last executing test programs:

6.753979894s ago: executing program 1 (id=8167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
unshare(0x64000600)
r2 = gettid()
r3 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
syz_emit_ethernet(0x268, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x22e, 0x3a, 0x0, @remote, @mcast2, {[@hopopts={0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}, @dstopts={0x2b, 0xe, '\x00', [@ra={0x5, 0x2, 0xb}, @padn, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x5, [0xc5e7, 0x7fff]}}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @generic={0x2, 0x3a, "23d348806a504f311d4f97e7b68064d6ffe0abffa904cbcd53c5370a78a550e3de28b19f01a4fd6d63354df59a17d5d94f1a0460e41cc6af3a6a"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x6, 0x1d, '\x00', [@generic={0x2, 0xd6, "eabdfd406a55d85c64a29478c498918ccc10e90f7bf9c6f5bfe3910655b6780c8ad1af8b4e445ac147c58053e28bda7ed28c3897c788f26dbe7ce9eecff3372823350e8a5b4da9b8106508311e1e2a6ab031e2d1f2311386467845ecd360835ed038f69f23b33b66f1af4f51cdd88360c613857f3792db6cc7bc23ae137ee6b6336a38e8eb3e08ee490653610fbb8e2a36b0f4a8bfaf7d93e4414ae701b8b97f4bcb795203dd6188f42b6bbd0a87decb0ef25d143f8527ea9d422b685628b6568ba9d5c243ebc0867ed2ec2501cdab7c67029f8f63f5"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @fragment={0x88, 0x0, 0x1, 0x1, 0x0, 0x1b, 0x68}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "000259", 0x0, 0x0, 0xff, @private1, @mcast1, [@srh={0x6}, @routing], "4e301aefee34594e2bdbd3168518a954fd34d576c7045169c7cf945136321fad6ff550ee40aa07d6368563ab8a6bbab07e7a5e176ab8d8e29120a2fd7c72366548d1b3ef7bb3bd3828a96fe26e027eac5ab276c843fc"}}}}}}}, 0x0)

6.66041884s ago: executing program 4 (id=8168):
r0 = socket$netlink(0x10, 0x3, 0x10)
unshare(0x22020600)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x7, &(0x7f0000000200)={@private1}, &(0x7f0000000240)=0x14)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="e906ebae3dd336cd8f778ac0cd21c43ecbb3e935db1ac73fe816d2d9d71b94b79301ead2245eafe34cb3c2e7f3609eb77ad404286103369cabe1bb25f3463e9cf07b99503dfb3a8bb8c896e34f1d59f12fb6cf10cc87269b22f0341655bd307e31"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0xc1fea5503729df99, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xff81, @any, 0x2, 0x1}, 0xe)

6.40955118s ago: executing program 4 (id=8170):
unshare(0x400)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x1a071, 0xffffffffffffffff, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0xc0d0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000500000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

5.197965901s ago: executing program 4 (id=8182):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r1, @ANYBLOB="65572abd700079dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c052) (async, rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) (rerun: 64)

4.956088436s ago: executing program 4 (id=8183):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000000), 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x7, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x0, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x6037}], 0x1, 0x1822b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0xc)

4.731249763s ago: executing program 4 (id=8184):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040))
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES16=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004890}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

3.960315803s ago: executing program 4 (id=8188):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r2, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004}, 0x20000800)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000240012800b00010067656e657665000014000280050004000500000005000c0001"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000206010800000000000000000000000411000300686173683a69702c706f72740000000005000400000000000d08443e026173683a6d61630000000005000500020000e40400010006000000"], 0x50}}, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x1}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$xdp(0x2c, 0x3, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) (async)
shutdown(r5, 0x1)
recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r8 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) (async)
bind$netlink(r7, &(0x7f0000001a40)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc)

3.857276265s ago: executing program 3 (id=8189):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.719883898s ago: executing program 2 (id=8191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffb}, 0x9)
shutdown(r1, 0x1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c}}]}, 0x181}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250a0000002400018008000100", @ANYRES32=r5, @ANYBLOB="e31a010083996b4366f57ac21ebc2ca680082336640f94f6697a9559075fc276d7e4fa2b4ced85fa89562d8f4d33e1aca9661b0b271295a953957b8da328b98fc8e72c62a0300bbc09189ee85cdd8c6bd55dfdac8f1e86f2baaf267374b8747c38c7392945e814ef6cb386c76c1b4017d2a2254e6e824b5597dde3d4e6e4410931701f2bafda2b4413af10b8b17a828ac86d713d0050c6000000002999b5a60b9a0ac8e4850a9e489d205566898170b9f1ee9d2c80aaaf362553255b252f4450de74aae769e9f2327730c7b0c5d6d8587963bea86620ddd3c2a960b17cae6625a708ad45ad5979704802ac7e35524b0a596bb3ab052eb232576058165c170d998d357e4ecf111fc2e8200f266e8fa7801ad60000000000", @ANYRES32=r6, @ANYBLOB="080003006233248708000100", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000200)=0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000acbff635e658712e2e8173f0eae195be6712abffae", @ANYRES32=r0], 0x0}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000b2cb4522df353cf9670000001850000000007a2dec53a027939d6903bc"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffb}, 0x9) (async)
shutdown(r1, 0x1) (async)
pipe(&(0x7f0000000240)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c}}]}, 0x181}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) (async)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250a0000002400018008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="080003006233248708000100", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000200)=0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000acbff635e658712e2e8173f0eae195be6712abffae", @ANYRES32=r0], 0x0}, 0x94) (async)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000b2cb4522df353cf9670000001850000000007a2dec53a027939d6903bc"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x0, 0x10, 0xffffffff}, 0x94) (async)

3.660955121s ago: executing program 3 (id=8192):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', <r1=>0x0})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1, 0x1000000}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x3afd, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

3.254103831s ago: executing program 2 (id=8193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$pptp(0x18, 0x1, 0x2)
socket$inet(0x2, 0x800, 0x0)
bind$pptp(r2, &(0x7f0000000480)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @rand_addr=0x64010102}}, 0x52)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00005100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x8}, 0x94)

3.114525892s ago: executing program 3 (id=8195):
r0 = socket(0x10, 0x2, 0x0)
close(0x3)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x200, @mcast1}}}, 0x108)
getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0xff00000000000000}, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c)
recvmmsg(r3, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="0800000600000000", @ANYRES16=r7, @ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0c005a800800038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x1034, r5, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1034}, 0x1, 0x0, 0x0, 0x10000010}, 0x4040004)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f00000007c0)=0x40000401, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000340)="7fd3290534a38e3102c5bd8269e7750dbf0cf83f9255ce0523a8836da6ba332bc10e8fc1f44fe3c0d3611baa3ae91d6438adf7dcae88ae25662ad702c591e423059ad23e2b00", 0x46, 0x8000000, &(0x7f0000000400)={0x2, 0x4e21, @empty}, 0x10)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x29201962041909f2}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x24008040)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

2.973975898s ago: executing program 1 (id=8196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x2a, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.857169901s ago: executing program 2 (id=8197):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071119d00000000008510000002ff9000850000002a00000095000000000000009500a50500002000760a3cbe6e2c5db217d331c5baa0c9b3da5b097895eb7c4a3a861044f11f69e018c5e0b7c4e51e2391b5857c7a541b93e8e6999c7610e0268423277adf29bbe231161c79f5e44f2b8a4c60d0e66cb78d95e808d32e00d11099118ead9d17b973b5883b051dccd780dc3d6a8ddc1de186973d00080000000000002974a77be52f523c9a380679e2b5e7863791e26d1b1bf57f41e7880540234f294a0ba0ffc5d8eaebc198f1c3ae4bae93503c8044"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2.801999738s ago: executing program 1 (id=8198):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

2.698065929s ago: executing program 2 (id=8199):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f505cb103f00400000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x29, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x200, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}}}]}, 0x40}}, 0x0)

2.557124111s ago: executing program 2 (id=8201):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000800000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000a0000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0)

2.245934833s ago: executing program 1 (id=8204):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a003f005cc1285b79111205d800", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000440), &(0x7f0000000080)=@udp, 0x2}, 0x20)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32=r0], 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r3}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r2, &(0x7f0000000540)="e4211d7d8ff8a3f31cd660d1a58a7daaf385f9749d5bf72de38d6ec9e0339fe8213268726633c15abbd67cf23dfb4e6f58258f4d55409457e1f71b5318f77ceedfd13ddd00fb3ecd77485a15df526ed6b857e553d6a0823d940fa4e2633dfadfe86728de1458ee173843100000007f50c2284d13183ec3c493f327074b16912f60e54c3ed10224a66cae8e8b4a4881419af86c22b708c0621a557aa2574c36854e8c55e308482cc5727ac20f261b62d29d6a2dd94c99f4e6", &(0x7f0000000780)=@udp6=r3, 0x2}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="35ec03", @ANYRES8=0x0], 0x154}}, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x26020480)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES8=r4], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
pipe(&(0x7f00000007c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_int(r10, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r9, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r10, 0x0, 0x8, 0x40012021, 0x0, 0xffffffffffffff93)
splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000080)={0x9, 0xffff, 0x1, 0xb5}, 0x10)
socket$inet(0x2, 0x2, 0x11)

2.245549437s ago: executing program 2 (id=8205):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x4, 0x4)
unshare(0x6a040000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
listen(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000002000010029010000fcdbdf250214140c0000000300000000050013000100000008000200ffffffff080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44046084)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364c241d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324f4993fcf19b25f3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r3, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
listen(r2, 0x39e)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe8, &(0x7f0000000240)=""/232, 0x0, 0x8}, 0x94)
listen(r5, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x144, 0x0, 0x220, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x13}]}, @NL80211_ATTR_IE={0x2a, 0x2a, [@supported_rates={0x1, 0x2, [{0xc}, {0xc, 0x1}]}, @supported_rates={0x1, 0x8, [{0x48}, {0x48, 0x1}, {0x1d, 0x1}, {0x5, 0x1}, {0x4}, {0xc}, {0x48}, {0xc, 0x1}]}, @peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}, @supported_rates={0x1, 0x4, [{0x4}, {0xc}, {0x18}, {0x30}]}, @mesh_config={0x71, 0x7, {0xe5, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0xe5, 0x2a, [@random_vendor={0xdd, 0x8, "ae5408dd72f85c6f"}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x2, 0xf, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x49, 0x5}}, @dsss={0x3, 0x1, 0x7}, @fast_bss_trans={0x37, 0x86, {0x1, 0x3, "5e545e08837433f04678b6fa33a374f6", "0e2a05c9d6a86faac4bc421579945cca59591cfa6ec677a9d5162bc0f2681313", "b3751926df29ce1acaf0813a8e6a7eab9aef191568b390353a93c994f63c70fa", [{0x4}, {0x2, 0x15, "0ab553608fae8ee005b8ee1ce10b3b30f1e3eb7bb7"}, {0x2, 0x19, "e64de48045eb35b262c0b862f4c9cac4430c5290f2b490be8a"}]}}, @ht={0x2d, 0x1a, {0x8, 0x3, 0x6, 0x0, {0x61c, 0x32e, 0x0, 0x6, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1c01, 0x80000001, 0xf}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xdf, 0xd, 0x6, 0x7ff}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)

2.158273217s ago: executing program 3 (id=8206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc006}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2c0000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x88}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x20000000)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0xbc, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0xd}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x24}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1c}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r5 = socket(0x14, 0x2, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, r6, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x10}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b8c55b6b7969f23f5f48b064ee5b07fcd8599ccc69409823"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25f0811bc75f3cfbcd1f1fd6cac1c93f8638cea42cd5dabf"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x2c, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0xc4)
ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0x4)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xa, 0x6, 0x7, 0xfffffffffffffffe, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa687}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

1.645469673s ago: executing program 0 (id=8209):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0ff, 0x0, 0x0, 0x0}, 0x94)

1.454589706s ago: executing program 0 (id=8210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x84e, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x818, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0x101, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x6, [0x100000001, 0x6, 0x8]}}, @generic={0x14, 0x7e4, "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"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0x2, 0x3c, 0x29, 0x9, 0xae, 0x9, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c0}, 0x8000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.157819941s ago: executing program 0 (id=8211):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.081212563s ago: executing program 0 (id=8212):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value=0x21000000}, 0x20)

945.672431ms ago: executing program 0 (id=8213):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000380)="ed6606c370a5", 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000180)="bd8f7f71c4ee7e0c53130abf2ca65ad942033e49", &(0x7f00000002c0)=@tcp=r2}, 0x20)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
socket$inet6(0xa, 0x7, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x98}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

702.299971ms ago: executing program 3 (id=8214):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="08001f000c"], 0x40}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001300)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)

449.866037ms ago: executing program 3 (id=8215):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0xb7, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x5a8, 0x168, 0x4d8, 0x0, 0x3e8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8)
sendmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000040)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="20d6fb2209883f849a72c92f108ec001eaaf2cb7760ab3a577e4a58801a559be45f9702a4796af56a282893864f304947f2b4fe65e9e226d1b80fce3e4aab943136d0cab33b055c805b81001d6ee3aa2f316962d944f2cb3724991af440f11e14bf365effdb599c3184b9bf1a24ce605", 0x70}, {&(0x7f0000000140)="87c0b722172efbae16fdfd5941fa8e90267646981dafa971250731f451638023ef6cfcdb75207b06d30682696a3f956f1657b1071873d695912cbb9cc72a0762868b84fb0e91fecf273ca541ef7c0be12d4a7de670640690416c3a385ea73e429d70533fa3bf94cced94edf32ac36e0207dc7c47201e1f0036701d97f229db4911a10634138033463989bbff75de44ec1c66ba69581ce999153cb69bdd91827c807b07c729c8898292708171d89e94a2027099a3afad185c2cb6f455913e4ca031e56f30148fda0881a96fe56839c99a4b172182a419a2864b2f37171954b837ae01c6", 0xe3}, {&(0x7f0000000240)="bdc29f6ada641b38df2529fdb9373d89ec1a7e8cdfc33e9b077dbf91b851524a828641d02308fe5852166388947bb80e4844bcd2d7f7ba6f763fa6b5f0936d314128dae7fad69fb367eaa50d94ff974dde34ab14dcd572fddb3088f8", 0x5c}, {&(0x7f00000002c0)="8012c04b89524a82fc2c89c0ce1d95af6454fe350ca79eaf84658e61d9a59ca7a28c962abcfcce0c4e19c1502a58b8cbbefc6797812f81714860dc22e0fcb45980e1fc0d1ff823129ef5c954a229fcac7a", 0x51}, {&(0x7f0000000340)="8469271c28bdb2a43e739cf45359409baafb32cfc7ed57da10d6caa0beac497d0158c6b62ff2a10d36e16fe119cfd408d023deeed4a9351c2e186a676bebd6264624d8a2d688a8604a3cccd08920ed334615a737ef50da4136414b8aef26ecd22d2adc4fcb65979b", 0x68}, {&(0x7f00000003c0)="ae222e751c24e69d09370b31c456400ef4d5d4baeb34d4b78729a8387401aa0196380b2b29668b1a0b287b2173560ab899264243fec9229dcab54a947ef4394872e0df8e79bb26be216562cb2d3d9112ed9c1b0463976f581037e0b34a78f0", 0x5f}], 0x6, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xaa6, 0x3, 0x4, 0x4, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000680)="7b70e44aef5c979c373f6f82a939953aef61fb7b123ebc7ba4c24a726e4e9de2a9809b83ac75de0ab56cc4a2becc868c920d56a9a4efa9f2ce5ab420e61c37869c211a0dec66cbea0054da7a3ed7816ffd26243d497bb5fd93725d01200fa6523b1baac90a61c2749867e282b7a8e842fabfe0261bb1ba261146e12c139e28bf5df0bab51955326d857a9ee9a4b879dd9a872c4fef674c868bf56b2f9deec18aa6039b8933bc1378fa243d8c6254d83b25f29d7108b694", 0xb7}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000740)="bc09f2b652e87d87df71d70f1600e0942b1d8bbd4fd5f7914a76192485dda0ad55be3909fde5e79e8219f83c281ac60fb68763293bc17fc5c52d6fa81bec29c7058e29a0c05980d214e7c2b91eb966c60bf52fed3d147fd5e7b765a137c4c0582fabdd1e6a314cacdc3d44e375517eaee368ef55d546128b9b0a414f497ed633f46d10590ac9d2b19420c15628713fe5f8b0ae1541", 0x95}, {&(0x7f0000000800)="5e9d906c81eaeeaebf8d059013e84856bdec60bf4f2ef15e5f55bc9de2192f430ac867bacb654ff9fb6d2707d89d3b2a8343eb6af02995700c41bb31ef3e080f386258cec6e5b53fbdc7d2f915d57451502e04ad550976b178afa80c6e2df942315aaa995d6a39af2c27fdec1be6e7e76465", 0x72}, {&(0x7f0000000880)="8caaaf24c1bf3c73d3c5fef21c1e5da3fbb1d83728928016252437e8a135ec92106d9355c47797214dc7ac8a2ead5a08b68cc859d40ac3829c26683e4498e93179a12bdce712611350ac4f5fe75f5c1a03c87a5633053d6e38bb99c219f6e83d12575277609b7059b5a9fd6a70e1124a47277e3246f8d5fbc69a390d2e9d7e3729dc6e700d1561feb535ab714188f18049466b48680479cbbaf43938326a99d7f6ca9ef3197a057bed1adb004ed90d3cf670377f409ac14ad2ccdb9ec37b4e53fc5b038e64659b72a393c54ae0602fc6aaaa6c5cee0068384e551ad11738d208d95eeb89affe4dac2244280a9e0f9c07612b4d2188", 0xf5}, {&(0x7f0000001a00)="eeb6d8ef10e501f3ced71eb928350b501baa31668ae3f0b669094422577a86de454c65b82607fa326eef1b7f009e9863d7f4b30ab92928d5116000bb8992e49d0d11242446f8f0dc0a12de32839f9011f77108a3257632611e0f5e35ce9e644991d78cc136f7755cfb97f397e2f0551366c9060fdb3d7bc5debfac11b069985541542c1662ac0a2c1056dd05967034967b8b60667dd6b96b61f0e2fc99aed6ba7e87499234fba6abe71051617756428d4b8fdcf09dd4a15d984efa49d137e536c899f71844314f5fbaa5549f6e9570075d5d68e6e012c4cc2a3050719e", 0xdd}, {&(0x7f0000001b00)="445527e60c3789a0068fa31c0a04414894c0b4b86283b9bdf7871d798e3f1136f47802156b5e5fcaf9c08ba2dd2543d70c31c0a156cab16743c7d28ce02f0ea98c452e7452f4d41a4cd91685de896ac4e75585c810f5cedfe8adace352f9b46ed82944e2", 0x64}, {&(0x7f0000001b80)="314cc2d9b0639601129750437ecedf555b15b93e062f6fbb77f9ded66d35176bbf0bce3307f40b11370e8fcaa9df949a700ed4cf1c2962067a389db2a745c7d08c3371157188488be61cedde5ac3bdb5c0b9d8afb11059f2d1bde4caa4fe6708320c8dcdca0efbc12767cee631f19016a97361678467b5c47a48e451f5e6", 0x7e}, {&(0x7f0000001c00)="b5eac55ae541919adfc50367fa567b968639d89a98439136a2966b96835e4aeda998a05d87ffbc259af0c7696ffeb8d2e672d70c2083d0fb3dcdf8e622fb5aaf87957b36f393bbfe51d07951ef789a553b313fcb3d9e7016a4e8d0841ca51eadc3465536f17ca1b13d52900ed581bb7ec4b835058647c1b81902279c00e3fea73dd4375ce19fa5d6b30133e3f2ab6ee05d99e461122173efc870405363d0d323323473663c3bc0d6212b45605125ced5c850f18b", 0xb4}], 0x9, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x10e8}}], 0x2, 0x4044851)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000240)="112efc", 0x3, 0x8010, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x1)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f00000009c0)=@ethtool_sset_info={0x37, 0x5, 0x6}})

