last executing test programs:

6.076908256s ago: executing program 0 (id=1239):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16=r2], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r4, 0x0, &(0x7f0000000200))
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)

5.986671922s ago: executing program 2 (id=1240):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={<r2=>r0, 0x7fffffff, 0x1000, 0x40})
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8001, 0x6, 0xfa000000, <r3=>0x0}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x50, &(0x7f0000000280)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f00000003c0)=0x10)
r4 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket(0x29, 0x5, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000740)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x2, '\x00', {0xb, 0x6, "8234ed", 0x10, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1}}}}}}}, 0x0)
recvfrom$inet6(r6, 0x0, 0x0, 0x10142, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private1, 0xffff4cb5}, 0x1c)
ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, 0x0, 0xfffffffd}}, 0xb8}}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x430, @empty, 0x9}, 0x1c)
setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r8, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000068c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0)

5.626214658s ago: executing program 2 (id=1244):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000580)={'erspan0\x00', <r0=>0x0, 0x20, 0x40, 0x3, 0x7f0, {{0x8, 0x4, 0x3, 0x3b, 0x20, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0xd3, 0x0, 0xc, [0x0, 0x80000001]}]}}}}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xf94, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x18, r1}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x8, 0x80, 0x1000, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x52b2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x100, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28)

5.272530985s ago: executing program 2 (id=1248):
r0 = socket(0x1a, 0x3, 0x9)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, 0xd, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x4010)
unshare(0x6a040000)
r1 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x3, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c)
sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="82ef", 0x3a}], 0x1}}], 0x1, 0x4400c800)
write(r4, &(0x7f0000000440)='}y', 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

3.547148878s ago: executing program 0 (id=1263):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x2000041)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

3.132977968s ago: executing program 0 (id=1266):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="cc", 0x1}, {&(0x7f0000000300)="0000e264d80000a14a87f00000400000000000", 0x13}, {&(0x7f0000001280)="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", 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x804)
bind$vsock_stream(r1, 0x0, 0x0)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
connect$vsock_stream(r2, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)

2.853683281s ago: executing program 1 (id=1268):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r0, 0x5a718000)

2.68238003s ago: executing program 2 (id=1269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x1ff)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4044)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9641, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20)
setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4)
sendmmsg$unix(r7, &(0x7f0000006e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x8000}}], 0x1, 0x0)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$6lowpan_control(r11, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
splice(r9, 0x0, r6, &(0x7f0000000000), 0x7fffffffffffffff, 0x0)
accept4$rose(r5, 0x0, 0x0, 0x800)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="73050000000000007110af000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r13, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000001186e1d0466eb9c298aa91139e14bef07eb115c790327e425ac8e9ef", @ANYRES32=0x0, @ANYRESOCT=r10, @ANYRESDEC=r2, @ANYRES8=r3, @ANYRESHEX=r13, @ANYRES8=r4], 0x50)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000ae00000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r15}, 0x10)
sendmmsg(r13, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890)

2.600290468s ago: executing program 1 (id=1271):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, 0x0, 0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911300000000000851000000200000085000000b400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x6}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18dfff0000002577c6002000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006a00"], 0x18}}, 0x20004000)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x5, 0x7f, 0x3, 0x39, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x8, 0x8, 0x6}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000003c0)=r8)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)

