]  ? rcu_is_watching+0x15/0xb0
[  135.519962][ T6984]  ? do_syscall_64+0xbe/0x3b0
[  135.520002][ T6984]  do_syscall_64+0xfa/0x3b0
[  135.520026][ T6984]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.520051][ T6984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.520071][ T6984]  ? clear_bhb_loop+0x60/0xb0
[  135.520096][ T6984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.520115][ T6984] RIP: 0033:0x7fe61798e929
[  135.520134][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.520151][ T6984] RSP: 002b:00007fe6157f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.520173][ T6984] RAX: ffffffffffffffda RBX: 00007fe617bb5fa0 RCX: 00007fe61798e929
[  135.520187][ T6984] RDX: 00000000000000c0 RSI: 00002000000025c0 RDI: 0000000000000003
[  135.520200][ T6984] RBP: 00007fe6157f6090 R08: 0000000000000000 R09: 0000000000000000
[  135.520211][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  135.520222][ T6984] R13: 0000000000000000 R14: 00007fe617bb5fa0 R15: 00007ffe4499e908
[  135.520255][ T6984]  </TASK>
[  135.921538][ T6987] validate_nla: 46 callbacks suppressed
[  135.921556][ T6987] netlink: 'syz.4.296': attribute type 11 has an invalid length.
[  136.184287][ T6987] hsr_slave_1 (unregistering): left promiscuous mode
[  136.311420][ T7000] bridge_slave_0: left allmulticast mode
[  136.344317][ T7007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  136.356826][ T7000] bridge_slave_0: left promiscuous mode
[  136.401955][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.468565][ T7000] bridge_slave_1: left allmulticast mode
[  136.484850][ T7000] bridge_slave_1: left promiscuous mode
[  136.521368][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.599192][ T7019] __nla_validate_parse: 2 callbacks suppressed
[  136.599211][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.301'.
[  136.636096][ T7019] netlink: 64 bytes leftover after parsing attributes in process `syz.4.301'.
[  136.710760][ T7000] bond0: (slave bond_slave_0): Releasing backup interface
[  136.743003][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.302'.
[  136.796234][ T7000] bond0: (slave bond_slave_1): Releasing backup interface
[  136.806078][ T7025] FAULT_INJECTION: forcing a failure.
[  136.806078][ T7025] name failslab, interval 1, probability 0, space 0, times 0
[  136.834025][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.0.303 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  136.834053][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  136.834062][ T7025] Call Trace:
[  136.834070][ T7025]  <TASK>
[  136.834077][ T7025]  dump_stack_lvl+0x189/0x250
[  136.834104][ T7025]  ? __pfx____ratelimit+0x10/0x10
[  136.834140][ T7025]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.834159][ T7025]  ? __pfx__printk+0x10/0x10
[  136.834181][ T7025]  ? __pfx___might_resched+0x10/0x10
[  136.834203][ T7025]  ? fs_reclaim_acquire+0x7d/0x100
[  136.834232][ T7025]  should_fail_ex+0x414/0x560
[  136.834265][ T7025]  should_failslab+0xa8/0x100
[  136.834293][ T7025]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  136.834318][ T7025]  ? __alloc_skb+0x112/0x2d0
[  136.834350][ T7025]  __alloc_skb+0x112/0x2d0
[  136.834381][ T7025]  alloc_skb_with_frags+0xca/0x890
[  136.834407][ T7025]  ? __might_fault+0xb0/0x130
[  136.834442][ T7025]  sock_alloc_send_pskb+0x857/0x990
[  136.834484][ T7025]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  136.834511][ T7025]  ? packet_cached_dev_get+0x1c/0x2b0
[  136.834533][ T7025]  ? packet_cached_dev_get+0x1c/0x2b0
[  136.834562][ T7025]  packet_sendmsg+0x3672/0x53f0
[  136.834607][ T7025]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  136.834654][ T7025]  ? __pfx___might_resched+0x10/0x10
[  136.834676][ T7025]  ? __lock_acquire+0xab9/0xd20
[  136.834714][ T7025]  ? __pfx_packet_sendmsg+0x10/0x10
[  136.834741][ T7025]  ? aa_sk_perm+0x81e/0x950
[  136.834774][ T7025]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  136.834797][ T7025]  ? __fget_files+0x2a/0x420
[  136.834825][ T7025]  ? aa_sock_msg_perm+0x94/0x160
[  136.834856][ T7025]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  136.834874][ T7025]  ? __pfx_packet_sendmsg+0x10/0x10
[  136.834904][ T7025]  __sock_sendmsg+0x219/0x270
[  136.834931][ T7025]  __sys_sendto+0x3bd/0x520
[  136.834960][ T7025]  ? __pfx___sys_sendto+0x10/0x10
[  136.834983][ T7025]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  136.835026][ T7025]  ? __fget_files+0x3a0/0x420
[  136.835065][ T7025]  ? ksys_write+0x22a/0x250
[  136.835089][ T7025]  ? __pfx_ksys_write+0x10/0x10
[  136.835108][ T7025]  ? rcu_is_watching+0x15/0xb0
[  136.835144][ T7025]  __x64_sys_sendto+0xde/0x100
[  136.835172][ T7025]  do_syscall_64+0xfa/0x3b0
[  136.835194][ T7025]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.835215][ T7025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.835233][ T7025]  ? clear_bhb_loop+0x60/0xb0