217.680524ms ago: executing program 1 (id=8216):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xca, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xbc, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0xe, 0x0, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x79, 0x0, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0x12, "1dd728293ce46521a9e93d80e747fec6"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "7f36c525"}]}]}}, "234a3802"}}}}}, 0x0)
unshare(0x22020400)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x4}, 0x20)
bind$l2tp6(r1, &(0x7f0000000300)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000000dc0)=""/4088}, 0x94)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmmsg$inet6(r7, &(0x7f0000000080), 0x0, 0x20000080)

13.818525ms ago: executing program 0 (id=8217):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfbfffffffffffffc}, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)}, {&(0x7f00000007c0)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49c05b1f787665fc8ed059d872289988b78549f8e5f01c2dab0e462f618669d1ca60666c010a55e46421284abe14fdfa39da550161c5410c37fbd11866c3e2f710e557408f5c4a5d494e87bcacc70ecbc69322da9f6a2388ffece43aeee909aa68d00e2137407fbcf0e749eb6ef98960c1ed54e532722c05c0038e8a9c25a560b3569cc7928a66d41c3dcf80263869467cd8a905d56a7b327d0354d81554f98b1e85ae5d86502a1b3ed1e250f71cb5c5b7aa755326d9d6ab836db15f6107023fe99229e48a9008bd8ed0141577f1f1ea58b10e6ceeacfe98ff142e57f0dd1c88ae37752e200657282cda4177730d24a77a941e21675fa53da47992cce0a954ae826fff35039dc74bd9d0e5973ee99b00200cff625fb828ebc36189f3013291fe121a0810e1008854633b5890b810817609e8311f2e34cf3b78d666a1207a4fdbf77cc2d87410bb8533054f39eeff0602c72476ea86bbd68e3bf4976c16a3a8d60b4fa1c1ff02275718e1f7028119bcb785b0d95369dea71f559a32891ad8b3ef21b0f43f8db1f88fc0984c24ea1a38bc89b3b23c4cf9a67ad08f3fb635736350dfb726f8177efadd377073ba05878ab62d2a18481922e6c48f09f057aba001fb8eb233eb23a67e74d006bdaad1fa9a8a622c17947f34b89d0fc0a6dd3a7b6fa0beabb98875112036ab1ec22090369dc72d3c385b2679f0b99af9bcc6ef785c0b51473d8864ec867ea3c754856199152f000b2afe739b5c568c1619d2af08fb2fc6844fac0035cceb0d0656d3af9bbd686fd99275e7f81aeafd33481c5778b279e5870348ec4495684bdcb71c0c8131cdc8330159d8c92adb613dac99fedb3c50c22243ee61ebb8645f94cd0994b02c5f5b544887b11b2fd3655e115889ebeb8617eb1cdb5dbec30c407ee4f09d17d2ecca77b25604cfbd308a91b0b2e8cd1249a2e1f441989657efc8584ceb7e443f2ae30191c5623b06fac91bab61a40f31f2863b4b508998ded6abd8f55e503401c2e9e298655d50ab3f775f9159d0765b4ee1fef3aa1fe608d5dade41cd16a3c1ec7868b18ff3f1449d3900f7d77489c1bb4cdb99beac51942f8a7c4ab3e3a43e13b6c69b63623a970aec5426b58c63d9ffc229efb58e7b58eb27a12b91c4a0f253e1d5f13e59ffcecb003c5e46b1cc236b9fe508b37c3f2046c53eabbc2a7b1f2c0d04a86ba8918239e1dda997c5612fb43dc86905f79f1503ac47d5ea8399dc5d5cc284a3a789d77cc5e887ce3c25ae3f7a636429873970930ebdeec9690b62f46f480a4a102cfa3ce2a61f056bedf3ca698c4f2666bf55f035daca9fb2efcfd96d18cb7afd6e2592e460c4638f261a4a7a85c290c78a921edbc01e2d7a60c6b6a2608fb52f31b73471dd610f3703242273de21261656df6cd8c3847c730819e402933a40a4c560d9651a95764179f4a1a39e60c80deece7b0eacbafd5efe40eee56424b3e0921524397bd4f554e4a0ccc6e9b2be09e0ae6810a9fef7b027ee3cff9b5e674f793579eac25cee7c4e9351a8d7412e2c6cf9ba4082059a35878771744b8d0c572e10250035630b30db9030bf67c6dca054f6a219c51984f37ec9a2e2ac6e85d97475e5821bbb376af98e1e180cd94c22a2246dc757da46421b85487b7291f68fa595451999c32c869cbabcfe6be628f0909bb62ee174c97bef3f92fbb1072d66b5d28427b1695913bb86759fc20c74acf75df87ded19a81966e7dda1be3cec73f23df8b255ceff270af0ee99253426f5d4866afd89766c498652d5c5f6d4d3d6fbb52931b10613ba80a3d8a23464c30414e89897b90d5e0c90f0c72931b5ad4cbf69c0fc2eda242a56a789af5f4f0f0fb51f26c7a102ce6e0b76cf3a1f84de55f21df446ec9b9409cd1fb919b02a515994166e7ae29ad0783e0adf2c4296ed7fc19c84378a35e83f739a3e370faef047ef39fc7926ebf06f09db535aae1d5558f83f1e434556de25e6d2aa78d4eac784a7407521e1626d038d652d0320c0558c42e9e9ac731404c26248934d23dd3a8812de7622c230888db650f7846770ddc8059447fd03ccf862574d9b548054afb63e32986caf80a57fc2fa01d904ec94ad1c8b6cb56cb782b47b5a5626ab094c196e2e1f9fd25a39ec1ad45a7ae94c9ae64ac4bb45c828295c195fbfed9171d142fb8ece8af614953ad5ca1e5d65c52c4d9633c458b5e788bfd3469328b9e6e4df03f3da9e5d3d11284e791a67d0856666ee21f8ea4b1d76d7a1f07863756029a4b5cb820edb63dc0efe6fc2577a79383f280f241b35dff9cfb92cf04451f5767f95e5d5ff0c808acddf406127e9ceb8d1f55749a5781e9b185e45072d181d069c715febebc1ab63126697d145d63b3a41ba202a387dcfdfbb96de0d05454fecc286fd296bb10d498b49d3bcdeda3035699837dfac86ce61641ee7105f4b441031bea7ae0d1787bf772cfa2f48c3062d232b23b5b328e6ea9e0de0130db2500e37d28a52c490b2fa9d39c3d5c9b8a298f2aeb348b962fee1d6a7d6d2c661113c2b8101f39dba91a3199bab5b70f5bed7871580b54bf34f2851c14b69e16ad97223ab8eb0b2725e00efa7b1e75264a65ad61cfca62f6d5d651c193c123f9bf77b3aed591e8161b767fc2977b56f3849362559dffd3414ef1e5cb2d611f7bb3d7d4c28c0a6de2993eb89c0805622f9fe4136e856e103d931aae07469efc077f9dd6df11c1eeba7468ca78e2e8027b2f672f9b965a6d88756b531321fb181702794ce58299b0cd34e481dc6760b4f9b32cfae5e0a35b4a19a4dbd26870bcb8ccb7724a294b10697763d6b3f7141bf7ca09d0871dceaf364f5aca649d77203328b8ad463a144961595e978043be434cd08dd5120bc36c5d895745ce5cc10f9a7f22baad125d60beaeb8c98279f5b3a363eda42bfc9fef669b2f4fb663700dcc5a47515b9adec65cc99cfea4cc2246dcdff878eae17441c69f4127c49fdd7935bb0c0c8053c9b788aa74a7ff174b7fc8b36ddc5ffa89fe7a98a14805ce96447e00a8b32b3f46af448aa29f326d03477bde78b147fec195cc5b253becf53a80f08ddde4529c2f53f40eb59f8598ed0c045dd60cb8ee90669091d1e2e970791f687db9b28c43c74813b6364b3a0f5762bfaa867bcdd7d44d0eccc1e0149b6ba5c4412b16493330a41352c682dfd88aff599459c6d7beb392925338e9bb1469f59dc833d0e685dc8ac9fc708123d1a1d483e6ccd45f58edac266f5517f5711402a83bacb634e4a28e8d32121be30a2aaeb2adc5cc3e2b0d15cd94b4fab7f37ffa77e477099ea6dd6167e292921f5957fc4e2f3c7a1396e60154bb638dccb5fd0d7bedc36591901dbd5cf63914c401fc79036f4a26f7b4df5fd776b7ef156c33a180ec8615ec6f24659794da3af2cb75a5905b891a0b269405d4471fbeb3e90b19f502f0b36a32f9f8bbac6a1fa6fb7a50cb563b4fa41d0f2639da50773356cce00000000000000016721701a47a54d76c93fbd00f408c270897159bf168ab2ec326978f48f7d845b6e64d856de829fd8b45b86489abb7537e372df0ddc96ed4826ee76b28d8999d7e170b1db1dc9316d51504f7cf7740f354f0255f83a31ef9c8e70d33a256e909bad11ae1217f66260dc5c52682a6e84fec98221de47463b6d37b6a100fe5893b668d316b78f1cc0f67c481c50e275d4613a0b2acf73f86898b2506dc72b427e0476ab342f3c18b0949ee09c2d56154fc7b36a44c0771851186e83619f73945258dfe80304a591b2fe7057e80a2127c5e8b00c6d4809e72d931ffd7bce4b4d9fce0cf6135c47ad63fd7f9ed8beba4de84c087fcd42eaf8474a01bd752bba36dd487c0ae725f8e7ec695aa2958616f6c59413f235f176300a9457d3caf0b4e972b6b9339b4de6e7bf29aa1af48de7a834700a9c999c0198b3f6234aee737c96e02120b79725322aafe19139cc725db0b578cfccd8666b66ae8e034e4240768f03e0ff8ee072245b28f42ceb784133e99071b36709992fa81a9736d89018a2b361877a2fb05bceb0bfa5ee0eb7fc5d78c534f6ea4edcd0f530067c530f7bea92bddc9c61b268d5bc1ad3ff852ab93f3e810002133d0d8e16b1d71e1db2bdb91d416a6bfcb4864d58da1758abff7ca03d379bd48b03f019c33c434bdf25822465ae322b38ae83dd90597db8c781f48efedb66da368f3d9f67f27612c51c07b9aeb419c32ff028a77e3abc5bd531d7bb29bd1c6c1119820abfd881f660e5a7072cdbc0e888d97cbc2105782204f34d093c1e0e6195e51e2e8b639a0f656aa21e29d0fa2a2f868b77995e7ada252a30a31b219be7c1b107ddd737654546340e424f13521ed73f0ed33ad3664f1b9b68eee0f7255119d585c09a2467b22de08104a37202cb737e934b1bdb83102b680d9cfd21c55fd00e33fba7651b2c36a87272945c371303c7e4ca181c1f7d2fe09815c1732d8d777e7b9a430d6b237c7c9fc8758e8456fb4e6ffc2aa421ab5942204e54cb52197e14aae9ae34376ac1d56d009f07babcb3d3492c87faf3e44bdd7d16dbce8148e2c7cb44d30ca29908aaf7c9ef39e791a9a988a5381942e3daf05f85be245f4ef26b08d83b1c1b58892b462783dc27602d8931d3232e5be295d479f9600cc4c3ed2e6a2fbb925c602d251b13f2ec2b7ca99fcd4bc2aa6115ddb0b842ed35c70d867734ee7518fd5299e07818f024a1682aacaa4e28d9f5db71006beb8bcc1e3a43cf27fb3d9475fbd632912d83f4e95b4390068f55f2f832a2e2c9f4ba5ca59d185a655375c6f5779d9fe5a47d1f417cf6f6405eab89f755f9a90623270c2b2a444b6b79662964199f7bedd2a2939e03ec6a334b78a6166ebf70562819a273bb6de9a3d7c2383a569cbeb08859e742ec5f947d1817c2dbfa3b72e5d3afdc4582cad9e25ba954234522bd33e6c6d3fda50a90a33f5c8d7746f3c7c70fd3b7", 0xe14}], 0x4}}], 0x1, 0x4044805)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b0000000a000000050000000800100001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r5, 0x0, 0x0, 0x8450, &(0x7f0000000840)={0xa, 0x4e25, 0xffffff7c, @mcast1}, 0x1c)
r6 = socket(0x10, 0x6, 0x7)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x0)
r10 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000080)=0x7fffffff, 0x4)
sendto$inet6(r10, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000014c0)="03", 0x1}], 0x1}}], 0x2, 0x400c404)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

0s ago: executing program 1 (id=8218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000621020001003f0008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

kernel console output (not intermixed with test programs):