2.388681651s ago: executing program 4 (id=1272):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303000000000000000006000000040003"], 0x1c}}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={<r4=>0x0, @loopback, @empty}, &(0x7f00000005c0)=0xc)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4008840)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0x9c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
r10 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000400), 0x0, 0x800)
bind$alg(r9, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r11=>0x41424344}, 0x4, 0xffffffff)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f1953b4f1e9608db30ac011fe0496c8346e106e4058aed5275464f44997110cd693d6915fe0636fb5c39875024a9fc31be8e9f2acdf0f866e2e30e706e1badd1d16482a65b3d48ffb7449292364adb7c1b8fa9f8ea586ff5d542efa6c44f3c5ba85fa3afc317bf9f070f14afa8b97cd000"/126, @ANYRES16=r12, @ANYBLOB="100028bd7000fedbdf250b0000002400068005000200400000000800060008000000060005004e240000060005004e2000000800030008000000"], 0x40}, 0x1, 0x0, 0x0, 0x600000d0}, 0x80)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r11, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f00000001c0), 0x4, 0x1)
syz_emit_ethernet(0xf9, &(0x7f0000000900)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "7cee35", 0xc3, 0x21, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x11, 0x8, 0x1, 0xc, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}], {{0x4e23, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x7, "20fe11", 0xbc, "fb0817"}, "a83a023ff7087f7a8fb3f5fa9cd03d66bc4014581269fae6137484e710ce9a9d55eb5126cf62171e40c434a97dc58230993d1b0d27bd87d1458373738183f33bf86e08df445206b39d1a115c7f7c23c1ece94cd9987bc019f9a9716f66604b83df9d0b3df9d3ae0ca526fc"}}}}}}, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r8, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13, <r14=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
getsockname$inet6(r8, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94)

2.296020633s ago: executing program 4 (id=1273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', <r1=>0x0, 0x29, 0xc, 0x6, 0x4, 0x0, @private1, @empty, 0x8, 0x7, 0x401, 0x8}})
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=@newqdisc={0x290, 0x24, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff2}, {0xfff3, 0xa}, {0x10, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xca}, @TCA_RATE={0x6, 0x5, {0x5, 0x40}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @qdisc_kind_options=@q_choke={{0xa}, {0x228, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x7, 0x7, 0x20, 0x7, 0x1b, 0x5}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x87}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x44040)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x63}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000180)=""/12, 0x38, 0xc, 0x1, 0x7fff, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback, r3, 0x8, &(0x7f00000000c0)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2.156394004s ago: executing program 4 (id=1274):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYRESHEX=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x100, 0xe}, 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendto$llc(r2, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@gettaction={0x80, 0x32, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x101}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x82f}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x80}}, 0x0)
r6 = socket(0x8, 0x800, 0x4000)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xff07, 0x0, 0x0, &(0x7f00000002c0), 0x10}, 0x140)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5460, 0x0)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="1000266fb1f1e89bb16231028e5c2c3c4e000000000000e009579eaac4588e0f35828b7734d15b6a66c5dfb5a01ec403c9228f386cb62c4284d44f1a7ab6815b80c881523560f6584767998e0529b5a434635930"], 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000010)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @remote}], 0xffffffffffffffe9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1.962343219s ago: executing program 0 (id=1275):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
unshare(0x24020400)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r5=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r6=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r5, r6}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x3}}, 0x8, 0x1, 0xffff, 0x5190, 0x1, 0x1, 0x6}, 0x9c)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r7, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {0x2}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
close(0x3)

1.65229954s ago: executing program 2 (id=1276):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1, 0x0, 0x23}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r2, 0xb1d}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}}, 0x4020000)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x2d, 0x200, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x1d}]}, 0x18}], 0x1}, 0x300)

1.551965481s ago: executing program 4 (id=1277):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[], 0x38}}, 0x20040810)