[  136.835254][ T7025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.835272][ T7025] RIP: 0033:0x7f55a138e929
[  136.835292][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.835308][ T7025] RSP: 002b:00007f55a229a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  136.835330][ T7025] RAX: ffffffffffffffda RBX: 00007f55a15b5fa0 RCX: 00007f55a138e929
[  136.835343][ T7025] RDX: 000000000000fc13 RSI: 0000200000000280 RDI: 0000000000000010
[  136.835355][ T7025] RBP: 00007f55a229a090 R08: 0000000000000000 R09: 000000000000002f
[  136.835367][ T7025] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  136.835378][ T7025] R13: 0000000000000000 R14: 00007f55a15b5fa0 R15: 00007ffe6573c2e8
[  136.835411][ T7025]  </TASK>
[  136.844397][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.185145][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.196059][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.223543][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.562193][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[  137.807813][ T7049] netlink: 68 bytes leftover after parsing attributes in process `syz.2.306'.
[  137.861257][ T7049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.306'.
[  138.017302][ T7058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  138.615821][ T7079] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[  138.800424][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'.
[  138.902022][ T7084] gretap1: entered promiscuous mode
[  138.937191][ T7079] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  139.521185][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'.
[  139.594612][ T7118] netlink: 68 bytes leftover after parsing attributes in process `syz.1.324'.
[  140.081196][ T7134] sctp: [Deprecated]: syz.1.331 (pid 7134) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.081196][ T7134] Use struct sctp_sack_info instead
[  140.521853][ T7150] bond_slave_0: entered promiscuous mode
[  140.527625][ T7150] bond_slave_1: entered promiscuous mode
[  140.566277][ T7150] vlan2: entered promiscuous mode
[  140.591093][ T7150] bond0: entered promiscuous mode
[  140.671875][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'.
[  140.892911][ T7165] FAULT_INJECTION: forcing a failure.
[  140.892911][ T7165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.950965][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz.4.341 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  140.950995][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  140.951006][ T7165] Call Trace:
[  140.951014][ T7165]  <TASK>
[  140.951022][ T7165]  dump_stack_lvl+0x189/0x250
[  140.951050][ T7165]  ? __pfx____ratelimit+0x10/0x10
[  140.951074][ T7165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.951097][ T7165]  ? __pfx__printk+0x10/0x10
[  140.951136][ T7165]  should_fail_ex+0x414/0x560
[  140.951170][ T7165]  _copy_to_user+0x31/0xb0
[  140.951196][ T7165]  simple_read_from_buffer+0xe1/0x170
[  140.951227][ T7165]  proc_fail_nth_read+0x1df/0x250
[  140.951258][ T7165]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  140.951289][ T7165]  ? rw_verify_area+0x258/0x650
[  140.951310][ T7165]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  140.951339][ T7165]  vfs_read+0x200/0x980
[  140.951368][ T7165]  ? __pfx___mutex_lock+0x10/0x10
[  140.951396][ T7165]  ? __pfx_vfs_read+0x10/0x10
[  140.951421][ T7165]  ? __fget_files+0x2a/0x420
[  140.951454][ T7165]  ? __fget_files+0x3a0/0x420
[  140.951480][ T7165]  ? __fget_files+0x2a/0x420
[  140.951518][ T7165]  ksys_read+0x145/0x250
[  140.951539][ T7165]  ? __fget_files+0x2a/0x420
[  140.951568][ T7165]  ? __pfx_ksys_read+0x10/0x10
[  140.951598][ T7165]  ? do_syscall_64+0xbe/0x3b0
[  140.951629][ T7165]  do_syscall_64+0xfa/0x3b0
[  140.951654][ T7165]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.951679][ T7165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.951699][ T7165]  ? clear_bhb_loop+0x60/0xb0
[  140.951724][ T7165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.951743][ T7165] RIP: 0033:0x7fd97b58d33c
[  140.951762][ T7165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  140.951778][ T7165] RSP: 002b:00007fd97c39e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.951800][ T7165] RAX: ffffffffffffffda RBX: 00007fd97b7b5fa0 RCX: 00007fd97b58d33c
[  140.951814][ T7165] RDX: 000000000000000f RSI: 00007fd97c39e0a0 RDI: 0000000000000004
[  140.951826][ T7165] RBP: 00007fd97c39e090 R08: 0000000000000000 R09: 0000000000000000
[  140.951838][ T7165] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  140.951849][ T7165] R13: 0000000000000000 R14: 00007fd97b7b5fa0 R15: 00007fff8e34f848
[  140.951893][ T7165]  </TASK>
[  141.366224][ T7171] netlink: 'syz.2.343': attribute type 32 has an invalid length.