3837][T25405] bridge0: port 3(gretap1) entered blocking state
[  652.565476][T25405] bridge0: port 3(gretap1) entered disabled state
[  652.590964][T25405] gretap1: entered allmulticast mode
[  652.610396][T25405] gretap1: entered promiscuous mode
[  652.632723][   T65] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.667897][   T65] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.710813][T25409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  652.737160][   T65] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  652.887641][T25420] netlink: 'syz.3.6524': attribute type 29 has an invalid length.
[  653.036586][T25425] netlink: 'syz.4.6526': attribute type 3 has an invalid length.
[  653.133556][T25431] lo: entered allmulticast mode
[  653.149123][T25431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  653.399480][T25444] __nla_validate_parse: 4 callbacks suppressed
[  653.399502][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6535'.
[  653.520892][T25448] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6537'.
[  653.590207][T25450] macvtap1: entered promiscuous mode
[  653.615449][T25450] macvtap1: entered allmulticast mode
[  653.629161][T25450] bridge0: port 1(macvtap1) entered blocking state
[  653.647698][T25450] bridge0: port 1(macvtap1) entered disabled state
[  654.190161][T25477] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6547'.
[  654.377600][T25483] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6549'.
[  654.655052][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6555'.
[  654.695451][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6555'.
[  654.763135][T25498] erspan0: entered promiscuous mode
[  655.301584][T25513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6560'.
[  655.321907][T25513] ipvlan2: entered allmulticast mode
[  655.328301][T25513] veth0_vlan: entered allmulticast mode
[  655.408632][T25517] netlink: 'syz.1.6560': attribute type 1 has an invalid length.
[  655.443027][T25517] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6560'.
[  656.408833][T25543] FAULT_INJECTION: forcing a failure.
[  656.408833][T25543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.445802][T25543] CPU: 1 UID: 0 PID: 25543 Comm: syz.0.6567 Not tainted syzkaller #0 PREEMPT(full) 
[  656.445829][T25543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  656.445841][T25543] Call Trace:
[  656.445849][T25543]  <TASK>
[  656.445857][T25543]  dump_stack_lvl+0xe8/0x150
[  656.445883][T25543]  should_fail_ex+0x412/0x560
[  656.445909][T25543]  _copy_from_user+0x2d/0xb0
[  656.445933][T25543]  generic_map_update_batch+0x51b/0x810
[  656.445970][T25543]  ? __pfx_generic_map_update_batch+0x10/0x10
[  656.445993][T25543]  ? __fget_files+0x2a/0x420
[  656.446020][T25543]  ? __pfx_generic_map_update_batch+0x10/0x10
[  656.446042][T25543]  bpf_map_do_batch+0x39b/0x630
[  656.446063][T25543]  __sys_bpf+0x709/0x920
[  656.446082][T25543]  ? __pfx___sys_bpf+0x10/0x10
[  656.446114][T25543]  ? ksys_write+0x242/0x270
[  656.446139][T25543]  ? __pfx_ksys_write+0x10/0x10
[  656.446168][T25543]  __x64_sys_bpf+0x7c/0x90
[  656.446190][T25543]  do_syscall_64+0xe2/0xf80
[  656.446212][T25543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.446229][T25543]  ? trace_irq_disable+0x37/0x100
[  656.446246][T25543]  ? clear_bhb_loop+0x60/0xb0
[  656.446267][T25543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.446285][T25543] RIP: 0033:0x7eff4a19aeb9
[  656.446301][T25543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.446316][T25543] RSP: 002b:00007eff4afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  656.446336][T25543] RAX: ffffffffffffffda RBX: 00007eff4a415fa0 RCX: 00007eff4a19aeb9
[  656.446349][T25543] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  656.446361][T25543] RBP: 00007eff4afa6090 R08: 0000000000000000 R09: 0000000000000000
[  656.446372][T25543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  656.446383][T25543] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  656.446413][T25543]  </TASK>
[  657.204459][T25561] FAULT_INJECTION: forcing a failure.
[  657.204459][T25561] name failslab, interval 1, probability 0, space 0, times 0
[  657.252469][T25561] CPU: 1 UID: 0 PID: 25561 Comm: syz.0.6573 Not tainted syzkaller #0 PREEMPT(full) 
[  657.252496][T25561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  657.252508][T25561] Call Trace:
[  657.252516][T25561]  <TASK>
[  657.252524][T25561]  dump_stack_lvl+0xe8/0x150
[  657.252551][T25561]  should_fail_ex+0x412/0x560
[  657.252578][T25561]  should_failslab+0xa8/0x100
[  657.252599][T25561]  kmem_cache_alloc_noprof+0x87/0x6e0
[  657.252624][T25561]  ? skb_clone+0x212/0x3a0
[  657.252652][T25561]  skb_clone+0x212/0x3a0
[  657.252677][T25561]  pfkey_sendmsg+0x4a3/0x1120
[  657.252695][T25561]  ? unwind_next_frame+0xa5/0x23c0
[  657.252729][T25561]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  657.252771][T25561]  ? aa_sock_msg_perm+0xf1/0x1b0
[  657.252795][T25561]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  657.252816][T25561]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  657.252833][T25561]  ____sys_sendmsg+0xa68/0xad0
[  657.252855][T25561]  ? __might_fault+0xaf/0x130
[  657.252883][T25561]  ? __pfx_____sys_sendmsg+0x10/0x10
[  657.252915][T25561]  ? import_iovec+0x73/0xa0
[  657.252942][T25561]  ___sys_sendmsg+0x2a5/0x360
[  657.252963][T25561]  ? __lock_acquire+0x6b5/0x2cf0
[  657.252990][T25561]  ? __pfx____sys_sendmsg+0x10/0x10
[  657.253046][T25561]  ? __fget_files+0x2a/0x420
[  657.253064][T25561]  ? __fget_files+0x3a0/0x420
[  657.253093][T25561]  __x64_sys_sendmsg+0x1bd/0x2a0
[  657.253119][T25561]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  657.253151][T25561]  ? __pfx_ksys_write+0x10/0x10
[  657.253193][T25561]  do_syscall_64+0xe2/0xf80
[  657.253215][T25561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.253231][T25561]  ? trace_irq_disable+0x37/0x100
[  657.253248][T25561]  ? clear_bhb_loop+0x60/0xb0
[  657.253268][T25561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.253286][T25561] RIP: 0033:0x7eff4a19aeb9
[  657.253302][T25561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.253316][T25561] RSP: 002b:00007eff4afa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  657.253336][T25561] RAX: ffffffffffffffda RBX: 00007eff4a415fa0 RCX: 00007eff4a19aeb9
[  657.253349][T25561] RDX: 00000000000048c0 RSI: 0000200000000440 RDI: 0000000000000003
[  657.253360][T25561] RBP: 00007eff4afa6090 R08: 0000000000000000 R09: 0000000000000000
[  657.253372][T25561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.253383][T25561] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  657.253412][T25561]  </TASK>
[  657.722331][T25570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6576'.
[  657.939348][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6579'.
[  658.179638][T25583] pim6reg1: entered allmulticast mode
[  658.187728][T25584] pim6reg1: left allmulticast mode
[  658.331272][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  658.354264][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  658.402025][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  658.501497][T25601] netlink: 'syz.1.6587': attribute type 4 has an invalid length.
[  658.527729][T25601] netlink: 'syz.1.6587': attribute type 1 has an invalid length.
[  658.574276][T25601] __nla_validate_parse: 1 callbacks suppressed
[  658.574294][T25601] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6587'.
[  658.891816][T25594] infiniband syz2: set down
[  658.897277][T17499] ip6_vti0 speed is unknown, defaulting to 1000
[  658.903818][T25594] infiniband syz2: added ip6_vti0
[  658.961412][T25594] RDS/IB: syz2: added
[  658.975318][T25594] smc: adding ib device syz2 with port count 1
[  658.991864][T25594] smc:    ib device syz2 port 1 has no pnetid
[  659.022062][ T5934] ip6_vti0 speed is unknown, defaulting to 1000
[  659.038238][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  659.311071][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  659.628600][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  659.873671][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  660.097819][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  660.156111][T25559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  660.550994][T25625] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6595'.
[  660.595634][T25626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6596'.
[  660.717422][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  660.877513][T25633] Bluetooth: MGMT ver 1.23
[  660.907964][T25633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6599'.
[  661.262314][T25651] SET target dimension over the limit!
[  661.371842][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  661.610920][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6609'.
[  661.656439][T25662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6609'.
[  661.920138][T25676] netlink: 'syz.4.6610': attribute type 9 has an invalid length.
[  661.990715][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  662.503906][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  662.551717][T25702] netlink: 'syz.0.6621': attribute type 30 has an invalid length.
[  662.840593][T25709] syz_tun: entered promiscuous mode
[  662.888252][T25709] syz_tun: refused to change device tx_queue_len
[  662.915082][T25709] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  662.988765][T25713] netlink: 'syz.0.6624': attribute type 2 has an invalid length.
[  663.015366][T25712] netlink: 'syz.4.6625': attribute type 1 has an invalid length.
[  663.016255][T25713] netlink: 'syz.0.6624': attribute type 11 has an invalid length.
[  663.054386][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6624'.
[  663.065436][T25713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6624'.
[  663.079693][T25709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6624'.
[  663.089385][T25709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6624'.
[  663.412544][T25715] bond1: (slave gretap1): making interface the new active one
[  663.470344][T25715] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  663.569493][T25594] ip6_vti0 speed is unknown, defaulting to 1000
[  663.582374][ T6637] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.612481][ T6637] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.659088][T25720] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.668112][T25720] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.777420][ T6637] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.808706][ T6637] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  663.982790][T25712] macvlan3: entered promiscuous mode
[  663.997093][T25712] macvlan3: entered allmulticast mode
[  664.010328][T25712] bond1: entered promiscuous mode
[  664.026192][T25712] gretap1: entered promiscuous mode
[  664.039256][T25712] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  664.056702][T25712] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  664.096501][T25712] bond1: left promiscuous mode
[  664.109345][T25712] gretap1: left promiscuous mode
[  664.212047][T25730] lo: left promiscuous mode
[  664.217816][T25730] lo: left allmulticast mode
[  664.222937][T25730] tunl0: left promiscuous mode
[  664.238076][T25730] tunl0: left allmulticast mode
[  664.257849][T25730] gre0: left promiscuous mode
[  664.283215][T25730] gre0: left allmulticast mode
[  664.307796][T25730] gretap0: left promiscuous mode
[  664.320811][T25730] gretap0: left allmulticast mode
[  664.337477][T25730] erspan0: left promiscuous mode
[  664.424820][T25730] erspan0: left allmulticast mode
[  664.468122][T25730] ip_vti0: left promiscuous mode
[  664.473125][T25730] ip_vti0: left allmulticast mode
[  664.496103][T25730] ip6_vti0: left promiscuous mode
[  664.501180][T25730] ip6_vti0: left allmulticast mode
[  664.603447][T25730] sit0: left promiscuous mode
[  664.623056][T25730] sit0: left allmulticast mode
[  664.655365][T25730] ip6tnl0: left promiscuous mode
[  664.688864][T25730] ip6tnl0: left allmulticast mode
[  664.722462][T25730] ip6gre0: left promiscuous mode
[  664.757980][T25730] ip6gre0: left allmulticast mode
[  664.792428][T25730] syz_tun: left promiscuous mode
[  664.814423][T25730] syz_tun: left allmulticast mode
[  664.866805][T25730] ip6gretap0: left promiscuous mode
[  664.882042][T25730] ip6gretap0: left allmulticast mode
[  664.914782][T25730] bridge0: left promiscuous mode
[  664.930323][T25730] bridge0: left allmulticast mode
[  664.959295][T25730] vcan0: left promiscuous mode
[  664.981942][T25730] vcan0: left allmulticast mode
[  665.011844][T25730] bond0: left promiscuous mode
[  665.043139][T25730] bond0: left allmulticast mode
[  665.048346][T25730] team0: left promiscuous mode
[  665.053250][T25730] team0: left allmulticast mode
[  665.062496][T25730] dummy0: left promiscuous mode
[  665.095499][T25730] dummy0: left allmulticast mode
[  665.102691][T25730] nlmon0: left promiscuous mode
[  665.123855][T25730] nlmon0: left allmulticast mode
[  665.131561][T25730] caif0: left promiscuous mode
[  665.139228][T25730] caif0: left allmulticast mode
[  665.178549][T25730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  665.220770][T25738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  665.549611][T25780] __nla_validate_parse: 1 callbacks suppressed
[  665.549631][T25780] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.6646'.
[  665.845447][T25796] macvtap1: entered promiscuous mode
[  665.865221][T25796] bridge0: entered promiscuous mode
[  665.870638][T25796] macvtap1: entered allmulticast mode
[  665.905077][T25796] bridge0: entered allmulticast mode
[  665.911241][T25796] bridge0: port 1(macvtap1) entered blocking state
[  665.986438][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6657'.
[  665.987174][T25796] bridge0: port 1(macvtap1) entered disabled state
[  666.019305][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6657'.
[  666.030004][T25796] bridge0: left allmulticast mode
[  666.048927][T25796] bridge0: left promiscuous mode
[  666.239411][T25814] FAULT_INJECTION: forcing a failure.
[  666.239411][T25814] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  666.283729][T25814] CPU: 0 UID: 0 PID: 25814 Comm: syz.4.6661 Not tainted syzkaller #0 PREEMPT(full) 
[  666.283756][T25814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  666.283767][T25814] Call Trace:
[  666.283775][T25814]  <TASK>
[  666.283783][T25814]  dump_stack_lvl+0xe8/0x150
[  666.283810][T25814]  should_fail_ex+0x412/0x560
[  666.283836][T25814]  _copy_from_user+0x2d/0xb0
[  666.283861][T25814]  __sys_bpf+0x229/0x920
[  666.283882][T25814]  ? __pfx___sys_bpf+0x10/0x10
[  666.283914][T25814]  ? ksys_write+0x242/0x270
[  666.283940][T25814]  ? __pfx_ksys_write+0x10/0x10
[  666.283968][T25814]  __x64_sys_bpf+0x7c/0x90
[  666.283994][T25814]  do_syscall_64+0xe2/0xf80
[  666.284016][T25814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.284033][T25814]  ? trace_irq_disable+0x37/0x100
[  666.284049][T25814]  ? clear_bhb_loop+0x60/0xb0
[  666.284070][T25814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.284087][T25814] RIP: 0033:0x7f3bf099aeb9
[  666.284103][T25814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.284118][T25814] RSP: 002b:00007f3bf1888028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  666.284138][T25814] RAX: ffffffffffffffda RBX: 00007f3bf0c15fa0 RCX: 00007f3bf099aeb9
[  666.284151][T25814] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a
[  666.284161][T25814] RBP: 00007f3bf1888090 R08: 0000000000000000 R09: 0000000000000000
[  666.284171][T25814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  666.284181][T25814] R13: 00007f3bf0c16038 R14: 00007f3bf0c15fa0 R15: 00007fff47f23a88
[  666.284210][T25814]  </TASK>
[  666.495209][T25806] ip6_vti0 speed is unknown, defaulting to 1000
[  666.850273][T25829] FAULT_INJECTION: forcing a failure.
[  666.850273][T25829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  666.854251][T25828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6667'.
[  666.873764][T25829] CPU: 1 UID: 0 PID: 25829 Comm: syz.1.6666 Not tainted syzkaller #0 PREEMPT(full) 
[  666.873784][T25829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  666.873793][T25829] Call Trace:
[  666.873799][T25829]  <TASK>
[  666.873805][T25829]  dump_stack_lvl+0xe8/0x150
[  666.873828][T25829]  should_fail_ex+0x412/0x560
[  666.873848][T25829]  _copy_from_user+0x2d/0xb0
[  666.873869][T25829]  generic_map_update_batch+0x51b/0x810
[  666.873894][T25829]  ? __pfx_generic_map_update_batch+0x10/0x10
[  666.873911][T25829]  ? __fget_files+0x2a/0x420
[  666.873930][T25829]  ? __pfx_generic_map_update_batch+0x10/0x10
[  666.873946][T25829]  bpf_map_do_batch+0x39b/0x630
[  666.873964][T25829]  __sys_bpf+0x709/0x920
[  666.873979][T25829]  ? __pfx___sys_bpf+0x10/0x10
[  666.874004][T25829]  ? ksys_write+0x242/0x270
[  666.874025][T25829]  ? __pfx_ksys_write+0x10/0x10
[  666.874049][T25829]  __x64_sys_bpf+0x7c/0x90
[  666.874069][T25829]  do_syscall_64+0xe2/0xf80
[  666.874089][T25829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.874104][T25829]  ? trace_irq_disable+0x37/0x100
[  666.874119][T25829]  ? clear_bhb_loop+0x60/0xb0
[  666.874137][T25829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.874152][T25829] RIP: 0033:0x7f57f519aeb9
[  666.874167][T25829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.874181][T25829] RSP: 002b:00007f57f5f78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  666.874199][T25829] RAX: ffffffffffffffda RBX: 00007f57f5415fa0 RCX: 00007f57f519aeb9
[  666.874211][T25829] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  666.874222][T25829] RBP: 00007f57f5f78090 R08: 0000000000000000 R09: 0000000000000000
[  666.874233][T25829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  666.874243][T25829] R13: 00007f57f5416038 R14: 00007f57f5415fa0 R15: 00007ffc548397f8
[  666.874268][T25829]  </TASK>
[  667.114459][T25825] netlink: 'syz.4.6665': attribute type 1 has an invalid length.
[  667.122328][T25825] netlink: 'syz.4.6665': attribute type 1 has an invalid length.
[  667.176897][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6670'.
[  667.194851][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6669'.
[  667.274314][T25835] openvswitch: netlink: Flow actions attr not present in new flow.
[  667.292841][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6669'.
[  667.386498][T25842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6671'.
[  668.286259][T25863] bond4: option arp_interval: invalid value (18446744073709551615)
[  668.300500][T25863] bond4: option arp_interval: allowed values 0 - 2147483647
[  668.370516][T25863] bond4 (unregistering): Released all slaves
[  668.471914][T25842] ip6_vti0 speed is unknown, defaulting to 1000
[  668.898383][T25894] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6688'.
[  669.909168][T25892] ip6_vti0 speed is unknown, defaulting to 1000
[  669.975313][T25936] FAULT_INJECTION: forcing a failure.
[  669.975313][T25936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  669.995501][T25936] CPU: 1 UID: 0 PID: 25936 Comm: syz.0.6697 Not tainted syzkaller #0 PREEMPT(full) 
[  669.995534][T25936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  669.995545][T25936] Call Trace:
[  669.995552][T25936]  <TASK>
[  669.995560][T25936]  dump_stack_lvl+0xe8/0x150
[  669.995588][T25936]  should_fail_ex+0x412/0x560
[  669.995615][T25936]  _copy_from_user+0x2d/0xb0
[  669.995640][T25936]  generic_map_update_batch+0x51b/0x810
[  669.995675][T25936]  ? __pfx_generic_map_update_batch+0x10/0x10
[  669.995698][T25936]  ? __fget_files+0x2a/0x420
