last executing test programs:

3.595758963s ago: executing program 1 (id=1966):
unshare(0x20000400)
r0 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0xe, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0x3, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
shutdown(r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xb, 0x6, 0x18, @loopback, @local, 0x7, 0x20, 0x200, 0x7e7}})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)=ANY=[], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000084e400002f000000b7090000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000300)={0xffffffffffffffff, 0xce49, "69eca4", 0x12, 0xd2})
socket$kcm(0x2, 0xa, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)

3.142763307s ago: executing program 1 (id=1977):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000180)={0x9, 0x2, 0x8001, 0x22c, 0x5, 0x0, 0x400, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0xc, 0x81, 0xa1, 0x3, 0x800000ff, 0xb9, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000000000000008001b000000000017e8a8f673621b8863c9c12520d6218779d260115511b1bff2c0f6e3febae7b3ed44bc0b7b39b8ccff4099bd436bd29adf87d7a4fa7b2d787024e43066e5d2a4b9b57552fb9d1ccf42c202c3590b92e1c78ed7aba707725a22725d03ec80fe69b6621631e1"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000000300"/16, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRES8=r0, @ANYRES64=0x0, @ANYRES8=r3], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000640)={0x1, 0x1, 0x200, 0x3, 0x4, 0x2, 0x0, 0xff}, &(0x7f0000000740)=0x20)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2)
r8 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x32000000, 0x0, 0x10004893}, 0x80)

2.78364138s ago: executing program 2 (id=1989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000000228bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0100000008000000240012800b000100697036746e6c00001400028008000800390000400800070005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000084)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000005c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x58}}, 0x44044)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2, 0x1}, 0x20)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x104, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee430000000000100000000000008"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8a889ab6ea986eeb774f0e1813b4b9d980e3ce55d85c2a7420138faeb8bee676da3fc24206adc2fdbbb9bfaf2ae147f0897e85029b9cc4dbb33d9b680988793044aa38688b5d477db97ec9029ee3b16019bc2067b48574edf12570dfaaa51672cf058c2260ac51a8cad8c5c90dbbe39497b725190f7dd6b71d00f01f995598dfbe7361bd85effefa2e160a204252e83772080529265686aefe3c16b9d8bb858b33f1364d5afb71c", @ANYRESDEC, @ANYBLOB="846f3d5cc440c5f1f92888dbb8742604f084db97e6baebfd7cc2ccbc9bcd939395d665d04fb07d10331d870f724ac608c894002ea2aa800fc3cdef2501eba5a8e8abf276df4ded1796fa54751bab2e50db5b680e108f5663c4a3b256a5b62797380bff9c1977f69fa47ce78cc4defff08b8b7dd64e6ff5a03057c5ffd62930ffbbe4ca5d74de7404ab7eee7b14563524bd59c2b8728c304f2c197b3ea4f0da366f567484a95979de412041ad65d9e15f2f7ad53091f90390f4c51763362975c193120752d9202e049c04c174579ae771607a9844aa4cf8091c12f8a55fc38eecf5ec4e64728a40a5f42b4e6f9d4bb19e", @ANYRESDEC=r0], 0x50}}, 0x4008840)

2.77584177s ago: executing program 2 (id=1991):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000540)={@random="c8e04ef231b8", @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x8, 0x6, "b711b7", 0x18, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0xc}, {[], @mld={0x84, 0x0, 0x0, 0x1, 0x3db7, @mcast1}}}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xf8, r7, 0xa00, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "354a61f633c899a8425dc31cec"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5f91e1a2ae5266ea8dcd686241"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ce64555e50"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "aa3d742ff8"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "513ddf345f55b32e44183ebb79"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x174, r11, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x160, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r13=>0x0})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r16 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001b00000000000000000000ffff0a010102ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000116ab0e8bf033c2a085ad02284000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000100000000000000002000000000000700000000000047d7c79dadf3e5182a8ea900fdffffffffffffff0000040000000000e80a000000000000000020000a00020070000000"], 0x104}}, 0x4cc00)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r14, r13, 0x25, 0x0, @val=@tcx={@void, @value=r14}}, 0x1c)

2.594423148s ago: executing program 2 (id=1994):
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2f, 0x0, [{0x7, 0x6, "954d2dd4"}, {0x2, 0x11, "ad4cfc6d0c114a69c613f8d51edcd6"}, {0x2, 0x12, "ba2a891b4c8fab8bf5ec9fc679f3f519"}]}]}}}}}}}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r3, &(0x7f0000001240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="88000000000000000011000007000000862300000003011137c32a580e19a832b90113bc503230010ce7814848501ee6e90a6b441ca6d1ac1e01010000ac95e000000100000006e000000200000005070f2aac1e0101ffffffff0000000044141723ac1e000100000008ac1414bb0000000044141c30725ed0ac00000005ffffffff00000007000014000000000000000000000002"], 0xa0}}], 0x1, 0xc044)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x200400c0)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2f, 0x0, [{0x7, 0x6, "954d2dd4"}, {0x2, 0x11, "ad4cfc6d0c114a69c613f8d51edcd6"}, {0x2, 0x12, "ba2a891b4c8fab8bf5ec9fc679f3f519"}]}]}}}}}}}, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
sendmmsg$inet(r3, &(0x7f0000001240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="88000000000000000011000007000000862300000003011137c32a580e19a832b90113bc503230010ce7814848501ee6e90a6b441ca6d1ac1e01010000ac95e000000100000006e000000200000005070f2aac1e0101ffffffff0000000044141723ac1e000100000008ac1414bb0000000044141c30725ed0ac00000005ffffffff00000007000014000000000000000000000002"], 0xa0}}], 0x1, 0xc044) (async)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x200400c0) (async)

2.479744183s ago: executing program 2 (id=1996):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="000004000000000000000000004d02e40f9ab7c8355b021a94a771a200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80, 0xfffffffc, 0x9, 0x48c0, r0, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x4}, 0x50)
r1 = socket$igmp6(0xa, 0x3, 0x2)
recvfrom(r1, &(0x7f0000000300)=""/234, 0xea, 0x12000, &(0x7f0000000180)=@isdn={0x22, 0x8, 0x80, 0x40, 0x40}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x5, 0x3ff, {{0x14, 0x4, 0x1, 0x1b, 0x50, 0x64, 0x0, 0x6, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x83, 0x4, 'x{'}, @end, @lsrr={0x83, 0x13, 0xc1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x24, 0x27, 0x1, 0x7, [{@loopback}, {@multicast2, 0x111}, {@private=0xa010101, 0x400}, {@loopback}]}]}}}}})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000013c0)=0xc7f)
recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x85)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

1.854910321s ago: executing program 1 (id=2003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad1248", 0x18d}], 0x1}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44100}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005b06e87f0aba38a433daf03000600090000000500ee00fc000000"], 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000b6767122959ae26ea16f25004ff5e3d08619f6c070ab81c9e1400000000000008d4d6e21b138dbe6cabe9f2693b4f483f6f8b50c0cc248bb7ecd116d96", @ANYRES16=r1, @ANYBLOB="e0a7000072edbf0180140002"], 0x2c}}, 0x20000800)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r5, 0x5)
listen(r5, 0x3)
openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
bind(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2, 0x2}, 0x80)

1.63986116s ago: executing program 3 (id=2006):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x600}, 0x8000000, 0x0, 0x1, 0x3, 0x4}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="3133ae2c145d8827929199375eeea7f922efcdef3c3c5bc208660796bc9ac03687a5bdc678e19890afb6b83445f9112cc848bef6db9f844bf6967cdf6c63e7804a24d81cefd026b02e55bfe0b9d2c5a569c7109090a47c1b20cbe77e10eac0b2451687c261935edfd99500cf569e767a0b927ef035960372a5cdf3da313dbf297e1b4c", @ANYBLOB="08fc0600ac1e010105ee06000000000000000200e5631b2a80a4f6a3819fefdb442e8a7442aa23c3b22c783d527cf6d5973bd338772d65b6f356d494015fd37c7b0d98d5dd3ea80f675663073f7448bc4fff423a44b2113542c0308857e8672e04c20b6c4f77a24c33935a2c6e003780c13bc1c46ced99ab6cf18a498cfc7ee1d63445e0e1c72b26c3722f", @ANYRES32, @ANYBLOB="08000700ac14141f080003000000000014000800"], 0x8c}}, 0x40080)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x6, 0x10, 0x0, @loopback, @loopback, 0x8000, 0x7891, 0x5, 0xe3e9}}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e8005"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83000400cb1507002000128008000100736974001400028008000300ac14141005000900060000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)

1.594094931s ago: executing program 1 (id=2007):
syz_emit_ethernet(0x46, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "7d52f5", 0x10, 0x11, 0x1, @remote, @local, {[], {0x4e24, 0x4e23, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000009a40)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40000121, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2f}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xc, 0x84}}}, 0xdc}}, 0x20050800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="000000000000000000000000000000000000000000d6ff5b5ca014ab9ed4bd00000000000000e646a8fd89178fadd00a2e82656453ff2571e0ca99f263184b1a688bef3aeb3f95339354047c591751c2302c69f14dfcacb55fb2573aa216bcea4d5e8573a3b10e6025a0e8dae34fa699320ba3195e041342037b5a3e313554b84f475e5bd7df4b9d2cad17cf8f28e3a9c16c3bfe9cf3830c9daac644b26799dc6cca67cb448a3860a571a08403baae7362f23874546f236940b8fe2cd68b50141063fba38efb78d4d96c40967068643a2cbd6ba87c86eeab8239fe0a05060a2fd489e9b7f47265db689910f8f455fa"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1c, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070400000000000000000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xe9, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
openat$cgroup(r4, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x34, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c011}, 0x20008040)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000340)="ad5cdf4a34adc48844fdc4d90b228a94c640193e6c3f30737c5ce2c5d9e85091536fd4e36e4821883461dda027221980dea41a1c9d83c57d4ef1a96bca6e7729d5b7328d9b303a28dea0907ab44088f96642efab8dd56df60c04130fc55444994fcd7e2fe3d656dc265f7fe6634826756c62bd68a52f67b76f0be60f23e8a38fb0cf8165d67d6de02a79bd01a4c1887c7258cf9c14ccb4da2ab611c2b71dc4f0c96ebf3a94321f625f3c2e63a690ef0e490f7efca4c89e9a2b83b91ef75da4e7fe9ebca8af6d3fc4e8b892ad46ba5beb31286a234c37c5096d380499618b62d0edc9628e358d98d09f64dfeca2fa67df377ad92afa9b09", &(0x7f0000000500)=""/210, &(0x7f0000000600)="d33cef8a58fc285e8c55524fbd4675ff4656ba94a5158312002031d757b2cea347ddae974addc00952d59e4ba50663c72ceba700d8992558d4f7572b9740ff8a508b2ec5943e72eb6bd18586c8418c0288e8b67fabd6991bb540f07c73e7cc379fdf6ae339dfbff10d1e5da7c3b46d27252da13bb18c2149a055c39ebcb725c80abd535229783619", &(0x7f0000000000), 0x85ae, r5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10)

1.496344978s ago: executing program 3 (id=2010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018151f00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.46949727s ago: executing program 3 (id=2011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="30000000090605000000000000000000050000000900020073797a310000000005000100070000000800094000000008ab8d2d285eed70eed7bffc0ddb555e51d70147536ddd07839954ec6d98752a6438a78fdee620dd3a0920aa347b5a993f70f1f6a5f702b1f77fb15b09cd543710dfeb0e82f23d04ee7028dc8556f495866bcaf2c28980c9a67ed4c4b87acac6510401d8ef802c1946bb8bbd03a2f73fe673ac1263caf7e03a11c1a0fd0900000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x40040080)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x5000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r5, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
shutdown(r5, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000021801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e86"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.456386456s ago: executing program 4 (id=2012):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008e40100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040)
socket(0x10, 0x803, 0x0)

1.138828997s ago: executing program 4 (id=2013):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x1}]}, 0x18}, 0x1, 0x7}, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xa)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
r9 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@mpls_getroute={0x2c, 0x1a, 0x400, 0x70bd2b, 0x25dfdbff, {0x1c, 0x0, 0x10, 0x4f, 0x0, 0x2, 0xfe, 0x2, 0x200}, [@RTA_DST={0x8, 0x1, {0x4, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x20008802)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r14)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

1.098429905s ago: executing program 4 (id=2014):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu={0x18, 0x1, 0x0, 0x0, 0x256c7520, 0x0, 0x0, 0x480}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35}}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x80200001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xfef, &(0x7f0000000cc0)=""/4079, 0x41100, 0x40}, 0x94)

1.067886383s ago: executing program 4 (id=2015):
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x9}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0xa}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10048004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={0x0, 0x3, 0x8b, "97a72a1f7af73fe34e450905f0eb5a1fb30f450074be5fcce6282cdddf4b7213ad5452d2cc0a2b308587e33f0e83d4eb497eeff7309dd6ba26a438a10abe464b319fb958eda16eb61986b910f407094023565fd560fa7be9a8b9b2ef8b7b50357244edaa6291609114fd0fc4d1abd0c344b64590d7c69b5a422cae90736a785163c6b4eccd5ad46ebc7e96"}, 0x93)
r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'tunl0\x00', <r7=>0x0, 0x1, 0x700, 0x8, 0x3, {{0x1f, 0x4, 0x2, 0x1d, 0x7c, 0x67, 0x0, 0xf8, 0x2f, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xf, 0xa1, [@broadcast, @multicast2, @empty]}, @noop, @rr={0x7, 0xb, 0x2b, [@remote, @loopback]}, @cipso={0x86, 0x22, 0x0, [{0x0, 0xa, "9c828962fa04657b"}, {0x2, 0x12, "eed5c1d7d7a73470df9a75a84769106e"}]}, @timestamp={0x44, 0x28, 0xb, 0x0, 0x2, [0x1, 0x6, 0x800, 0xffff, 0x118d, 0x9, 0x8ef, 0x5, 0xa]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r7, 0x0, 0x1, 0x7, 0x1, 0x13, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x8000, 0x3}})
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000680)={0x7, 0x30, [0xe09f, 0x4, 0x400, 0x4], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
recvmmsg(r0, &(0x7f0000003180)=[{{&(0x7f00000006c0)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/88, 0x58}, {&(0x7f00000007c0)=""/20, 0x14}, {&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000940)=""/195, 0xc3}], 0x5, &(0x7f0000000ac0)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001ac0)=@nfc, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/1, 0x1}, {&(0x7f0000001b80)=""/189, 0xbd}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/235, 0xeb}, {&(0x7f0000002d40)=""/222, 0xde}], 0x5, &(0x7f0000002ec0)=""/247, 0xf7}, 0xc2}, {{&(0x7f0000002fc0)=@sco, 0x80, &(0x7f0000003140)=[{&(0x7f0000003040)=""/117, 0x75}, {&(0x7f00000030c0)=""/27, 0x1b}, {&(0x7f0000003100)=""/30, 0x1e}], 0x3}}], 0x3, 0x2000, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000003240), 0x4)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000003280)={@remote, 0x8, 0x0, 0x0, 0x1, 0x0, 0x3}, &(0x7f00000032c0)=0x20)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
close(r0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003400)=@generic={&(0x7f00000033c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003480)={{r9}, &(0x7f0000003380), &(0x7f0000003440)=r10}, 0x20)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f00000034c0), &(0x7f0000003500)=0x4)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000003540)={0x20, 0x6, {0x5, @usage, 0x0, 0x2, 0x2, 0x5, 0x8, 0x80, 0x40, @usage=0x7, 0x6, 0x1, [0x88, 0x0, 0x2, 0x40, 0x2, 0xfff]}, {0xe00a, @struct={0x7, 0xa}, 0x0, 0x1, 0x101, 0x7, 0x7, 0x0, 0x27, @usage=0x10001, 0x6, 0xd3, [0x0, 0x0, 0x0, 0x2, 0x63fb55e2, 0x54]}, {0x8000000000000000, @struct={0x7}, <r12=>0x0, 0x9, 0x5, 0x20b, 0x400, 0x3812, 0x21, @usage=0x1, 0xcae, 0x5, [0x7, 0x1, 0x7, 0x0, 0x81, 0x9]}, {0x100, 0x9, 0x3}})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003940)={r12, 0x5, 0x9})
sendmmsg$inet(r0, &(0x7f0000005280)=[{{&(0x7f0000003d40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003d80)="f0794f5436b9b357bb763a4691ed93b3e1c5d6b318fdc437c74aaa807911d9c860d948b4b083278048a966be6a14289d3600a0f23cdce388f182e3428f3a95d2bc6e36b1d954a86e551ff4e2504937474e538b1ab82e193b97a8682291d864fb94e0f32cbc7124507f10e763ce00c416c14486013c663019d6f495bb5e00d1e898fce6105a38e5b7737aaafdd2abcdf5313d589b02dacf0b14c082f754648778e3749a737107e0d2241f48c74ff7500ecc79bbdfe964711d1cc2b80d4ec98617fcf616ac2a042fdf8ed2ed0a02381af30438d6a983d3b0a55272d31190d1265521d920afa82a43ff0981685efcd1ca371779da325a5a9be216", 0xf9}], 0x1, &(0x7f0000003ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa9, 0x0, 0xb, [0x327, 0xffff8001, 0x4, 0x5]}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x1, [0x4]}]}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x44, 0x0, [{0x7, 0x10, "780625051754c2fadce0e3e4c7dc"}, {0x5, 0xd, "201718ffeedeb182487f27"}, {0x1, 0x2}, {0x0, 0x5, "2397f2"}, {0x0, 0xf, "07b36a3a262b5bdc5b2acbf44c"}, {0x5, 0xb, "95ba9e266c2332e456"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xc0}}, {{&(0x7f0000003f80)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000005180)=[{&(0x7f0000003fc0)}, {&(0x7f0000004000)="09609dbed3c0f3a6663df4533b4bde5633b6cb18a812d4febe1a957a62428bf1f34d9295ba345cbc906f49c3584e49e7c321ca817f1596070aefcc6e4aa656a1d481ca6ea6c7b4fe0e542b84158eb6ab58259911a6dd587fae44f3e4aa48600bc6d68427ad0d9f9d3378931cf1dde1050ee89e51e78e7117e7c0f792", 0x7c}, {0xfffffffffffffffe}, {&(0x7f0000004080)="45a8847bf3245c88cda3bbf3d5030b2e568298b3d241dbee31b475b2b885672f66858abc3c09f4b9b9f81a98adf5dda81c8f268a88481993578df95fccaf720632caf1e5e672c8d4f998b1d7067f5764424dd206da8246887334daed79e00812a97c4a50beab74033c9b383d3f2e7433dd2d620648fdfb97dfeb877abb96f8bc8814ea088433faaa30f654cbff3a00ad233692548f1ff3774ed6f03a4ba5", 0x9e}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000005140)="bdd0a6", 0x3}], 0x6, &(0x7f0000005200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x60}}], 0x2, 0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000005300)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000005340)=0x14)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005440)={&(0x7f00000053c0)={0x7c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PEER_MEASUREMENTS={0x4c, 0x111, 0x0, 0x1, {0x48, 0x5, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x45}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}}, 0x8040)

940.688146ms ago: executing program 0 (id=2016):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

828.031494ms ago: executing program 0 (id=2017):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110ad000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94) (async)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x21, 0x4, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x30, r5, 0x301, 0x70bd28, 0x25dfdbfb, {0x4e}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x4880) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}]}, 0x58}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x24, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x18}}], 0x1, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r12=>0x0})
bind$packet(r11, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x4, 0x6, @remote}, 0x14)
sendmmsg$sock(r11, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) (async)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000000)