[  141.714279][ T7180] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.794983][ T7179] __nla_validate_parse: 3 callbacks suppressed
[  141.795004][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'.
[  141.825759][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'.
[  141.859853][ T7184] sctp: [Deprecated]: syz.4.349 (pid 7184) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.859853][ T7184] Use struct sctp_sack_info instead
[  142.237636][ T7185] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.509534][ T7208] Cannot find del_set index 0 as target
[  142.699457][ T7215] FAULT_INJECTION: forcing a failure.
[  142.699457][ T7215] name failslab, interval 1, probability 0, space 0, times 0
[  142.745037][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.2.355 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  142.745066][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  142.745077][ T7215] Call Trace:
[  142.745094][ T7215]  <TASK>
[  142.745103][ T7215]  dump_stack_lvl+0x189/0x250
[  142.745133][ T7215]  ? __pfx____ratelimit+0x10/0x10
[  142.745161][ T7215]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.745184][ T7215]  ? __pfx__printk+0x10/0x10
[  142.745217][ T7215]  ? __pfx___might_resched+0x10/0x10
[  142.745241][ T7215]  ? fs_reclaim_acquire+0x7d/0x100
[  142.745275][ T7215]  should_fail_ex+0x414/0x560
[  142.745311][ T7215]  should_failslab+0xa8/0x100
[  142.745341][ T7215]  __kmalloc_cache_noprof+0x70/0x3d0
[  142.745366][ T7215]  ? genl_start+0x1c9/0x6c0
[  142.745392][ T7215]  genl_start+0x1c9/0x6c0
[  142.745410][ T7215]  ? netlink_lookup+0x30/0x200
[  142.745444][ T7215]  __netlink_dump_start+0x466/0x7e0
[  142.745480][ T7215]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  142.745506][ T7215]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  142.745525][ T7215]  ? genl_get_cmd+0x496/0x910
[  142.745552][ T7215]  ? __pfx_genl_start+0x10/0x10
[  142.745568][ T7215]  ? __pfx_genl_dumpit+0x10/0x10
[  142.745584][ T7215]  ? __pfx_genl_done+0x10/0x10
[  142.745620][ T7215]  genl_rcv_msg+0x5da/0x790
[  142.745648][ T7215]  ? __pfx_genl_rcv_msg+0x10/0x10
[  142.745664][ T7215]  ? ref_tracker_free+0x63a/0x7d0
[  142.745681][ T7215]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  142.745709][ T7215]  ? __pfx_ref_tracker_free+0x10/0x10
[  142.745741][ T7215]  netlink_rcv_skb+0x205/0x470
[  142.745768][ T7215]  ? __pfx_genl_rcv_msg+0x10/0x10
[  142.745789][ T7215]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  142.745835][ T7215]  ? down_read+0x1ad/0x2e0
[  142.745864][ T7215]  genl_rcv+0x28/0x40
[  142.745881][ T7215]  netlink_unicast+0x758/0x8d0
[  142.745918][ T7215]  netlink_sendmsg+0x805/0xb30
[  142.745957][ T7215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.745987][ T7215]  ? aa_sock_msg_perm+0x94/0x160
[  142.746017][ T7215]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  142.746034][ T7215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.746060][ T7215]  __sock_sendmsg+0x219/0x270
[  142.746094][ T7215]  ____sys_sendmsg+0x505/0x830
[  142.746132][ T7215]  ? __pfx_____sys_sendmsg+0x10/0x10
[  142.746172][ T7215]  ? import_iovec+0x74/0xa0
[  142.746202][ T7215]  ___sys_sendmsg+0x21f/0x2a0
[  142.746225][ T7215]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.746288][ T7215]  ? __fget_files+0x2a/0x420
[  142.746314][ T7215]  ? __fget_files+0x3a0/0x420
[  142.746355][ T7215]  __x64_sys_sendmsg+0x19b/0x260
[  142.746378][ T7215]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  142.746409][ T7215]  ? __pfx_ksys_write+0x10/0x10
[  142.746430][ T7215]  ? rcu_is_watching+0x15/0xb0
[  142.746460][ T7215]  ? do_syscall_64+0xbe/0x3b0
[  142.746491][ T7215]  do_syscall_64+0xfa/0x3b0
[  142.746515][ T7215]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.746539][ T7215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.746559][ T7215]  ? clear_bhb_loop+0x60/0xb0
[  142.746582][ T7215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.746600][ T7215] RIP: 0033:0x7f5b3578e929
[  142.746618][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.746635][ T7215] RSP: 002b:00007f5b36553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.746656][ T7215] RAX: ffffffffffffffda RBX: 00007f5b359b5fa0 RCX: 00007f5b3578e929
[  142.746670][ T7215] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  142.746683][ T7215] RBP: 00007f5b36553090 R08: 0000000000000000 R09: 0000000000000000
[  142.746695][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.746706][ T7215] R13: 0000000000000000 R14: 00007f5b359b5fa0 R15: 00007fff4a148a88
[  142.746740][ T7215]  </TASK>
[  143.197211][ T7222] nft_compat: unsupported protocol 0
[  143.396659][ T7224] netlink: 'syz.0.356': attribute type 27 has an invalid length.