[  669.995723][T25936]  ? __pfx_generic_map_update_batch+0x10/0x10
[  669.995744][T25936]  bpf_map_do_batch+0x39b/0x630
[  669.995767][T25936]  __sys_bpf+0x709/0x920
[  669.995786][T25936]  ? __pfx___sys_bpf+0x10/0x10
[  669.995818][T25936]  ? ksys_write+0x242/0x270
[  669.995844][T25936]  ? __pfx_ksys_write+0x10/0x10
[  669.995873][T25936]  __x64_sys_bpf+0x7c/0x90
[  669.995897][T25936]  do_syscall_64+0xe2/0xf80
[  669.995921][T25936]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.995938][T25936]  ? clear_bhb_loop+0x60/0xb0
[  669.995959][T25936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.995977][T25936] RIP: 0033:0x7eff4a19aeb9
[  669.995993][T25936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  669.996008][T25936] RSP: 002b:00007eff4afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  669.996027][T25936] RAX: ffffffffffffffda RBX: 00007eff4a415fa0 RCX: 00007eff4a19aeb9
[  669.996041][T25936] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  669.996053][T25936] RBP: 00007eff4afa6090 R08: 0000000000000000 R09: 0000000000000000
[  669.996064][T25936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  669.996075][T25936] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  669.996105][T25936]  </TASK>
[  670.407806][T25918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.589002][T25996] netlink: 'syz.1.6714': attribute type 4 has an invalid length.
[  671.597712][T25996] netlink: 'syz.1.6714': attribute type 1 has an invalid length.
[  671.607221][T25996] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6714'.
[  672.656603][T25996] ip6_vti0 speed is unknown, defaulting to 1000
[  672.732248][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6723'.
[  672.753053][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6723'.
[  672.891902][T26032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6726'.
[  673.076732][T26038] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6728'.
[  673.172559][   T30] audit: type=1107 audit(1770352590.954:6): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  674.426305][T26056] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  674.473802][T26045] bridge0: entered allmulticast mode
[  674.703288][T26062] veth2: entered allmulticast mode
[  675.131135][T26078] netlink: 'syz.4.6743': attribute type 3 has an invalid length.
[  675.211356][T26084] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6743'.
[  675.683719][T26091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6745'.
[  675.748195][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6745'.
[  675.843879][T26113] netlink: 'syz.2.6751': attribute type 4 has an invalid length.
[  675.859503][T26113] netlink: 'syz.2.6751': attribute type 1 has an invalid length.
[  675.868979][T26113] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6751'.
[  676.134885][T26120] syzkaller0: entered promiscuous mode
[  676.163354][T26120] syzkaller0: entered allmulticast mode
[  676.431619][T26113] ip6_vti0 speed is unknown, defaulting to 1000
[  676.545113][T26120] IPVS: Scheduler module ip_vs_sip not found
[  676.948484][T26154] netlink: 'syz.4.6763': attribute type 1 has an invalid length.
[  676.960389][T26157] sctp: [Deprecated]: syz.3.6764 (pid 26157) Use of struct sctp_assoc_value in delayed_ack socket option.
[  676.960389][T26157] Use struct sctp_sack_info instead
[  676.966623][T26154] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6763'.
[  677.553840][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'.
[  677.581402][T26169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6768'.
[  677.767226][T26176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6771'.
[  677.852170][T26180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6773'.
[  677.900876][T26182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6772'.
[  678.173391][T26187] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  678.253514][T26197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6776'.
[  678.397693][T26202] batadv0: entered promiscuous mode
[  678.408549][T26189] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  678.438915][T26202] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  678.507071][T26211] netlink: 'syz.4.6781': attribute type 13 has an invalid length.
[  678.516879][T26211] netlink: 'syz.4.6781': attribute type 17 has an invalid length.
[  678.571210][T26213] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6781'.
[  678.580973][T26211] lo: left allmulticast mode
[  678.726443][T26211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  678.726823][T26219] netlink: 'syz.3.6784': attribute type 4 has an invalid length.
[  678.788676][T26219] netlink: 'syz.3.6784': attribute type 1 has an invalid length.
[  678.826135][T26219] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6784'.
[  678.859377][T26222] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6785'.
[  679.162816][T26235] netlink: 'syz.4.6790': attribute type 83 has an invalid length.
[  679.199764][T26220] ip6_vti0 speed is unknown, defaulting to 1000
[  679.548081][T26244] tipc: Started in network mode
[  679.553000][T26244] tipc: Node identity fe85c2ec6c42, cluster identity 4711
[  679.592803][T26244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.711509][T26252] netlink: 'syz.4.6797': attribute type 1 has an invalid length.
[  679.758924][T26248] syzkaller0: entered promiscuous mode
[  679.789715][T26248] syzkaller0: entered allmulticast mode
[  679.956287][T26254] bond2: (slave bridge2): making interface the new active one
[  679.985963][T26254] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  680.059223][T26248] tipc: Resetting bearer <eth:syzkaller0>
[  680.132774][T26264] SET target dimension over the limit!
[  680.183616][T26243] tipc: Resetting bearer <eth:syzkaller0>
[  680.220654][T26266] validate_nla: 1 callbacks suppressed
[  680.220676][T26266] netlink: 'syz.4.6801': attribute type 4 has an invalid length.
[  680.298532][T26243] tipc: Disabling bearer <eth:syzkaller0>
[  680.346298][T26260] bond1: (slave geneve3): making interface the new active one
[  680.354666][T26260] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  680.451445][ T1007] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  680.480658][ T1007] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  680.491017][ T1007] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  680.500588][ T1007] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  680.776590][T26283] netlink: 'syz.4.6808': attribute type 4 has an invalid length.
[  680.833914][T26283] netlink: 'syz.4.6808': attribute type 1 has an invalid length.
[  681.454884][T26283] ip6_vti0 speed is unknown, defaulting to 1000
[  681.469742][T26309] veth2: entered allmulticast mode
[  681.514241][T26313] netlink: 'syz.3.6814': attribute type 1 has an invalid length.
[  682.104717][T26329] __nla_validate_parse: 10 callbacks suppressed
[  682.104738][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6817'.
[  682.787613][T26354] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6825'.
[  682.837304][T26351] bond4: entered promiscuous mode
[  683.343950][T26358] syzkaller0: entered promiscuous mode
[  683.349608][T26358] syzkaller0: entered allmulticast mode
[  683.608476][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6830'.
[  683.610342][T26375] netlink: 'syz.1.6830': attribute type 10 has an invalid length.
[  683.656500][T26375] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6830'.
[  683.934703][ T7192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.741536][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.751683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  685.760961][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL
[  685.767291][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.662275][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'.
[  686.699154][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'.
[  686.774785][T26423] FAULT_INJECTION: forcing a failure.
[  686.774785][T26423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  686.833748][T26423] CPU: 1 UID: 0 PID: 26423 Comm: syz.0.6846 Not tainted syzkaller #0 PREEMPT(full) 
[  686.833791][T26423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  686.833803][T26423] Call Trace:
[  686.833810][T26423]  <TASK>
[  686.833818][T26423]  dump_stack_lvl+0xe8/0x150
[  686.833845][T26423]  should_fail_ex+0x412/0x560
[  686.833872][T26423]  _copy_from_user+0x2d/0xb0
[  686.833897][T26423]  generic_map_update_batch+0x51b/0x810
[  686.833932][T26423]  ? __pfx_generic_map_update_batch+0x10/0x10
[  686.833953][T26423]  ? __fget_files+0x2a/0x420
[  686.833978][T26423]  ? __pfx_generic_map_update_batch+0x10/0x10
[  686.833999][T26423]  bpf_map_do_batch+0x39b/0x630
[  686.834024][T26423]  __sys_bpf+0x709/0x920
[  686.834044][T26423]  ? __pfx___sys_bpf+0x10/0x10
[  686.834077][T26423]  ? ksys_write+0x242/0x270
[  686.834101][T26423]  ? __pfx_ksys_write+0x10/0x10
[  686.834131][T26423]  __x64_sys_bpf+0x7c/0x90
[  686.834155][T26423]  do_syscall_64+0xe2/0xf80
[  686.834178][T26423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.834194][T26423]  ? trace_irq_disable+0x37/0x100
[  686.834211][T26423]  ? clear_bhb_loop+0x60/0xb0
[  686.834232][T26423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.834249][T26423] RIP: 0033:0x7eff4a19aeb9
[  686.834264][T26423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.834279][T26423] RSP: 002b:00007eff4afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  686.834298][T26423] RAX: ffffffffffffffda RBX: 00007eff4a415fa0 RCX: 00007eff4a19aeb9
[  686.834312][T26423] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  686.834323][T26423] RBP: 00007eff4afa6090 R08: 0000000000000000 R09: 0000000000000000
[  686.834334][T26423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  686.834353][T26423] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  686.834382][T26423]  </TASK>
[  687.046494][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'.
[  687.055528][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'.
[  687.064632][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'.
[  687.073594][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'.
[  687.306571][T26432] veth4: entered allmulticast mode
[  687.343323][T26429] ip6_vti0 speed is unknown, defaulting to 1000
[  687.479942][T26442] netlink: 'syz.0.6851': attribute type 4 has an invalid length.
[  687.496236][T26442] netlink: 'syz.0.6851': attribute type 1 has an invalid length.
[  687.524432][T26442] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6851'.
[  687.613796][T26444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6853'.
[  690.365480][ T5823] Bluetooth: hci0: command 0x0405 tx timeout
[  690.921562][T26441] veth3: entered promiscuous mode
[  691.243748][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6857'.
[  691.310025][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6857'.
[  691.522820][T26478] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6860'.
[  691.565375][T26477] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6861'.
[  691.782808][T26471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  691.800654][T26475] tipc: Invalid UDP bearer configuration
[  691.800699][T26475] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  691.837033][T26442] ip6_vti0 speed is unknown, defaulting to 1000
[  692.234476][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'.
[  693.169757][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'.
[  693.189241][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6871'.
[  693.498613][T26516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6873'.
[  693.742971][T26490] ip6_vti0 speed is unknown, defaulting to 1000
[  693.756444][T26527] netlink: 'syz.2.6877': attribute type 11 has an invalid length.
[  693.756444][T26528] netlink: 'syz.2.6877': attribute type 11 has an invalid length.
[  693.870955][T26524] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  694.433480][T26551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6883'.
[  694.455802][T26551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6883'.
[  694.492835][T26551] erspan0: entered promiscuous mode
[  694.648072][T26553] x_tables: ip_tables: icmp match: only valid for protocol 1
[  695.269528][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6889'.
[  695.806010][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6892'.
[  696.086876][T26586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  696.363564][T26601] SET target dimension over the limit!
[  696.540054][T26605] netlink: 'syz.4.6900': attribute type 4 has an invalid length.
[  696.575106][T26605] netlink: 'syz.4.6900': attribute type 1 has an invalid length.
[  696.589387][T26605] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6900'.
[  696.890640][T26624] netlink: 'syz.3.6904': attribute type 13 has an invalid length.
[  697.145490][T26605] ip6_vti0 speed is unknown, defaulting to 1000
[  697.665646][T26655] tipc: Started in network mode
[  697.675307][T26655] tipc: Node identity 32765e8e4269, cluster identity 4711
[  697.685195][T26655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  697.759899][T26665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6914'.
[  697.870391][T26658] syzkaller0: entered promiscuous mode
[  697.876791][T26658] syzkaller0: entered allmulticast mode
[  697.883128][T26658] tipc: Resetting bearer <eth:syzkaller0>
[  698.065433][T23251] Bluetooth: hci2: command 0x0406 tx timeout
[  698.206823][T26634] tipc: Resetting bearer <eth:syzkaller0>
[  698.339333][T26680] netlink: 'syz.2.6919': attribute type 4 has an invalid length.
[  698.368742][T26680] netlink: 'syz.2.6919': attribute type 1 has an invalid length.
[  698.385284][T26680] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6919'.
[  700.056677][T26702] netlink: 'syz.4.6926': attribute type 1 has an invalid length.
[  700.904617][T26634] tipc: Disabling bearer <eth:syzkaller0>
[  700.932484][T26683] bridge_slave_0: left allmulticast mode
[  700.944836][T26683] bridge_slave_0: left promiscuous mode
[  700.962573][T26683] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.986292][T26683] bridge_slave_1: left allmulticast mode
[  700.991989][T26683] bridge_slave_1: left promiscuous mode
[  701.009701][T26683] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.029877][T26683] bond0: (slave bond_slave_0): Releasing backup interface
[  701.052557][T26683] bond0: (slave bond_slave_1): Releasing backup interface
[  701.069542][T26683] team0: Port device team_slave_0 removed
[  701.092659][T26683] team0: Port device team_slave_1 removed
[  701.099891][T26683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  701.108594][T26683] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.118116][T26683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.126647][T26683] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.136772][T26683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  701.154042][   T10] tipc: Node number set to 1881104014
[  701.213935][T26702] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  701.430884][T26719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  701.622657][T26725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6933'.
[  701.733101][T26680] ip6_vti0 speed is unknown, defaulting to 1000
[  702.562214][T26757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6946'.
[  702.615837][T26761] FAULT_INJECTION: forcing a failure.
[  702.615837][T26761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  702.629907][T26761] CPU: 0 UID: 0 PID: 26761 Comm: syz.0.6948 Not tainted syzkaller #0 PREEMPT(full) 
[  702.629955][T26761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  702.629967][T26761] Call Trace:
[  702.629975][T26761]  <TASK>
[  702.629983][T26761]  dump_stack_lvl+0xe8/0x150
[  702.630010][T26761]  should_fail_ex+0x412/0x560
[  702.630034][T26761]  _copy_to_user+0x31/0xb0
[  702.630057][T26761]  simple_read_from_buffer+0xe1/0x170
[  702.630081][T26761]  proc_fail_nth_read+0x1bb/0x230
[  702.630107][T26761]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  702.630132][T26761]  ? rw_verify_area+0x2a6/0x4d0
[  702.630154][T26761]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  702.630178][T26761]  vfs_read+0x20c/0xa70
[  702.630208][T26761]  ? __pfx_vfs_read+0x10/0x10
[  702.630228][T26761]  ? aa_sk_perm+0x82d/0x960
[  702.630255][T26761]  ? __pfx_aa_sk_perm+0x10/0x10
[  702.630290][T26761]  ksys_read+0x150/0x270
[  702.630315][T26761]  ? __pfx_ksys_read+0x10/0x10
[  702.630347][T26761]  do_syscall_64+0xe2/0xf80
[  702.630371][T26761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.630387][T26761]  ? trace_irq_disable+0x37/0x100
[  702.630404][T26761]  ? clear_bhb_loop+0x60/0xb0
[  702.630425][T26761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.630442][T26761] RIP: 0033:0x7eff4a15b78e
[  702.630458][T26761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  702.630473][T26761] RSP: 002b:00007eff4afa5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  702.630493][T26761] RAX: ffffffffffffffda RBX: 00007eff4afa66c0 RCX: 00007eff4a15b78e
[  702.630506][T26761] RDX: 000000000000000f RSI: 00007eff4afa60a0 RDI: 0000000000000004
[  702.630516][T26761] RBP: 00007eff4afa6090 R08: 0000000000000000 R09: 0000000000000000
[  702.630527][T26761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.630537][T26761] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  702.630567][T26761]  </TASK>
[  702.837700][T26760] veth2: entered allmulticast mode
[  703.041901][T26757] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  703.165345][T23251] Bluetooth: hci3: command 0x0406 tx timeout
[  703.263267][T26775] netlink: 'syz.2.6952': attribute type 4 has an invalid length.
[  703.272595][T26772] syzkaller0: entered promiscuous mode
[  703.301940][T26772] syzkaller0: entered allmulticast mode
[  703.318989][T26775] netlink: 'syz.2.6952': attribute type 1 has an invalid length.
[  703.333764][T26776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6953'.
[  703.349743][T26775] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6952'.
[  703.740918][T26789] SET target dimension over the limit!
[  703.761323][T26790] SET target dimension over the limit!
[  703.880148][T26796] netlink: 'syz.4.6960': attribute type 21 has an invalid length.
[  703.923874][T26796] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6960'.
[  703.949496][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'.
[  703.958537][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'.
[  703.975014][T26796] netlink: 'syz.4.6960': attribute type 5 has an invalid length.
[  703.983244][T26796] netlink: 'syz.4.6960': attribute type 6 has an invalid length.
[  704.054203][T26796] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6960'.
[  704.083123][T26804] openvswitch: netlink: Flow key attribute not present in set flow.
[  704.295826][T26812] x_tables: duplicate underflow at hook 1
[  704.313143][T26775] ip6_vti0 speed is unknown, defaulting to 1000
[  704.456496][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6968'.
[  704.532640][T26820] syzkaller0: entered promiscuous mode
[  704.555769][T26820] syzkaller0: entered allmulticast mode
[  704.667160][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'.
[  704.727506][   T65] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  704.736548][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'.
[  704.749310][   T65] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  704.797707][   T65] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  704.834680][   T65] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  704.844350][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'.