807.144606ms ago: executing program 1 (id=2018):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x294}}, 0x4048010)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1d000000190001002dbd7000fcdbdf250a001400000201040004000008001e000a0000000c00090007000b06", @ANYRES32=0x0, @ANYBLOB="ea36a431673dc3844da70b069f3ecbfbf3f30396d89edf291f3e412ade285e6a08e1242473913dbe4118c94930ce583f22e52994a0bd780a1055658445098d98c6280ef3a95961080656c05890c2dbede21d4e6a"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r4=>0x0)
syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/time_for_children\x00')
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000c80)={0x0, 0x5, 0x2c37}, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x125, 0x125, 0xb, [@func={0x4, 0x0, 0x0, 0xc, 0x1}, @enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x7}, {0x6, 0x5}, {0xc, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0xb, 0x7}, {0x3}]}, @datasec={0x4, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x40}, {0x2, 0x10, 0x7fffffff}, {0x4, 0xf, 0xa7}, {0x2, 0xff, 0x4}], '\x00~l'}, @enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0xe, [{0x2, 0x7, 0x4}, {0x7, 0x0, 0x1}, {0xf, 0x1, 0x2}]}, @var={0x2, 0x0, 0x0, 0xe, 0x4}, @datasec={0x4, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x3, 0x3}, {0x1, 0xfffffffb}, {0x5, 0x5ef3032c}, {0x4, 0x5, 0x4}, {0x2, 0x3, 0x2}], "dfa7"}, @restrict={0x9, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x61, 0x5f, 0x61, 0x61, 0x30, 0x30, 0x0, 0x7f]}}, &(0x7f0000000640)=""/59, 0x14b, 0x3b, 0x0, 0x5}, 0x28)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4df, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
pipe(&(0x7f0000000a80)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x1}, 0xc)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000b00)={<r11=>r2, 0x7fff, 0x1ff, 0x8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x1ff}, [@ldst={0x1, 0x3, 0x6, 0x5, 0x5, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x29, &(0x7f0000000480)=""/41, 0x41100, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000980)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x3, 0x18e1, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r7, r8, r9, 0xffffffffffffffff, r10, r11], 0x0, 0x10, 0x5}, 0x94)
r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f8010000", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="dc0102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400eb00000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYBLOB], 0x1f8}, 0x1, 0x0, 0x0, 0x80}, 0x805)
accept$netrom(r12, &(0x7f0000000080)={{0x3, @null}, [@netrom, @null, @default, @netrom, @default, @null, @bcast, @default]}, &(0x7f0000000100)=0x48)
unshare(0x6a040000)
r13 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r13, 0x6180, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r13, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={0x0}}, 0x8800)

712.297952ms ago: executing program 0 (id=2019):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x400, 0x452c}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000033c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0xf000000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010000003185024dfcc44aae2c90df251b000000"], 0x14}}, 0x40090)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=<r10=>r6, @ANYBLOB="796129bd7000000000007e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r10, @ANYRESHEX, @ANYRESOCT, @ANYRES32=r5, @ANYRESHEX=r7], 0x7c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0xa0}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

340.032472ms ago: executing program 0 (id=2020):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

339.731475ms ago: executing program 0 (id=2021):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018152000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

336.377349ms ago: executing program 1 (id=2022):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="3c4fa0b81fbc3f283c032270c786ff11f00f25b006c88b3acf3f4061a5377eaaee3c2e5beec3b8a74819e647754293fd2c8f4924", @ANYBLOB="14000200ff230000020000000000000000000001140006000000000006000000000000000052a1e5cf0008dd0004"], 0x48}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000140)="24000000010006", 0x7)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x65, r1})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x4, 0x0, 0xfd}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe4)
close(r10)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067656e65766500001c00028005000c0000000000050003000100000005000d000100000008000a006097b31c74458de4792189871ef9fadc0b6575e5afe683a75e7f6ea2eee3866fd63a49ae42259b65f008214626a88de355e6cc95b2ec", @ANYRES32=r11, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

267.347296ms ago: executing program 3 (id=2023):
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c)
listen(r0, 0xb)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000fdffffffffffffff00000000aa3c04", @ANYRESHEX, @ANYRES8=r0], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

223.168872ms ago: executing program 2 (id=2024):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
listen(r0, 0x400) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r7)

151.993265ms ago: executing program 4 (id=2025):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu={0x18, 0x1, 0x0, 0x0, 0x256c7520, 0x0, 0x0, 0x500}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35}}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x80200001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xfef, &(0x7f0000000cc0)=""/4079, 0x41100, 0x40}, 0x94)

150.733976ms ago: executing program 0 (id=2026):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000280)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bfc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2c3f3d84ef0400000000f1ff02ff23403d8b2fc653ae1ebfcb1e349b6551e8bcc84eee753f003949004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea0500000000000000be2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3c8bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86c0d255dc4d555aab841eabe4ab190c092d077ce", 0x118)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042cbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c000020000280140003000000000000000000d5", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={<r5=>0x0, @in6={{0xa, 0x4e23, 0x5e, @ipv4={'\x00', '\xff\xff', @local}, 0x7fffffff}}, 0x8, 0xe}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x4d, 0x20, 0x7, 0x80}, &(0x7f00000004c0)=0x18)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000100))
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="007bd47342"], 0x50)
unshare(0x400)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100}, 0x94)

150.122211ms ago: executing program 3 (id=2027):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x28000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

127.672431ms ago: executing program 2 (id=2028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "c846028aad6039283a52ef7badf0a306"})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x4, 0x94, 0x2, 0x7f, 0x4, @mcast2, @private1, 0x1, 0x8, 0x9, 0x3}})

97.497084ms ago: executing program 4 (id=2029):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000200000000fc020000000000000000000000000000200100000000000000000000000000000006000000000000000000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000007000000000032000000ff0200000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00040100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 3 (id=2030):
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f0001", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000be880000000000000001"], 0xfdef)

kernel console output (not intermixed with test programs):