[  143.833844][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'.
[  144.019403][ T7243] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  144.054911][ T7251] netlink: 96 bytes leftover after parsing attributes in process `syz.0.364'.
[  144.764343][ T7265] Bluetooth: MGMT ver 1.23
[  144.783042][ T7265] FAULT_INJECTION: forcing a failure.
[  144.783042][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.798491][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.2.365 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  144.798519][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  144.798529][ T7265] Call Trace:
[  144.798538][ T7265]  <TASK>
[  144.798545][ T7265]  dump_stack_lvl+0x189/0x250
[  144.798573][ T7265]  ? __pfx____ratelimit+0x10/0x10
[  144.798596][ T7265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.798617][ T7265]  ? __pfx__printk+0x10/0x10
[  144.798654][ T7265]  should_fail_ex+0x414/0x560
[  144.798687][ T7265]  _copy_to_user+0x31/0xb0
[  144.798711][ T7265]  simple_read_from_buffer+0xe1/0x170
[  144.798741][ T7265]  proc_fail_nth_read+0x1df/0x250
[  144.798770][ T7265]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.798799][ T7265]  ? rw_verify_area+0x258/0x650
[  144.798818][ T7265]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  144.798844][ T7265]  vfs_read+0x200/0x980
[  144.798872][ T7265]  ? __pfx___mutex_lock+0x10/0x10
[  144.798896][ T7265]  ? __pfx_vfs_read+0x10/0x10
[  144.798918][ T7265]  ? __fget_files+0x2a/0x420
[  144.798946][ T7265]  ? __fget_files+0x3a0/0x420
[  144.798967][ T7265]  ? __fget_files+0x2a/0x420
[  144.799000][ T7265]  ksys_read+0x145/0x250
[  144.799024][ T7265]  ? __pfx_ksys_read+0x10/0x10
[  144.799041][ T7265]  ? rcu_is_watching+0x15/0xb0
[  144.799077][ T7265]  ? do_syscall_64+0xbe/0x3b0
[  144.799104][ T7265]  do_syscall_64+0xfa/0x3b0
[  144.799125][ T7265]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.799146][ T7265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.799163][ T7265]  ? clear_bhb_loop+0x60/0xb0
[  144.799186][ T7265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.799202][ T7265] RIP: 0033:0x7f5b3578d33c
[  144.799220][ T7265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  144.799234][ T7265] RSP: 002b:00007f5b36553030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  144.799254][ T7265] RAX: ffffffffffffffda RBX: 00007f5b359b5fa0 RCX: 00007f5b3578d33c
[  144.799267][ T7265] RDX: 000000000000000f RSI: 00007f5b365530a0 RDI: 0000000000000006
[  144.799278][ T7265] RBP: 00007f5b36553090 R08: 0000000000000000 R09: 0000000000000000
[  144.799289][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.799299][ T7265] R13: 0000000000000000 R14: 00007f5b359b5fa0 R15: 00007fff4a148a88
[  144.799330][ T7265]  </TASK>
[  145.234529][ T7270] netlink: 68 bytes leftover after parsing attributes in process `syz.2.366'.
[  145.275848][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.366'.
[  146.165833][ T7243] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  146.167716][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.183928][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.226093][ T7251] vlan2: entered allmulticast mode
[  146.238469][ T7251] veth1_to_team: entered allmulticast mode
[  147.201664][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[  147.439265][ T7322] FAULT_INJECTION: forcing a failure.