[  704.889972][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'.
[  705.137466][T26846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6978'.
[  705.264842][T26846] 8021q: adding VLAN 0 to HW filter on device bond2
[  705.283362][T26857] 8021q: adding VLAN 0 to HW filter on device bond0
[  705.294227][T26857] bond2: (slave bond0): Enslaving as an active interface with an up link
[  705.850609][T26871] syzkaller0: entered promiscuous mode
[  705.871345][T26871] syzkaller0: entered allmulticast mode
[  708.909098][T26947] netlink: 'syz.4.6998': attribute type 1 has an invalid length.
[  708.921194][T26945] syzkaller0: entered promiscuous mode
[  708.929082][T26945] syzkaller0: entered allmulticast mode
[  709.079942][T26951] bond3: (slave veth3): Enslaving as an active interface with a down link
[  709.174845][T26957] bond3: (slave veth5): Enslaving as an active interface with a down link
[  709.212257][T26947] __nla_validate_parse: 5 callbacks suppressed
[  709.212278][T26947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6998'.
[  709.238166][T26947] 8021q: adding VLAN 0 to HW filter on device bond3
[  709.419631][T26970] netlink: 'syz.2.7005': attribute type 4 has an invalid length.
[  709.439100][T26975] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1
[  709.453700][T26970] netlink: 'syz.2.7005': attribute type 1 has an invalid length.
[  709.465835][T26970] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7005'.
[  709.530870][T26982] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7006'.
[  709.541784][T26983] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7006'.
[  709.793756][T26972] ip6_vti0 speed is unknown, defaulting to 1000
[  710.120014][T26996] syzkaller0: entered promiscuous mode
[  710.139247][T26996] syzkaller0: entered allmulticast mode
[  710.284712][T26980] ip6_vti0 speed is unknown, defaulting to 1000
[  710.284713][T27001] tc_dump_action: action bad kind
[  710.892427][T27030] netlink: 'syz.1.7025': attribute type 1 has an invalid length.
[  710.921317][T27030] netlink: 'syz.1.7025': attribute type 4 has an invalid length.
[  710.955338][T27030] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.7025'.
[  711.189206][T27035] syzkaller0: entered promiscuous mode
[  711.194725][T27035] syzkaller0: entered allmulticast mode
[  711.433374][T27046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  712.374582][T27079] netlink: 'syz.3.7038': attribute type 4 has an invalid length.
[  712.411835][T27079] netlink: 'syz.3.7038': attribute type 1 has an invalid length.
[  712.453654][T27079] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7038'.
[  712.589897][T27093] syzkaller0: entered promiscuous mode
[  712.608087][T27093] syzkaller0: entered allmulticast mode
[  712.666396][T27097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'.
[  712.795260][T27106] SET target dimension over the limit!
[  712.888978][T27100] gretap0: entered promiscuous mode
[  713.009327][T27100] 8021q: adding VLAN 0 to HW filter on device bond0
[  713.059294][T27100] 8021q: adding VLAN 0 to HW filter on device team0
[  713.095421][T27100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  713.216315][T27079] ip6_vti0 speed is unknown, defaulting to 1000
[  713.742860][T27098] ip6_vti0 speed is unknown, defaulting to 1000
[  714.117012][T27128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7053'.
[  714.419927][T27143] syzkaller0: entered promiscuous mode
[  714.435054][T27143] syzkaller0: entered allmulticast mode
[  714.638000][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7059'.
[  715.322342][T27176] netlink: 'syz.2.7064': attribute type 1 has an invalid length.
[  715.334345][T27176] netlink: 'syz.2.7064': attribute type 2 has an invalid length.
[  715.672160][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7065'.
[  715.790863][T27186] netlink: 'syz.3.7068': attribute type 29 has an invalid length.
[  715.897101][T27193] bridge0: left allmulticast mode
[  716.086282][T27167] ip6_vti0 speed is unknown, defaulting to 1000
[  716.203904][T27195] syzkaller0: entered promiscuous mode
[  716.255048][T27195] syzkaller0: entered allmulticast mode
[  718.529241][T23251] Bluetooth: hci5: command 0x0406 tx timeout
[  718.949890][T27163] ip6_vti0 speed is unknown, defaulting to 1000
[  719.053653][T27226] ip6tnl0: Caught tx_queue_len zero misconfig
[  719.087279][T27226] tipc: Started in network mode
[  719.092192][T27226] tipc: Node identity 0000000000000000ffff, cluster identity 4711
[  719.138194][T27231] netlink: 'syz.0.7078': attribute type 4 has an invalid length.
[  719.206194][T27231] netlink: 'syz.0.7078': attribute type 1 has an invalid length.
[  719.213966][T27231] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7078'.
[  719.299293][T27226] netlink: 21 bytes leftover after parsing attributes in process `syz.3.7076'.
[  720.109899][T27235] ip6_vti0 speed is unknown, defaulting to 1000
[  720.413555][T27257] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7085'.
[  720.557637][T27259] syzkaller0: entered promiscuous mode
[  720.563156][T27259] syzkaller0: entered allmulticast mode
[  721.089685][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'.
[  721.126982][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7089'.
[  721.294865][T27264] syzkaller0: entered promiscuous mode
[  721.311911][T27264] syzkaller0: entered allmulticast mode
[  723.857623][T27253] ip6_vti0 speed is unknown, defaulting to 1000
[  724.513836][T27300] syzkaller0: entered promiscuous mode
[  724.519616][T27300] syzkaller0: entered allmulticast mode
[  727.039371][T27315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7101'.
[  727.125808][T27315] veth0_macvtap: left promiscuous mode
[  727.252051][T27322] syzkaller0: entered promiscuous mode
[  727.258839][T27322] syzkaller0: entered allmulticast mode
[  727.329012][T27329] openvswitch: netlink: Flow actions attr not present in new flow.
[  727.659345][T27333] syzkaller0: entered promiscuous mode
[  727.665186][T27333] syzkaller0: entered allmulticast mode
[  730.511810][T27371] netlink: 'syz.4.7113': attribute type 4 has an invalid length.
[  730.535253][T27371] netlink: 'syz.4.7113': attribute type 1 has an invalid length.
[  730.543034][T27371] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7113'.
[  730.596848][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7114'.
[  730.627729][T27373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7114'.
[  730.658371][T27378] bridge0: entered allmulticast mode
[  730.712382][T27381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7117'.
[  730.920355][T27385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7118'.
[  731.120454][T27393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7118'.
[  731.203533][T27393] nbd: device at index 64 is going down
[  731.262079][T27402] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7122'.
[  731.341236][T27371] ip6_vti0 speed is unknown, defaulting to 1000
[  731.356827][T27402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  731.448273][T27408] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  731.779273][T27424] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  732.952749][T27429] ip6_vti0 speed is unknown, defaulting to 1000
[  733.145687][T27456] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7137'.
[  733.186613][T27456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  733.279558][T27459] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  733.720695][T27474] netlink: 'syz.3.7142': attribute type 15 has an invalid length.
[  733.755868][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7142'.
[  733.771200][T27473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7142'.
[  733.779803][T27477] netlink: 'syz.1.7144': attribute type 10 has an invalid length.
[  733.822343][T27478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7144'.
[  733.841643][T27477] syz_tun: entered promiscuous mode
[  733.868657][T27477] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  733.885610][ T5823] Bluetooth: hci4: command 0x0406 tx timeout
[  734.186018][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7147'.
[  734.215334][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7147'.
[  734.449607][T27498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7149'.
[  734.573657][T27502] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7150'.
[  734.596387][T27502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  734.799921][T27510] netlink: 'syz.3.7154': attribute type 5 has an invalid length.
[  734.819163][T27510] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7154'.
[  734.888486][T27512] x_tables: unsorted entry at hook 3
[  734.927732][T27514] netlink: 'syz.4.7157': attribute type 4 has an invalid length.
[  734.960431][T27514] netlink: 'syz.4.7157': attribute type 1 has an invalid length.
[  734.988764][T27514] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7157'.
[  735.203659][T27530] netlink: 'syz.3.7161': attribute type 1 has an invalid length.
[  735.471868][T27530] bond3: entered promiscuous mode
[  735.493594][T27530] bond3: entered allmulticast mode
[  735.577349][T27534] bond3: (slave ip6gretap1): making interface the new active one
[  735.604111][T27534] ip6gretap1: entered promiscuous mode
[  735.622577][T27534] ip6gretap1: entered allmulticast mode
[  735.643390][T27534] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  735.670088][T27524] ip6_vti0 speed is unknown, defaulting to 1000
[  735.761678][T27530] bond3: left promiscuous mode
[  735.779049][T27530] ip6gretap1: left promiscuous mode
[  735.803409][T27530] bond3: left allmulticast mode
[  735.821890][T27530] ip6gretap1: left allmulticast mode
[  735.833450][T27530] 8021q: adding VLAN 0 to HW filter on device bond3
[  736.089644][T27551] veth4: entered allmulticast mode
[  736.177130][T27555] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  736.315416][T27560] block nbd5: server does not support multiple connections per device.
[  736.345822][T27560] block nbd5: shutting down sockets
[  737.216609][T27584] netlink: 'syz.0.7178': attribute type 1 has an invalid length.
[  737.300025][T27593] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  737.315576][T27584] bond5: entered promiscuous mode
[  737.331592][T27584] 8021q: adding VLAN 0 to HW filter on device bond5
[  737.365391][T27593] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  737.466820][T27599] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  737.502721][T27599] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  737.527092][T27599] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  737.560500][T27601] veth2: entered allmulticast mode
[  737.716753][T27610] netlink: 'syz.1.7184': attribute type 10 has an invalid length.
[  737.771767][T27610] team0: Port device dummy0 added
[  737.775153][T27617] netlink: 'syz.1.7184': attribute type 10 has an invalid length.
[  737.797493][T27618] netlink: 'syz.1.7184': attribute type 10 has an invalid length.
[  737.840165][T27618] team0: Port device dummy0 removed
[  737.867558][T27618] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  737.950465][T27625] syzkaller0: entered promiscuous mode
[  737.998508][T27625] syzkaller0: entered allmulticast mode
[  738.224229][T27638] __nla_validate_parse: 3 callbacks suppressed
[  738.224247][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7193'.
[  738.289745][T27638] vlan3: entered promiscuous mode
[  738.315097][T27638] batadv0: entered promiscuous mode
[  738.568422][T27646] netlink: 296 bytes leftover after parsing attributes in process `syz.2.7194'.
[  738.648203][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7196'.
[  738.670809][T27626] ip6_vti0 speed is unknown, defaulting to 1000
[  738.737453][T27653] hsr0: entered promiscuous mode
[  738.743150][T27653] macsec1: entered allmulticast mode
[  738.807003][T27653] hsr0: entered allmulticast mode
[  738.834281][T27653] hsr_slave_0: entered allmulticast mode
[  738.853080][T27653] hsr_slave_1: entered allmulticast mode
[  738.873710][T27662] netlink: 'syz.2.7197': attribute type 10 has an invalid length.
[  738.900579][T27653] hsr0: left allmulticast mode
[  738.915175][T27661] netlink: 'syz.1.7198': attribute type 4 has an invalid length.
[  738.926277][T27653] hsr_slave_0: left allmulticast mode
[  738.935672][T27661] netlink: 'syz.1.7198': attribute type 1 has an invalid length.
[  738.936681][T27653] hsr_slave_1: left allmulticast mode
[  738.957284][T27661] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7198'.
[  739.375715][T27665] ip6_vti0 speed is unknown, defaulting to 1000
[  739.472994][T27673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7201'.
[  739.676301][T27682] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7201'.
[  739.701637][T27685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'.
[  739.747354][T27685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'.
[  739.969027][T27688] veth4: entered allmulticast mode
[  740.107445][T27691] netlink: 'syz.4.7206': attribute type 10 has an invalid length.
[  740.173113][T27691] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.193052][T27691] team0: Port device bond0 added
[  740.371523][T27699] pim6reg0: tun_chr_ioctl cmd 1074025673
[  740.385707][T27693] pim6reg0: tun_chr_ioctl cmd 1074025675
[  740.406914][T27693] pim6reg0: persist disabled
[  740.692831][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7214'.
[  740.756694][T27720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7215'.
[  740.890869][T27723] nbd: must specify a size in bytes for the device
[  740.974378][T27725] netlink: 'syz.0.7217': attribute type 1 has an invalid length.
[  741.008495][T27725] sctp: [Deprecated]: syz.0.7217 (pid 27725) Use of struct sctp_assoc_value in delayed_ack socket option.
[  741.008495][T27725] Use struct sctp_sack_info instead
[  741.162464][T27730] veth4: entered allmulticast mode
[  742.264074][T27773] tipc: Started in network mode
[  742.282688][T27773] tipc: Node identity , cluster identity 4711
[  742.311379][T27773] tipc: Failed to obtain node identity
[  742.345095][T27773] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  742.540691][T27774] syzkaller0: entered promiscuous mode
[  742.563970][T27774] syzkaller0: entered allmulticast mode
[  742.601249][T27784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.412538][T27805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  745.422614][T27808] syzkaller0: entered promiscuous mode
[  745.428786][T27808] syzkaller0: entered allmulticast mode
[  745.508689][T27818] tipc: Resetting bearer <eth:syzkaller0>
[  745.623616][T27823] syzkaller0: entered promiscuous mode
[  745.645378][T27823] syzkaller0: entered allmulticast mode
[  745.667999][T27801] tipc: Resetting bearer <eth:syzkaller0>
[  745.687103][T27855] x_tables: duplicate underflow at hook 1
[  745.695415][T27855] __nla_validate_parse: 4 callbacks suppressed
[  745.695434][T27855] netlink: 212280 bytes leftover after parsing attributes in process `syz.4.7252'.
[  745.723898][T27801] tipc: Disabling bearer <eth:syzkaller0>
[  745.836083][T27858] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7253'.
[  745.912397][T27861] netlink: 'syz.3.7255': attribute type 10 has an invalid length.
[  747.169900][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.178982][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  747.187363][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL
[  747.197660][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.276458][T27880] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.7260'.
[  748.542422][T27858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  748.578365][T27861] bond2: (slave bond0): Releasing backup interface
[  748.615963][T27861] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.634490][T27861] team0: Port device bond0 added
[  748.820689][T27891] netlink: 'syz.1.7264': attribute type 3 has an invalid length.
[  748.849451][T27891] netlink: 'syz.1.7264': attribute type 3 has an invalid length.
[  748.865459][ T7192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.210058][T27912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7273'.
[  749.230763][T27913] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7272'.
[  749.243586][T27913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  749.424772][T27917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7275'.
[  749.453405][T27917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7275'.
[  750.408792][T27944] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7285'.
[  752.255612][T27944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  752.288772][T27950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7286'.
[  752.450732][T27959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7290'.
[  752.707444][T27966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7294'.
[  752.746596][T27968] netlink: 'syz.4.7294': attribute type 1 has an invalid length.
[  752.845245][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7299'.
[  752.858115][T27968] 8021q: adding VLAN 0 to HW filter on device bond4
[  752.866843][T27977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7297'.
[  752.891585][T27966] 8021q: adding VLAN 0 to HW filter on device batadv1
[  752.910994][T27966] bond4: (slave batadv1): making interface the new active one
[  752.947080][T27966] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  753.131847][T27992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7300'.
[  753.213736][T27997] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7302'.
[  753.434513][T27997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  753.522101][T28003] syzkaller0: entered promiscuous mode
[  753.527852][T28003] syzkaller0: entered allmulticast mode
[  753.764351][T28016] netlink: zone id is out of range
[  753.787172][T28016] netlink: zone id is out of range
[  753.797356][T28016] netlink: zone id is out of range
[  753.830919][T28016] netlink: zone id is out of range
[  753.866326][T28016] netlink: zone id is out of range
[  753.882166][T28016] netlink: zone id is out of range
[  753.901605][T28016] netlink: zone id is out of range
[  753.925754][T28016] netlink: zone id is out of range
[  753.931098][T28016] netlink: zone id is out of range
[  753.949914][T28023] FAULT_INJECTION: forcing a failure.
[  753.949914][T28023] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.981539][T28023] CPU: 1 UID: 0 PID: 28023 Comm: syz.4.7308 Not tainted syzkaller #0 PREEMPT(full) 
[  753.981564][T28023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  753.981575][T28023] Call Trace:
[  753.981583][T28023]  <TASK>
[  753.981591][T28023]  dump_stack_lvl+0xe8/0x150
[  753.981618][T28023]  should_fail_ex+0x412/0x560
[  753.981644][T28023]  _copy_from_user+0x2d/0xb0
[  753.981669][T28023]  __sys_bpf+0x229/0x920
[  753.981689][T28023]  ? __pfx___sys_bpf+0x10/0x10
[  753.981722][T28023]  ? ksys_write+0x242/0x270
[  753.981747][T28023]  ? __pfx_ksys_write+0x10/0x10
[  753.981776][T28023]  __x64_sys_bpf+0x7c/0x90
[  753.981800][T28023]  do_syscall_64+0xe2/0xf80
[  753.981823][T28023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.981839][T28023]  ? trace_irq_disable+0x37/0x100
[  753.981856][T28023]  ? clear_bhb_loop+0x60/0xb0
[  753.981876][T28023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.981893][T28023] RIP: 0033:0x7f3bf099aeb9
[  753.981909][T28023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.981924][T28023] RSP: 002b:00007f3bf1888028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  753.981943][T28023] RAX: ffffffffffffffda RBX: 00007f3bf0c15fa0 RCX: 00007f3bf099aeb9