  125.268212][ T9127]  ? __pfx_vfs_read+0x10/0x10
[  125.268242][ T9127]  ? __fget_files+0x3a0/0x420
[  125.268256][ T9127]  ? __fget_files+0x2a/0x420
[  125.268274][ T9127]  ksys_read+0x145/0x250
[  125.268295][ T9127]  ? __pfx_ksys_read+0x10/0x10
[  125.268314][ T9127]  ? rcu_is_watching+0x15/0xb0
[  125.268332][ T9127]  ? rcu_is_watching+0x15/0xb0
[  125.268350][ T9127]  do_syscall_64+0xfa/0x3b0
[  125.268366][ T9127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.268383][ T9127]  ? clear_bhb_loop+0x60/0xb0
[  125.268401][ T9127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.268417][ T9127] RIP: 0033:0x7f520e18d5fc
[  125.268432][ T9127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  125.268448][ T9127] RSP: 002b:00007f520efdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  125.268468][ T9127] RAX: ffffffffffffffda RBX: 00007f520e3b5fa0 RCX: 00007f520e18d5fc
[  125.268481][ T9127] RDX: 000000000000000f RSI: 00007f520efdf0a0 RDI: 0000000000000004
[  125.268492][ T9127] RBP: 00007f520efdf090 R08: 0000000000000000 R09: 0000000000000000
[  125.268502][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.268513][ T9127] R13: 00007f520e3b6038 R14: 00007f520e3b5fa0 R15: 00007ffee29d1028
[  125.268533][ T9127]  </TASK>
[  125.315347][ T9106] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[  125.381621][ T9129] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.543689][ T9129] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  125.572196][ T9129] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  125.697218][ T9131] veth5: entered promiscuous mode
[  125.733488][ T9132] dummy0: entered allmulticast mode
[  125.796012][ T9101] hsr0 speed is unknown, defaulting to 1000
[  125.809191][ T9101] lo speed is unknown, defaulting to 1000
[  125.848556][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'.
[  125.862154][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'.
[  126.449906][ T9195] lo speed is unknown, defaulting to 1000
[  126.545144][ T9195] hsr0 speed is unknown, defaulting to 1000
[  126.552148][ T9195] lo speed is unknown, defaulting to 1000
[  127.368306][ T9227] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1002'.
[  127.413958][ T9227] netlink: 'syz.1.1002': attribute type 14 has an invalid length.
[  128.044005][ T9269] lo speed is unknown, defaulting to 1000
[  128.205073][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1015'.
[  128.226947][ T9269] hsr0 speed is unknown, defaulting to 1000
[  128.233084][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'.
[  128.250609][ T9269] lo speed is unknown, defaulting to 1000
[  128.562790][ T9282] bridge0: port 4(macvlan3) entered disabled state
[  128.569522][ T9282] bridge0: port 3(macvlan2) entered disabled state
[  128.576165][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.652998][ T9282] wg1: left promiscuous mode
[  128.665315][ T9282] wg1: left allmulticast mode
[  128.702118][ T9304] netlink: 'syz.2.1020': attribute type 1 has an invalid length.
[  128.833866][ T9282] ip6tnl1: left promiscuous mode
[  128.839014][ T9282] ip6tnl1: left allmulticast mode
[  128.845649][ T9282] gretap2: left promiscuous mode
[  128.867306][ T9282] bridge5: left promiscuous mode
[  128.894711][ T9282] bridge5: left allmulticast mode
[  128.932839][ T9282] veth3: left promiscuous mode
[  128.952113][ T9282] veth1_vlan: left allmulticast mode
[  128.976393][ T9282] macvlan4: left promiscuous mode
[  128.999144][ T9282] veth5: left promiscuous mode
[  129.128754][ T9304] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.156665][ T9306] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.167054][ T9306] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  129.180154][ T9306] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  129.201853][ T5985] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.211152][ T5985] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.238335][ T9321] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  129.291925][ T6001] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.316975][ T6001] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.422175][ T9341] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  129.442055][ T9341] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  129.485598][ T9341] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  129.510496][ T9341] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  129.544055][ T9341] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  129.574853][ T9341] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  129.606254][ T9341] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  129.615169][ T9341] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  129.701156][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1033'.
[  129.710597][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'.
[  129.720500][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1033'.
[  129.739123][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1033'.
[  129.871514][ T9389] nbd: must specify at least one socket
[  129.932352][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'.
[  130.080461][ T9396] veth3: entered allmulticast mode
[  130.105529][ T9401] tipc: Started in network mode
[  130.111114][ T9401] tipc: Node identity aa6fa7c9a638, cluster identity 4711
[  130.134559][ T9401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.243153][ T9401] tipc: Disabling bearer <eth:syzkaller0>
[  130.259962][ T9428] FAULT_INJECTION: forcing a failure.
[  130.259962][ T9428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.276393][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.0.1048 Not tainted syzkaller #0 PREEMPT(full) 
[  130.276417][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.276428][ T9428] Call Trace:
[  130.276434][ T9428]  <TASK>
[  130.276442][ T9428]  dump_stack_lvl+0x189/0x250
[  130.276467][ T9428]  ? __pfx____ratelimit+0x10/0x10
[  130.276490][ T9428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.276509][ T9428]  ? __pfx__printk+0x10/0x10
[  130.276529][ T9428]  ? __might_fault+0xb0/0x130
[  130.276554][ T9428]  ? rcu_is_watching+0x15/0xb0
[  130.276573][ T9428]  should_fail_ex+0x414/0x560
[  130.276597][ T9428]  _copy_from_user+0x2d/0xb0
[  130.276616][ T9428]  ___sys_sendmsg+0x158/0x2a0
[  130.276636][ T9428]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.276668][ T9428]  ? __fget_files+0x2a/0x420
[  130.276682][ T9428]  ? __fget_files+0x3a0/0x420
[  130.276706][ T9428]  __x64_sys_sendmsg+0x19b/0x260
[  130.276726][ T9428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.276749][ T9428]  ? __pfx_ksys_write+0x10/0x10
[  130.276769][ T9428]  ? rcu_is_watching+0x15/0xb0
[  130.276787][ T9428]  ? rcu_is_watching+0x15/0xb0
[  130.276802][ T9428]  do_syscall_64+0xfa/0x3b0
[  130.276817][ T9428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.276833][ T9428]  ? clear_bhb_loop+0x60/0xb0
[  130.276851][ T9428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.276868][ T9428] RIP: 0033:0x7f520e18ebe9
[  130.276882][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.276956][ T9428] RSP: 002b:00007f520efdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.276975][ T9428] RAX: ffffffffffffffda RBX: 00007f520e3b5fa0 RCX: 00007f520e18ebe9
[  130.276986][ T9428] RDX: 0000000004008001 RSI: 0000200000000040 RDI: 0000000000000005
[  130.276995][ T9428] RBP: 00007f520efdf090 R08: 0000000000000000 R09: 0000000000000000
[  130.277009][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.277019][ T9428] R13: 00007f520e3b6038 R14: 00007f520e3b5fa0 R15: 00007ffee29d1028
[  130.277039][ T9428]  </TASK>
[  130.506133][ T9423] lo speed is unknown, defaulting to 1000
[  130.546959][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'.
[  130.954252][ T9482] FAULT_INJECTION: forcing a failure.
[  130.954252][ T9482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.967735][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.4.1061 Not tainted syzkaller #0 PREEMPT(full) 
[  130.967758][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.967768][ T9482] Call Trace:
[  130.967774][ T9482]  <TASK>
[  130.967780][ T9482]  dump_stack_lvl+0x189/0x250
[  130.967805][ T9482]  ? __pfx____ratelimit+0x10/0x10
[  130.967826][ T9482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.967844][ T9482]  ? __pfx__printk+0x10/0x10
[  130.967862][ T9482]  ? __might_fault+0xb0/0x130
[  130.967883][ T9482]  ? rcu_is_watching+0x15/0xb0
[  130.967899][ T9482]  should_fail_ex+0x414/0x560
[  130.967921][ T9482]  _copy_from_user+0x2d/0xb0
[  130.967941][ T9482]  ___sys_sendmsg+0x158/0x2a0
[  130.967958][ T9482]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.967987][ T9482]  ? __fget_files+0x2a/0x420
[  130.968000][ T9482]  ? __fget_files+0x3a0/0x420
[  130.968017][ T9482]  __x64_sys_sendmsg+0x19b/0x260
[  130.968035][ T9482]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.968056][ T9482]  ? __pfx_ksys_write+0x10/0x10
[  130.968084][ T9482]  ? rcu_is_watching+0x15/0xb0
[  130.968102][ T9482]  ? rcu_is_watching+0x15/0xb0
[  130.968117][ T9482]  do_syscall_64+0xfa/0x3b0
[  130.968132][ T9482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.968148][ T9482]  ? clear_bhb_loop+0x60/0xb0
[  130.968167][ T9482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.968182][ T9482] RIP: 0033:0x7ffac2b8ebe9
[  130.968196][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.968210][ T9482] RSP: 002b:00007ffac3a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.968229][ T9482] RAX: ffffffffffffffda RBX: 00007ffac2db6180 RCX: 00007ffac2b8ebe9
[  130.968242][ T9482] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  130.968252][ T9482] RBP: 00007ffac3a37090 R08: 0000000000000000 R09: 0000000000000000
[  130.968261][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.968272][ T9482] R13: 00007ffac2db6218 R14: 00007ffac2db6180 R15: 00007ffe9ba98ac8
[  130.968291][ T9482]  </TASK>
[  130.969817][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  131.063606][ T9423] hsr0 speed is unknown, defaulting to 1000
[  131.069334][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  131.096722][ T9423] lo speed is unknown, defaulting to 1000
[  131.550852][ T9505] netlink: 'syz.3.1066': attribute type 1 has an invalid length.
[  132.301537][ T9537] lo speed is unknown, defaulting to 1000
[  132.519825][ T9552] FAULT_INJECTION: forcing a failure.
[  132.519825][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  132.527445][ T9537] hsr0 speed is unknown, defaulting to 1000
[  132.556405][ T9537] lo speed is unknown, defaulting to 1000
[  132.558856][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.0.1076 Not tainted syzkaller #0 PREEMPT(full) 
[  132.558881][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  132.558892][ T9552] Call Trace:
[  132.558899][ T9552]  <TASK>
[  132.558905][ T9552]  dump_stack_lvl+0x189/0x250
[  132.558931][ T9552]  ? __pfx____ratelimit+0x10/0x10
[  132.558955][ T9552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.558974][ T9552]  ? __pfx__printk+0x10/0x10
[  132.558994][ T9552]  ? __might_fault+0xb0/0x130
[  132.559030][ T9552]  ? rcu_is_watching+0x15/0xb0
[  132.559050][ T9552]  should_fail_ex+0x414/0x560
[  132.559075][ T9552]  _copy_from_user+0x2d/0xb0
[  132.559095][ T9552]  do_ipv6_setsockopt+0x23e/0x2eb0
[  132.559120][ T9552]  ? aa_label_sk_perm+0x4cd/0x630
[  132.559147][ T9552]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  132.559169][ T9552]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  132.559192][ T9552]  ? get_pid_task+0x20/0x1f0
[  132.559211][ T9552]  ? get_pid_task+0x20/0x1f0
[  132.559232][ T9552]  ? rcu_is_watching+0x15/0xb0
[  132.559248][ T9552]  ? lock_release+0x4b/0x3e0
[  132.559271][ T9552]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  132.559290][ T9552]  ? security_file_permission+0x75/0x290
[  132.559313][ T9552]  ? __pfx___might_resched+0x10/0x10
[  132.559330][ T9552]  ? lock_release+0x4b/0x3e0
[  132.559351][ T9552]  ? vfs_write+0x956/0xb30
[  132.559375][ T9552]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  132.559401][ T9552]  ? aa_sk_perm+0x81e/0x950
[  132.559423][ T9552]  ? rcu_is_watching+0x15/0xb0
[  132.559439][ T9552]  ? __pfx_aa_sk_perm+0x10/0x10
[  132.559460][ T9552]  ? lock_release+0x4b/0x3e0
[  132.559482][ T9552]  ? aa_sock_opt_perm+0xff/0x1b0
[  132.559499][ T9552]  ipv6_setsockopt+0x59/0x170
[  132.559520][ T9552]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  132.559544][ T9552]  do_sock_setsockopt+0x179/0x1b0
[  132.559563][ T9552]  __x64_sys_setsockopt+0x13f/0x1b0
[  132.559581][ T9552]  do_syscall_64+0xfa/0x3b0
[  132.559598][ T9552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.559614][ T9552]  ? clear_bhb_loop+0x60/0xb0
[  132.559632][ T9552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.559648][ T9552] RIP: 0033:0x7f520e18ebe9
[  132.559664][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.559678][ T9552] RSP: 002b:00007f520efdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  132.559698][ T9552] RAX: ffffffffffffffda RBX: 00007f520e3b5fa0 RCX: 00007f520e18ebe9
[  132.559711][ T9552] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[  132.559721][ T9552] RBP: 00007f520efdf090 R08: 0000000000000020 R09: 0000000000000000
[  132.559731][ T9552] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  132.559742][ T9552] R13: 00007f520e3b6038 R14: 00007f520e3b5fa0 R15: 00007ffee29d1028
[  132.559761][ T9552]  </TASK>
[  132.961488][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.968336][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.049374][ T9558] IPVS: Scheduler module ip_vs_ not found
[  133.152731][ T9570] macvlan2: entered allmulticast mode
[  133.172797][ T9570] veth1_vlan: entered allmulticast mode
[  133.199276][ T9570] veth1_vlan: left allmulticast mode
[  133.325094][ T9578] macvlan2: entered allmulticast mode
[  133.371793][ T9578] veth1_vlan: entered allmulticast mode
[  133.418109][ T9578] veth1_vlan: left allmulticast mode
[  133.573704][ T9584] lo speed is unknown, defaulting to 1000
[  133.703774][ T9594] __nla_validate_parse: 3 callbacks suppressed
[  133.703791][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'.
[  133.720863][ T9584] hsr0 speed is unknown, defaulting to 1000
[  133.728244][ T9584] lo speed is unknown, defaulting to 1000
[  133.786791][ T9602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1087'.
[  133.830865][ T9602] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  133.950344][ T9612] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1089'.
[  134.427068][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'.
[  134.452841][ T9641] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  134.463444][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'.
[  134.699388][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'.
[  134.781664][ T9656] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  134.988701][ T9669] lo speed is unknown, defaulting to 1000
[  135.238604][ T9669] hsr0 speed is unknown, defaulting to 1000
[  135.249823][ T9680] lo speed is unknown, defaulting to 1000
[  135.268691][ T9669] lo speed is unknown, defaulting to 1000
[  135.437644][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'.
[  135.618493][ T9680] hsr0 speed is unknown, defaulting to 1000
[  135.625280][ T9680] lo speed is unknown, defaulting to 1000
[  135.739729][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'.
[  135.763163][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'.
[  135.792566][ T9703] FAULT_INJECTION: forcing a failure.
[  135.792566][ T9703] name failslab, interval 1, probability 0, space 0, times 0
[  135.807897][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.2.1113 Not tainted syzkaller #0 PREEMPT(full) 
[  135.807919][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  135.807929][ T9703] Call Trace:
[  135.807936][ T9703]  <TASK>
[  135.807942][ T9703]  dump_stack_lvl+0x189/0x250
[  135.807966][ T9703]  ? __pfx____ratelimit+0x10/0x10
[  135.807989][ T9703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.808008][ T9703]  ? __pfx__printk+0x10/0x10
[  135.808032][ T9703]  ? __pfx___might_resched+0x10/0x10
[  135.808048][ T9703]  ? lock_acquire+0x5f/0x360
[  135.808072][ T9703]  should_fail_ex+0x414/0x560
[  135.808096][ T9703]  should_failslab+0xa8/0x100
[  135.808119][ T9703]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  135.808141][ T9703]  ? __alloc_skb+0x112/0x2d0
[  135.808158][ T9703]  __alloc_skb+0x112/0x2d0
[  135.808174][ T9703]  netlink_ack+0x146/0xa50
[  135.808196][ T9703]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  135.808227][ T9703]  ? __netlink_lookup+0xbd/0x810
[  135.808242][ T9703]  ? rcu_is_watching+0x15/0xb0
[  135.808260][ T9703]  ? rcu_is_watching+0x15/0xb0
[  135.808280][ T9703]  netlink_rcv_skb+0x28c/0x470
[  135.808303][ T9703]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  135.808327][ T9703]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.808360][ T9703]  netlink_unicast+0x82c/0x9e0
[  135.808385][ T9703]  ? __pfx_netlink_unicast+0x10/0x10
[  135.808407][ T9703]  ? netlink_sendmsg+0x642/0xb30
[  135.808421][ T9703]  ? skb_put+0x11b/0x210
[  135.808438][ T9703]  netlink_sendmsg+0x805/0xb30
[  135.808457][ T9703]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.808474][ T9703]  ? aa_sock_msg_perm+0xf1/0x1d0
[  135.808491][ T9703]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.808515][ T9703]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.808531][ T9703]  __sock_sendmsg+0x21c/0x270
[  135.808554][ T9703]  ____sys_sendmsg+0x505/0x830
[  135.808573][ T9703]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.808595][ T9703]  ? import_iovec+0x74/0xa0
[  135.808615][ T9703]  ___sys_sendmsg+0x21f/0x2a0
[  135.808634][ T9703]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.808667][ T9703]  ? __fget_files+0x2a/0x420
[  135.808682][ T9703]  ? __fget_files+0x3a0/0x420
[  135.808701][ T9703]  __x64_sys_sendmsg+0x19b/0x260
[  135.808720][ T9703]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  135.808742][ T9703]  ? __pfx_ksys_write+0x10/0x10
[  135.808762][ T9703]  ? rcu_is_watching+0x15/0xb0
[  135.808781][ T9703]  ? rcu_is_watching+0x15/0xb0
[  135.808798][ T9703]  do_syscall_64+0xfa/0x3b0
[  135.808814][ T9703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.808830][ T9703]  ? clear_bhb_loop+0x60/0xb0
[  135.808849][ T9703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.808865][ T9703] RIP: 0033:0x7fdab458ebe9
[  135.808881][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.808897][ T9703] RSP: 002b:00007fdab5366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.808916][ T9703] RAX: ffffffffffffffda RBX: 00007fdab47b6180 RCX: 00007fdab458ebe9
[  135.808928][ T9703] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  135.808939][ T9703] RBP: 00007fdab5366090 R08: 0000000000000000 R09: 0000000000000000
[  135.808951][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.808961][ T9703] R13: 00007fdab47b6218 R14: 00007fdab47b6180 R15: 00007ffffe29d568
[  135.808981][ T9703]  </TASK>
[  136.324653][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'.
[  136.473895][ T9727] vlan0: entered promiscuous mode
[  136.574685][ T9736] lo speed is unknown, defaulting to 1000
[  136.750190][ T9736] hsr0 speed is unknown, defaulting to 1000
[  136.757193][ T9736] lo speed is unknown, defaulting to 1000
[  137.101901][ T9767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.153352][ T9765] tipc: Disabling bearer <eth:syzkaller0>
[  137.360503][ T9771] lo speed is unknown, defaulting to 1000
[  137.659402][ T9771] hsr0 speed is unknown, defaulting to 1000
[  137.700013][ T9771] lo speed is unknown, defaulting to 1000
[  138.101443][ T9806] FAULT_INJECTION: forcing a failure.
[  138.101443][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.117813][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.0.1141 Not tainted syzkaller #0 PREEMPT(full) 
[  138.117839][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  138.117849][ T9806] Call Trace:
[  138.117856][ T9806]  <TASK>
[  138.117862][ T9806]  dump_stack_lvl+0x189/0x250
[  138.117886][ T9806]  ? __pfx____ratelimit+0x10/0x10
[  138.117909][ T9806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.117928][ T9806]  ? __pfx__printk+0x10/0x10
[  138.117952][ T9806]  ? rcu_is_watching+0x15/0xb0
[  138.117971][ T9806]  should_fail_ex+0x414/0x560
[  138.117993][ T9806]  _copy_to_user+0x31/0xb0
[  138.118013][ T9806]  simple_read_from_buffer+0xe1/0x170
[  138.118039][ T9806]  proc_fail_nth_read+0x1b3/0x220
[  138.118059][ T9806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.118079][ T9806]  ? rw_verify_area+0x2a6/0x4d0
[  138.118099][ T9806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  138.118118][ T9806]  vfs_read+0x1fd/0xa30
[  138.118137][ T9806]  ? fdget_pos+0x247/0x320
[  138.118154][ T9806]  ? __pfx___mutex_lock+0x10/0x10
[  138.118179][ T9806]  ? __pfx_vfs_read+0x10/0x10
[  138.118202][ T9806]  ? __fget_files+0x3a0/0x420
[  138.118217][ T9806]  ? __fget_files+0x2a/0x420
[  138.118235][ T9806]  ksys_read+0x145/0x250
[  138.118256][ T9806]  ? __pfx_ksys_read+0x10/0x10
[  138.118275][ T9806]  ? rcu_is_watching+0x15/0xb0
[  138.118291][ T9806]  ? rcu_is_watching+0x15/0xb0
[  138.118307][ T9806]  do_syscall_64+0xfa/0x3b0
[  138.118323][ T9806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.118339][ T9806]  ? clear_bhb_loop+0x60/0xb0
[  138.118357][ T9806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.118374][ T9806] RIP: 0033:0x7f520e18d5fc
[  138.118389][ T9806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  138.118405][ T9806] RSP: 002b:00007f520ef9d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  138.118425][ T9806] RAX: ffffffffffffffda RBX: 00007f520e3b6180 RCX: 00007f520e18d5fc
[  138.118438][ T9806] RDX: 000000000000000f RSI: 00007f520ef9d0a0 RDI: 0000000000000006
[  138.118449][ T9806] RBP: 00007f520ef9d090 R08: 0000000000000000 R09: 0000000000000000
[  138.118460][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.118471][ T9806] R13: 00007f520e3b6218 R14: 00007f520e3b6180 R15: 00007ffee29d1028
[  138.118490][ T9806]  </TASK>