[  147.439265][ T7322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.514440][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.1.378 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  147.514470][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  147.514481][ T7322] Call Trace:
[  147.514489][ T7322]  <TASK>
[  147.514498][ T7322]  dump_stack_lvl+0x189/0x250
[  147.514534][ T7322]  ? __pfx____ratelimit+0x10/0x10
[  147.514559][ T7322]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.514583][ T7322]  ? __pfx__printk+0x10/0x10
[  147.514610][ T7322]  ? __might_fault+0xb0/0x130
[  147.514648][ T7322]  should_fail_ex+0x414/0x560
[  147.514682][ T7322]  _copy_from_user+0x2d/0xb0
[  147.514708][ T7322]  ___sys_sendmsg+0x158/0x2a0
[  147.514730][ T7322]  ? __pfx____sys_sendmsg+0x10/0x10
[  147.514791][ T7322]  ? __fget_files+0x2a/0x420
[  147.514824][ T7322]  ? __fget_files+0x3a0/0x420
[  147.514864][ T7322]  __x64_sys_sendmsg+0x19b/0x260
[  147.514887][ T7322]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  147.514917][ T7322]  ? __pfx_ksys_write+0x10/0x10
[  147.514938][ T7322]  ? rcu_is_watching+0x15/0xb0
[  147.514967][ T7322]  ? do_syscall_64+0xbe/0x3b0
[  147.514998][ T7322]  do_syscall_64+0xfa/0x3b0
[  147.515021][ T7322]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.515045][ T7322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.515064][ T7322]  ? clear_bhb_loop+0x60/0xb0
[  147.515087][ T7322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.515106][ T7322] RIP: 0033:0x7fe61798e929
[  147.515123][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.515139][ T7322] RSP: 002b:00007fe6157f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  147.515162][ T7322] RAX: ffffffffffffffda RBX: 00007fe617bb5fa0 RCX: 00007fe61798e929
[  147.515175][ T7322] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  147.515187][ T7322] RBP: 00007fe6157f6090 R08: 0000000000000000 R09: 0000000000000000
[  147.515199][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.515210][ T7322] R13: 0000000000000000 R14: 00007fe617bb5fa0 R15: 00007ffe4499e908
[  147.515241][ T7322]  </TASK>
[  147.531412][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.3.379'.
[  148.408783][ T7351] vlan2: entered promiscuous mode
[  148.473157][ T7351] vlan2: entered allmulticast mode
[  148.478349][ T7351] hsr_slave_1: entered allmulticast mode
[  148.703989][ T7365] netlink: 'syz.4.391': attribute type 7 has an invalid length.
[  148.758378][ T7367] gretap0: entered promiscuous mode
[  148.775512][ T7351] netlink: 'syz.3.387': attribute type 11 has an invalid length.
[  148.842707][ T7367] vlan2: entered promiscuous mode
[  148.875454][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'.
[  148.974269][ T7365] : entered promiscuous mode
[  149.507198][ T7378] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.546922][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'.
[  149.674746][ T7380] 8021q: adding VLAN 0 to HW filter on device batadv1
[  149.692698][ T7380] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  149.702267][ T7380] team0: Failed to send options change via netlink (err -105)
[  149.709768][ T7380] team0: Port device batadv1 added
[  149.874351][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'.
[  149.963886][ T7378] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.056950][ T7403] netlink: 'syz.0.396': attribute type 1 has an invalid length.
[  150.100937][ T7405] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  150.196737][ T7378] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.404406][ T7403] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.557237][ T7378] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.859739][  T195] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.885546][  T195] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.934210][ T7422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'.
[  151.006238][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.043695][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.354921][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'.
[  151.529435][ T7441] netlink: 'syz.4.405': attribute type 11 has an invalid length.
[  151.593233][   T30] audit: type=1800 audit(1751999571.780:2): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.401" name="memory.events" dev="tmpfs" ino=446 res=0 errno=0
[  151.614216][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'.
[  152.486341][ T7462] nbd4: detected capacity change from 0 to 63
[  152.530734][ T7468] block nbd4: NBD_DISCONNECT
[  152.571483][ T7468] block nbd4: Disconnected due to user request.
[  152.577978][ T7468] block nbd4: shutting down sockets
[  152.715291][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.724710][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  152.743284][ T7479] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.418'.
[  152.752606][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.752644][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  152.752748][    C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.752771][    C1] Buffer I/O error on dev nbd4, logical block 2, async page read
[  152.752858][    C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.752880][    C1] Buffer I/O error on dev nbd4, logical block 3, async page read
[  152.753981][ T7072] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.861696][ T7072] Buffer I/O error on dev nbd4, logical block 0, async page read
[  152.869749][ T7072] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.916977][ T7481] vlan2: entered promiscuous mode
[  152.972026][ T7072] Buffer I/O error on dev nbd4, logical block 1, async page read
[  153.006401][ T7072] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.026194][ T7072] Buffer I/O error on dev nbd4, logical block 2, async page read
[  153.059282][ T7072] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.081404][ T7072] Buffer I/O error on dev nbd4, logical block 3, async page read
[  153.096507][ T7072] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.111914][ T7072] Buffer I/O error on dev nbd4, logical block 0, async page read
[  153.142868][ T7072] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.170756][ T7072] Buffer I/O error on dev nbd4, logical block 1, async page read
[  153.209523][ T7072] ldm_validate_partition_table(): Disk read failed.
[  153.244144][ T7072] Dev nbd4: unable to read RDB block 0
[  153.267418][ T7072]  nbd4: unable to read partition table
[  153.312440][ T7072] ldm_validate_partition_table(): Disk read failed.