[  753.981956][T28023] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  753.981968][T28023] RBP: 00007f3bf1888090 R08: 0000000000000000 R09: 0000000000000000
[  753.981979][T28023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.981990][T28023] R13: 00007f3bf0c16038 R14: 00007f3bf0c15fa0 R15: 00007fff47f23a88
[  753.982020][T28023]  </TASK>
[  753.987454][T28016] netlink: zone id is out of range
[  754.141191][T28031] netlink: 'syz.4.7310': attribute type 1 has an invalid length.
[  754.353749][T28036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7312'.
[  754.380128][T28036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7312'.
[  756.316304][T28031] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  756.408350][   T30] audit: type=1107 audit(1770352674.194:7): pid=28039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  756.516999][T28045] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7314'.
[  756.600508][T28050] syzkaller0: entered promiscuous mode
[  756.606231][T28050] syzkaller0: entered allmulticast mode
[  756.627775][T28050] tipc: Started in network mode
[  756.632686][T28050] tipc: Node identity 422b15151692, cluster identity 4711
[  756.641341][T28050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  756.682735][T28055] sock: sock_timestamping_bind_phc: sock not bind to device
[  756.684734][T28050] tipc: Resetting bearer <eth:syzkaller0>
[  756.722710][T28049] tipc: Resetting bearer <eth:syzkaller0>
[  756.782673][T28061] FAULT_INJECTION: forcing a failure.
[  756.782673][T28061] name failslab, interval 1, probability 0, space 0, times 0
[  756.834577][T28049] tipc: Disabling bearer <eth:syzkaller0>
[  756.878716][T28061] CPU: 1 UID: 0 PID: 28061 Comm: syz.3.7320 Not tainted syzkaller #0 PREEMPT(full) 
[  756.878742][T28061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  756.878754][T28061] Call Trace:
[  756.878761][T28061]  <TASK>
[  756.878770][T28061]  dump_stack_lvl+0xe8/0x150
[  756.878796][T28061]  should_fail_ex+0x412/0x560
[  756.878820][T28061]  should_failslab+0xa8/0x100
[  756.878841][T28061]  __kmalloc_noprof+0xde/0x7e0
[  756.878860][T28061]  ? bpf_test_init+0x9f/0x150
[  756.878883][T28061]  bpf_test_init+0x9f/0x150
[  756.878905][T28061]  bpf_prog_test_run_xdp+0x529/0x1160
[  756.878942][T28061]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  756.878966][T28061]  ? __fget_files+0x2a/0x420
[  756.878989][T28061]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  756.879009][T28061]  bpf_prog_test_run+0x2c7/0x340
[  756.879032][T28061]  __sys_bpf+0x5cb/0x920
[  756.879052][T28061]  ? __pfx___sys_bpf+0x10/0x10
[  756.879084][T28061]  ? ksys_write+0x242/0x270
[  756.879110][T28061]  ? __pfx_ksys_write+0x10/0x10
[  756.879139][T28061]  __x64_sys_bpf+0x7c/0x90
[  756.879164][T28061]  do_syscall_64+0xe2/0xf80
[  756.879186][T28061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.879203][T28061]  ? trace_irq_disable+0x37/0x100
[  756.879220][T28061]  ? clear_bhb_loop+0x60/0xb0
[  756.879242][T28061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.879258][T28061] RIP: 0033:0x7fa8ed59aeb9
[  756.879273][T28061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.879288][T28061] RSP: 002b:00007fa8ee3aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  756.879307][T28061] RAX: ffffffffffffffda RBX: 00007fa8ed815fa0 RCX: 00007fa8ed59aeb9
[  756.879321][T28061] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  756.879332][T28061] RBP: 00007fa8ee3aa090 R08: 0000000000000000 R09: 0000000000000000
[  756.879343][T28061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.879354][T28061] R13: 00007fa8ed816038 R14: 00007fa8ed815fa0 R15: 00007ffe6b7d1db8
[  756.879383][T28061]  </TASK>
[  757.278863][T28069] syzkaller0: entered promiscuous mode
[  757.284398][T28069] syzkaller0: entered allmulticast mode
[  757.330134][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.345597][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.354679][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.425619][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.455056][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.464055][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.547112][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.580972][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.601758][T28086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7328'.
[  757.605545][T28071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'.
[  757.922281][T28099] siw: device registration error -23
[  758.152911][T26926] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  758.165793][T28104] FAULT_INJECTION: forcing a failure.
[  758.165793][T28104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.175013][T26926] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  758.253208][T26926] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  758.262544][T28104] CPU: 0 UID: 0 PID: 28104 Comm: syz.3.7333 Not tainted syzkaller #0 PREEMPT(full) 
[  758.262568][T28104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  758.262578][T28104] Call Trace:
[  758.262585][T28104]  <TASK>
[  758.262593][T28104]  dump_stack_lvl+0xe8/0x150
[  758.262618][T28104]  should_fail_ex+0x412/0x560
[  758.262642][T28104]  _copy_from_user+0x2d/0xb0
[  758.262666][T28104]  bpf_test_init+0xd8/0x150
[  758.262689][T28104]  bpf_prog_test_run_xdp+0x529/0x1160
[  758.262720][T28104]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  758.262743][T28104]  ? __fget_files+0x2a/0x420
[  758.262766][T28104]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  758.262786][T28104]  bpf_prog_test_run+0x2c7/0x340
[  758.262810][T28104]  __sys_bpf+0x5cb/0x920
[  758.262830][T28104]  ? __pfx___sys_bpf+0x10/0x10
[  758.262861][T28104]  ? ksys_write+0x242/0x270
[  758.262887][T28104]  ? __pfx_ksys_write+0x10/0x10
[  758.262916][T28104]  __x64_sys_bpf+0x7c/0x90
[  758.262941][T28104]  do_syscall_64+0xe2/0xf80
[  758.262962][T28104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.262979][T28104]  ? trace_irq_disable+0x37/0x100
[  758.262996][T28104]  ? clear_bhb_loop+0x60/0xb0
[  758.263017][T28104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.263034][T28104] RIP: 0033:0x7fa8ed59aeb9
[  758.263050][T28104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.263065][T28104] RSP: 002b:00007fa8ee3aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  758.263085][T28104] RAX: ffffffffffffffda RBX: 00007fa8ed815fa0 RCX: 00007fa8ed59aeb9
[  758.263107][T28104] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  758.263119][T28104] RBP: 00007fa8ee3aa090 R08: 0000000000000000 R09: 0000000000000000
[  758.263130][T28104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.263141][T28104] R13: 00007fa8ed816038 R14: 00007fa8ed815fa0 R15: 00007ffe6b7d1db8
[  758.263164][T28104]  </TASK>
[  758.480153][T26926] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  758.751419][T28089] dvmrp1: entered allmulticast mode
[  759.078779][T28138] sctp: [Deprecated]: syz.0.7341 (pid 28138) Use of int in max_burst socket option.
[  759.078779][T28138] Use struct sctp_assoc_value instead
[  759.433612][T28084] ip6_vti0 speed is unknown, defaulting to 1000
[  759.497705][T28155] net_ratelimit: 46 callbacks suppressed
[  759.497726][T28155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  759.718939][T28165] veth2: entered allmulticast mode
[  759.761687][T28163] syzkaller0: entered promiscuous mode
[  759.778686][T28163] syzkaller0: entered allmulticast mode
[  759.821053][T28163] 0: reclassify loop, rule prio 0, protocol 700
[  760.508032][T28204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  761.054814][T28213] vlan3: entered promiscuous mode
[  761.061630][T28213] team0: entered promiscuous mode
[  761.068395][T28213] bond0: entered promiscuous mode
[  761.193500][T28217] veth2: entered allmulticast mode
[  762.692222][T28247] __nla_validate_parse: 159 callbacks suppressed
[  762.692244][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7376'.
[  762.819565][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7376'.
[  763.075347][T28261] netlink: 'syz.0.7377': attribute type 1 has an invalid length.
[  763.106356][T28262] netlink: 'syz.4.7379': attribute type 10 has an invalid length.
[  763.135438][T28261] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7377'.
[  763.138506][T28262] syz_tun: entered promiscuous mode
[  763.186452][T28262] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  763.416104][T28269] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7381'.
[  763.436038][T28269] .70·: renamed from hsr0 (while UP)
[  763.454130][T28269] .70·: left promiscuous mode
[  763.472845][T28272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7381'.
[  763.488143][T28271] FAULT_INJECTION: forcing a failure.
[  763.488143][T28271] name failslab, interval 1, probability 0, space 0, times 0
[  763.492973][T28269] .70·: entered allmulticast mode
[  763.521126][T28269] hsr_slave_0: entered allmulticast mode
[  763.534407][T28269] hsr_slave_1: entered allmulticast mode
[  763.540345][T28271] CPU: 1 UID: 0 PID: 28271 Comm: syz.1.7382 Not tainted syzkaller #0 PREEMPT(full) 
[  763.540372][T28271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  763.540383][T28271] Call Trace:
[  763.540390][T28271]  <TASK>
[  763.540398][T28271]  dump_stack_lvl+0xe8/0x150
[  763.540426][T28271]  should_fail_ex+0x412/0x560
[  763.540452][T28271]  should_failslab+0xa8/0x100
[  763.540474][T28271]  __kvmalloc_node_noprof+0x166/0x8d0
[  763.540492][T28271]  ? kasan_save_track+0x3e/0x80
[  763.540508][T28271]  ? kfree+0x1be/0x650
[  763.540528][T28271]  ? alloc_netdev_mqs+0xa6/0x11b0
[  763.540543][T28271]  ? security_file_ioctl+0xc3/0x2a0
[  763.540560][T28271]  ? do_syscall_64+0xe2/0xf80
[  763.540586][T28271]  alloc_netdev_mqs+0xa6/0x11b0
[  763.540602][T28271]  ? __pfx_bnep_net_setup+0x10/0x10
[  763.540624][T28271]  bnep_add_connection+0x214/0xca0
[  763.540657][T28271]  ? __pfx_bnep_add_connection+0x10/0x10
[  763.540681][T28271]  ? __fget_files+0x3a0/0x420
[  763.540710][T28271]  do_bnep_sock_ioctl+0x40b/0x650
[  763.540726][T28271]  ? kasan_quarantine_put+0xbb/0x1f0
[  763.540751][T28271]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  763.540786][T28271]  ? tomoyo_path_number_perm+0x219/0x630
[  763.540822][T28271]  sock_do_ioctl+0x101/0x320
[  763.540844][T28271]  ? __pfx_sock_do_ioctl+0x10/0x10
[  763.540860][T28271]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  763.540897][T28271]  sock_ioctl+0x5c6/0x7f0
[  763.540916][T28271]  ? __pfx_sock_ioctl+0x10/0x10
[  763.540934][T28271]  ? __fget_files+0x2a/0x420
[  763.540951][T28271]  ? __fget_files+0x3a0/0x420
[  763.540969][T28271]  ? __fget_files+0x2a/0x420
[  763.540990][T28271]  ? bpf_lsm_file_ioctl+0x9/0x20
[  763.541010][T28271]  ? __pfx_sock_ioctl+0x10/0x10
[  763.541031][T28271]  __se_sys_ioctl+0xfc/0x170
[  763.541056][T28271]  do_syscall_64+0xe2/0xf80
[  763.541076][T28271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.541093][T28271]  ? trace_irq_disable+0x37/0x100
[  763.541110][T28271]  ? clear_bhb_loop+0x60/0xb0
[  763.541130][T28271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.541147][T28271] RIP: 0033:0x7f57f519aeb9
[  763.541164][T28271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  763.541178][T28271] RSP: 002b:00007f57f5f78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  763.541197][T28271] RAX: ffffffffffffffda RBX: 00007f57f5415fa0 RCX: 00007f57f519aeb9
[  763.541211][T28271] RDX: 0000200000000400 RSI: 00000000400442c8 RDI: 0000000000000005
[  763.541222][T28271] RBP: 00007f57f5f78090 R08: 0000000000000000 R09: 0000000000000000
[  763.541233][T28271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  763.541244][T28271] R13: 00007f57f5416038 R14: 00007f57f5415fa0 R15: 00007ffc548397f8
[  763.541273][T28271]  </TASK>
[  763.860555][T28269] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  764.393222][T28288] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  764.609580][T28295] syzkaller0: entered promiscuous mode
[  764.639409][T28295] syzkaller0: entered allmulticast mode
[  764.660188][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7388'.
[  765.051795][T28286] ip6_vti0 speed is unknown, defaulting to 1000
[  765.257237][T28309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7392'.
[  765.285100][T28309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7392'.
[  766.141077][T28320] netlink: 'syz.4.7393': attribute type 1 has an invalid length.
[  766.155306][T28320] netlink: 'syz.4.7393': attribute type 2 has an invalid length.
[  766.175083][T28320] netlink: 'syz.4.7393': attribute type 1 has an invalid length.
[  766.182854][T28320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7393'.
[  766.252250][T28329] sctp: [Deprecated]: syz.0.7394 (pid 28329) Use of int in max_burst socket option.
[  766.252250][T28329] Use struct sctp_assoc_value instead
[  768.058701][T28338] ip6_vti0 speed is unknown, defaulting to 1000
[  768.229779][T28309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  768.468606][T28343] vlan0: entered promiscuous mode
[  768.478867][T28344] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7400'.
[  769.504847][T17498] IPVS: starting estimator thread 0...
[  769.549234][T28375] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7407'.
[  769.578822][T28375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  769.644447][T28373] IPVS: using max 34 ests per chain, 81600 per kthread
[  769.946222][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7411'.
[  769.969193][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7411'.
[  769.995080][T28384] netlink: 'syz.3.7411': attribute type 13 has an invalid length.
[  770.098647][T28396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7415'.
[  770.127337][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7415'.
[  770.323264][T28406] veth8: entered allmulticast mode
[  770.560746][T28417] smc: net device wlan0 applied user defined pnetid SYZ0
[  771.099341][T28447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7430'.
[  771.159058][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7432'.
[  771.211327][T28455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7434'.
[  771.221120][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7432'.
[  771.328722][T28465] netlink: 'syz.1.7434': attribute type 49 has an invalid length.
[  771.361500][T28467] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  771.550260][T28477] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  771.747137][T28488] geneve2: entered promiscuous mode
[  771.772524][T28488] geneve2: entered allmulticast mode
[  771.799069][T26938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  771.822514][T26938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  771.842127][T26938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  771.863062][T26938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  772.340153][T28481] ip6_vti0 speed is unknown, defaulting to 1000
[  774.230321][T28564] __nla_validate_parse: 5 callbacks suppressed
[  774.230341][T28564] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7472'.
[  774.325152][T28571] netlink: 'syz.0.7473': attribute type 10 has an invalid length.
[  774.343428][T28571] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7473'.
[  774.589043][T28576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7476'.
[  774.752505][T28571] smc: removing net device wlan0 with user defined pnetid SYZ0
[  774.929801][T28611] IPv6: Can't replace route, no match found
[  774.968857][T28615] netlink: 'syz.3.7480': attribute type 5 has an invalid length.
[  774.985122][   T30] audit: type=1800 audit(1770352692.764:8): pid=28607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7476" name="memory.events" dev="tmpfs" ino=1264 res=0 errno=0
[  775.027282][T28582] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7476'.
[  775.537336][T28598] ip6_vti0 speed is unknown, defaulting to 1000
[  775.686577][T28637] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7487'.
[  775.934995][T28648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7491'.
[  776.252688][T28665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7491'.
[  778.295132][T28648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7491'.
[  778.538302][T28672] dummy0: Caught tx_queue_len zero misconfig
[  778.555156][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7496'.
[  778.572914][T26938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.586094][T26938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.667702][T28674] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7497'.
[  778.811266][T28655] ip6_vti0 speed is unknown, defaulting to 1000
[  779.667823][T28685] syzkaller1: entered promiscuous mode
[  779.695036][T28685] syzkaller1: entered allmulticast mode
[  779.751882][T28689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7502'.
[  779.788611][T28689] openvswitch: netlink: Flow key attr not present in new flow.
[  780.324118][T28701] vti0: entered promiscuous mode
[  780.342762][T28701] vti0: entered allmulticast mode
[  780.607134][T28711] FAULT_INJECTION: forcing a failure.
[  780.607134][T28711] name failslab, interval 1, probability 0, space 0, times 0
[  780.669346][T28711] CPU: 0 UID: 0 PID: 28711 Comm: syz.2.7509 Not tainted syzkaller #0 PREEMPT(full) 
[  780.669372][T28711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  780.669384][T28711] Call Trace:
[  780.669392][T28711]  <TASK>
[  780.669400][T28711]  dump_stack_lvl+0xe8/0x150
[  780.669428][T28711]  should_fail_ex+0x412/0x560
[  780.669454][T28711]  should_failslab+0xa8/0x100
[  780.669476][T28711]  __kmalloc_cache_noprof+0x83/0x6e0
[  780.669494][T28711]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  780.669517][T28711]  alloc_netdev_mqs+0xbf8/0x11b0
[  780.669541][T28711]  bnep_add_connection+0x214/0xca0
[  780.669575][T28711]  ? __pfx_bnep_add_connection+0x10/0x10
[  780.669612][T28711]  ? __fget_files+0x3a0/0x420
[  780.669639][T28711]  do_bnep_sock_ioctl+0x40b/0x650
[  780.669655][T28711]  ? kasan_quarantine_put+0xbb/0x1f0
[  780.669681][T28711]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  780.669705][T28711]  ? tomoyo_path_number_perm+0x219/0x630
[  780.669744][T28711]  sock_do_ioctl+0x101/0x320
[  780.669765][T28711]  ? __pfx_sock_do_ioctl+0x10/0x10
[  780.669780][T28711]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  780.669819][T28711]  sock_ioctl+0x5c6/0x7f0
[  780.669837][T28711]  ? __pfx_sock_ioctl+0x10/0x10
[  780.669851][T28711]  ? __fget_files+0x2a/0x420
[  780.669868][T28711]  ? __fget_files+0x3a0/0x420
[  780.669885][T28711]  ? __fget_files+0x2a/0x420
[  780.669906][T28711]  ? bpf_lsm_file_ioctl+0x9/0x20
[  780.669927][T28711]  ? __pfx_sock_ioctl+0x10/0x10
[  780.669944][T28711]  __se_sys_ioctl+0xfc/0x170
[  780.669970][T28711]  do_syscall_64+0xe2/0xf80
[  780.669991][T28711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.670009][T28711]  ? trace_irq_disable+0x37/0x100
[  780.670026][T28711]  ? clear_bhb_loop+0x60/0xb0
[  780.670047][T28711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  780.670064][T28711] RIP: 0033:0x7f504339aeb9
[  780.670081][T28711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  780.670096][T28711] RSP: 002b:00007f504430a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  780.670116][T28711] RAX: ffffffffffffffda RBX: 00007f5043615fa0 RCX: 00007f504339aeb9
[  780.670129][T28711] RDX: 0000200000000400 RSI: 00000000400442c8 RDI: 0000000000000005
[  780.670142][T28711] RBP: 00007f504430a090 R08: 0000000000000000 R09: 0000000000000000