[  138.446426][ T9813] lo speed is unknown, defaulting to 1000
[  138.614772][ T9818] veth1_vlan: left allmulticast mode
[  138.628034][ T9818] macvlan2: left allmulticast mode
[  138.641754][ T9818] geneve2: left promiscuous mode
[  138.648834][ T5997] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.666289][ T9813] hsr0 speed is unknown, defaulting to 1000
[  138.675590][ T5997] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.691997][ T5997] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.703717][ T9813] lo speed is unknown, defaulting to 1000
[  138.716114][ T5997] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.997539][ T9823] __nla_validate_parse: 8 callbacks suppressed
[  138.997559][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'.
[  139.013852][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'.
[  140.023333][ T9751] Set syz1 is full, maxelem 65536 reached
[  140.067324][ T9855] siw: device registration error -23
[  140.291361][ T9874] tipc: Started in network mode
[  140.297167][ T9874] tipc: Node identity 080211, cluster identity 4711
[  140.312899][ T9874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.322068][ T9874] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  140.330024][ T9874] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  140.430255][ T9879] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1170'.
[  140.445687][ T9874] tipc: Resetting bearer <eth:syzkaller0>
[  140.503905][ T9879] lo speed is unknown, defaulting to 1000
[  140.535007][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'.
[  140.678202][ T9879] hsr0 speed is unknown, defaulting to 1000
[  140.685741][ T9879] lo speed is unknown, defaulting to 1000
[  140.756132][ T9901] macvlan2: entered allmulticast mode
[  140.763570][ T9901] veth1_vlan: entered allmulticast mode
[  140.771742][ T9901] veth1_vlan: left allmulticast mode
[  140.906723][ T9910] FAULT_INJECTION: forcing a failure.
[  140.906723][ T9910] name failslab, interval 1, probability 0, space 0, times 0
[  140.931477][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.3.1182 Not tainted syzkaller #0 PREEMPT(full) 
[  140.931502][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  140.931512][ T9910] Call Trace:
[  140.931519][ T9910]  <TASK>
[  140.931527][ T9910]  dump_stack_lvl+0x189/0x250
[  140.931551][ T9910]  ? __pfx____ratelimit+0x10/0x10
[  140.931575][ T9910]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.931593][ T9910]  ? __pfx__printk+0x10/0x10
[  140.931616][ T9910]  ? fs_reclaim_acquire+0x7d/0x100
[  140.931639][ T9910]  ? __pfx___might_resched+0x10/0x10
[  140.931653][ T9910]  ? lock_acquire+0x5f/0x360
[  140.931675][ T9910]  should_fail_ex+0x414/0x560
[  140.931698][ T9910]  should_failslab+0xa8/0x100
[  140.931721][ T9910]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  140.931742][ T9910]  ? __d_alloc+0x36/0x7a0
[  140.931759][ T9910]  __d_alloc+0x36/0x7a0
[  140.931776][ T9910]  d_alloc_pseudo+0x21/0xc0
[  140.931791][ T9910]  alloc_file_pseudo+0xcc/0x210
[  140.931808][ T9910]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  140.931824][ T9910]  ? rcu_is_watching+0x15/0xb0
[  140.931842][ T9910]  ? rcu_is_watching+0x15/0xb0
[  140.931857][ T9910]  ? lock_release+0x4b/0x3e0
[  140.931880][ T9910]  anon_inode_getfile+0xc5/0x1a0
[  140.931898][ T9910]  bpf_link_prime+0xfc/0x220
[  140.931917][ T9910]  bpf_raw_tp_link_attach+0x49a/0x6c0
[  140.931932][ T9910]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  140.931949][ T9910]  ? __fget_files+0x2a/0x420
[  140.931963][ T9910]  bpf_raw_tracepoint_open+0x1b2/0x220
[  140.931983][ T9910]  __sys_bpf+0x75a/0x870
[  140.931999][ T9910]  ? __pfx___sys_bpf+0x10/0x10
[  140.932019][ T9910]  ? ksys_write+0x22a/0x250
[  140.932036][ T9910]  ? __pfx_ksys_write+0x10/0x10
[  140.932051][ T9910]  ? rcu_is_watching+0x15/0xb0
[  140.932067][ T9910]  __x64_sys_bpf+0x7c/0x90
[  140.932084][ T9910]  do_syscall_64+0xfa/0x3b0
[  140.932096][ T9910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.932109][ T9910]  ? clear_bhb_loop+0x60/0xb0
[  140.932124][ T9910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.932137][ T9910] RIP: 0033:0x7f623718ebe9
[  140.932149][ T9910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.932162][ T9910] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  140.932178][ T9910] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  140.932188][ T9910] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011
[  140.932197][ T9910] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  140.932205][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.932214][ T9910] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  140.932229][ T9910]  </TASK>
[  141.347840][   T24] tipc: Node number set to 134353152
[  141.386375][ T9926] IPv6: Can't replace route, no match found
[  141.570837][ T9934] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1192'.
[  141.625602][ T9940] ip6tnl3: entered allmulticast mode
[  141.636062][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'.
[  141.686045][ T9934] lo speed is unknown, defaulting to 1000
[  141.981797][ T9970] macvlan2: entered allmulticast mode
[  141.994640][ T9970] veth1_vlan: entered allmulticast mode
[  142.002516][ T9970] veth1_vlan: left allmulticast mode
[  142.020762][ T9934] hsr0 speed is unknown, defaulting to 1000
[  142.021424][ T9968] lo speed is unknown, defaulting to 1000
[  142.029635][ T9934] lo speed is unknown, defaulting to 1000
[  142.209207][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'.
[  142.223597][ T9968] hsr0 speed is unknown, defaulting to 1000
[  142.313213][ T9968] lo speed is unknown, defaulting to 1000
[  142.745408][T10023] macvlan2: entered allmulticast mode
[  142.785439][T10012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1214'.
[  142.794715][T10023] veth1_vlan: entered allmulticast mode
[  142.796032][T10023] bridge0: port 4(macvlan2) entered blocking state
[  142.813918][T10023] bridge0: port 4(macvlan2) entered disabled state
[  142.835626][T10023] macvlan2: entered promiscuous mode
[  142.879517][T10023] bridge0: port 4(macvlan2) entered blocking state
[  142.886385][T10023] bridge0: port 4(macvlan2) entered forwarding state
[  142.904820][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'.
[  142.972256][T10012] ip6gretap0: entered promiscuous mode
[  142.988345][T10012] ip6gretap0: entered allmulticast mode
[  143.130458][T10032] lo speed is unknown, defaulting to 1000
[  143.329654][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'.
[  143.500944][T10081] netlink: 'syz.4.1227': attribute type 9 has an invalid length.
[  143.558556][T10081] netlink: 'syz.4.1227': attribute type 6 has an invalid length.
[  143.649198][T10072] lo speed is unknown, defaulting to 1000
[  143.657377][T10086] ip6gretap0: left promiscuous mode
[  143.662886][T10086] ip6gretap0: left allmulticast mode
[  143.675576][T10086] ip6tnl1: left promiscuous mode
[  143.688091][T10086] ip6tnl1: left allmulticast mode
[  143.721212][T10086] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  143.729036][T10086] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  143.752081][ T5987] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.765889][ T5987] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.815435][ T5987] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.834672][ T5987] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.884208][T10032] hsr0 speed is unknown, defaulting to 1000
[  143.891188][T10032] lo speed is unknown, defaulting to 1000
[  143.904106][T10072] hsr0 speed is unknown, defaulting to 1000
[  143.938398][T10072] lo speed is unknown, defaulting to 1000
[  144.432709][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'.
[  144.793854][T10113] lo speed is unknown, defaulting to 1000
[  144.842229][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'.
[  144.918418][T10128] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  145.004972][T10131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.067489][T10131] syzkaller0: entered promiscuous mode
[  145.081727][T10131] syzkaller0: entered allmulticast mode
[  145.103685][T10113] hsr0 speed is unknown, defaulting to 1000
[  145.103756][T10118] lo speed is unknown, defaulting to 1000
[  145.112053][T10113] lo speed is unknown, defaulting to 1000
[  145.156319][T10131] tipc: Resetting bearer <eth:syzkaller0>
[  145.230812][T10140] IPv6: sit1: Disabled Multicast RS
[  145.346669][T10118] hsr0 speed is unknown, defaulting to 1000
[  145.353968][T10118] lo speed is unknown, defaulting to 1000
[  145.567315][T10130] tipc: Resetting bearer <eth:syzkaller0>
[  145.593518][T10130] tipc: Disabling bearer <eth:syzkaller0>
[  145.646503][T10156] lo speed is unknown, defaulting to 1000
[  145.749633][T10162] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1252'.
[  145.785913][T10164] veth0_macvtap: entered allmulticast mode
[  145.847697][T10156] hsr0 speed is unknown, defaulting to 1000
[  145.855523][T10156] lo speed is unknown, defaulting to 1000
[  145.908223][T10168] macvlan2: entered allmulticast mode
[  145.914778][T10168] veth1_vlan: entered allmulticast mode
[  145.957408][T10168] veth1_vlan: left allmulticast mode
[  146.211587][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'.
[  146.246732][T10183] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1260'.
[  146.314290][T10185] lo speed is unknown, defaulting to 1000
[  146.351431][T10180] netlink: 'syz.0.1257': attribute type 10 has an invalid length.
[  146.391273][T10180] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  146.614764][T10202] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1262'.
[  146.653628][T10202] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1262'.
[  146.666399][T10204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1264'.
[  146.695797][T10202] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1262'.
[  146.749166][T10204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1264'.
[  146.898871][T10185] hsr0 speed is unknown, defaulting to 1000
[  146.960880][T10185] lo speed is unknown, defaulting to 1000
[  147.476046][T10249] lo speed is unknown, defaulting to 1000
[  147.551993][T10249] hsr0 speed is unknown, defaulting to 1000
[  147.559071][T10249] lo speed is unknown, defaulting to 1000
[  147.653417][T10264] lo speed is unknown, defaulting to 1000
[  147.884500][T10281] vlan0: left promiscuous mode
[  147.913889][T10281] ip6erspan0: left promiscuous mode
[  147.946005][T10281] bond1: left promiscuous mode
[  148.035814][T10264] hsr0 speed is unknown, defaulting to 1000
[  148.048410][T10264] lo speed is unknown, defaulting to 1000
[  148.077374][T10292] netlink: 'syz.4.1288': attribute type 1 has an invalid length.
[  148.088872][T10278] lo speed is unknown, defaulting to 1000
[  148.182204][T10292] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.316984][T10278] hsr0 speed is unknown, defaulting to 1000
[  148.328642][T10278] lo speed is unknown, defaulting to 1000
[  148.761042][T10327] macvlan2: entered allmulticast mode
[  148.766547][T10327] veth1_vlan: entered allmulticast mode
[  148.808609][T10327] veth1_vlan: left allmulticast mode
[  148.883152][T10329] lo speed is unknown, defaulting to 1000
[  148.908484][T10340] FAULT_INJECTION: forcing a failure.
[  148.908484][T10340] name failslab, interval 1, probability 0, space 0, times 0
[  148.963615][T10340] CPU: 0 UID: 0 PID: 10340 Comm: syz.3.1304 Not tainted syzkaller #0 PREEMPT(full) 
[  148.963640][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.963651][T10340] Call Trace:
[  148.963658][T10340]  <TASK>
[  148.963665][T10340]  dump_stack_lvl+0x189/0x250
[  148.963689][T10340]  ? __pfx____ratelimit+0x10/0x10
[  148.963713][T10340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.963732][T10340]  ? __pfx__printk+0x10/0x10
[  148.963754][T10340]  ? __pfx___might_resched+0x10/0x10
[  148.963771][T10340]  ? lock_acquire+0x5f/0x360
[  148.963796][T10340]  should_fail_ex+0x414/0x560
[  148.963819][T10340]  should_failslab+0xa8/0x100
[  148.963843][T10340]  kmem_cache_alloc_noprof+0x73/0x3c0
[  148.963864][T10340]  ? copy_fs_struct+0x4f/0x270
[  148.963885][T10340]  copy_fs_struct+0x4f/0x270
[  148.963904][T10340]  ksys_unshare+0x3a2/0x8c0
[  148.963925][T10340]  ? ksys_write+0x22a/0x250
[  148.963956][T10340]  ? __pfx_ksys_unshare+0x10/0x10
[  148.963975][T10340]  ? __pfx_ksys_write+0x10/0x10
[  148.964024][T10340]  ? rcu_is_watching+0x15/0xb0
[  148.964045][T10340]  __x64_sys_unshare+0x38/0x50
[  148.964065][T10340]  do_syscall_64+0xfa/0x3b0
[  148.964082][T10340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.964099][T10340]  ? clear_bhb_loop+0x60/0xb0
[  148.964118][T10340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.964135][T10340] RIP: 0033:0x7f623718ebe9
[  148.964150][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.964166][T10340] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  148.964186][T10340] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  148.964199][T10340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  148.964210][T10340] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  148.964222][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.964232][T10340] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  148.964253][T10340]  </TASK>
[  149.316645][T10341] netlink: 'syz.4.1298': attribute type 3 has an invalid length.
[  149.461351][T10329] hsr0 speed is unknown, defaulting to 1000
[  149.471320][T10329] lo speed is unknown, defaulting to 1000
[  149.670372][T10358] bridge0: port 4(macvlan2) entered disabled state
[  149.677062][T10358] bridge0: port 3(netdevsim2) entered disabled state
[  149.683922][T10358] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.691418][T10358] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.709374][T10374] FAULT_INJECTION: forcing a failure.
[  149.709374][T10374] name failslab, interval 1, probability 0, space 0, times 0
[  149.724406][T10374] CPU: 1 UID: 0 PID: 10374 Comm: syz.1.1317 Not tainted syzkaller #0 PREEMPT(full) 
[  149.724429][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  149.724439][T10374] Call Trace:
[  149.724445][T10374]  <TASK>
[  149.724453][T10374]  dump_stack_lvl+0x189/0x250
[  149.724477][T10374]  ? __pfx____ratelimit+0x10/0x10
[  149.724501][T10374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.724519][T10374]  ? __pfx__printk+0x10/0x10
[  149.724541][T10374]  ? fs_reclaim_acquire+0x7d/0x100
[  149.724565][T10374]  ? __pfx___might_resched+0x10/0x10
[  149.724579][T10374]  ? lock_acquire+0x5f/0x360
[  149.724613][T10374]  should_fail_ex+0x414/0x560
[  149.724637][T10374]  should_failslab+0xa8/0x100
[  149.724659][T10374]  kmem_cache_alloc_noprof+0x73/0x3c0
[  149.724678][T10374]  ? create_new_namespaces+0x31/0x720
[  149.724703][T10374]  create_new_namespaces+0x31/0x720
[  149.724727][T10374]  ? apparmor_capable+0x137/0x1b0
[  149.724746][T10374]  ? bpf_lsm_capable+0x9/0x20
[  149.724767][T10374]  ? security_capable+0x7e/0x2e0
[  149.724793][T10374]  unshare_nsproxy_namespaces+0x11c/0x170
[  149.724811][T10374]  ksys_unshare+0x4c8/0x8c0
[  149.724834][T10374]  ? __pfx_ksys_unshare+0x10/0x10
[  149.724853][T10374]  ? __pfx_ksys_write+0x10/0x10
[  149.724872][T10374]  ? rcu_is_watching+0x15/0xb0
[  149.724891][T10374]  __x64_sys_unshare+0x38/0x50
[  149.724910][T10374]  do_syscall_64+0xfa/0x3b0
[  149.724925][T10374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.724941][T10374]  ? clear_bhb_loop+0x60/0xb0
[  149.724957][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.724972][T10374] RIP: 0033:0x7f113ff8ebe9
[  149.724986][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.725001][T10374] RSP: 002b:00007f1140e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  149.725019][T10374] RAX: ffffffffffffffda RBX: 00007f11401b5fa0 RCX: 00007f113ff8ebe9
[  149.725032][T10374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  149.725042][T10374] RBP: 00007f1140e9d090 R08: 0000000000000000 R09: 0000000000000000
[  149.725053][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.725062][T10374] R13: 00007f11401b6038 R14: 00007f11401b5fa0 R15: 00007ffcf7250498
[  149.725082][T10374]  </TASK>
[  150.030622][T10358] xfrm1: left allmulticast mode
[  150.037042][T10358] ip6tnl2: left promiscuous mode
[  150.042923][T10358] ip6tnl2: left allmulticast mode
[  150.051814][T10358] gretap1: left allmulticast mode
[  150.061500][T10358] veth3: left allmulticast mode
[  150.069067][T10358] veth1_vlan: left allmulticast mode
[  150.083085][ T5996] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.108596][ T5996] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.201126][T10377] __nla_validate_parse: 14 callbacks suppressed
[  150.201147][T10377] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1316'.
[  150.226261][T10366] lo speed is unknown, defaulting to 1000
[  150.262908][T10388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1319'.
[  150.275494][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1319'.
[  150.288946][ T5996] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.301384][ T5996] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.339652][T10366] hsr0 speed is unknown, defaulting to 1000
[  150.346511][T10366] lo speed is unknown, defaulting to 1000
[  150.510664][T10405] netlink: 'syz.1.1327': attribute type 5 has an invalid length.
[  150.545016][T10405] netlink: 'syz.1.1327': attribute type 7 has an invalid length.
[  150.624189][T10405] : entered promiscuous mode
[  150.777252][T10420] lo speed is unknown, defaulting to 1000
[  151.139054][T10420] hsr0 speed is unknown, defaulting to 1000
[  151.161484][T10420] lo speed is unknown, defaulting to 1000
[  151.249394][T10432] lo speed is unknown, defaulting to 1000
[  151.271115][T10460] macvlan2: entered allmulticast mode
[  151.302834][T10460] veth1_vlan: entered allmulticast mode
[  151.323109][T10460] veth1_vlan: left allmulticast mode
[  151.492305][T10432] hsr0 speed is unknown, defaulting to 1000
[  151.510833][T10432] lo speed is unknown, defaulting to 1000
[  151.590942][T10471] lo speed is unknown, defaulting to 1000
[  151.708059][T10486] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1343'.
[  151.825026][T10471] hsr0 speed is unknown, defaulting to 1000
[  151.832140][T10471] lo speed is unknown, defaulting to 1000
[  151.838770][T10491] FAULT_INJECTION: forcing a failure.
[  151.838770][T10491] name failslab, interval 1, probability 0, space 0, times 0
[  151.864973][T10491] CPU: 1 UID: 0 PID: 10491 Comm: syz.3.1344 Not tainted syzkaller #0 PREEMPT(full) 
[  151.864998][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.865008][T10491] Call Trace:
[  151.865015][T10491]  <TASK>
[  151.865022][T10491]  dump_stack_lvl+0x189/0x250
[  151.865047][T10491]  ? __pfx____ratelimit+0x10/0x10
[  151.865070][T10491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.865089][T10491]  ? __pfx__printk+0x10/0x10
[  151.865111][T10491]  ? ida_alloc_range+0x7a6/0x840
[  151.865135][T10491]  ? __pfx___might_resched+0x10/0x10
[  151.865153][T10491]  ? lock_acquire+0x5f/0x360
[  151.865175][T10491]  should_fail_ex+0x414/0x560
[  151.865199][T10491]  should_failslab+0xa8/0x100
[  151.865223][T10491]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[  151.865246][T10491]  ? register_pidns_sysctls+0x4d/0x1f0
[  151.865269][T10491]  kmemdup_noprof+0x2b/0x70
[  151.865287][T10491]  register_pidns_sysctls+0x4d/0x1f0
[  151.865310][T10491]  copy_pid_ns+0x5a6/0xa10
[  151.865335][T10491]  ? __pfx_copy_pid_ns+0x10/0x10
[  151.865359][T10491]  ? copy_mnt_ns+0x8a/0x880
[  151.865383][T10491]  ? copy_utsname+0x97/0x420
[  151.865404][T10491]  create_new_namespaces+0x2b8/0x720
[  151.865430][T10491]  ? security_capable+0x7e/0x2e0
[  151.865454][T10491]  unshare_nsproxy_namespaces+0x11c/0x170
[  151.865480][T10491]  ksys_unshare+0x4c8/0x8c0
[  151.865503][T10491]  ? __pfx_ksys_unshare+0x10/0x10
[  151.865522][T10491]  ? __pfx_ksys_write+0x10/0x10
[  151.865542][T10491]  ? rcu_is_watching+0x15/0xb0
[  151.865563][T10491]  __x64_sys_unshare+0x38/0x50
[  151.865582][T10491]  do_syscall_64+0xfa/0x3b0
[  151.865597][T10491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.865614][T10491]  ? clear_bhb_loop+0x60/0xb0
[  151.865633][T10491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.865649][T10491] RIP: 0033:0x7f623718ebe9
[  151.865665][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.865680][T10491] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  151.865699][T10491] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  151.865712][T10491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  151.865723][T10491] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  151.865734][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.865744][T10491] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  151.865764][T10491]  </TASK>
[  152.294714][T10505] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1346'.
[  152.538585][T10500] lo speed is unknown, defaulting to 1000
[  152.608036][T10529] FAULT_INJECTION: forcing a failure.
[  152.608036][T10529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.615394][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1350'.
[  152.636583][T10514] vlan2: entered promiscuous mode
[  152.643404][T10514] bridge0: entered promiscuous mode
[  152.649687][T10529] CPU: 0 UID: 0 PID: 10529 Comm: syz.1.1352 Not tainted syzkaller #0 PREEMPT(full) 
[  152.649711][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  152.649721][T10529] Call Trace:
[  152.649728][T10529]  <TASK>
[  152.649739][T10529]  dump_stack_lvl+0x189/0x250
[  152.649763][T10529]  ? __pfx____ratelimit+0x10/0x10
[  152.649787][T10529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.649810][T10529]  ? __pfx__printk+0x10/0x10
[  152.649830][T10529]  ? __might_fault+0xb0/0x130
[  152.649856][T10529]  ? rcu_is_watching+0x15/0xb0
[  152.649875][T10529]  should_fail_ex+0x414/0x560
[  152.649898][T10529]  _copy_from_user+0x2d/0xb0
[  152.649918][T10529]  __sys_bpf+0x1ed/0x870
[  152.649940][T10529]  ? __pfx___sys_bpf+0x10/0x10
[  152.649967][T10529]  ? ksys_write+0x22a/0x250
[  152.649988][T10529]  ? __pfx_ksys_write+0x10/0x10