1.516599227s ago: executing program 1 (id=1278):
r0 = epoll_create1(0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000480)={0x68000005})
epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0xa, 0x8, 0x4, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0xe7, &(0x7f0000000240)=""/231, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xe, 0xfffffffe, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r2], 0x0, 0x10, 0x3ff}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x14, 0x1, 0x3f, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], <r4=>0x0}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r6, 0xff0a, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000580)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r8}, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r6, r3, 0xa, 0x21, 0xffffffffffffffff, @void, @void, @void, @value=r8, r4}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000002000000000000120000000004000000000000120200000000005f0061"], 0x0, 0x42}, 0x20)
recvmmsg$unix(r5, &(0x7f0000007e40)=[{{&(0x7f0000000740), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f00000006c0)=""/59, 0x3b}, {&(0x7f0000000980)=""/214, 0xd6}, {&(0x7f0000000a80)=""/207, 0xcf}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000bc0)=""/199, 0xc7}], 0x7, &(0x7f0000000d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000ec0)=""/1, 0x1}, {&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000f80)=""/151, 0x97}, {&(0x7f0000001040)=""/223, 0xdf}, {&(0x7f0000001140)=""/227, 0xe3}, {&(0x7f0000001240)=""/229, 0xe5}], 0x6, &(0x7f00000013c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001480)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001500)=""/39, 0x27}, {&(0x7f0000001540)=""/209, 0xd1}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f00000016c0)=""/25, 0x19}, {&(0x7f0000001700)=""/78, 0x4e}, {&(0x7f0000001840)=""/185, 0xb9}, {&(0x7f0000001900)=""/114, 0x72}, {&(0x7f0000001780)=""/61, 0x3d}, {&(0x7f0000001980)=""/55, 0x37}, {&(0x7f00000019c0)=""/250, 0xfa}], 0xa, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/105, 0x69}, {&(0x7f0000001dc0)=""/12, 0xc}, {&(0x7f0000001e00)=""/178, 0xb2}, {&(0x7f0000001ec0)=""/60, 0x3c}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/182, 0xb6}], 0x7, &(0x7f0000002040)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f00000054c0)=[{&(0x7f0000005200)=""/131, 0x83}, {&(0x7f00000052c0)=""/161, 0xa1}, {&(0x7f00000021c0)=""/100, 0x64}, {&(0x7f0000005380)=""/134, 0x86}, {&(0x7f0000005440)=""/96, 0x60}], 0x5, &(0x7f0000005540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000005580)=@abs, 0x6e, &(0x7f00000059c0)=[{&(0x7f0000005600)=""/79, 0x4f}, {&(0x7f0000005680)=""/12, 0xc}, {&(0x7f00000056c0)=""/119, 0x77}, {&(0x7f0000005740)=""/57, 0x39}, {&(0x7f0000005780)=""/238, 0xee}, {&(0x7f0000005880)=""/33, 0x21}, {&(0x7f00000058c0)=""/154, 0x9a}, {&(0x7f0000005980)=""/3, 0x3}], 0x8, &(0x7f0000005a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000005ac0), 0x6e, &(0x7f0000007d00)=[{&(0x7f0000005b40)=""/182, 0xb6}, {&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/168, 0xa8}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/25, 0x19}], 0x5, &(0x7f0000007d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x7, 0x2, 0x0)

1.448431918s ago: executing program 2 (id=1279):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
unshare(0x22020600)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r4, 0x10e, 0x5, 0x0, &(0x7f0000001480))
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), 0x4)

1.332769211s ago: executing program 4 (id=1281):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
socket(0x10, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000018f080000000000000000cb7e6200009500000000000000c048ff2848a0d15263e508f1a324d193b60ca98684a070c92f3c9b47b36e0dde7c599d65f579fb11efa76fc953d26583714f749d2f7c09561481d4712b312fb60dc49e0b1170132dbea7615012f39d8f6e8f97396b446298efa7fde41fa6580254718504b6eea7a69a770ee9a5b4ee81753a2b7982c13ac2f2"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x10048004)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x80, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xe, 0x6, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) (async)
socket$netlink(0x10, 0x3, 0xb) (async)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.214152285s ago: executing program 3 (id=1282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xbe83}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x68}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_batadv\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x38}}, 0x0) (async, rerun: 64)
getpeername$netlink(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async, rerun: 64)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x210, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x80)