[  153.364965][ T7072] Dev nbd4: unable to read RDB block 0
[  153.392721][ T7072]  nbd4: unable to read partition table
[  153.624166][ T7492] netlink: 'syz.4.423': attribute type 11 has an invalid length.
[  153.633410][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'.
[  153.730673][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'.
[  153.870646][ T7500] FAULT_INJECTION: forcing a failure.
[  153.870646][ T7500] name failslab, interval 1, probability 0, space 0, times 0
[  153.924567][ T7500] CPU: 1 UID: 0 PID: 7500 Comm: syz.0.427 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  153.924595][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  153.924607][ T7500] Call Trace:
[  153.924614][ T7500]  <TASK>
[  153.924623][ T7500]  dump_stack_lvl+0x189/0x250
[  153.924653][ T7500]  ? __pfx____ratelimit+0x10/0x10
[  153.924678][ T7500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.924701][ T7500]  ? __pfx__printk+0x10/0x10
[  153.924733][ T7500]  ? __pfx___might_resched+0x10/0x10
[  153.924754][ T7500]  ? fs_reclaim_acquire+0x7d/0x100
[  153.924788][ T7500]  should_fail_ex+0x414/0x560
[  153.924819][ T7500]  ? alloc_netdev_mqs+0xa3/0x1170
[  153.924842][ T7500]  should_failslab+0xa8/0x100
[  153.924870][ T7500]  __kvmalloc_node_noprof+0x161/0x5f0
[  153.924897][ T7500]  ? alloc_netdev_mqs+0xa3/0x1170
[  153.924915][ T7500]  ? snprintf+0xda/0x120
[  153.924937][ T7500]  alloc_netdev_mqs+0xa3/0x1170
[  153.924955][ T7500]  ? __pfx_vlan_setup+0x10/0x10
[  153.924982][ T7500]  ? __mutex_trylock_common+0x153/0x260
[  153.925013][ T7500]  rtnl_create_link+0x31f/0xd10
[  153.925043][ T7500]  rtnl_newlink_create+0x25c/0xb00
[  153.925083][ T7500]  ? __pfx_aa_get_newest_label+0x10/0x10
[  153.925116][ T7500]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  153.925138][ T7500]  ? rtnl_newlink+0x8db/0x1c70
[  153.925165][ T7500]  ? __pfx___mutex_lock+0x10/0x10
[  153.925204][ T7500]  ? ns_capable+0x8a/0xf0
[  153.925232][ T7500]  rtnl_newlink+0x16d6/0x1c70
[  153.925258][ T7500]  ? netlink_sendmsg+0x805/0xb30
[  153.925297][ T7500]  ? __pfx_rtnl_newlink+0x10/0x10
[  153.925349][ T7500]  ? kasan_quarantine_put+0xdd/0x220
[  153.925372][ T7500]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.925402][ T7500]  ? nlmon_xmit+0xb0/0x100
[  153.925424][ T7500]  ? kmem_cache_free+0x18f/0x400
[  153.925457][ T7500]  ? __local_bh_enable_ip+0x12d/0x1c0
[  153.925480][ T7500]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.925505][ T7500]  ? __local_bh_enable_ip+0x12d/0x1c0
[  153.925527][ T7500]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  153.925554][ T7500]  ? __dev_queue_xmit+0x27e/0x3a70
[  153.925590][ T7500]  ? __lock_acquire+0xab9/0xd20
[  153.925640][ T7500]  ? __pfx_rtnl_newlink+0x10/0x10
[  153.925665][ T7500]  rtnetlink_rcv_msg+0x7cc/0xb70
[  153.925694][ T7500]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  153.925719][ T7500]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  153.925740][ T7500]  ? ref_tracker_free+0x63a/0x7d0
[  153.925756][ T7500]  ? __copy_skb_header+0xa7/0x550
[  153.925777][ T7500]  ? __pfx_ref_tracker_free+0x10/0x10
[  153.925808][ T7500]  netlink_rcv_skb+0x205/0x470
[  153.925835][ T7500]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  153.925862][ T7500]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  153.925904][ T7500]  ? netlink_deliver_tap+0x2e/0x1b0
[  153.925929][ T7500]  ? netlink_deliver_tap+0x2e/0x1b0
[  153.925958][ T7500]  netlink_unicast+0x758/0x8d0
[  153.925996][ T7500]  netlink_sendmsg+0x805/0xb30
[  153.926034][ T7500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.926064][ T7500]  ? aa_sock_msg_perm+0x94/0x160
[  153.926242][ T7500]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.926262][ T7500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  153.926292][ T7500]  __sock_sendmsg+0x219/0x270
[  153.926319][ T7500]  ____sys_sendmsg+0x505/0x830
[  153.926358][ T7500]  ? __pfx_____sys_sendmsg+0x10/0x10
[  153.926396][ T7500]  ? import_iovec+0x74/0xa0
[  153.926423][ T7500]  ___sys_sendmsg+0x21f/0x2a0
[  153.926445][ T7500]  ? __pfx____sys_sendmsg+0x10/0x10
[  153.926503][ T7500]  ? __fget_files+0x2a/0x420
[  153.926530][ T7500]  ? __fget_files+0x3a0/0x420
[  153.926567][ T7500]  __x64_sys_sendmsg+0x19b/0x260
[  153.926590][ T7500]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  153.926621][ T7500]  ? __pfx_ksys_write+0x10/0x10
[  153.926642][ T7500]  ? rcu_is_watching+0x15/0xb0
[  153.926673][ T7500]  ? do_syscall_64+0xbe/0x3b0
[  153.926705][ T7500]  do_syscall_64+0xfa/0x3b0