[  152.650008][T10529]  ? rcu_is_watching+0x15/0xb0
[  152.650027][T10529]  __x64_sys_bpf+0x7c/0x90
[  152.650047][T10529]  do_syscall_64+0xfa/0x3b0
[  152.650063][T10529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.650079][T10529]  ? clear_bhb_loop+0x60/0xb0
[  152.650097][T10529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.650113][T10529] RIP: 0033:0x7f113ff8ebe9
[  152.650128][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.650143][T10529] RSP: 002b:00007f1140e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  152.650162][T10529] RAX: ffffffffffffffda RBX: 00007f11401b5fa0 RCX: 00007f113ff8ebe9
[  152.650175][T10529] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011
[  152.650187][T10529] RBP: 00007f1140e9d090 R08: 0000000000000000 R09: 0000000000000000
[  152.650198][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.650208][T10529] R13: 00007f11401b6038 R14: 00007f11401b5fa0 R15: 00007ffcf7250498
[  152.650229][T10529]  </TASK>
[  152.910675][T10534] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  152.965027][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'.
[  153.000448][T10510] lo speed is unknown, defaulting to 1000
[  153.006408][T10500] hsr0 speed is unknown, defaulting to 1000
[  153.017034][T10500] lo speed is unknown, defaulting to 1000
[  153.025061][T10514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1350'.
[  153.132492][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'.
[  153.243678][T10551] netlink: 'syz.0.1360': attribute type 39 has an invalid length.
[  153.255875][T10556] netlink: 'syz.3.1362': attribute type 1 has an invalid length.
[  153.261752][T10554] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  153.272260][T10554] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  153.276033][T10556] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1362'.
[  153.395758][T10510] hsr0 speed is unknown, defaulting to 1000
[  153.432621][T10510] lo speed is unknown, defaulting to 1000
[  154.457316][T10614] veth0_vlan: left promiscuous mode
[  154.464428][T10614] veth0_vlan: entered promiscuous mode
[  154.470721][T10614] veth0_vlan: entered allmulticast mode
[  154.584226][T10619] macvlan2: entered allmulticast mode
[  154.597269][T10619] veth1_vlan: entered allmulticast mode
[  154.617873][T10619] veth1_vlan: left allmulticast mode
[  154.724444][T10626] lo speed is unknown, defaulting to 1000
[  154.796265][T10633] xt_l2tp: unknown flags: 51
[  154.949064][T10626] hsr0 speed is unknown, defaulting to 1000
[  154.955988][T10626] lo speed is unknown, defaulting to 1000
[  155.019446][T10647] FAULT_INJECTION: forcing a failure.
[  155.019446][T10647] name failslab, interval 1, probability 0, space 0, times 0
[  155.044719][T10647] CPU: 1 UID: 0 PID: 10647 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) 
[  155.044743][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  155.044753][T10647] Call Trace:
[  155.044760][T10647]  <TASK>
[  155.044767][T10647]  dump_stack_lvl+0x189/0x250
[  155.044791][T10647]  ? __pfx____ratelimit+0x10/0x10
[  155.044812][T10647]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.044829][T10647]  ? __pfx__printk+0x10/0x10
[  155.044848][T10647]  ? fs_reclaim_acquire+0x7d/0x100
[  155.044872][T10647]  ? __pfx___might_resched+0x10/0x10
[  155.044889][T10647]  ? lock_acquire+0x5f/0x360
[  155.044913][T10647]  should_fail_ex+0x414/0x560
[  155.044937][T10647]  should_failslab+0xa8/0x100
[  155.044960][T10647]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  155.044983][T10647]  ? __d_alloc+0x36/0x7a0
[  155.045002][T10647]  __d_alloc+0x36/0x7a0
[  155.045021][T10647]  d_alloc_pseudo+0x21/0xc0
[  155.045039][T10647]  alloc_file_pseudo+0xcc/0x210
[  155.045058][T10647]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  155.045073][T10647]  ? rcu_is_watching+0x15/0xb0
[  155.045090][T10647]  ? rcu_is_watching+0x15/0xb0
[  155.045106][T10647]  ? lock_release+0x4b/0x3e0
[  155.045129][T10647]  anon_inode_getfile+0xc5/0x1a0
[  155.045148][T10647]  bpf_link_prime+0xfc/0x220
[  155.045168][T10647]  bpf_raw_tp_link_attach+0x49a/0x6c0
[  155.045194][T10647]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  155.045216][T10647]  ? __fget_files+0x2a/0x420
[  155.045235][T10647]  bpf_raw_tracepoint_open+0x1b2/0x220
[  155.045260][T10647]  __sys_bpf+0x75a/0x870
[  155.045281][T10647]  ? __pfx___sys_bpf+0x10/0x10
[  155.045306][T10647]  ? ksys_write+0x22a/0x250
[  155.045323][T10647]  ? __pfx_ksys_write+0x10/0x10
[  155.045338][T10647]  ? rcu_is_watching+0x15/0xb0
[  155.045357][T10647]  __x64_sys_bpf+0x7c/0x90
[  155.045376][T10647]  do_syscall_64+0xfa/0x3b0
[  155.045393][T10647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.045417][T10647]  ? clear_bhb_loop+0x60/0xb0
[  155.045437][T10647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.045454][T10647] RIP: 0033:0x7f113ff8ebe9
[  155.045469][T10647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.045485][T10647] RSP: 002b:00007f1140e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  155.045505][T10647] RAX: ffffffffffffffda RBX: 00007f11401b5fa0 RCX: 00007f113ff8ebe9
[  155.045518][T10647] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011
[  155.045528][T10647] RBP: 00007f1140e9d090 R08: 0000000000000000 R09: 0000000000000000
[  155.045538][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.045548][T10647] R13: 00007f11401b6038 R14: 00007f11401b5fa0 R15: 00007ffcf7250498
[  155.045601][T10647]  </TASK>
[  155.330859][T10650] lo speed is unknown, defaulting to 1000
[  155.375436][T10652] __nla_validate_parse: 7 callbacks suppressed
[  155.375455][T10652] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1397'.
[  155.493567][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1400'.
[  155.625692][T10659] macvlan5: entered allmulticast mode
[  155.638106][T10659] veth1_vlan: entered allmulticast mode
[  155.657503][T10659] veth1_vlan: left allmulticast mode
[  155.682231][T10650] hsr0 speed is unknown, defaulting to 1000
[  155.695615][T10650] lo speed is unknown, defaulting to 1000
[  155.808181][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'.
[  156.003546][T10675] macvlan2: entered allmulticast mode
[  156.017927][T10675] veth1_vlan: entered allmulticast mode
[  156.032995][T10675] veth1_vlan: left allmulticast mode
[  156.222248][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1410'.
[  156.295007][T10683] lo speed is unknown, defaulting to 1000
[  156.453704][T10711] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1417'.
[  156.521906][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'.
[  156.560919][T10719] netlink: 'syz.3.1418': attribute type 1 has an invalid length.
[  156.594623][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'.
[  156.636794][T10683] hsr0 speed is unknown, defaulting to 1000
[  156.645664][T10685] lo speed is unknown, defaulting to 1000
[  156.664042][T10724] netlink: 'syz.1.1419': attribute type 1 has an invalid length.
[  156.668917][T10683] lo speed is unknown, defaulting to 1000
[  156.673234][T10724] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1419'.
[  156.769877][T10685] hsr0 speed is unknown, defaulting to 1000
[  156.777303][T10685] lo speed is unknown, defaulting to 1000
[  156.992760][T10738] netlink: 'syz.4.1422': attribute type 1 has an invalid length.
[  157.022522][T10738] bond3: entered promiscuous mode
[  157.028034][T10738] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.045180][T10741] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1423'.
[  157.067335][T10738] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.075275][T10738] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  157.086146][T10738] bond3: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  157.098190][T10738] bond3: (slave vxcan5): making interface the new active one
[  157.105665][T10738] vxcan5: entered promiscuous mode
[  157.111678][T10738] bond3: (slave vxcan5): Enslaving as an active interface with an up link
[  157.358143][T10750] netlink: 'syz.4.1427': attribute type 4 has an invalid length.
[  157.385430][T10750] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1427'.
[  157.445704][T10754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.488595][T10754] tipc: Failed to remove unknown binding: 66,1,1/0:3698736800/3698736802
[  157.507867][T10754] tipc: Failed to remove unknown binding: 66,1,1/0:3698736800/3698736802
[  157.516454][T10754] tipc: Failed to remove unknown binding: 66,1,1/0:3698736800/3698736802
[  157.526664][ T5935] IPVS: starting estimator thread 0...
[  157.532521][T10750] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192)
[  157.620513][T10764] IPVS: using max 46 ests per chain, 110400 per kthread
[  157.794707][T10784] netlink: 'syz.4.1437': attribute type 12 has an invalid length.
[  157.843201][T10786] lo speed is unknown, defaulting to 1000
[  157.850372][T10789] FAULT_INJECTION: forcing a failure.
[  157.850372][T10789] name failslab, interval 1, probability 0, space 0, times 0
[  157.864054][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.1.1440 Not tainted syzkaller #0 PREEMPT(full) 
[  157.864078][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  157.864088][T10789] Call Trace:
[  157.864095][T10789]  <TASK>
[  157.864102][T10789]  dump_stack_lvl+0x189/0x250
[  157.864126][T10789]  ? __pfx____ratelimit+0x10/0x10
[  157.864150][T10789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.864168][T10789]  ? __pfx__printk+0x10/0x10
[  157.864192][T10789]  ? __pfx___might_resched+0x10/0x10
[  157.864208][T10789]  ? lock_acquire+0x5f/0x360
[  157.864229][T10789]  should_fail_ex+0x414/0x560
[  157.864253][T10789]  should_failslab+0xa8/0x100
[  157.864275][T10789]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  157.864304][T10789]  ? __d_alloc+0x36/0x7a0
[  157.864320][T10789]  ? rcu_is_watching+0x15/0xb0
[  157.864339][T10789]  __d_alloc+0x36/0x7a0
[  157.864356][T10789]  d_alloc_parallel+0xe5/0x15e0
[  157.864378][T10789]  ? __asan_memset+0x22/0x50
[  157.864397][T10789]  ? number+0xd18/0xf60
[  157.864417][T10789]  ? number+0x41/0xf60
[  157.864436][T10789]  ? __pfx_d_alloc_parallel+0x10/0x10
[  157.864454][T10789]  ? __d_lookup+0x66/0x780
[  157.864471][T10789]  ? rcu_is_watching+0x15/0xb0
[  157.864488][T10789]  ? __raw_spin_lock_init+0x45/0x100
[  157.864509][T10789]  ? __init_waitqueue_head+0xa9/0x150
[  157.864531][T10789]  __lookup_slow+0x116/0x3d0
[  157.864551][T10789]  ? __pfx___lookup_slow+0x10/0x10
[  157.864574][T10789]  ? d_lookup+0x8a/0xa0
[  157.864592][T10789]  ? lookup_noperm+0x112/0x220
[  157.864611][T10789]  simple_start_creating+0xfd/0x1e0
[  157.864628][T10789]  ? __pfx_simple_start_creating+0x10/0x10
[  157.864649][T10789]  start_creating+0x10f/0x180
[  157.864677][T10789]  __debugfs_create_file+0x79/0x4f0
[  157.864702][T10789]  debugfs_create_file_full+0x3f/0x60
[  157.864728][T10789]  ref_tracker_dir_debugfs+0x14e/0x270
[  157.864751][T10789]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  157.864789][T10789]  ? __raw_spin_lock_init+0x45/0x100
[  157.864810][T10789]  preinit_net+0x384/0x740
[  157.864835][T10789]  copy_net_ns+0x223/0x4d0
[  157.864855][T10789]  create_new_namespaces+0x3f3/0x720
[  157.864879][T10789]  ? security_capable+0x7e/0x2e0
[  157.864904][T10789]  unshare_nsproxy_namespaces+0x11c/0x170
[  157.864922][T10789]  ksys_unshare+0x4c8/0x8c0
[  157.864944][T10789]  ? __pfx_ksys_unshare+0x10/0x10
[  157.864963][T10789]  ? __pfx_ksys_write+0x10/0x10
[  157.864982][T10789]  ? rcu_is_watching+0x15/0xb0
[  157.865003][T10789]  __x64_sys_unshare+0x38/0x50
[  157.865022][T10789]  do_syscall_64+0xfa/0x3b0
[  157.865038][T10789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.865056][T10789]  ? clear_bhb_loop+0x60/0xb0
[  157.865074][T10789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.865091][T10789] RIP: 0033:0x7f113ff8ebe9
[  157.865107][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.865123][T10789] RSP: 002b:00007f1140e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  157.865142][T10789] RAX: ffffffffffffffda RBX: 00007f11401b5fa0 RCX: 00007f113ff8ebe9
[  157.865155][T10789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  157.865167][T10789] RBP: 00007f1140e9d090 R08: 0000000000000000 R09: 0000000000000000
[  157.865178][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  157.865189][T10789] R13: 00007f11401b6038 R14: 00007f11401b5fa0 R15: 00007ffcf7250498
[  157.865209][T10789]  </TASK>
[  158.286357][T10786] hsr0 speed is unknown, defaulting to 1000
[  158.293486][T10786] lo speed is unknown, defaulting to 1000
[  158.293964][T10789] lo speed is unknown, defaulting to 1000
[  158.369599][T10800] Bluetooth: MGMT ver 1.23
[  158.399127][T10789] hsr0 speed is unknown, defaulting to 1000
[  158.406003][T10789] lo speed is unknown, defaulting to 1000
[  158.655598][T10818] netlink: 'syz.3.1450': attribute type 303 has an invalid length.
[  158.810172][T10826] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  158.923484][T10835] netlink: 'syz.3.1454': attribute type 6 has an invalid length.
[  159.007497][T10834] macvlan3: entered allmulticast mode
[  159.042022][T10834] veth1_vlan: entered allmulticast mode
[  159.119068][T10834] veth1_vlan: left allmulticast mode
[  159.358494][T10856] FAULT_INJECTION: forcing a failure.
[  159.358494][T10856] name failslab, interval 1, probability 0, space 0, times 0
[  159.398090][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.2.1461 Not tainted syzkaller #0 PREEMPT(full) 
[  159.398117][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  159.398128][T10856] Call Trace:
[  159.398135][T10856]  <TASK>
[  159.398142][T10856]  dump_stack_lvl+0x189/0x250
[  159.398168][T10856]  ? __pfx____ratelimit+0x10/0x10
[  159.398191][T10856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.398222][T10856]  ? __pfx__printk+0x10/0x10
[  159.398244][T10856]  ? fs_reclaim_acquire+0x7d/0x100
[  159.398266][T10856]  ? rcu_is_watching+0x15/0xb0
[  159.398282][T10856]  ? __pfx___might_resched+0x10/0x10
[  159.398298][T10856]  ? lock_acquire+0x5f/0x360
[  159.398322][T10856]  should_fail_ex+0x414/0x560
[  159.398345][T10856]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  159.398370][T10856]  should_failslab+0xa8/0x100
[  159.398393][T10856]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  159.398415][T10856]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  159.398437][T10856]  ? alloc_inode+0x6a/0x1b0
[  159.398457][T10856]  ? __pfx_simple_start_creating+0x10/0x10
[  159.398473][T10856]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  159.398496][T10856]  alloc_inode+0x6a/0x1b0
[  159.398517][T10856]  new_inode+0x22/0x170
[  159.398539][T10856]  __debugfs_create_file+0x14d/0x4f0
[  159.398558][T10856]  debugfs_create_file_full+0x3f/0x60
[  159.398577][T10856]  ref_tracker_dir_debugfs+0x14e/0x270
[  159.398597][T10856]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  159.398623][T10856]  ? copy_net_ns+0x182/0x4d0
[  159.398643][T10856]  ? __raw_spin_lock_init+0x45/0x100
[  159.398659][T10856]  preinit_net+0x1fb/0x740
[  159.398677][T10856]  copy_net_ns+0x223/0x4d0
[  159.398696][T10856]  create_new_namespaces+0x3f3/0x720
[  159.398717][T10856]  ? security_capable+0x7e/0x2e0
[  159.398739][T10856]  unshare_nsproxy_namespaces+0x11c/0x170
[  159.398753][T10856]  ksys_unshare+0x4c8/0x8c0
[  159.398771][T10856]  ? __pfx_ksys_unshare+0x10/0x10
[  159.398786][T10856]  ? __pfx_ksys_write+0x10/0x10
[  159.398807][T10856]  __x64_sys_unshare+0x38/0x50
[  159.398822][T10856]  do_syscall_64+0xfa/0x3b0
[  159.398835][T10856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.398848][T10856]  ? clear_bhb_loop+0x60/0xb0
[  159.398862][T10856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.398875][T10856] RIP: 0033:0x7fdab458ebe9
[  159.398887][T10856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.398900][T10856] RSP: 002b:00007fdab53a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  159.398915][T10856] RAX: ffffffffffffffda RBX: 00007fdab47b5fa0 RCX: 00007fdab458ebe9
[  159.398925][T10856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  159.398934][T10856] RBP: 00007fdab53a8090 R08: 0000000000000000 R09: 0000000000000000
[  159.398942][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  159.398951][T10856] R13: 00007fdab47b6038 R14: 00007fdab47b5fa0 R15: 00007ffffe29d568
[  159.398967][T10856]  </TASK>
[  159.398977][T10856] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880797e49f0'
[  159.731593][T10856] lo speed is unknown, defaulting to 1000
[  159.940248][T10856] hsr0 speed is unknown, defaulting to 1000
[  159.949874][T10856] lo speed is unknown, defaulting to 1000
[  160.102134][T10887] bond0: (slave netdevsim0): Releasing backup interface
[  160.651674][T10920] __nla_validate_parse: 6 callbacks suppressed
[  160.651693][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'.
[  160.863861][T10926] FAULT_INJECTION: forcing a failure.
[  160.863861][T10926] name failslab, interval 1, probability 0, space 0, times 0
[  160.895127][T10926] CPU: 1 UID: 0 PID: 10926 Comm: syz.3.1483 Not tainted syzkaller #0 PREEMPT(full) 
[  160.895160][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.895171][T10926] Call Trace:
[  160.895178][T10926]  <TASK>
[  160.895186][T10926]  dump_stack_lvl+0x189/0x250
[  160.895209][T10926]  ? __pfx____ratelimit+0x10/0x10
[  160.895233][T10926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.895252][T10926]  ? __pfx__printk+0x10/0x10
[  160.895276][T10926]  ? __pfx___might_resched+0x10/0x10
[  160.895293][T10926]  ? lock_acquire+0x5f/0x360
[  160.895316][T10926]  should_fail_ex+0x414/0x560
[  160.895340][T10926]  should_failslab+0xa8/0x100
[  160.895363][T10926]  kmem_cache_alloc_noprof+0x73/0x3c0
[  160.895384][T10926]  ? security_inode_alloc+0x39/0x330
[  160.895403][T10926]  security_inode_alloc+0x39/0x330
[  160.895420][T10926]  inode_init_always_gfp+0x9ed/0xdc0
[  160.895447][T10926]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  160.895471][T10926]  alloc_inode+0x82/0x1b0
[  160.895493][T10926]  new_inode+0x22/0x170
[  160.895517][T10926]  __debugfs_create_file+0x14d/0x4f0
[  160.895542][T10926]  debugfs_create_file_full+0x3f/0x60
[  160.895565][T10926]  ref_tracker_dir_debugfs+0x14e/0x270
[  160.895588][T10926]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  160.895626][T10926]  ? __raw_spin_lock_init+0x45/0x100
[  160.895647][T10926]  preinit_net+0x1fb/0x740
[  160.895670][T10926]  copy_net_ns+0x223/0x4d0
[  160.895694][T10926]  create_new_namespaces+0x3f3/0x720
[  160.895720][T10926]  ? security_capable+0x7e/0x2e0
[  160.895746][T10926]  unshare_nsproxy_namespaces+0x11c/0x170
[  160.895764][T10926]  ksys_unshare+0x4c8/0x8c0
[  160.895787][T10926]  ? __pfx_ksys_unshare+0x10/0x10
[  160.895806][T10926]  ? __pfx_ksys_write+0x10/0x10
[  160.895826][T10926]  ? rcu_is_watching+0x15/0xb0
[  160.895847][T10926]  __x64_sys_unshare+0x38/0x50
[  160.895866][T10926]  do_syscall_64+0xfa/0x3b0
[  160.895882][T10926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.895899][T10926]  ? clear_bhb_loop+0x60/0xb0
[  160.895917][T10926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.895934][T10926] RIP: 0033:0x7f623718ebe9
[  160.895949][T10926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.895964][T10926] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  160.895984][T10926] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  160.895997][T10926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  160.896008][T10926] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  160.896019][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  160.896030][T10926] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  160.896050][T10926]  </TASK>
[  160.896076][T10926] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880797e25b0'
[  160.953450][T10930] netlink: 'syz.1.1482': attribute type 1 has an invalid length.
[  161.007414][T10926] lo speed is unknown, defaulting to 1000
[  161.026551][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'.
[  161.207587][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[  161.219054][T10926] hsr0 speed is unknown, defaulting to 1000
[  161.236652][T10926] lo speed is unknown, defaulting to 1000
[  161.237388][T10934] lo speed is unknown, defaulting to 1000
[  161.380442][T10934] hsr0 speed is unknown, defaulting to 1000
[  161.387267][T10934] lo speed is unknown, defaulting to 1000
[  161.585371][T10950] lo speed is unknown, defaulting to 1000
[  161.839484][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'.
[  161.857553][T10950] hsr0 speed is unknown, defaulting to 1000
[  161.895950][T10950] lo speed is unknown, defaulting to 1000
[  161.991194][T10985] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1501'.
[  162.192966][T10993] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1503'.
[  162.225057][T10991] lo speed is unknown, defaulting to 1000
[  162.335359][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'.
[  162.344691][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'.
[  162.354745][T10991] hsr0 speed is unknown, defaulting to 1000
[  162.363564][T10991] lo speed is unknown, defaulting to 1000
[  162.370548][T10993] lo speed is unknown, defaulting to 1000
[  162.567443][T10993] hsr0 speed is unknown, defaulting to 1000
[  162.580914][T10993] lo speed is unknown, defaulting to 1000
[  162.767653][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'.
[  162.779494][T11016] sctp: [Deprecated]: syz.2.1512 (pid 11016) Use of int in max_burst socket option deprecated.
[  162.779494][T11016] Use struct sctp_assoc_value instead
[  162.833649][T11019] IPv6: sit1: Disabled Multicast RS
[  163.064166][T11031] bridge0: entered promiscuous mode
[  163.090317][T11031] bridge0: entered allmulticast mode
[  163.105294][T11035] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.1520'.
[  163.183633][T11040] openvswitch: netlink: Missing key (keys=40, expected=80)
[  163.218218][T11040] lo speed is unknown, defaulting to 1000
[  163.398508][T11040] hsr0 speed is unknown, defaulting to 1000
[  163.406085][T11040] lo speed is unknown, defaulting to 1000
[  163.774992][T11082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.784995][T11082] syzkaller0: entered promiscuous mode