984.675059ms ago: executing program 3 (id=1283):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000340)={0x1, 0x1, 0x8, r3, 0x3ff}, 0xc)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000140), 0x0, 0x4008011)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x20}}, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$netlink(r5, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x21, 0x1, 0x7f, 0x9, 0x40, r0, 0x1, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50)

969.571886ms ago: executing program 0 (id=1284):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2f, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8)
writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000000000000a004e240000000cff020000000000000000000000000001030000000000000000000000000000000000000000000000000000000d00000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000baf7faef7333379"], 0x90)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r11, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xd6, 0x5c9, 0x590, 0x9, 0xe]}, @NL80211_ATTR_FRAME={0x3b, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x93}, @device_b, @device_a, @random="31134e125734", {0x0, 0xce}}, @tdls_setup_req={0xc, 0x0, "", 0x2, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x5, 0x0, {0x58c6, 0x6}, 0x400, 0x3, 0x1}}, @void}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8090)
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r13, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x309, 0xff, {{0x23, 0x4, 0x2, 0x5, 0x8c, 0x68, 0x0, 0xc0, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x8, 0xba, 0x0, 0x4, [0x1]}, @timestamp_prespec={0x44, 0x4, 0xd2, 0x3, 0x3}, @ssrr={0x89, 0xb, 0x6c, [@loopback, @remote]}, @timestamp_prespec={0x44, 0x34, 0x23, 0x3, 0x2, [{@rand_addr=0x64010101, 0x80}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@loopback, 0x982}, {@private=0xa010102, 0x1}]}, @lsrr={0x83, 0x3, 0x16}, @timestamp={0x44, 0x14, 0xac, 0x0, 0xf, [0xfffffff1, 0x0, 0x7ff, 0x5]}, @timestamp_addr={0x44, 0xc, 0x5b, 0x1, 0x9, [{@multicast1, 0x2}]}, @generic={0x88, 0x7, "10dfc8837a"}]}}}}})
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a60000000060a090400000000000000000200000034000480300001800a0001"], 0x88}}, 0x4004890)

951.91706ms ago: executing program 4 (id=1285):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x26020480)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="002c92d4c1eb0617f3ffffff6903ffff00000000ff010000000002026bb991dadaa05072ac7d6863510877b41b53b4677293176df7ac4457c2e68e584e0b724c95a876a04aed0f27bdbfa18797d741902f64a2417400002000c3fa8861047e3bbd82a528f569097aaaa4e62a6283e87bb418", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000100)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="2df234d41226e9f07112f6cc98d118000000000000008400000000000000ffc300000300010018000000000000008400001100000000ff8b461c7cb88effffff0000000022ba0e3d7f3a0bb0e4fb530527f696e1c020225e4a416872b5a18773c2927e50bf5ea0f436e3b1c43e1280d1cb9e33998997d42cbfe915fe87290848e27c6764dfa126392368d1f5"], 0x30, 0x14001}], 0x1, 0x4044040)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES64=r3, @ANYRESHEX=r6, @ANYRESOCT=r7, @ANYRESDEC=r3, @ANYRES64=r1, @ANYRES16=r1, @ANYRESOCT=r4], 0x14}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'bond_slave_0\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x8}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x1}, 0x98, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x7ff, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0)

574.519187ms ago: executing program 1 (id=1286):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32)
r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c37c2b979564e6e) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESOCT=r4], 0x3c}}, 0x0) (async)
unshare(0x400) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x80087601, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e64300000000000000000000000f9ce"], 0x2c}}, 0x40006)

428.634683ms ago: executing program 3 (id=1287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0800050006000000100017800400020500000000000000000c00178004000200040006001c00178004000400040003000400060004000500"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0)

419.325737ms ago: executing program 0 (id=1288):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b000814010002000000"], 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x7, 0x1, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x7, 0x1, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
socket(0x840000000002, 0x3, 0xff) (async)
r7 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) (async)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

281.59335ms ago: executing program 1 (id=1289):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