[  153.926729][ T7500]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.926754][ T7500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.926772][ T7500]  ? clear_bhb_loop+0x60/0xb0
[  153.926793][ T7500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.926810][ T7500] RIP: 0033:0x7f55a138e929
[  153.926829][ T7500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.926844][ T7500] RSP: 002b:00007f55a229a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.926867][ T7500] RAX: ffffffffffffffda RBX: 00007f55a15b5fa0 RCX: 00007f55a138e929
[  153.926881][ T7500] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010
[  153.926893][ T7500] RBP: 00007f55a229a090 R08: 0000000000000000 R09: 0000000000000000
[  153.926904][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.926916][ T7500] R13: 0000000000000000 R14: 00007f55a15b5fa0 R15: 00007ffe6573c2e8
[  153.926951][ T7500]  </TASK>
[  155.553688][ T7531] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  155.624631][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'.
[  155.654032][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'.
[  156.118713][ T7547] veth1_to_bond: entered allmulticast mode
[  156.184140][ T7549] gretap0: entered promiscuous mode
[  156.189500][ T7549] vlan3: entered promiscuous mode
[  156.300965][ T7547] hsr0: entered allmulticast mode
[  156.323668][ T7547] hsr_slave_0: entered allmulticast mode
[  156.342172][ T7547] hsr_slave_1: entered allmulticast mode
[  156.367864][ T7544] veth1_to_bond: left allmulticast mode
[  156.671710][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'.
[  156.767823][ T7558] vlan2: entered promiscuous mode
[  156.780081][ T7558] dummy0: entered promiscuous mode
[  157.059874][ T7571] netlink: 'syz.1.446': attribute type 1 has an invalid length.
[  157.067713][ T7571] netlink: 228 bytes leftover after parsing attributes in process `syz.1.446'.
[  157.730855][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'.
[  157.772210][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'.
[  158.119803][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[  158.147857][ T7608] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  158.154203][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'.
[  158.175230][ T7608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.332329][ T7613] netlink: 452 bytes leftover after parsing attributes in process `syz.4.461'.
[  158.401243][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'.
[  158.412964][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'.
[  159.308664][ T7651] netlink: 'syz.2.472': attribute type 32 has an invalid length.
[  159.432891][ T7651] netlink: 64 bytes leftover after parsing attributes in process `syz.2.472'.
[  159.929542][ T7675] tipc: Started in network mode
[  159.945787][ T7675] tipc: Node identity 8ac0b6e87c1, cluster identity 4711
[  159.969337][ T7675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.136172][ T7675] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  160.148148][ T7675] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  160.156662][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.3.481 Not tainted 6.16.0-rc4-syzkaller-01070-gd23647fd547b #0 PREEMPT(full) 
[  160.168554][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  160.178619][ T7675] RIP: 0010:qfq_qlen_notify+0x29/0x70
[  160.184094][ T7675] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 5c 3f 37 f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 a9 bf 9a f8 49 8b 07 4c 39 f8 74 1c
[  160.203801][ T7675] RSP: 0018:ffffc90004fa70a8 EFLAGS: 00010202
[  160.209885][ T7675] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000
[  160.217862][ T7675] RDX: ffffc9000cac3000 RSI: 000000000000034a RDI: 000000000000034b
[  160.226009][ T7675] RBP: dffffc0000000000 R08: ffff88807eceda00 R09: 0000000000000002
[  160.233986][ T7675] R10: 00000000ffffffff R11: ffffffff89892090 R12: 0000000000000000
[  160.241955][ T7675] R13: ffff8880594b8000 R14: ffff8880594b8000 R15: 0000000000000058
[  160.249931][ T7675] FS:  00007f095d1536c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000
[  160.258868][ T7675] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.265454][ T7675] CR2: 00007f0d0c7d1000 CR3: 0000000031eea000 CR4: 00000000003526f0
[  160.273445][ T7675] Call Trace:
[  160.276736][ T7675]  <TASK>
[  160.279672][ T7675]  qdisc_tree_reduce_backlog+0x29c/0x480
[  160.285310][ T7675]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  160.291032][ T7675]  pie_change+0x96d/0xca0