[  163.794097][T11082] syzkaller0: entered allmulticast mode
[  163.813703][T11082] tipc: Resetting bearer <eth:syzkaller0>
[  163.956105][T11093] netlink: 'syz.2.1541': attribute type 1 has an invalid length.
[  163.984318][T11093] 8021q: adding VLAN 0 to HW filter on device bond4
[  163.991704][T11081] tipc: Resetting bearer <eth:syzkaller0>
[  164.005019][T11081] tipc: Disabling bearer <eth:syzkaller0>
[  164.049687][T11096] gretap2: entered promiscuous mode
[  164.056930][T11096] bond4: (slave gretap2): making interface the new active one
[  164.067022][T11096] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  164.085142][T11096] macvlan2: entered promiscuous mode
[  164.099129][T11096] macvlan2: entered allmulticast mode
[  164.110221][T11096] bond4: entered promiscuous mode
[  164.116190][T11096] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  164.124385][T11096] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  164.145816][T11096] bond4: left promiscuous mode
[  164.240956][T11102] macvlan3: entered allmulticast mode
[  164.246452][T11102] veth1_vlan: entered allmulticast mode
[  164.257414][T11102] veth1_vlan: left allmulticast mode
[  164.295412][T11108] FAULT_INJECTION: forcing a failure.
[  164.295412][T11108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.326957][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.2.1546 Not tainted syzkaller #0 PREEMPT(full) 
[  164.326981][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  164.326991][T11108] Call Trace:
[  164.326997][T11108]  <TASK>
[  164.327004][T11108]  dump_stack_lvl+0x189/0x250
[  164.327028][T11108]  ? __pfx____ratelimit+0x10/0x10
[  164.327051][T11108]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.327070][T11108]  ? __pfx__printk+0x10/0x10
[  164.327091][T11108]  ? __might_fault+0xb0/0x130
[  164.327117][T11108]  ? rcu_is_watching+0x15/0xb0
[  164.327135][T11108]  should_fail_ex+0x414/0x560
[  164.327159][T11108]  _copy_from_iter+0x1db/0x16f0
[  164.327178][T11108]  ? rcu_is_watching+0x15/0xb0
[  164.327194][T11108]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  164.327217][T11108]  ? __pfx__copy_from_iter+0x10/0x10
[  164.327234][T11108]  ? __build_skb_around+0x257/0x3e0
[  164.327259][T11108]  ? netlink_sendmsg+0x642/0xb30
[  164.327275][T11108]  ? skb_put+0x11b/0x210
[  164.327292][T11108]  netlink_sendmsg+0x6b2/0xb30
[  164.327311][T11108]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.327328][T11108]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.327345][T11108]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.327362][T11108]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.327377][T11108]  __sock_sendmsg+0x21c/0x270
[  164.327401][T11108]  ____sys_sendmsg+0x505/0x830
[  164.327420][T11108]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.327442][T11108]  ? import_iovec+0x74/0xa0
[  164.327461][T11108]  ___sys_sendmsg+0x21f/0x2a0
[  164.327480][T11108]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.327512][T11108]  ? __fget_files+0x2a/0x420
[  164.327526][T11108]  ? __fget_files+0x3a0/0x420
[  164.327544][T11108]  __x64_sys_sendmsg+0x19b/0x260
[  164.327563][T11108]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.327585][T11108]  ? __pfx_ksys_write+0x10/0x10
[  164.327604][T11108]  ? rcu_is_watching+0x15/0xb0
[  164.327621][T11108]  ? rcu_is_watching+0x15/0xb0
[  164.327638][T11108]  do_syscall_64+0xfa/0x3b0
[  164.327654][T11108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.327679][T11108]  ? clear_bhb_loop+0x60/0xb0
[  164.327697][T11108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.327716][T11108] RIP: 0033:0x7fdab458ebe9
[  164.327729][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.327743][T11108] RSP: 002b:00007fdab53a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.327761][T11108] RAX: ffffffffffffffda RBX: 00007fdab47b5fa0 RCX: 00007fdab458ebe9
[  164.327773][T11108] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003
[  164.327782][T11108] RBP: 00007fdab53a8090 R08: 0000000000000000 R09: 0000000000000000
[  164.327792][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.327803][T11108] R13: 00007fdab47b6038 R14: 00007fdab47b5fa0 R15: 00007ffffe29d568
[  164.327823][T11108]  </TASK>
[  164.704171][T11120] dummy0: entered promiscuous mode
[  164.739475][T11120] dummy0: left promiscuous mode
[  164.853333][T11135] FAULT_INJECTION: forcing a failure.
[  164.853333][T11135] name failslab, interval 1, probability 0, space 0, times 0
[  164.866100][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.1.1559 Not tainted syzkaller #0 PREEMPT(full) 
[  164.866124][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  164.866134][T11135] Call Trace:
[  164.866141][T11135]  <TASK>
[  164.866148][T11135]  dump_stack_lvl+0x189/0x250
[  164.866172][T11135]  ? __pfx____ratelimit+0x10/0x10
[  164.866195][T11135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.866214][T11135]  ? __pfx__printk+0x10/0x10
[  164.866239][T11135]  should_fail_ex+0x414/0x560
[  164.866262][T11135]  should_failslab+0xa8/0x100
[  164.866286][T11135]  kmem_cache_alloc_noprof+0x73/0x3c0
[  164.866307][T11135]  ? radix_tree_node_alloc+0x7e/0x3a0
[  164.866329][T11135]  radix_tree_node_alloc+0x7e/0x3a0
[  164.866350][T11135]  ? __sys_bpf+0x75a/0x870
[  164.866371][T11135]  idr_get_free+0x2b3/0xa70
[  164.866398][T11135]  idr_alloc_u32+0x159/0x2d0
[  164.866421][T11135]  ? __pfx_idr_alloc_u32+0x10/0x10
[  164.866442][T11135]  ? do_raw_spin_lock+0x121/0x290
[  164.866461][T11135]  ? lock_acquire+0x5f/0x360
[  164.866484][T11135]  idr_alloc_cyclic+0x9b/0x1b0
[  164.866508][T11135]  bpf_link_prime+0x6b/0x220
[  164.866527][T11135]  bpf_raw_tp_link_attach+0x49a/0x6c0
[  164.866546][T11135]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  164.866566][T11135]  ? __fget_files+0x2a/0x420
[  164.866582][T11135]  bpf_raw_tracepoint_open+0x1b2/0x220
[  164.866606][T11135]  __sys_bpf+0x75a/0x870
[  164.866628][T11135]  ? __pfx___sys_bpf+0x10/0x10
[  164.866653][T11135]  ? ksys_write+0x22a/0x250
[  164.866676][T11135]  ? __pfx_ksys_write+0x10/0x10
[  164.866694][T11135]  ? rcu_is_watching+0x15/0xb0
[  164.866714][T11135]  __x64_sys_bpf+0x7c/0x90
[  164.866733][T11135]  do_syscall_64+0xfa/0x3b0
[  164.866748][T11135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.866764][T11135]  ? clear_bhb_loop+0x60/0xb0
[  164.866782][T11135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.866799][T11135] RIP: 0033:0x7f113ff8ebe9
[  164.866814][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.866829][T11135] RSP: 002b:00007f1140e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  164.866856][T11135] RAX: ffffffffffffffda RBX: 00007f11401b5fa0 RCX: 00007f113ff8ebe9
[  164.866869][T11135] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011
[  164.866880][T11135] RBP: 00007f1140e9d090 R08: 0000000000000000 R09: 0000000000000000
[  164.866899][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.866910][T11135] R13: 00007f11401b6038 R14: 00007f11401b5fa0 R15: 00007ffcf7250498
[  164.866930][T11135]  </TASK>
[  165.152383][T11141] macvlan2: entered allmulticast mode
[  165.158368][T11141] veth1_vlan: entered allmulticast mode
[  165.165142][T11141] veth1_vlan: left allmulticast mode
[  165.415639][T11160] macvlan2: entered allmulticast mode
[  165.424527][T11160] veth1_vlan: entered allmulticast mode
[  165.468698][T11160] veth1_vlan: left allmulticast mode
[  165.518245][T11167] FAULT_INJECTION: forcing a failure.
[  165.518245][T11167] name failslab, interval 1, probability 0, space 0, times 0
[  165.531272][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.3.1569 Not tainted syzkaller #0 PREEMPT(full) 
[  165.531296][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  165.531306][T11167] Call Trace:
[  165.531312][T11167]  <TASK>
[  165.531320][T11167]  dump_stack_lvl+0x189/0x250
[  165.531345][T11167]  ? __pfx____ratelimit+0x10/0x10
[  165.531369][T11167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.531388][T11167]  ? __pfx__printk+0x10/0x10
[  165.531411][T11167]  ? __pfx___might_resched+0x10/0x10
[  165.531427][T11167]  ? lock_acquire+0x5f/0x360
[  165.531451][T11167]  should_fail_ex+0x414/0x560
[  165.531474][T11167]  should_failslab+0xa8/0x100
[  165.531513][T11167]  __kmalloc_noprof+0xcb/0x4f0
[  165.531534][T11167]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  165.531554][T11167]  ? lock_release+0x4b/0x3e0
[  165.531578][T11167]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  165.531602][T11167]  genl_family_rcv_msg_doit+0xb8/0x300
[  165.531625][T11167]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  165.531649][T11167]  ? apparmor_capable+0x137/0x1b0
[  165.531669][T11167]  ? bpf_lsm_capable+0x9/0x20
[  165.531691][T11167]  ? security_capable+0x7e/0x2e0
[  165.531718][T11167]  genl_rcv_msg+0x60e/0x790
[  165.531739][T11167]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.531757][T11167]  ? __kasan_slab_alloc+0x6c/0x80
[  165.531777][T11167]  ? __pfx_ethnl_set_features+0x10/0x10
[  165.531799][T11167]  ? __netlink_lookup+0xbd/0x810
[  165.531814][T11167]  ? rcu_is_watching+0x15/0xb0
[  165.531835][T11167]  netlink_rcv_skb+0x205/0x470
[  165.531860][T11167]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.531879][T11167]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.531907][T11167]  ? lock_release+0x4b/0x3e0
[  165.531931][T11167]  ? down_read+0x1ad/0x2e0
[  165.531949][T11167]  genl_rcv+0x28/0x40
[  165.531966][T11167]  netlink_unicast+0x82c/0x9e0
[  165.531992][T11167]  ? __pfx_netlink_unicast+0x10/0x10
[  165.532013][T11167]  ? netlink_sendmsg+0x642/0xb30
[  165.532028][T11167]  ? skb_put+0x11b/0x210
[  165.532045][T11167]  netlink_sendmsg+0x805/0xb30
[  165.532065][T11167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.532082][T11167]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.532098][T11167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.532116][T11167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.532132][T11167]  __sock_sendmsg+0x21c/0x270
[  165.532159][T11167]  ____sys_sendmsg+0x505/0x830
[  165.532180][T11167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.532201][T11167]  ? import_iovec+0x74/0xa0
[  165.532221][T11167]  ___sys_sendmsg+0x21f/0x2a0
[  165.532239][T11167]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.532272][T11167]  ? __fget_files+0x2a/0x420
[  165.532287][T11167]  ? __fget_files+0x3a0/0x420
[  165.532306][T11167]  __x64_sys_sendmsg+0x19b/0x260
[  165.532325][T11167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.532347][T11167]  ? __pfx_ksys_write+0x10/0x10
[  165.532372][T11167]  ? rcu_is_watching+0x15/0xb0
[  165.532390][T11167]  ? rcu_is_watching+0x15/0xb0
[  165.532408][T11167]  do_syscall_64+0xfa/0x3b0
[  165.532432][T11167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.532449][T11167]  ? clear_bhb_loop+0x60/0xb0
[  165.532468][T11167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.532485][T11167] RIP: 0033:0x7f623718ebe9
[  165.532507][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.532522][T11167] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.532541][T11167] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  165.532555][T11167] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003
[  165.532567][T11167] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  165.532577][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.532587][T11167] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  165.532607][T11167]  </TASK>
[  165.996640][T11173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.050406][T11179] FAULT_INJECTION: forcing a failure.
[  166.050406][T11179] name failslab, interval 1, probability 0, space 0, times 0
[  166.063670][T11179] CPU: 1 UID: 0 PID: 11179 Comm: syz.1.1574 Not tainted syzkaller #0 PREEMPT(full) 
[  166.063696][T11179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  166.063707][T11179] Call Trace:
[  166.063713][T11179]  <TASK>
[  166.063721][T11179]  dump_stack_lvl+0x189/0x250
[  166.063745][T11179]  ? __pfx____ratelimit+0x10/0x10
[  166.063769][T11179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.063795][T11179]  ? __pfx__printk+0x10/0x10
[  166.063819][T11179]  ? __pfx___might_resched+0x10/0x10
[  166.063836][T11179]  ? lock_acquire+0x5f/0x360
[  166.063860][T11179]  should_fail_ex+0x414/0x560
[  166.063888][T11179]  should_failslab+0xa8/0x100
[  166.063912][T11179]  __kmalloc_noprof+0xcb/0x4f0
[  166.063933][T11179]  ? sk_prot_alloc+0xe7/0x220
[  166.063952][T11179]  sk_prot_alloc+0xe7/0x220
[  166.063965][T11179]  ? sk_alloc+0x24/0x370
[  166.063980][T11179]  sk_alloc+0x3a/0x370
[  166.063997][T11179]  packet_create+0xff/0x780
[  166.064019][T11179]  __sock_create+0x4b0/0x9f0
[  166.064044][T11179]  __sys_socket+0xd7/0x1b0
[  166.064067][T11179]  __x64_sys_socket+0x7a/0x90
[  166.064088][T11179]  do_syscall_64+0xfa/0x3b0
[  166.064104][T11179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.064121][T11179]  ? clear_bhb_loop+0x60/0xb0
[  166.064139][T11179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.064155][T11179] RIP: 0033:0x7f113ff8ebe9
[  166.064174][T11179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.064190][T11179] RSP: 002b:00007f1140e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  166.064209][T11179] RAX: ffffffffffffffda RBX: 00007f11401b5fa0 RCX: 00007f113ff8ebe9
[  166.064222][T11179] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011
[  166.064232][T11179] RBP: 00007f1140e9d090 R08: 0000000000000000 R09: 0000000000000000
[  166.064243][T11179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.064253][T11179] R13: 00007f11401b6038 R14: 00007f11401b5fa0 R15: 00007ffcf7250498
[  166.064273][T11179]  </TASK>
[  166.277361][T11178] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  166.371216][T11184] __nla_validate_parse: 5 callbacks suppressed
[  166.371232][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'.
[  166.463864][T11186] lo speed is unknown, defaulting to 1000
[  166.661574][T11186] hsr0 speed is unknown, defaulting to 1000
[  166.669055][T11186] lo speed is unknown, defaulting to 1000
[  166.881989][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  166.905284][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  166.927600][T11199] ip6tnl3: entered promiscuous mode
[  166.934682][T11199] ip6tnl3: entered allmulticast mode
[  167.199629][T11216] FAULT_INJECTION: forcing a failure.
[  167.199629][T11216] name failslab, interval 1, probability 0, space 0, times 0
[  167.244982][T11216] CPU: 1 UID: 0 PID: 11216 Comm: syz.4.1590 Not tainted syzkaller #0 PREEMPT(full) 
[  167.245005][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  167.245015][T11216] Call Trace:
[  167.245021][T11216]  <TASK>
[  167.245029][T11216]  dump_stack_lvl+0x189/0x250
[  167.245052][T11216]  ? __pfx____ratelimit+0x10/0x10
[  167.245076][T11216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.245094][T11216]  ? __pfx__printk+0x10/0x10
[  167.245119][T11216]  ? fs_reclaim_acquire+0x7d/0x100
[  167.245143][T11216]  ? __pfx___might_resched+0x10/0x10
[  167.245158][T11216]  ? lock_acquire+0x5f/0x360
[  167.245179][T11216]  should_fail_ex+0x414/0x560
[  167.245201][T11216]  should_failslab+0xa8/0x100
[  167.245223][T11216]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  167.245245][T11216]  ? __d_alloc+0x36/0x7a0
[  167.245263][T11216]  __d_alloc+0x36/0x7a0
[  167.245280][T11216]  d_alloc_pseudo+0x21/0xc0
[  167.245296][T11216]  alloc_file_pseudo+0xcc/0x210
[  167.245313][T11216]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  167.245328][T11216]  ? rcu_is_watching+0x15/0xb0
[  167.245344][T11216]  ? rcu_is_watching+0x15/0xb0
[  167.245358][T11216]  ? lock_release+0x4b/0x3e0
[  167.245380][T11216]  anon_inode_getfile+0xc5/0x1a0
[  167.245399][T11216]  bpf_link_prime+0xfc/0x220
[  167.245419][T11216]  bpf_raw_tp_link_attach+0x49a/0x6c0
[  167.245437][T11216]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  167.245458][T11216]  ? __fget_files+0x2a/0x420
[  167.245475][T11216]  bpf_raw_tracepoint_open+0x1b2/0x220
[  167.245499][T11216]  __sys_bpf+0x75a/0x870
[  167.245520][T11216]  ? __pfx___sys_bpf+0x10/0x10
[  167.245545][T11216]  ? ksys_write+0x22a/0x250
[  167.245566][T11216]  ? __pfx_ksys_write+0x10/0x10
[  167.245584][T11216]  ? rcu_is_watching+0x15/0xb0
[  167.245602][T11216]  __x64_sys_bpf+0x7c/0x90
[  167.245630][T11216]  do_syscall_64+0xfa/0x3b0
[  167.245646][T11216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.245663][T11216]  ? clear_bhb_loop+0x60/0xb0
[  167.245682][T11216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.245699][T11216] RIP: 0033:0x7ffac2b8ebe9
[  167.245715][T11216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.245729][T11216] RSP: 002b:00007ffac3a79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.245748][T11216] RAX: ffffffffffffffda RBX: 00007ffac2db5fa0 RCX: 00007ffac2b8ebe9
[  167.245761][T11216] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011
[  167.245773][T11216] RBP: 00007ffac3a79090 R08: 0000000000000000 R09: 0000000000000000
[  167.245784][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.245796][T11216] R13: 00007ffac2db6038 R14: 00007ffac2db5fa0 R15: 00007ffe9ba98ac8
[  167.245816][T11216]  </TASK>
[  167.770272][ T5918] tipc: Node number set to 207071177
[  167.816867][T11235] macvlan2: entered allmulticast mode
[  167.839403][T11235] veth1_vlan: entered allmulticast mode
[  167.863924][T11235] veth1_vlan: left allmulticast mode
[  167.997550][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'.
[  168.008866][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'.
[  168.022660][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'.
[  168.158442][T11264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.248609][T11263] tipc: Disabling bearer <eth:syzkaller0>
[  168.329291][T11282] ip6_vti0: Master is either lo or non-ether device
[  168.378794][T11287] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1618'.
[  168.389663][T11287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1618'.
[  168.590867][T11306] FAULT_INJECTION: forcing a failure.
[  168.590867][T11306] name failslab, interval 1, probability 0, space 0, times 0
[  168.613788][T11303] lo speed is unknown, defaulting to 1000
[  168.627859][T11306] CPU: 1 UID: 0 PID: 11306 Comm: syz.0.1624 Not tainted syzkaller #0 PREEMPT(full) 
[  168.627893][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  168.627904][T11306] Call Trace:
[  168.627911][T11306]  <TASK>
[  168.627919][T11306]  dump_stack_lvl+0x189/0x250
[  168.627944][T11306]  ? __pfx____ratelimit+0x10/0x10
[  168.627967][T11306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.627986][T11306]  ? __pfx__printk+0x10/0x10
[  168.628009][T11306]  ? fs_reclaim_acquire+0x7d/0x100
[  168.628032][T11306]  ? __pfx___might_resched+0x10/0x10
[  168.628049][T11306]  ? lock_acquire+0x5f/0x360
[  168.628073][T11306]  should_fail_ex+0x414/0x560
[  168.628097][T11306]  ? __pfx_sock_alloc_inode+0x10/0x10
[  168.628118][T11306]  should_failslab+0xa8/0x100
[  168.628141][T11306]  ? __pfx_sock_alloc_inode+0x10/0x10
[  168.628161][T11306]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  168.628183][T11306]  ? sock_alloc_inode+0x28/0xc0
[  168.628205][T11306]  ? __pfx_sock_alloc_inode+0x10/0x10
[  168.628225][T11306]  sock_alloc_inode+0x28/0xc0
[  168.628245][T11306]  alloc_inode+0x6a/0x1b0
[  168.628268][T11306]  __sock_create+0x12d/0x9f0
[  168.628294][T11306]  __sys_socket+0xd7/0x1b0
[  168.628317][T11306]  __x64_sys_socket+0x7a/0x90
[  168.628339][T11306]  do_syscall_64+0xfa/0x3b0
[  168.628355][T11306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.628372][T11306]  ? clear_bhb_loop+0x60/0xb0
[  168.628391][T11306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.628407][T11306] RIP: 0033:0x7f520e18ebe9
[  168.628422][T11306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.628438][T11306] RSP: 002b:00007f520efdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  168.628457][T11306] RAX: ffffffffffffffda RBX: 00007f520e3b5fa0 RCX: 00007f520e18ebe9
[  168.628470][T11306] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011
[  168.628481][T11306] RBP: 00007f520efdf090 R08: 0000000000000000 R09: 0000000000000000
[  168.628493][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.628504][T11306] R13: 00007f520e3b6038 R14: 00007f520e3b5fa0 R15: 00007ffee29d1028
[  168.628525][T11306]  </TASK>
[  168.628534][T11306] socket: no more sockets
[  168.724727][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'.
[  169.008656][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'.
[  169.041629][T11303] hsr0 speed is unknown, defaulting to 1000
[  169.063532][T11303] lo speed is unknown, defaulting to 1000
[  169.156218][T11330] Bluetooth: MGMT ver 1.23
[  169.377968][T11346] macvlan2: entered allmulticast mode
[  169.388377][T11346] veth1_vlan: entered allmulticast mode
[  169.397011][T11346] veth1_vlan: left allmulticast mode
[  169.603315][T11365] openvswitch: netlink: Flow actions attr not present in new flow.
[  169.630246][T11365] lo speed is unknown, defaulting to 1000
[  169.717675][T11365] hsr0 speed is unknown, defaulting to 1000
[  169.725334][T11365] lo speed is unknown, defaulting to 1000
[  169.846291][T11377] lo speed is unknown, defaulting to 1000
[  169.936028][T11377] hsr0 speed is unknown, defaulting to 1000
[  169.943081][T11377] lo speed is unknown, defaulting to 1000
[  170.039716][T11387] lo speed is unknown, defaulting to 1000
[  170.147921][T11387] hsr0 speed is unknown, defaulting to 1000
[  170.154741][T11387] lo speed is unknown, defaulting to 1000
[  170.752273][T11430] FAULT_INJECTION: forcing a failure.
[  170.752273][T11430] name failslab, interval 1, probability 0, space 0, times 0
[  170.779160][T11430] CPU: 1 UID: 0 PID: 11430 Comm: syz.3.1671 Not tainted syzkaller #0 PREEMPT(full) 
[  170.779186][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  170.779197][T11430] Call Trace:
[  170.779204][T11430]  <TASK>
[  170.779212][T11430]  dump_stack_lvl+0x189/0x250
[  170.779237][T11430]  ? __pfx____ratelimit+0x10/0x10
[  170.779260][T11430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.779279][T11430]  ? __pfx__printk+0x10/0x10