216.454753ms ago: executing program 3 (id=1290):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="edc8cbbb040000000400000009000000000000002e1a16b8c1288aa19ff34791ede5ac40898b9b2fdc06c7ef3396cdd43dae4232f37150e6dda54aa0b613f88d94f30e838b83b460a0450a4f8592e944bc65700fee012e7162", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) (async, rerun: 32)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r3 = socket(0x15, 0x80005, 0x0)
getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) (async, rerun: 64)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (rerun: 64)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 32)
readv(r6, &(0x7f00000009c0)=[{&(0x7f0000000a40)=""/152, 0x98}, {&(0x7f0000000a00)=""/2, 0x2}], 0x2) (async, rerun: 32)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x2404c880)
recvmmsg(r6, &(0x7f0000002440), 0x0, 0x2161, 0x0) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) (async)
r7 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')

114.102226ms ago: executing program 3 (id=1291):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[], 0x38}}, 0x20040810)

24.533682ms ago: executing program 1 (id=1292):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804)
sendto$inet6(r0, 0x0, 0x0, 0x204c850, &(0x7f0000000300)={0xa, 0x100, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c)
shutdown(r0, 0x1)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x1}, 0x8)

0s ago: executing program 3 (id=1293):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

619167][ T7549] name failslab, interval 1, probability 0, space 0, times 0
[  145.648808][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.0.386 Not tainted syzkaller #0 PREEMPT(full) 
[  145.648835][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  145.648846][ T7549] Call Trace:
[  145.648854][ T7549]  <TASK>
[  145.648862][ T7549]  dump_stack_lvl+0x189/0x250
[  145.648892][ T7549]  ? __pfx____ratelimit+0x10/0x10
[  145.648922][ T7549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.648945][ T7549]  ? __pfx__printk+0x10/0x10
[  145.648978][ T7549]  ? __pfx___might_resched+0x10/0x10
[  145.649002][ T7549]  should_fail_ex+0x414/0x560
[  145.649034][ T7549]  should_failslab+0xa8/0x100
[  145.649064][ T7549]  __kmalloc_cache_noprof+0x70/0x3d0
[  145.649090][ T7549]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  145.649120][ T7549]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  145.649164][ T7549]  genl_family_rcv_msg_doit+0x215/0x300
[  145.649198][ T7549]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  145.649238][ T7549]  ? bpf_lsm_capable+0x9/0x20
[  145.649261][ T7549]  ? security_capable+0x7e/0x2e0
[  145.649297][ T7549]  genl_rcv_msg+0x60e/0x790
[  145.649327][ T7549]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.649347][ T7549]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  145.649372][ T7549]  ? __asan_memcpy+0x40/0x70
[  145.649390][ T7549]  ? __pfx_ref_tracker_free+0x10/0x10
[  145.649423][ T7549]  netlink_rcv_skb+0x205/0x470
[  145.649438][ T7549]  ? __lock_acquire+0xab9/0xd20
[  145.649463][ T7549]  ? __pfx_genl_rcv_msg+0x10/0x10
[  145.649485][ T7549]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.649522][ T7549]  ? down_read+0x1ad/0x2e0
[  145.649542][ T7549]  genl_rcv+0x28/0x40
[  145.649560][ T7549]  netlink_unicast+0x82c/0x9e0
[  145.649596][ T7549]  ? __pfx_netlink_unicast+0x10/0x10
[  145.649621][ T7549]  ? netlink_sendmsg+0x642/0xb30
[  145.649635][ T7549]  ? skb_put+0x11b/0x210
[  145.649660][ T7549]  netlink_sendmsg+0x805/0xb30
[  145.649688][ T7549]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.649710][ T7549]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.649730][ T7549]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.649758][ T7549]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.649777][ T7549]  __sock_sendmsg+0x219/0x270
[  145.649804][ T7549]  ____sys_sendmsg+0x505/0x830
[  145.649838][ T7549]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.649870][ T7549]  ? import_iovec+0x74/0xa0