[  780.670153][T28711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  780.670164][T28711] R13: 00007f5043616038 R14: 00007f5043615fa0 R15: 00007fff7a23d378
[  780.670194][T28711]  </TASK>
[  781.021827][T28713] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7510'.
[  781.340307][T28721] netlink: del zone limit has 4 unknown bytes
[  781.524302][T28726] FAULT_INJECTION: forcing a failure.
[  781.524302][T28726] name failslab, interval 1, probability 0, space 0, times 0
[  781.562261][T28726] CPU: 0 UID: 0 PID: 28726 Comm: syz.2.7516 Not tainted syzkaller #0 PREEMPT(full) 
[  781.562286][T28726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  781.562296][T28726] Call Trace:
[  781.562304][T28726]  <TASK>
[  781.562312][T28726]  dump_stack_lvl+0xe8/0x150
[  781.562337][T28726]  should_fail_ex+0x412/0x560
[  781.562360][T28726]  should_failslab+0xa8/0x100
[  781.562380][T28726]  __kmalloc_cache_noprof+0x83/0x6e0
[  781.562395][T28726]  ? __asan_memset+0x22/0x50
[  781.562415][T28726]  ? alloc_netdev_mqs+0xb97/0x11b0
[  781.562432][T28726]  ? __xdp_rxq_info_reg+0x171/0x280
[  781.562456][T28726]  alloc_netdev_mqs+0xb97/0x11b0
[  781.562477][T28726]  bnep_add_connection+0x214/0xca0
[  781.562518][T28726]  ? __pfx_bnep_add_connection+0x10/0x10
[  781.562554][T28726]  ? __fget_files+0x3a0/0x420
[  781.562582][T28726]  do_bnep_sock_ioctl+0x40b/0x650
[  781.562599][T28726]  ? kasan_quarantine_put+0xbb/0x1f0
[  781.562623][T28726]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  781.562646][T28726]  ? tomoyo_path_number_perm+0x219/0x630
[  781.562680][T28726]  sock_do_ioctl+0x101/0x320
[  781.562699][T28726]  ? __pfx_sock_do_ioctl+0x10/0x10
[  781.562714][T28726]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  781.562749][T28726]  sock_ioctl+0x5c6/0x7f0
[  781.562769][T28726]  ? __pfx_sock_ioctl+0x10/0x10
[  781.562786][T28726]  ? __fget_files+0x2a/0x420
[  781.562804][T28726]  ? __fget_files+0x3a0/0x420
[  781.562821][T28726]  ? __fget_files+0x2a/0x420
[  781.562842][T28726]  ? bpf_lsm_file_ioctl+0x9/0x20
[  781.562860][T28726]  ? __pfx_sock_ioctl+0x10/0x10
[  781.562877][T28726]  __se_sys_ioctl+0xfc/0x170
[  781.562903][T28726]  do_syscall_64+0xe2/0xf80
[  781.562925][T28726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.562939][T28726]  ? trace_irq_disable+0x37/0x100
[  781.562955][T28726]  ? clear_bhb_loop+0x60/0xb0
[  781.562975][T28726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.562991][T28726] RIP: 0033:0x7f504339aeb9
[  781.563007][T28726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  781.563022][T28726] RSP: 002b:00007f504430a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  781.563041][T28726] RAX: ffffffffffffffda RBX: 00007f5043615fa0 RCX: 00007f504339aeb9
[  781.563054][T28726] RDX: 0000200000000400 RSI: 00000000400442c8 RDI: 0000000000000005
[  781.563066][T28726] RBP: 00007f504430a090 R08: 0000000000000000 R09: 0000000000000000
[  781.563078][T28726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  781.563088][T28726] R13: 00007f5043616038 R14: 00007f5043615fa0 R15: 00007fff7a23d378
[  781.563119][T28726]  </TASK>
[  781.918414][T28704] ip6_vti0 speed is unknown, defaulting to 1000
[  782.326184][T28738] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10
[  782.967450][T28766] FAULT_INJECTION: forcing a failure.
[  782.967450][T28766] name failslab, interval 1, probability 0, space 0, times 0
[  782.980471][T28766] CPU: 1 UID: 0 PID: 28766 Comm: syz.0.7529 Not tainted syzkaller #0 PREEMPT(full) 
[  782.980496][T28766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  782.980507][T28766] Call Trace:
[  782.980514][T28766]  <TASK>
[  782.980521][T28766]  dump_stack_lvl+0xe8/0x150
[  782.980547][T28766]  should_fail_ex+0x412/0x560
[  782.980573][T28766]  should_failslab+0xa8/0x100
[  782.980595][T28766]  __kmalloc_cache_noprof+0x83/0x6e0
[  782.980613][T28766]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  782.980637][T28766]  alloc_netdev_mqs+0xbf8/0x11b0
[  782.980666][T28766]  bnep_add_connection+0x214/0xca0
[  782.980700][T28766]  ? __pfx_bnep_add_connection+0x10/0x10
[  782.980724][T28766]  ? __fget_files+0x3a0/0x420
[  782.980754][T28766]  do_bnep_sock_ioctl+0x40b/0x650
[  782.980770][T28766]  ? kasan_quarantine_put+0xbb/0x1f0
[  782.980794][T28766]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  782.980818][T28766]  ? tomoyo_path_number_perm+0x219/0x630
[  782.980852][T28766]  sock_do_ioctl+0x101/0x320
[  782.980872][T28766]  ? __pfx_sock_do_ioctl+0x10/0x10
[  782.980886][T28766]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  782.980924][T28766]  sock_ioctl+0x5c6/0x7f0
[  782.980944][T28766]  ? __pfx_sock_ioctl+0x10/0x10
[  782.980962][T28766]  ? __fget_files+0x2a/0x420
[  782.980980][T28766]  ? __fget_files+0x3a0/0x420
[  782.980998][T28766]  ? __fget_files+0x2a/0x420
[  782.981020][T28766]  ? bpf_lsm_file_ioctl+0x9/0x20
[  782.981045][T28766]  ? __pfx_sock_ioctl+0x10/0x10
[  782.981062][T28766]  __se_sys_ioctl+0xfc/0x170
[  782.981088][T28766]  do_syscall_64+0xe2/0xf80
[  782.981108][T28766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.981124][T28766]  ? clear_bhb_loop+0x60/0xb0
[  782.981145][T28766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.981161][T28766] RIP: 0033:0x7eff4a19aeb9
[  782.981179][T28766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.981194][T28766] RSP: 002b:00007eff4afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  782.981212][T28766] RAX: ffffffffffffffda RBX: 00007eff4a415fa0 RCX: 00007eff4a19aeb9
[  782.981225][T28766] RDX: 0000200000000400 RSI: 00000000400442c8 RDI: 0000000000000005
[  782.981237][T28766] RBP: 00007eff4afa6090 R08: 0000000000000000 R09: 0000000000000000
[  782.981248][T28766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  782.981258][T28766] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  782.981289][T28766]  </TASK>
[  783.289108][T28730] ip6_vti0 speed is unknown, defaulting to 1000
[  783.660977][T28774] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7533'.
[  783.671587][T28777] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7534'.
[  783.694786][T28778] xt_hashlimit: max too large, truncated to 1048576
[  783.696192][T28777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  783.839343][T28781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7536'.
[  783.901827][T28785] veth4: entered allmulticast mode
[  784.284262][T28798] xt_cluster: node mask cannot exceed total number of nodes
[  784.442021][T28804] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7547'.
[  784.469047][T28804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  784.598407][T28807] gretap1: entered promiscuous mode
[  784.817100][T28819] netlink: 'syz.3.7553': attribute type 1 has an invalid length.
[  784.848962][T28819] netlink: 'syz.3.7553': attribute type 8 has an invalid length.
[  784.914782][T28819] netlink: 'syz.3.7553': attribute type 9 has an invalid length.
[  784.971455][T28819] netlink: 'syz.3.7553': attribute type 10 has an invalid length.
[  785.010585][T28819] netlink: 'syz.3.7553': attribute type 11 has an invalid length.
[  785.051050][T28819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7553'.
[  785.636508][T28843] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7559'.
[  785.669289][T28843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.938726][T28821] ip6_vti0 speed is unknown, defaulting to 1000
[  786.603249][T28872] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7570'.
[  786.636104][T28872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  786.747259][T28848] ip6_vti0 speed is unknown, defaulting to 1000
[  788.628821][T28903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7580'.
[  788.747575][T28903] gretap2: entered promiscuous mode
[  788.789067][T28903] netlink: 'syz.4.7580': attribute type 9 has an invalid length.
[  788.915661][T28914] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7583'.
[  788.955747][T28914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  789.269741][T28926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7586'.
[  789.315076][T28926] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  789.360360][T28927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7586'.
[  789.395129][T28926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7586'.
[  789.920383][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7594'.
[  790.007103][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7595'.
[  790.016238][T28953] netlink: 'syz.0.7595': attribute type 6 has an invalid length.
[  790.090001][T28956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  790.116769][T28953] __nla_validate_parse: 2 callbacks suppressed
[  790.116790][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7595'.
[  790.172841][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7595'.
[  790.229870][T28953] netlink: 'syz.0.7595': attribute type 6 has an invalid length.
[  790.256953][T28930] ip6_vti0 speed is unknown, defaulting to 1000
[  790.844890][T28985] netlink: 'syz.1.7605': attribute type 2 has an invalid length.
[  790.971243][T28988] sctp: [Deprecated]: syz.1.7605 (pid 28988) Use of int in max_burst socket option deprecated.
[  790.971243][T28988] Use struct sctp_assoc_value instead
[  791.180632][T28985] : entered promiscuous mode
[  791.398498][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7608'.
[  791.906233][T29000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7611'.
[  791.945973][T29000] netlink: 'syz.1.7611': attribute type 2 has an invalid length.
[  791.964145][T29000] netlink: 'syz.1.7611': attribute type 11 has an invalid length.
[  792.025561][T29000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7611'.
[  792.261751][T29006] erspan0: left promiscuous mode
[  792.294196][T26935] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  792.340696][T26935] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  792.374029][T26935] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  792.416018][T26935] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  792.575377][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7617'.
[  792.926725][T29036] veth8: entered allmulticast mode
[  793.102465][T29049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7625'.
[  793.128182][T29049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7625'.
[  794.350800][T29092] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7643'.
[  795.495391][T29110] 8021q: adding VLAN 0 to HW filter on device bond4
[  795.548292][T29110] bond0: (slave bond4): Enslaving as an active interface with an up link
[  796.136405][T29142] netlink: 'syz.0.7660': attribute type 1 has an invalid length.
[  797.098328][T29185] netlink: 'syz.2.7670': attribute type 2 has an invalid length.
[  797.115050][T29185] netlink: 'syz.2.7670': attribute type 2 has an invalid length.
[  797.122936][T29185] netlink: 'syz.2.7670': attribute type 2 has an invalid length.
[  797.148031][T29185] sctp: [Deprecated]: syz.2.7670 (pid 29185) Use of int in max_burst socket option deprecated.
[  797.148031][T29185] Use struct sctp_assoc_value instead
[  797.382189][T29189] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7673'.
[  797.944759][T29209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7678'.
[  799.108039][T29241] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7690'.
[  799.119279][T29241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  799.453950][T29250] Cannot find del_set index 0 as target
[  799.633877][T29160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  800.149335][T29275] netlink: 'syz.3.7702': attribute type 21 has an invalid length.
[  800.157318][T29271] netlink: 'syz.3.7702': attribute type 21 has an invalid length.
[  800.178004][T29271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7702'.
[  800.225089][T29275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7702'.
[  800.271272][T29281] xt_ecn: cannot match TCP bits for non-tcp packets
[  800.323430][T29283] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7705'.
[  800.493884][T29294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7706'.
[  800.593626][T29281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  800.635003][T29281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.842675][T29309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7715'.
[  800.930562][T29281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  800.943821][T29281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.062702][T29314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7717'.
[  801.097727][T29281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  801.109163][T29281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.186484][T29319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7717'.
[  801.347284][T29281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  801.368905][T29281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.734138][T26921] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  801.750183][T26921] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.874770][T26921] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  801.897763][T26921] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.020763][T29344] nbd: must specify an index to disconnect
[  802.056417][T26938] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  802.099463][T26938] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.167692][T26938] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  802.178760][T26938] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.623855][T29369] syzkaller0: entered promiscuous mode
[  802.638674][T29369] syzkaller0: entered allmulticast mode
[  803.281770][T29403] __nla_validate_parse: 3 callbacks suppressed
[  803.281791][T29403] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7747'.
[  803.322922][T29397] Cannot find set identified by id 65534 to match
[  803.623558][T29419] Unknown options in mask b7f2
[  803.659875][T29422] pim6reg: entered allmulticast mode
[  803.679938][T29424] Cannot find set identified by id 3 to match
[  803.935528][T29444] pim6reg: left allmulticast mode
[  804.662270][T29485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7772'.
[  805.059542][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7779'.
[  805.100588][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7779'.
[  805.156482][T29510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  805.657590][T29534] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  806.051038][T29547] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7787'.
[  806.818527][T29577] netlink: 11 bytes leftover after parsing attributes in process `syz.4.7802'.
[  807.277150][T29607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7812'.
[  807.422441][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7818'.
[  807.446272][T29618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7818'.
[  807.983777][T29649] FAULT_INJECTION: forcing a failure.
[  807.983777][T29649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  808.021098][T29649] CPU: 1 UID: 0 PID: 29649 Comm: syz.2.7827 Not tainted syzkaller #0 PREEMPT(full) 
[  808.021140][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  808.021163][T29649] Call Trace:
[  808.021170][T29649]  <TASK>
[  808.021179][T29649]  dump_stack_lvl+0xe8/0x150
[  808.021207][T29649]  should_fail_ex+0x412/0x560
[  808.021233][T29649]  _copy_to_user+0x31/0xb0
[  808.021259][T29649]  simple_read_from_buffer+0xe1/0x170
[  808.021281][T29649]  proc_fail_nth_read+0x1bb/0x230
[  808.021306][T29649]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  808.021331][T29649]  ? rw_verify_area+0x2a6/0x4d0
[  808.021353][T29649]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  808.021377][T29649]  vfs_read+0x20c/0xa70
[  808.021397][T29649]  ? fdget_pos+0x246/0x320
[  808.021419][T29649]  ? __pfx___mutex_lock+0x10/0x10
[  808.021443][T29649]  ? __pfx_vfs_read+0x10/0x10
[  808.021465][T29649]  ? __fget_files+0x2a/0x420
[  808.021488][T29649]  ? __fget_files+0x3a0/0x420
[  808.021505][T29649]  ? __fget_files+0x2a/0x420
[  808.021532][T29649]  ksys_read+0x150/0x270
[  808.021557][T29649]  ? __pfx_ksys_read+0x10/0x10
[  808.021578][T29649]  ? __pfx_sock_ioctl+0x10/0x10
[  808.021603][T29649]  do_syscall_64+0xe2/0xf80
[  808.021623][T29649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.021639][T29649]  ? trace_irq_disable+0x37/0x100
[  808.021655][T29649]  ? clear_bhb_loop+0x60/0xb0
[  808.021685][T29649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.021702][T29649] RIP: 0033:0x7f504335b78e
[  808.021719][T29649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  808.021734][T29649] RSP: 002b:00007f5044309fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  808.021753][T29649] RAX: ffffffffffffffda RBX: 00007f504430a6c0 RCX: 00007f504335b78e
[  808.021766][T29649] RDX: 000000000000000f RSI: 00007f504430a0a0 RDI: 0000000000000003
[  808.021777][T29649] RBP: 00007f504430a090 R08: 0000000000000000 R09: 0000000000000000
[  808.021788][T29649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  808.021798][T29649] R13: 00007f5043616038 R14: 00007f5043615fa0 R15: 00007fff7a23d378
[  808.021830][T29649]  </TASK>
[  808.428825][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7832'.
[  808.479028][T29659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7832'.
[  808.578109][T29659] erspan0: entered promiscuous mode
[  808.609063][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.618287][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  808.627480][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL
[  808.643613][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.831125][T29677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7839'.
[  809.045445][T29691] netlink: 'syz.4.7841': attribute type 1 has an invalid length.
[  809.066677][T29693] netlink: 'syz.3.7843': attribute type 10 has an invalid length.
[  809.077772][T29691] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7841'.
[  809.115196][T29691] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7841'.
[  809.127288][T29693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7843'.
[  809.150773][T29691] netlink: 'syz.4.7841': attribute type 1 has an invalid length.
[  809.179203][T29691] netlink: 634 bytes leftover after parsing attributes in process `syz.4.7841'.
[  809.441652][T29704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  809.568993][T29714] lo: Caught tx_queue_len zero misconfig
[  809.623887][T29717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7850'.
[  809.675215][T29716] wg2: Caught tx_queue_len zero misconfig
[  809.831465][T29726] veth4: entered allmulticast mode
[  809.864446][T29730] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7854'.
[  809.924647][T26920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  809.945645][T26920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.023740][T29679] ip6_vti0 speed is unknown, defaulting to 1000
[  810.500921][   T30] audit: type=1804 audit(1770352728.284:9): pid=29752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7862" name="/newroot/279/memory.events" dev="tmpfs" ino=1427 res=1 errno=0
[  810.612384][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7861'.
[  811.154059][T29788] syzkaller0: entered promiscuous mode
[  811.166112][T29788] syzkaller0: entered allmulticast mode
[  812.128941][T29789] ip6_vti0 speed is unknown, defaulting to 1000
[  812.148102][ T7192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.171808][T29815] ip6_vti0 speed is unknown, defaulting to 1000
[  813.469390][T29867] xt_hashlimit: max too large, truncated to 1048576