[  170.779303][T11430]  ? __pfx___might_resched+0x10/0x10
[  170.779320][T11430]  ? lock_acquire+0x5f/0x360
[  170.779344][T11430]  should_fail_ex+0x414/0x560
[  170.779368][T11430]  should_failslab+0xa8/0x100
[  170.779392][T11430]  __kmalloc_noprof+0xcb/0x4f0
[  170.779413][T11430]  ? sk_prot_alloc+0xe7/0x220
[  170.779433][T11430]  sk_prot_alloc+0xe7/0x220
[  170.779449][T11430]  ? sk_alloc+0x24/0x370
[  170.779466][T11430]  sk_alloc+0x3a/0x370
[  170.779484][T11430]  packet_create+0xff/0x780
[  170.779506][T11430]  __sock_create+0x4b0/0x9f0
[  170.779532][T11430]  __sys_socket+0xd7/0x1b0
[  170.779556][T11430]  __x64_sys_socket+0x7a/0x90
[  170.779579][T11430]  do_syscall_64+0xfa/0x3b0
[  170.779596][T11430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.779622][T11430]  ? clear_bhb_loop+0x60/0xb0
[  170.779641][T11430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.779658][T11430] RIP: 0033:0x7f623718ebe9
[  170.779674][T11430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.779689][T11430] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  170.779708][T11430] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  170.779721][T11430] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011
[  170.779732][T11430] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  170.779743][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.779754][T11430] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  170.779775][T11430]  </TASK>
[  171.258585][T11457] macvlan2: entered allmulticast mode
[  171.272488][T11457] veth1_vlan: entered allmulticast mode
[  171.284068][T11457] veth1_vlan: left allmulticast mode
[  171.417125][T11467] __nla_validate_parse: 10 callbacks suppressed
[  171.417144][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  171.433217][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  171.543011][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'.
[  171.605012][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'.
[  171.947846][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'.
[  171.959339][T11495] macvlan2: entered allmulticast mode
[  171.964967][T11495] veth1_vlan: entered allmulticast mode
[  171.992365][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'.
[  171.992581][T11495] bridge0: port 1(macvlan2) entered blocking state
[  172.008372][T11495] bridge0: port 1(macvlan2) entered disabled state
[  172.016116][T11495] macvlan2: entered promiscuous mode
[  172.145830][T11504] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1700'.
[  172.254936][T11506] netlink: 'syz.1.1699': attribute type 4 has an invalid length.
[  172.292055][T11504] lo speed is unknown, defaulting to 1000
[  172.367205][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'.
[  172.388995][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'.
[  172.422559][T11504] hsr0 speed is unknown, defaulting to 1000
[  172.429477][T11504] lo speed is unknown, defaulting to 1000
[  172.469744][T11511] veth0_vlan: left allmulticast mode
[  172.521280][T11511] ip6tnl3: left promiscuous mode
[  172.526374][T11511] ip6tnl3: left allmulticast mode
[  172.809514][T11523] lo speed is unknown, defaulting to 1000
[  173.049482][T11523] hsr0 speed is unknown, defaulting to 1000
[  173.060358][T11523] lo speed is unknown, defaulting to 1000
[  173.610137][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'.
[  173.777448][T11550] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  173.951449][T11564] bond3: left promiscuous mode
[  173.956272][T11564] vxcan5: left promiscuous mode
[  174.064405][T11574] macvlan5: entered allmulticast mode
[  174.069957][T11574] veth1_vlan: entered allmulticast mode
[  174.076265][T11574] bridge0: port 5(macvlan5) entered blocking state
[  174.083549][T11574] bridge0: port 5(macvlan5) entered disabled state
[  174.094079][T11574] macvlan5: entered promiscuous mode
[  174.144991][T11578] lo speed is unknown, defaulting to 1000
[  174.181360][ T5935] IPVS: starting estimator thread 0...
[  174.278578][T11584] IPVS: using max 41 ests per chain, 98400 per kthread
[  174.413829][T11578] hsr0 speed is unknown, defaulting to 1000
[  174.422643][T11578] lo speed is unknown, defaulting to 1000
[  174.584442][T11614] FAULT_INJECTION: forcing a failure.
[  174.584442][T11614] name failslab, interval 1, probability 0, space 0, times 0
[  174.604104][T11614] CPU: 1 UID: 0 PID: 11614 Comm: syz.0.1739 Not tainted syzkaller #0 PREEMPT(full) 
[  174.604128][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  174.604138][T11614] Call Trace:
[  174.604143][T11614]  <TASK>
[  174.604150][T11614]  dump_stack_lvl+0x189/0x250
[  174.604174][T11614]  ? __pfx____ratelimit+0x10/0x10
[  174.604195][T11614]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.604213][T11614]  ? __pfx__printk+0x10/0x10
[  174.604234][T11614]  ? fs_reclaim_acquire+0x7d/0x100
[  174.604258][T11614]  ? __pfx___might_resched+0x10/0x10
[  174.604272][T11614]  ? lock_acquire+0x5f/0x360
[  174.604294][T11614]  should_fail_ex+0x414/0x560
[  174.604316][T11614]  should_failslab+0xa8/0x100
[  174.604337][T11614]  kmem_cache_alloc_noprof+0x73/0x3c0
[  174.604356][T11614]  ? alloc_empty_file+0x55/0x1d0
[  174.604373][T11614]  alloc_empty_file+0x55/0x1d0
[  174.604390][T11614]  alloc_file_pseudo+0x13d/0x210
[  174.604408][T11614]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  174.604423][T11614]  ? do_raw_spin_unlock+0x122/0x240
[  174.604442][T11614]  ? _raw_spin_unlock+0x28/0x50
[  174.604465][T11614]  sock_alloc_file+0xb8/0x2e0
[  174.604484][T11614]  ? __sys_socket+0x12c/0x1b0
[  174.604505][T11614]  __sys_socket+0x13d/0x1b0
[  174.604528][T11614]  __x64_sys_socket+0x7a/0x90
[  174.604548][T11614]  do_syscall_64+0xfa/0x3b0
[  174.604564][T11614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.604579][T11614]  ? clear_bhb_loop+0x60/0xb0
[  174.604596][T11614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.604611][T11614] RIP: 0033:0x7f520e18ebe9
[  174.604626][T11614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.604639][T11614] RSP: 002b:00007f520efdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  174.604657][T11614] RAX: ffffffffffffffda RBX: 00007f520e3b5fa0 RCX: 00007f520e18ebe9
[  174.604669][T11614] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011
[  174.604679][T11614] RBP: 00007f520efdf090 R08: 0000000000000000 R09: 0000000000000000
[  174.604689][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.604699][T11614] R13: 00007f520e3b6038 R14: 00007f520e3b5fa0 R15: 00007ffee29d1028
[  174.604719][T11614]  </TASK>
[  175.154819][T11634] netlink: 'syz.0.1745': attribute type 1 has an invalid length.
[  175.633974][T11668] lo speed is unknown, defaulting to 1000
[  175.679232][T11671] ip6tnl4: entered promiscuous mode
[  175.684484][T11671] ip6tnl4: entered allmulticast mode
[  175.716648][T11671] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  175.934084][T11687] netlink: 'syz.3.1766': attribute type 1 has an invalid length.
[  175.972484][T11668] hsr0 speed is unknown, defaulting to 1000
[  175.986172][T11668] lo speed is unknown, defaulting to 1000
[  176.246373][T11711] netlink: 'syz.2.1775': attribute type 21 has an invalid length.
[  176.460115][T11729] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  176.466511][T11735] lo speed is unknown, defaulting to 1000
[  176.555904][T11739] __nla_validate_parse: 15 callbacks suppressed
[  176.555923][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'.
[  176.630282][T11737] lo speed is unknown, defaulting to 1000
[  176.636560][T11735] hsr0 speed is unknown, defaulting to 1000
[  176.639562][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1786'.
[  176.681367][T11735] lo speed is unknown, defaulting to 1000
[  176.748854][T11745] sctp: [Deprecated]: syz.1.1789 (pid 11745) Use of int in maxseg socket option.
[  176.748854][T11745] Use struct sctp_assoc_value instead
[  176.817237][T11737] hsr0 speed is unknown, defaulting to 1000
[  176.826725][T11737] lo speed is unknown, defaulting to 1000
[  176.847132][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'.
[  176.892246][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'.
[  176.901977][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1791'.
[  177.181336][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'.
[  177.246694][T11781] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1800'.
[  177.261124][T11784] FAULT_INJECTION: forcing a failure.
[  177.261124][T11784] name failslab, interval 1, probability 0, space 0, times 0
[  177.285290][T11784] CPU: 1 UID: 0 PID: 11784 Comm: syz.2.1802 Not tainted syzkaller #0 PREEMPT(full) 
[  177.285317][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.285328][T11784] Call Trace:
[  177.285334][T11784]  <TASK>
[  177.285341][T11784]  dump_stack_lvl+0x189/0x250
[  177.285365][T11784]  ? __pfx____ratelimit+0x10/0x10
[  177.285387][T11784]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.285403][T11784]  ? __pfx__printk+0x10/0x10
[  177.285427][T11784]  ? __pfx___might_resched+0x10/0x10
[  177.285441][T11784]  ? lock_acquire+0x5f/0x360
[  177.285460][T11784]  should_fail_ex+0x414/0x560
[  177.285480][T11784]  ? page_pool_create_percpu+0x32a/0xbe0
[  177.285498][T11784]  should_failslab+0xa8/0x100
[  177.285520][T11784]  __kvmalloc_node_noprof+0x161/0x5f0
[  177.285540][T11784]  ? page_pool_create_percpu+0x32a/0xbe0
[  177.285560][T11784]  page_pool_create_percpu+0x32a/0xbe0
[  177.285578][T11784]  ? bpf_test_run_xdp_live+0x1b5/0x1b10
[  177.285602][T11784]  bpf_test_run_xdp_live+0x1ca/0x1b10
[  177.285625][T11784]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  177.285651][T11784]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  177.285678][T11784]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  177.285701][T11784]  ? bpf_dispatcher_xdp+0x800/0x1000
[  177.285714][T11784]  ? bpf_dispatcher_xdp+0x800/0x1000
[  177.285755][T11784]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  177.285774][T11784]  ? _copy_from_user+0x94/0xb0
[  177.285792][T11784]  ? bpf_test_init+0x133/0x170
[  177.285812][T11784]  ? xdp_convert_md_to_buff+0x5b/0x330
[  177.285834][T11784]  bpf_prog_test_run_xdp+0x713/0x1000
[  177.285861][T11784]  ? rcu_is_watching+0x15/0xb0
[  177.285879][T11784]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  177.285902][T11784]  ? __fget_files+0x2a/0x420
[  177.285918][T11784]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  177.285940][T11784]  bpf_prog_test_run+0x2c7/0x340
[  177.285962][T11784]  __sys_bpf+0x581/0x870
[  177.285981][T11784]  ? __pfx___sys_bpf+0x10/0x10
[  177.286005][T11784]  ? ksys_write+0x22a/0x250
[  177.286025][T11784]  ? __pfx_ksys_write+0x10/0x10
[  177.286042][T11784]  ? rcu_is_watching+0x15/0xb0
[  177.286061][T11784]  __x64_sys_bpf+0x7c/0x90
[  177.286079][T11784]  do_syscall_64+0xfa/0x3b0
[  177.286094][T11784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.286111][T11784]  ? clear_bhb_loop+0x60/0xb0
[  177.286130][T11784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.286146][T11784] RIP: 0033:0x7fdab458ebe9
[  177.286161][T11784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.286176][T11784] RSP: 002b:00007fdab53a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  177.286195][T11784] RAX: ffffffffffffffda RBX: 00007fdab47b5fa0 RCX: 00007fdab458ebe9
[  177.286208][T11784] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  177.286219][T11784] RBP: 00007fdab53a8090 R08: 0000000000000000 R09: 0000000000000000
[  177.286230][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.286239][T11784] R13: 00007fdab47b6038 R14: 00007fdab47b5fa0 R15: 00007ffffe29d568
[  177.286259][T11784]  </TASK>
[  177.286914][T11784] page_pool_create_percpu() gave up with errno -12
[  177.598540][T11785] ip6tnl3: left allmulticast mode
[  177.630506][T11785] veth1_vlan: left allmulticast mode
[  177.665702][T11781] lo speed is unknown, defaulting to 1000
[  177.704983][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'.
[  177.714363][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'.
[  177.796814][T11781] hsr0 speed is unknown, defaulting to 1000
[  177.804009][T11781] lo speed is unknown, defaulting to 1000
[  177.977079][T11803] netlink: 'syz.1.1807': attribute type 13 has an invalid length.
[  178.002208][T11803] netlink: 'syz.1.1807': attribute type 17 has an invalid length.
[  178.074331][T11813] netlink: 'syz.0.1811': attribute type 1 has an invalid length.
[  178.115861][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'.
[  178.133028][T11803] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.142483][T11803] 8021q: adding VLAN 0 to HW filter on device team0
[  178.153912][T11803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.197582][T11821] FAULT_INJECTION: forcing a failure.
[  178.197582][T11821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.221518][T11814] lo speed is unknown, defaulting to 1000
[  178.227495][T11821] CPU: 1 UID: 0 PID: 11821 Comm: syz.4.1814 Not tainted syzkaller #0 PREEMPT(full) 
[  178.227518][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  178.227529][T11821] Call Trace:
[  178.227535][T11821]  <TASK>
[  178.227542][T11821]  dump_stack_lvl+0x189/0x250
[  178.227565][T11821]  ? __pfx____ratelimit+0x10/0x10
[  178.227587][T11821]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.227605][T11821]  ? __pfx__printk+0x10/0x10
[  178.227626][T11821]  ? __might_fault+0xb0/0x130
[  178.227652][T11821]  ? rcu_is_watching+0x15/0xb0
[  178.227671][T11821]  should_fail_ex+0x414/0x560
[  178.227694][T11821]  _copy_from_iter+0x1db/0x16f0
[  178.227716][T11821]  ? rcu_is_watching+0x15/0xb0
[  178.227730][T11821]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  178.227753][T11821]  ? __pfx__copy_from_iter+0x10/0x10
[  178.227770][T11821]  ? __build_skb_around+0x257/0x3e0
[  178.227795][T11821]  ? netlink_sendmsg+0x642/0xb30
[  178.227810][T11821]  ? skb_put+0x11b/0x210
[  178.227827][T11821]  netlink_sendmsg+0x6b2/0xb30
[  178.227844][T11821]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.227859][T11821]  ? aa_sock_msg_perm+0xf1/0x1d0
[  178.227873][T11821]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  178.227889][T11821]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.227904][T11821]  __sock_sendmsg+0x21c/0x270
[  178.227925][T11821]  ____sys_sendmsg+0x505/0x830
[  178.227945][T11821]  ? __pfx_____sys_sendmsg+0x10/0x10
[  178.227972][T11821]  ? import_iovec+0x74/0xa0
[  178.227989][T11821]  ___sys_sendmsg+0x21f/0x2a0
[  178.228007][T11821]  ? __pfx____sys_sendmsg+0x10/0x10
[  178.228040][T11821]  ? __fget_files+0x2a/0x420
[  178.228055][T11821]  ? __fget_files+0x3a0/0x420
[  178.228070][T11821]  __x64_sys_sendmsg+0x19b/0x260
[  178.228086][T11821]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  178.228105][T11821]  ? __pfx_ksys_write+0x10/0x10
[  178.228122][T11821]  ? rcu_is_watching+0x15/0xb0
[  178.228137][T11821]  ? rcu_is_watching+0x15/0xb0
[  178.228153][T11821]  do_syscall_64+0xfa/0x3b0
[  178.228166][T11821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.228182][T11821]  ? clear_bhb_loop+0x60/0xb0
[  178.228199][T11821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.228215][T11821] RIP: 0033:0x7ffac2b8ebe9
[  178.228230][T11821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.228245][T11821] RSP: 002b:00007ffac3a79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.228263][T11821] RAX: ffffffffffffffda RBX: 00007ffac2db5fa0 RCX: 00007ffac2b8ebe9
[  178.228275][T11821] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  178.228286][T11821] RBP: 00007ffac3a79090 R08: 0000000000000000 R09: 0000000000000000
[  178.228295][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.228306][T11821] R13: 00007ffac2db6038 R14: 00007ffac2db5fa0 R15: 00007ffe9ba98ac8
[  178.228325][T11821]  </TASK>
[  178.519987][T11803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.639758][T11820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.660174][T11831] netlink: 'syz.0.1817': attribute type 2 has an invalid length.
[  178.668416][T11831] netlink: 'syz.0.1817': attribute type 1 has an invalid length.
[  178.804961][T11814] hsr0 speed is unknown, defaulting to 1000
[  178.814788][T11814] lo speed is unknown, defaulting to 1000
[  179.044952][T11860] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  179.427944][T11884] netlink: 'syz.0.1834': attribute type 10 has an invalid length.
[  179.462935][T11884] team0: Port device geneve0 added
[  179.493335][ T5994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.543304][ T5994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.590630][ T5994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.676438][ T5994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.733577][T11897] netlink: 'syz.0.1837': attribute type 1 has an invalid length.
[  179.736651][T11896] macvlan3: entered allmulticast mode
[  179.770720][T11896] veth1_vlan: entered allmulticast mode
[  179.804837][T11896] veth1_vlan: left allmulticast mode
[  179.875903][T11892] macvlan2: entered allmulticast mode
[  179.881392][T11892] veth1_vlan: entered allmulticast mode
[  179.888273][T11892] veth1_vlan: left allmulticast mode
[  180.169076][T11914] lo speed is unknown, defaulting to 1000
[  180.376041][T11914] hsr0 speed is unknown, defaulting to 1000
[  180.378173][T11921] lo speed is unknown, defaulting to 1000
[  180.391202][T11914] lo speed is unknown, defaulting to 1000
[  180.790753][T11933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.833240][T11921] hsr0 speed is unknown, defaulting to 1000
[  180.841328][T11921] lo speed is unknown, defaulting to 1000
[  181.218444][T11944] lo speed is unknown, defaulting to 1000
[  181.392185][T11958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.406359][T11958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.450297][T11952] lo speed is unknown, defaulting to 1000
[  181.585429][T11944] hsr0 speed is unknown, defaulting to 1000
[  181.594062][T11944] lo speed is unknown, defaulting to 1000
[  181.608530][T11952] hsr0 speed is unknown, defaulting to 1000
[  181.629896][T11952] lo speed is unknown, defaulting to 1000
[  181.906935][T11998] netlink: 'syz.2.1869': attribute type 13 has an invalid length.
[  181.936107][T11998] netlink: 'syz.2.1869': attribute type 17 has an invalid length.
[  182.088757][T12007] __nla_validate_parse: 15 callbacks suppressed
[  182.088779][T12007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1869'.
[  182.138577][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'.
[  182.140541][T11998] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.156748][T11998] 8021q: adding VLAN 0 to HW filter on device team0
[  182.169795][T11998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.186280][ T5935] lo speed is unknown, defaulting to 1000
[  182.191506][T12015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.192340][T11991] lo speed is unknown, defaulting to 1000
[  182.214358][ T5935] syz1: Port: 1 Link ACTIVE
[  182.360544][T11986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.428499][T12003] lo speed is unknown, defaulting to 1000
[  182.508517][T11991] hsr0 speed is unknown, defaulting to 1000
[  182.539370][T12027] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1879'.
[  182.548928][T12003] hsr0 speed is unknown, defaulting to 1000
[  182.558519][T11991] lo speed is unknown, defaulting to 1000
[  182.614066][T12003] lo speed is unknown, defaulting to 1000
[  182.782887][T12033] veth0_macvtap: left allmulticast mode
[  182.788899][T12033] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  182.797868][T12033] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  182.806855][T12033] veth1_vlan: left allmulticast mode
[  182.932448][T12042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1883'.
[  183.239307][T12059] lo speed is unknown, defaulting to 1000
[  183.344400][T12070] netlink: 'syz.0.1896': attribute type 1 has an invalid length.
[  183.391176][T12070] 8021q: adding VLAN 0 to HW filter on device bond2
[  183.522623][T12059] hsr0 speed is unknown, defaulting to 1000
[  183.529518][T12059] lo speed is unknown, defaulting to 1000
[  183.637096][T12094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1903'.
[  183.675807][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'.
[  183.847252][T12100] lo speed is unknown, defaulting to 1000
[  184.011547][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'.
[  184.024919][T12118] macvlan3: entered allmulticast mode
[  184.031610][T12118] veth1_vlan: entered allmulticast mode
[  184.037993][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'.
[  184.051813][T12118] bridge0: port 5(macvlan3) entered blocking state
[  184.060429][T12118] bridge0: port 5(macvlan3) entered disabled state
[  184.070173][T12118] macvlan3: entered promiscuous mode
[  184.079143][T12100] hsr0 speed is unknown, defaulting to 1000
[  184.085928][T12100] lo speed is unknown, defaulting to 1000
[  184.248883][T12128] bridge0: left promiscuous mode
[  184.254081][T12128] bridge0: left allmulticast mode
[  184.261376][T12128] gretap2: left promiscuous mode
[  184.289423][ T6062] lo speed is unknown, defaulting to 1000
[  184.308947][ T6062] syz1: Port: 1 Link DOWN
[  184.364612][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'.
[  184.588235][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'.
[  185.131042][T12168] C: renamed from team_slave_0
[  185.152547][T12168] netlink: 'syz.1.1930': attribute type 4 has an invalid length.
[  185.174954][T12168] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  185.415554][T12189] vlan2: entered promiscuous mode
[  185.437675][T12189] bond0: entered promiscuous mode
[  185.448970][T12189] bond_slave_0: entered promiscuous mode
[  185.454880][T12189] bond_slave_1: entered promiscuous mode
[  185.461958][T12189] batadv_slave_0: entered promiscuous mode
[  185.468259][T12189] vlan2: entered allmulticast mode
[  185.474323][T12197] netlink: 'syz.3.1937': attribute type 1 has an invalid length.
[  185.485349][T12189] bond0: entered allmulticast mode
[  185.493960][T12189] bond_slave_0: entered allmulticast mode
[  185.500551][T12189] bond_slave_1: entered allmulticast mode