[  160.295370][ T7675]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  160.301264][ T7675]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.306470][ T7675]  ? __pfx_pie_change+0x10/0x10
[  160.311322][ T7675]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  160.317252][ T7675]  ? timer_init_key+0x171/0x2d0
[  160.322118][ T7675]  ? __pfx_pie_init+0x10/0x10
[  160.326798][ T7675]  pie_init+0x2a3/0x3f0
[  160.331055][ T7675]  qdisc_create+0x7ac/0xea0
[  160.335560][ T7675]  tc_modify_qdisc+0x1426/0x2010
[  160.340502][ T7675]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  160.345802][ T7675]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  160.351086][ T7675]  rtnetlink_rcv_msg+0x779/0xb70
[  160.356029][ T7675]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  160.361151][ T7675]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  160.366618][ T7675]  ? ref_tracker_free+0x63a/0x7d0
[  160.371733][ T7675]  ? __copy_skb_header+0xa7/0x550
[  160.376763][ T7675]  ? __pfx_ref_tracker_free+0x10/0x10
[  160.382141][ T7675]  netlink_rcv_skb+0x205/0x470
[  160.386911][ T7675]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  160.392373][ T7675]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.397679][ T7675]  ? netlink_deliver_tap+0x2e/0x1b0
[  160.402970][ T7675]  ? netlink_deliver_tap+0x2e/0x1b0
[  160.408270][ T7675]  netlink_unicast+0x758/0x8d0
[  160.413039][ T7675]  netlink_sendmsg+0x805/0xb30
[  160.417816][ T7675]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.423106][ T7675]  ? aa_sock_msg_perm+0x94/0x160
[  160.428055][ T7675]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.433428][ T7675]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.438812][ T7675]  __sock_sendmsg+0x219/0x270
[  160.443495][ T7675]  ____sys_sendmsg+0x505/0x830
[  160.448268][ T7675]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.453617][ T7675]  ? import_iovec+0x74/0xa0
[  160.458139][ T7675]  ___sys_sendmsg+0x21f/0x2a0
[  160.462819][ T7675]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.468025][ T7675]  ? __fget_files+0x2a/0x420
[  160.472619][ T7675]  ? __fget_files+0x3a0/0x420
[  160.477304][ T7675]  __x64_sys_sendmsg+0x19b/0x260
[  160.482249][ T7675]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.487712][ T7675]  ? rcu_is_watching+0x15/0xb0
[  160.492478][ T7675]  ? do_syscall_64+0xbe/0x3b0
[  160.497165][ T7675]  do_syscall_64+0xfa/0x3b0
[  160.501762][ T7675]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.507407][ T7675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.513561][ T7675]  ? clear_bhb_loop+0x60/0xb0
[  160.518330][ T7675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.524219][ T7675] RIP: 0033:0x7f095c38e929
[  160.528721][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.548415][ T7675] RSP: 002b:00007f095d153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.556838][ T7675] RAX: ffffffffffffffda RBX: 00007f095c5b5fa0 RCX: 00007f095c38e929
[  160.564813][ T7675] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000009
[  160.572799][ T7675] RBP: 00007f095c410b39 R08: 0000000000000000 R09: 0000000000000000
[  160.580869][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.588851][ T7675] R13: 0000000000000000 R14: 00007f095c5b5fa0 R15: 00007ffcf95dce08
[  160.596848][ T7675]  </TASK>
[  160.599894][ T7675] Modules linked in:
[  160.603929][ T7675] ---[ end trace 0000000000000000 ]---
[  160.609406][ T7675] RIP: 0010:qfq_qlen_notify+0x29/0x70
[  160.614869][ T7675] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 5c 3f 37 f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 a9 bf 9a f8 49 8b 07 4c 39 f8 74 1c
[  160.634649][ T7675] RSP: 0018:ffffc90004fa70a8 EFLAGS: 00010202
[  160.640886][ T7675] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000
[  160.648978][ T7675] RDX: ffffc9000cac3000 RSI: 000000000000034a RDI: 000000000000034b
[  160.657085][ T7675] RBP: dffffc0000000000 R08: ffff88807eceda00 R09: 0000000000000002
[  160.665098][ T7675] R10: 00000000ffffffff R11: ffffffff89892090 R12: 0000000000000000
[  160.673295][ T7675] R13: ffff8880594b8000 R14: ffff8880594b8000 R15: 0000000000000058
[  160.681325][ T7675] FS:  00007f095d1536c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000
[  160.690308][ T7675] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.697012][ T7675] CR2: 00007f0d0c7d1000 CR3: 0000000031eea000 CR4: 00000000003526f0
[  160.705060][ T7675] Kernel panic - not syncing: Fatal exception in interrupt
[  160.712562][ T7675] Kernel Offset: disabled
[  160.716918][ T7675] Rebooting in 86400 seconds..