[  813.502914][T29867] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  813.541456][T29867] netlink: 'syz.4.7901': attribute type 4 has an invalid length.
[  813.560488][T29867] netlink: 'syz.4.7901': attribute type 4 has an invalid length.
[  813.561241][T29870] batadv_slave_0: Caught tx_queue_len zero misconfig
[  814.165632][T29880] syzkaller0: entered promiscuous mode
[  814.176751][T29880] syzkaller0: entered allmulticast mode
[  814.294037][T29885] bond0: (slave syz_tun): Releasing backup interface
[  814.328951][T29885] syz_tun: left promiscuous mode
[  814.346333][T29885] bond0: left promiscuous mode
[  814.359446][T29885] team0: Port device bond0 removed
[  814.386139][T29885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  814.910212][T29898] netem: change failed
[  814.931271][T29896] __nla_validate_parse: 3 callbacks suppressed
[  814.931292][T29896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7913'.
[  815.188053][T29906] netlink: 'syz.0.7916': attribute type 2 has an invalid length.
[  815.416036][T29911] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7918'.
[  815.487743][T29914] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7918'.
[  815.745435][T29924] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7922'.
[  818.468263][T29920] batadv0: left promiscuous mode
[  818.473441][T29920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  818.490548][T29878] ip6_vti0 speed is unknown, defaulting to 1000
[  818.499661][T29930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  818.939009][T29970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  819.219128][T29979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7941'.
[  819.333408][T29982] sctp: [Deprecated]: syz.0.7943 (pid 29982) Use of struct sctp_assoc_value in delayed_ack socket option.
[  819.333408][T29982] Use struct sctp_sack_info instead
[  819.388040][T29985] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7944'.
[  819.419449][T29982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7943'.
[  819.464650][T29982] macvtap1: entered promiscuous mode
[  819.498186][T29982] team0: entered promiscuous mode
[  819.503447][T29982] macvtap1: entered allmulticast mode
[  819.557235][T29982] team0: entered allmulticast mode
[  819.583778][T29982] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  819.666596][T29993] team0: left allmulticast mode
[  819.671581][T29993] team0: left promiscuous mode
[  819.879234][T29997] pim6reg1: entered promiscuous mode
[  819.905109][T29997] pim6reg1: entered allmulticast mode
[  821.066141][T30059] netlink: 'syz.4.7959': attribute type 5 has an invalid length.
[  821.365738][T30027] ip6_vti0 speed is unknown, defaulting to 1000
[  821.400522][T30067] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  821.413918][T30066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7963'.
[  821.892465][T30093] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  822.156574][T30099] syzkaller1: entered promiscuous mode
[  822.162093][T30099] syzkaller1: entered allmulticast mode
[  822.305978][T30109] macsec1: entered promiscuous mode
[  822.317905][T30109] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode
[  822.519349][T30114] bond5: option fail_over_mac: invalid value (127)
[  822.561215][T30114] bond5 (unregistering): Released all slaves
[  822.858078][T30120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7980'.
[  823.165874][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7982'.
[  825.489593][T23251] Bluetooth: hci0: link tx timeout
[  825.496826][T23251] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  825.653019][T30146] netlink: 'syz.0.7987': attribute type 10 has an invalid length.
[  826.211406][T30171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7998'.
[  826.255125][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7998'.
[  826.307404][T30174] syz_tun: left promiscuous mode
[  826.348690][T30174] bond0: (slave syz_tun): Releasing backup interface
[  826.379432][T30174] bond0: (slave dummy0): Releasing backup interface
[  826.407627][T30178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8002'.
[  826.422732][T30174] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  826.442327][T30178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  826.449660][T30178] IPv6: NLM_F_CREATE should be set when creating new route
[  826.457018][T30178] IPv6: NLM_F_CREATE should be set when creating new route
[  826.467083][T30176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  826.470124][T30181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8002'.
[  826.672754][T30189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8004'.
[  826.738085][T30189] ipvlan3: entered promiscuous mode
[  827.070106][T23251] Bluetooth: hci0: link tx timeout
[  827.076148][T23251] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  827.457751][T30233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  827.565378][T23251] Bluetooth: hci0: command 0x0405 tx timeout
[  827.762181][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8017'.
[  827.771548][T30240] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8017'.
[  827.831656][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8017'.
[  828.711954][T30273] netlink: 'syz.0.8026': attribute type 3 has an invalid length.
[  828.739140][T30273] netlink: 'syz.0.8026': attribute type 3 has an invalid length.
[  829.058565][T30285] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  829.093321][T30285] netlink: 800 bytes leftover after parsing attributes in process `syz.4.8029'.
[  829.103003][T30285] netlink: 800 bytes leftover after parsing attributes in process `syz.4.8029'.
[  829.830557][T30327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8043'.
[  829.874212][T30327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8043'.
[  830.291578][T30316] ip6_vti0 speed is unknown, defaulting to 1000
[  832.275743][T30394] 8021q: adding VLAN 0 to HW filter on device bond6
[  832.287562][T30394] bond0: (slave bond6): Enslaving as an active interface with an up link
[  832.370137][T30397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8066'.
[  833.656173][T30437] netlink: 'syz.0.8077': attribute type 5 has an invalid length.
[  833.954799][T30449] veth4: entered allmulticast mode
[  834.034977][T30446] syzkaller0: entered promiscuous mode
[  834.040528][T30446] syzkaller0: entered allmulticast mode
[  834.172636][T30453] syzkaller0: entered promiscuous mode
[  834.178633][T30453] syzkaller0: entered allmulticast mode
[  834.186774][T30460] netlink: 'syz.1.8088': attribute type 10 has an invalid length.
[  834.213795][T30460] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  834.334506][T30467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8090'.
[  834.362040][T30467] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8090'.
[  834.377974][T30470] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  834.854027][T30489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8097'.
[  834.938186][T30491] syzkaller0: entered promiscuous mode
[  834.943740][T30491] syzkaller0: entered allmulticast mode
[  834.954799][T26935] 0: reclassify loop, rule prio 0, protocol 700
[  835.445889][T30521] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8108'.
[  835.711838][T30530] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8113'.
[  836.037583][T30540] syzkaller0: entered promiscuous mode
[  836.043102][T30540] syzkaller0: entered allmulticast mode
[  836.067604][T30540] 0: reclassify loop, rule prio 0, protocol 700
[  836.160247][T30517] ip6_vti0 speed is unknown, defaulting to 1000
[  836.780071][T30563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8120'.
[  836.942739][T30518] ip6_vti0 speed is unknown, defaulting to 1000
[  837.277603][T30580] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8125'.
[  837.445816][T30583] syzkaller0: entered promiscuous mode
[  837.480872][T30583] syzkaller0: entered allmulticast mode
[  837.497452][T30589] 0: reclassify loop, rule prio 0, protocol 700
[  837.749721][T30574] ip6_vti0 speed is unknown, defaulting to 1000
[  838.046437][T30599] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8130'.
[  838.683630][T30604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  838.721127][T30604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.732929][T30604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  838.951336][T30604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  838.995275][T30604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.035291][T30604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  839.105538][T30596] ip6_vti0 speed is unknown, defaulting to 1000
[  839.210960][T30622] bridge0: entered promiscuous mode
[  839.318614][T30604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  839.346563][T30604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.379653][T30604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  839.567649][T30629] netlink: 'syz.2.8138': attribute type 4 has an invalid length.
[  839.586781][T30604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  839.615546][T30604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  839.635308][T30604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  840.070128][T30632] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  840.228980][T26924] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  840.249792][T26924] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  840.258861][T26924] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  840.267384][T26924] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  840.276186][T26924] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  840.284610][T26924] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  840.476738][T26924] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  840.495306][T26924] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  840.536933][T26924] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  840.631510][T26924] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  840.664840][T26924] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  840.697630][T26924] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  840.846743][T30647] syzkaller0: entered promiscuous mode
[  840.860001][T30647] syzkaller0: entered allmulticast mode
[  843.457072][T30674] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8147'.
[  843.623378][T30679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8149'.
[  844.040318][T30668] ip6_vti0 speed is unknown, defaulting to 1000
[  844.176821][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8155'.
[  844.790149][T30714] Cannot find del_set index 4 as target
[  845.387455][T30744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8167'.
[  845.470456][T30747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8169'.
[  845.755404][T30755] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001
[  846.052510][T30760] bond7: option resend_igmp: invalid value (2878)
[  846.095711][T30760] bond7: option resend_igmp: allowed values 0 - 255
[  846.138966][T30760] bond7 (unregistering): Released all slaves
[  846.225189][T30735] ip6_vti0 speed is unknown, defaulting to 1000
[  846.645868][T30780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  846.750904][T30783] netlink: 'syz.4.8182': attribute type 83 has an invalid length.
[  846.769742][T30785] netlink: 'syz.3.8181': attribute type 89 has an invalid length.
[  846.824187][T30776] wg1 speed is unknown, defaulting to 1000
[  846.840136][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8181'.
[  846.890773][T30776] wg1 speed is unknown, defaulting to 1000
[  846.919563][T30776] wg1 speed is unknown, defaulting to 1000
[  846.987080][T30776] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  847.089068][T30776] wg1 speed is unknown, defaulting to 1000
[  847.279134][T30776] wg1 speed is unknown, defaulting to 1000
[  847.307127][T30796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8184'.
[  847.393492][T30776] wg1 speed is unknown, defaulting to 1000
[  847.429747][T30776] wg1 speed is unknown, defaulting to 1000
[  847.485992][T30776] wg1 speed is unknown, defaulting to 1000
[  847.520074][T30776] wg1 speed is unknown, defaulting to 1000
[  847.555600][T30776] wg1 speed is unknown, defaulting to 1000
[  847.609200][T30776] wg1 speed is unknown, defaulting to 1000
[  847.688169][T30776] wg1 speed is unknown, defaulting to 1000
[  847.697311][T30776] wg1 speed is unknown, defaulting to 1000
[  848.056711][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8188'.
[  848.221773][T30815] ipvlan3: entered allmulticast mode
[  848.257673][T30815] veth0_vlan: entered allmulticast mode
[  848.281716][T30825] netlink: 'syz.0.8190': attribute type 1 has an invalid length.
[  848.284656][T30818] netlink: 280 bytes leftover after parsing attributes in process `syz.2.8191'.
[  848.318060][T30825] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8190'.
[  848.852730][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'.
[  848.893903][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'.
[  848.959846][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'.
[  849.036761][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'.
[  849.107352][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8195'.
[  849.148903][T30808] ip6_vti0 speed is unknown, defaulting to 1000
[  849.760331][T30808] wg1 speed is unknown, defaulting to 1000
[  849.777404][T30880] netlink: 'syz.0.8203': attribute type 1 has an invalid length.
[  849.788141][T30880] netlink: 'syz.0.8203': attribute type 2 has an invalid length.
[  849.796936][T30880] netlink: 'syz.0.8203': attribute type 1 has an invalid length.
[  849.801368][T30881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8205'.
[  849.815076][T30880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8203'.
[  849.836436][T30881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.845475][T30881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.853773][T30881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  849.901982][T30881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.479501][T30888] lec:lec_atm_close: lec0: Shut down!
[  850.512553][T30902] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  850.901776][T30877] ip6_vti0 speed is unknown, defaulting to 1000
[  851.028498][T30917] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8213'.
[  851.436653][T30923] Cannot find add_set index 0 as target
[  851.447146][T30884] ip6_vti0 speed is unknown, defaulting to 1000
[  851.456287][T30877] wg1 speed is unknown, defaulting to 1000
[  851.972476][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8218'.
[  851.990023][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8218'.
[  852.099167][T30930] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  852.111102][T30930] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  852.119535][T30930] CPU: 0 UID: 0 PID: 30930 Comm: syz.0.8217 Not tainted syzkaller #0 PREEMPT(full) 
[  852.128902][T30930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  852.138950][T30930] RIP: 0010:klist_remove+0x156/0x340
[  852.144240][T30930] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 9d 28 9e f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7e 28 9e f6 49 8b 44 24 58 48 89 44 24 08
[  852.163844][T30930] RSP: 0018:ffffc9000b607960 EFLAGS: 00010202
[  852.169912][T30930] RAX: 000000000000000b RBX: ffff888034f1db80 RCX: 0000000000000000
[  852.177960][T30930] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  852.185932][T30930] RBP: ffffc9000b607a60 R08: ffffffff8fd5ec63 R09: 1ffffffff1fabd8c
[  852.193912][T30930] R10: dffffc0000000000 R11: fffffbfff1fabd8d R12: 0000000000000000
[  852.201881][T30930] R13: 1ffff1100b153f0c R14: ffff888058a9f860 R15: dffffc0000000000
[  852.209851][T30930] FS:  00007eff4afa66c0(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000
[  852.218783][T30930] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  852.225356][T30930] CR2: 00005555756614e8 CR3: 0000000084fc0000 CR4: 00000000003526f0
[  852.233319][T30930] Call Trace:
[  852.236588][T30930]  <TASK>
[  852.239510][T30930]  ? __pfx_klist_remove+0x10/0x10
[  852.244541][T30930]  ? kobject_move+0x5de/0x720
[  852.249210][T30930]  ? __pfx_kobject_move+0x10/0x10
[  852.254230][T30930]  ? do_raw_spin_unlock+0xf5/0x210
[  852.259335][T30930]  ? get_device_parent+0x366/0x3a0
[  852.264480][T30930]  device_move+0x193/0x730
[  852.268890][T30930]  hci_conn_del_sysfs+0xb8/0x1a0
[  852.273825][T30930]  hci_conn_del+0xc36/0x1230
[  852.278411][T30930]  hci_conn_hash_flush+0x191/0x260
[  852.283518][T30930]  hci_dev_close_sync+0x821/0x10e0
[  852.288626][T30930]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  852.294163][T30930]  ? lockdep_hardirqs_on+0x7a/0x110
[  852.299354][T30930]  ? enable_work+0x1fd/0x230
[  852.303938][T30930]  hci_dev_close+0x108/0x260
[  852.308519][T30930]  sock_do_ioctl+0x101/0x320
[  852.313137][T30930]  ? __pfx_sock_do_ioctl+0x10/0x10
[  852.318240][T30930]  ? do_futex+0x395/0x420
[  852.322566][T30930]  sock_ioctl+0x5c6/0x7f0
[  852.326881][T30930]  ? __pfx_sock_ioctl+0x10/0x10
[  852.331724][T30930]  ? __fget_files+0x2a/0x420
[  852.336305][T30930]  ? __fget_files+0x3a0/0x420
[  852.340978][T30930]  ? __fget_files+0x2a/0x420
[  852.345560][T30930]  ? bpf_lsm_file_ioctl+0x9/0x20
[  852.350498][T30930]  ? __pfx_sock_ioctl+0x10/0x10
[  852.355333][T30930]  __se_sys_ioctl+0xfc/0x170
[  852.359924][T30930]  do_syscall_64+0xe2/0xf80
[  852.364423][T30930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.370477][T30930]  ? trace_irq_disable+0x37/0x100
[  852.375490][T30930]  ? clear_bhb_loop+0x60/0xb0
[  852.380156][T30930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.386057][T30930] RIP: 0033:0x7eff4a19aeb9
[  852.390481][T30930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.410095][T30930] RSP: 002b:00007eff4afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  852.418510][T30930] RAX: ffffffffffffffda RBX: 00007eff4a415fa0 RCX: 00007eff4a19aeb9
[  852.426474][T30930] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000010
[  852.434472][T30930] RBP: 00007eff4a208c1f R08: 0000000000000000 R09: 0000000000000000
[  852.442430][T30930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  852.450389][T30930] R13: 00007eff4a416038 R14: 00007eff4a415fa0 R15: 00007ffce4597378
[  852.458361][T30930]  </TASK>
[  852.461380][T30930] Modules linked in:
[  852.467172][T30930] ---[ end trace 0000000000000000 ]---
[  852.475092][T30930] RIP: 0010:klist_remove+0x156/0x340
[  852.485074][T30930] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 9d 28 9e f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7e 28 9e f6 49 8b 44 24 58 48 89 44 24 08
[  852.565183][T30930] RSP: 0018:ffffc9000b607960 EFLAGS: 00010202
[  852.602108][T30930] RAX: 000000000000000b RBX: ffff888034f1db80 RCX: 0000000000000000
[  852.635271][T30930] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  852.665260][T30930] RBP: ffffc9000b607a60 R08: ffffffff8fd5ec63 R09: 1ffffffff1fabd8c
[  852.683923][T30930] R10: dffffc0000000000 R11: fffffbfff1fabd8d R12: 0000000000000000
[  852.704511][T30930] R13: 1ffff1100b153f0c R14: ffff888058a9f860 R15: dffffc0000000000
[  852.713143][T30930] FS:  00007eff4afa66c0(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000
[  852.723581][T30930] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  852.731188][T30930] CR2: 00007fa8ed7e12f8 CR3: 0000000084fc0000 CR4: 00000000003526f0
[  852.739547][T30930] Kernel panic - not syncing: Fatal exception
[  852.746001][T30930] Kernel Offset: disabled
[  852.750320][T30930] Rebooting in 86400 seconds..