[  185.508534][T12189] batadv_slave_0: entered allmulticast mode
[  185.525815][T12191] lo speed is unknown, defaulting to 1000
[  185.778272][T12215] lo speed is unknown, defaulting to 1000
[  185.832878][T12191] hsr0 speed is unknown, defaulting to 1000
[  185.851200][T12191] lo speed is unknown, defaulting to 1000
[  185.950183][T12215] hsr0 speed is unknown, defaulting to 1000
[  185.970850][T12215] lo speed is unknown, defaulting to 1000
[  186.191732][T12232] veth3: entered promiscuous mode
[  186.618545][T12261] macvlan2: entered allmulticast mode
[  186.630705][T12261] veth1_vlan: entered allmulticast mode
[  186.645426][T12261] veth1_vlan: left allmulticast mode
[  187.209704][T12293] __nla_validate_parse: 10 callbacks suppressed
[  187.209723][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1976'.
[  187.224383][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'.
[  187.458392][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  187.574213][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'.
[  187.632293][T12319] lo speed is unknown, defaulting to 1000
[  187.732434][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'.
[  187.746443][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'.
[  187.820617][T12319] hsr0 speed is unknown, defaulting to 1000
[  187.830887][T12319] lo speed is unknown, defaulting to 1000
[  188.094876][T12356] FAULT_INJECTION: forcing a failure.
[  188.094876][T12356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.115046][T12354] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1999'.
[  188.150281][T12356] CPU: 1 UID: 0 PID: 12356 Comm: syz.3.2000 Not tainted syzkaller #0 PREEMPT(full) 
[  188.150307][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  188.150319][T12356] Call Trace:
[  188.150326][T12356]  <TASK>
[  188.150333][T12356]  dump_stack_lvl+0x189/0x250
[  188.150359][T12356]  ? __pfx____ratelimit+0x10/0x10
[  188.150383][T12356]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.150403][T12356]  ? __pfx__printk+0x10/0x10
[  188.150423][T12356]  ? __might_fault+0xb0/0x130
[  188.150448][T12356]  ? rcu_is_watching+0x15/0xb0
[  188.150467][T12356]  should_fail_ex+0x414/0x560
[  188.150491][T12356]  _copy_from_iter+0x1db/0x16f0
[  188.150510][T12356]  ? rcu_is_watching+0x15/0xb0
[  188.150527][T12356]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  188.150551][T12356]  ? __pfx__copy_from_iter+0x10/0x10
[  188.150568][T12356]  ? __build_skb_around+0x257/0x3e0
[  188.150595][T12356]  ? netlink_sendmsg+0x642/0xb30
[  188.150609][T12356]  ? skb_put+0x11b/0x210
[  188.150627][T12356]  netlink_sendmsg+0x6b2/0xb30
[  188.150646][T12356]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.150664][T12356]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.150681][T12356]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.150699][T12356]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.150716][T12356]  __sock_sendmsg+0x21c/0x270
[  188.150739][T12356]  ____sys_sendmsg+0x505/0x830
[  188.150759][T12356]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.150781][T12356]  ? import_iovec+0x74/0xa0
[  188.150800][T12356]  ___sys_sendmsg+0x21f/0x2a0
[  188.150819][T12356]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.150852][T12356]  ? __fget_files+0x2a/0x420
[  188.150867][T12356]  ? __fget_files+0x3a0/0x420
[  188.150886][T12356]  __x64_sys_sendmsg+0x19b/0x260
[  188.150905][T12356]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.150927][T12356]  ? __pfx_ksys_write+0x10/0x10
[  188.150947][T12356]  ? rcu_is_watching+0x15/0xb0
[  188.150965][T12356]  ? rcu_is_watching+0x15/0xb0
[  188.150983][T12356]  do_syscall_64+0xfa/0x3b0
[  188.151000][T12356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.151017][T12356]  ? clear_bhb_loop+0x60/0xb0
[  188.151035][T12356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.151053][T12356] RIP: 0033:0x7f623718ebe9
[  188.151068][T12356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.151083][T12356] RSP: 002b:00007f62353f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.151103][T12356] RAX: ffffffffffffffda RBX: 00007f62373b5fa0 RCX: 00007f623718ebe9
[  188.151116][T12356] RDX: 0000000040040080 RSI: 00002000000002c0 RDI: 0000000000000003
[  188.151128][T12356] RBP: 00007f62353f6090 R08: 0000000000000000 R09: 0000000000000000
[  188.151139][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.151150][T12356] R13: 00007f62373b6038 R14: 00007f62373b5fa0 R15: 00007ffc3c442b58
[  188.151170][T12356]  </TASK>
[  188.631474][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'.
[  188.796519][T12379] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2006'.
[  188.891117][T12389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2009'.
[  188.908635][T12386] GUP no longer grows the stack in syz.0.2008 (12386): 200000006000-20000000a000 (200000005000)
[  188.957845][T12386] CPU: 0 UID: 0 PID: 12386 Comm: syz.0.2008 Not tainted syzkaller #0 PREEMPT(full) 
[  188.957871][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  188.957882][T12386] Call Trace:
[  188.957888][T12386]  <TASK>
[  188.957895][T12386]  dump_stack_lvl+0x189/0x250
[  188.957919][T12386]  ? __pfx_css_rstat_updated+0x10/0x10
[  188.957938][T12386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.957959][T12386]  ? __pfx__printk+0x10/0x10
[  188.957981][T12386]  ? find_vma+0xe7/0x160
[  188.958013][T12386]  ? __pfx___calc_delta+0x10/0x10
[  188.958041][T12386]  __get_user_pages+0x24d0/0x2ce0
[  188.958066][T12386]  ? __gup_longterm_locked+0xc68/0x1660
[  188.958094][T12386]  ? __gup_longterm_locked+0xc68/0x1660
[  188.958119][T12386]  __gup_longterm_locked+0xde9/0x1660
[  188.958142][T12386]  ? try_grab_folio_fast+0x1be/0x4f0
[  188.958166][T12386]  ? rcu_is_watching+0x15/0xb0
[  188.958185][T12386]  ? rcu_is_watching+0x15/0xb0
[  188.958204][T12386]  gup_fast_fallback+0x1e6a/0x2010
[  188.958239][T12386]  ? __pfx_gup_fast_fallback+0x10/0x10
[  188.958259][T12386]  ? __mutex_lock+0x335/0x1350
[  188.958275][T12386]  ? lock_release+0x4b/0x3e0
[  188.958300][T12386]  ? futex_unqueue+0x22/0x240
[  188.958318][T12386]  ? futex_unqueue+0x22/0x240
[  188.958336][T12386]  ? is_valid_gup_args+0x11f/0x200
[  188.958359][T12386]  ? get_user_pages_fast+0x4d/0xb0
[  188.958381][T12386]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  188.958405][T12386]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  188.958430][T12386]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.958452][T12386]  ? wait_for_space+0x24d/0x2d0
[  188.958477][T12386]  iov_iter_get_pages2+0x5e/0xa0
[  188.958498][T12386]  __se_sys_vmsplice+0x548/0x10d0
[  188.958531][T12386]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  188.958555][T12386]  ? __pfx_futex_wait+0x10/0x10
[  188.958604][T12386]  ? rcu_is_watching+0x15/0xb0
[  188.958624][T12386]  ? rcu_is_watching+0x15/0xb0
[  188.958641][T12386]  do_syscall_64+0xfa/0x3b0
[  188.958659][T12386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.958676][T12386]  ? clear_bhb_loop+0x60/0xb0
[  188.958696][T12386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.958713][T12386] RIP: 0033:0x7f520e18ebe9
[  188.958729][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.958745][T12386] RSP: 002b:00007f520efdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  188.958765][T12386] RAX: ffffffffffffffda RBX: 00007f520e3b5fa0 RCX: 00007f520e18ebe9
[  188.958779][T12386] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000011
[  188.958792][T12386] RBP: 00007f520e211e19 R08: 0000000000000000 R09: 0000000000000000
[  188.958804][T12386] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  188.958816][T12386] R13: 00007f520e3b6038 R14: 00007f520e3b5fa0 R15: 00007ffee29d1028
[  188.958837][T12386]  </TASK>
[  189.670904][T12415] lo speed is unknown, defaulting to 1000
[  189.822157][T12415] hsr0 speed is unknown, defaulting to 1000
[  189.829375][T12415] lo speed is unknown, defaulting to 1000
[  190.143527][T12433] netlink: 'syz.1.2022': attribute type 1 has an invalid length.
[  190.304883][ T6001] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.324575][ T6001] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.369729][ T6001] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.418438][ T6001] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.525889][T12462] lo speed is unknown, defaulting to 1000
[  190.661803][T12462] hsr0 speed is unknown, defaulting to 1000
[  190.668645][T12462] lo speed is unknown, defaulting to 1000
[  190.705967][T12475] netlink: 'syz.1.2036': attribute type 1 has an invalid length.
[  190.921250][T12487] netlink: 'syz.2.2038': attribute type 5 has an invalid length.
[  194.399705][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  245.597793][    C0] ==================================================================
[  245.605902][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  245.613792][    C0] Read of size 2 at addr ffff8880549b302a by task swapper/0/0
[  245.621322][    C0] 
[  245.623636][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  245.623649][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  245.623667][    C0] Call Trace:
[  245.623674][    C0]  <IRQ>
[  245.623680][    C0]  dump_stack_lvl+0x189/0x250
[  245.623697][    C0]  ? rcu_is_watching+0x15/0xb0
[  245.623710][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.623721][    C0]  ? rcu_is_watching+0x15/0xb0
[  245.623730][    C0]  ? lock_release+0x4b/0x3e0
[  245.623745][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  245.623758][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  245.623770][    C0]  print_report+0xca/0x240
[  245.623780][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.623794][    C0]  kasan_report+0x118/0x150
[  245.623808][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.623822][    C0]  rose_timer_expiry+0x471/0x4b0
[  245.623835][    C0]  call_timer_fn+0x17e/0x5f0
[  245.623850][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.623863][    C0]  ? call_timer_fn+0xbe/0x5f0
[  245.623875][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  245.623890][    C0]  ? rcu_is_watching+0x15/0xb0
[  245.623900][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.623913][    C0]  __run_timer_base+0x61a/0x860
[  245.623926][    C0]  ? ktime_get+0x3e/0x1f0
[  245.623938][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  245.623950][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  245.623965][    C0]  run_timer_softirq+0xb7/0x180
[  245.623977][    C0]  handle_softirqs+0x283/0x870
[  245.623988][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  245.623999][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  245.624010][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  245.624023][    C0]  __irq_exit_rcu+0xca/0x1f0
[  245.624032][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  245.624043][    C0]  irq_exit_rcu+0x9/0x30
[  245.624052][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  245.624067][    C0]  </IRQ>
[  245.624070][    C0]  <TASK>
[  245.624074][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  245.624085][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  245.624124][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  245.624133][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  245.624143][    C0] RAX: ccf53b6effec6500 RBX: ffffffff819683b8 RCX: ccf53b6effec6500
[  245.624151][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  245.624159][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  245.624166][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38330
[  245.624174][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  245.624181][    C0]  ? do_idle+0x1e8/0x510
[  245.624191][    C0]  ? do_idle+0x1e8/0x510
[  245.624200][    C0]  default_idle+0x13/0x20
[  245.624210][    C0]  default_idle_call+0x74/0xb0
[  245.624219][    C0]  do_idle+0x1e8/0x510
[  245.624229][    C0]  ? __pfx_do_idle+0x10/0x10
[  245.624241][    C0]  cpu_startup_entry+0x44/0x60
[  245.624250][    C0]  rest_init+0x2de/0x300
[  245.624262][    C0]  start_kernel+0x3a9/0x410
[  245.624276][    C0]  x86_64_start_reservations+0x24/0x30
[  245.624291][    C0]  x86_64_start_kernel+0x143/0x1c0
[  245.624305][    C0]  common_startup_64+0x13e/0x147
[  245.624322][    C0]  </TASK>
[  245.624326][    C0] 
[  245.946961][    C0] Allocated by task 12246:
[  245.951366][    C0]  kasan_save_track+0x3e/0x80
[  245.956070][    C0]  __kasan_kmalloc+0x93/0xb0
[  245.960664][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  245.966115][    C0]  sctp_endpoint_new+0xdb/0xa50
[  245.970953][    C0]  sctp_init_sock+0x94a/0x1360
[  245.975700][    C0]  sctp_v6_init_sock+0x16/0x70
[  245.980537][    C0]  inet6_create+0xef4/0x1260
[  245.985142][    C0]  __sock_create+0x4b0/0x9f0
[  245.989845][    C0]  __sys_socket+0xd7/0x1b0
[  245.994255][    C0]  __x64_sys_socket+0x7a/0x90
[  245.999356][    C0]  do_syscall_64+0xfa/0x3b0
[  246.004031][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.009902][    C0] 
[  246.012202][    C0] Freed by task 12:
[  246.016009][    C0]  kasan_save_track+0x3e/0x80
[  246.020704][    C0]  kasan_save_free_info+0x46/0x50
[  246.025708][    C0]  __kasan_slab_free+0x5b/0x80
[  246.030452][    C0]  kfree+0x18e/0x440
[  246.034334][    C0]  rcu_core+0xca8/0x1770
[  246.038577][    C0]  handle_softirqs+0x283/0x870
[  246.043358][    C0]  do_softirq+0xec/0x180
[  246.047708][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  246.053094][    C0]  batadv_nc_purge_paths+0x318/0x3b0
[  246.058390][    C0]  batadv_nc_worker+0x328/0x610
[  246.063262][    C0]  process_scheduled_works+0xae1/0x17b0
[  246.068790][    C0]  worker_thread+0x8a0/0xda0
[  246.073465][    C0]  kthread+0x70e/0x8a0
[  246.077514][    C0]  ret_from_fork+0x3f9/0x770
[  246.082095][    C0]  ret_from_fork_asm+0x1a/0x30
[  246.086932][    C0] 
[  246.089230][    C0] Last potentially related work creation:
[  246.094942][    C0]  kasan_save_stack+0x3e/0x60
[  246.099595][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  246.104779][    C0]  call_rcu+0x157/0x9c0
[  246.108928][    C0]  sctp_destroy_sock+0x1ec/0x370
[  246.113984][    C0]  sk_common_release+0x72/0x2e0
[  246.118832][    C0]  sctp_close+0x783/0x900
[  246.123147][    C0]  inet_release+0x144/0x190
[  246.127631][    C0]  sock_close+0xc3/0x240
[  246.131865][    C0]  __fput+0x44c/0xa70
[  246.135920][    C0]  task_work_run+0x1d4/0x260
[  246.140759][    C0]  exit_to_user_mode_loop+0xec/0x110
[  246.146028][    C0]  do_syscall_64+0x2bd/0x3b0
[  246.150597][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.156502][    C0] 
[  246.158811][    C0] The buggy address belongs to the object at ffff8880549b3000
[  246.158811][    C0]  which belongs to the cache kmalloc-512 of size 512
[  246.172938][    C0] The buggy address is located 42 bytes inside of
[  246.172938][    C0]  freed 512-byte region [ffff8880549b3000, ffff8880549b3200)
[  246.186642][    C0] 
[  246.188980][    C0] The buggy address belongs to the physical page:
[  246.195500][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x549b0
[  246.204429][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  246.213007][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  246.220544][    C0] page_type: f5(slab)
[  246.224543][    C0] raw: 00fff00000000040 ffff88801a441c80 ffffea0000c03a00 dead000000000002
[  246.233127][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  246.241712][    C0] head: 00fff00000000040 ffff88801a441c80 ffffea0000c03a00 dead000000000002
[  246.250382][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  246.259052][    C0] head: 00fff00000000002 ffffea0001526c01 00000000ffffffff 00000000ffffffff
[  246.267884][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  246.276623][    C0] page dumped because: kasan: bad access detected
[  246.283031][    C0] page_owner tracks the page as allocated
[  246.288749][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6047, tgid 6046 (syz.3.4), ts 63899385830, free_ts 63897188937
[  246.309673][    C0]  post_alloc_hook+0x240/0x2a0
[  246.314427][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  246.319966][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  246.325762][    C0]  alloc_pages_mpol+0x232/0x4a0
[  246.330618][    C0]  allocate_slab+0x8a/0x370
[  246.335136][    C0]  ___slab_alloc+0xbeb/0x1410
[  246.339794][    C0]  __kmalloc_cache_noprof+0x296/0x3d0
[  246.345149][    C0]  tls_set_sw_offload+0x386/0x17d0
[  246.350238][    C0]  tls_setsockopt+0xc8b/0x1340
[  246.354981][    C0]  do_sock_setsockopt+0x179/0x1b0
[  246.360069][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  246.365280][    C0]  do_syscall_64+0xfa/0x3b0
[  246.369757][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.375630][    C0] page last free pid 6045 tgid 6044 stack trace:
[  246.381955][    C0]  __free_frozen_pages+0xbc4/0xd30
[  246.387168][    C0]  stack_depot_save_flags+0x436/0x860
[  246.392549][    C0]  kasan_save_track+0x4f/0x80
[  246.397247][    C0]  __kasan_kmalloc+0x93/0xb0
[  246.401828][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  246.407288][    C0]  get_device_parent+0x255/0x3a0
[  246.412232][    C0]  device_add+0x2e1/0xb50
[  246.416598][    C0]  netdev_register_kobject+0x178/0x310
[  246.422141][    C0]  register_netdevice+0x126c/0x1ae0
[  246.427336][    C0]  cfg80211_register_netdevice+0x150/0x2f0
[  246.433140][    C0]  ieee80211_if_add+0xe60/0x1390
[  246.438077][    C0]  ieee80211_register_hw+0x3551/0x4080
[  246.443527][    C0]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  246.449235][    C0]  hwsim_new_radio_nl+0xea4/0x1b10
[  246.454329][    C0]  genl_family_rcv_msg_doit+0x215/0x300
[  246.459853][    C0]  genl_rcv_msg+0x60e/0x790
[  246.464334][    C0] 
[  246.466633][    C0] Memory state around the buggy address:
[  246.472409][    C0]  ffff8880549b2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  246.480476][    C0]  ffff8880549b2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  246.488623][    C0] >ffff8880549b3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.496669][    C0]                                   ^
[  246.502113][    C0]  ffff8880549b3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.510159][    C0]  ffff8880549b3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.518198][    C0] ==================================================================
[  246.526376][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  246.533597][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  246.542610][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  246.552822][    C0] Call Trace:
[  246.556100][    C0]  <IRQ>
[  246.559013][    C0]  dump_stack_lvl+0x99/0x250
[  246.563587][    C0]  ? __asan_memcpy+0x40/0x70
[  246.568157][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.573340][    C0]  ? __pfx__printk+0x10/0x10
[  246.577924][    C0]  vpanic+0x281/0x750
[  246.581916][    C0]  ? __pfx_vpanic+0x10/0x10
[  246.586520][    C0]  ? ct_nmi_exit+0x14b/0x1d0
[  246.591207][    C0]  panic+0xb9/0xc0
[  246.594950][    C0]  ? __pfx_panic+0x10/0x10
[  246.599368][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  246.605255][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  246.611147][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  246.616291][    C0]  check_panic_on_warn+0x89/0xb0
[  246.621213][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  246.626308][    C0]  end_report+0x78/0x160
[  246.630533][    C0]  kasan_report+0x129/0x150
[  246.635026][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  246.640123][    C0]  rose_timer_expiry+0x471/0x4b0
[  246.645107][    C0]  call_timer_fn+0x17e/0x5f0
[  246.649676][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  246.655127][    C0]  ? call_timer_fn+0xbe/0x5f0
[  246.659886][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  246.665103][    C0]  ? rcu_is_watching+0x15/0xb0
[  246.669888][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  246.675341][    C0]  __run_timer_base+0x61a/0x860
[  246.680187][    C0]  ? ktime_get+0x3e/0x1f0
[  246.684512][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  246.689901][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  246.696144][    C0]  run_timer_softirq+0xb7/0x180
[  246.701083][    C0]  handle_softirqs+0x283/0x870
[  246.705930][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  246.710709][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  246.715976][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  246.721172][    C0]  __irq_exit_rcu+0xca/0x1f0
[  246.725855][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  246.731380][    C0]  irq_exit_rcu+0x9/0x30
[  246.735600][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  246.741260][    C0]  </IRQ>
[  246.744172][    C0]  <TASK>
[  246.747083][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.753043][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  246.758833][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  246.778435][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  246.784580][    C0] RAX: ccf53b6effec6500 RBX: ffffffff819683b8 RCX: ccf53b6effec6500
[  246.792543][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  246.800518][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  246.808595][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38330
[  246.816567][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  246.824649][    C0]  ? do_idle+0x1e8/0x510
[  246.828995][    C0]  ? do_idle+0x1e8/0x510
[  246.833271][    C0]  default_idle+0x13/0x20
[  246.837601][    C0]  default_idle_call+0x74/0xb0
[  246.842357][    C0]  do_idle+0x1e8/0x510
[  246.846470][    C0]  ? __pfx_do_idle+0x10/0x10
[  246.851096][    C0]  cpu_startup_entry+0x44/0x60
[  246.855852][    C0]  rest_init+0x2de/0x300
[  246.860086][    C0]  start_kernel+0x3a9/0x410
[  246.864579][    C0]  x86_64_start_reservations+0x24/0x30
[  246.870023][    C0]  x86_64_start_kernel+0x143/0x1c0
[  246.875138][    C0]  common_startup_64+0x13e/0x147
[  246.880077][    C0]  </TASK>
[  246.883472][    C0] Kernel Offset: disabled
[  246.887802][    C0] Rebooting in 86400 seconds..