[  145.649897][ T7549]  ___sys_sendmsg+0x21f/0x2a0
[  145.649921][ T7549]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.649986][ T7549]  ? __fget_files+0x2a/0x420
[  145.650002][ T7549]  ? __fget_files+0x3a0/0x420
[  145.650031][ T7549]  __x64_sys_sendmsg+0x19b/0x260
[  145.650056][ T7549]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.650089][ T7549]  ? __pfx_ksys_write+0x10/0x10
[  145.650108][ T7549]  ? rcu_is_watching+0x15/0xb0
[  145.650131][ T7549]  ? do_syscall_64+0xbe/0x3b0
[  145.650154][ T7549]  do_syscall_64+0xfa/0x3b0
[  145.650170][ T7549]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.650187][ T7549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.650205][ T7549]  ? clear_bhb_loop+0x60/0xb0
[  145.650228][ T7549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.650246][ T7549] RIP: 0033:0x7fc69058ebe9
[  145.650264][ T7549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.650279][ T7549] RSP: 002b:00007fc68e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.650300][ T7549] RAX: ffffffffffffffda RBX: 00007fc6907c5fa0 RCX: 00007fc69058ebe9
[  145.650313][ T7549] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  145.650326][ T7549] RBP: 00007fc68e7f6090 R08: 0000000000000000 R09: 0000000000000000
[  145.650337][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  145.650347][ T7549] R13: 00007fc6907c6038 R14: 00007fc6907c5fa0 R15: 00007ffca4e01bd8
[  145.650381][ T7549]  </TASK>
[  146.103796][ T7549] netlink: del zone limit has 4 unknown bytes
[  146.600809][ T7575] bond0: entered promiscuous mode
[  146.627344][ T7575] bond_slave_0: entered promiscuous mode
[  146.633367][ T7575] bond_slave_1: entered promiscuous mode
[  146.650291][ T7575] batadv0: entered promiscuous mode
[  146.694752][ T7575] hsr1: entered allmulticast mode
[  146.699842][ T7575] bond0: entered allmulticast mode
[  146.725267][ T7575] bond_slave_0: entered allmulticast mode
[  146.735224][ T7575] bond_slave_1: entered allmulticast mode
[  146.749830][ T7575] batadv0: entered allmulticast mode
[  146.775106][ T7575] 8021q: adding VLAN 0 to HW filter on device hsr1
[  146.812456][ T7575] bond0: left promiscuous mode
[  146.835542][ T7575] bond_slave_0: left promiscuous mode
[  146.847371][ T7575] bond_slave_1: left promiscuous mode
[  146.874637][ T7575] batadv0: left promiscuous mode
[  147.029728][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[  147.070984][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  147.077731][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  147.084321][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  147.090769][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  147.274977][ T7606] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.396'.
[  147.318125][ T7606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'.
[  147.414123][ T7611] netlink: 'syz.3.397': attribute type 39 has an invalid length.
[  147.459365][ T7613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.399'.
[  147.585757][ T7615] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  148.012946][ T7643] netlink: 'syz.3.405': attribute type 2 has an invalid length.
[  148.035645][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'.
[  148.368644][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'.
[  148.651540][ T7667] netlink: 232 bytes leftover after parsing attributes in process `syz.2.410'.
[  148.729890][ T7667] netlink: 188 bytes leftover after parsing attributes in process `syz.2.410'.
[  149.079948][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'.
[  149.194537][ T7686] netlink: 'syz.2.413': attribute type 12 has an invalid length.
[  149.370346][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.414'.
[  149.407560][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'.
[  149.407605][ T7693] syzkaller1: entered promiscuous mode
[  149.453960][ T7686] netlink: 'syz.2.413': attribute type 12 has an invalid length.
[  149.498286][ T7693] syzkaller1: entered allmulticast mode
[  149.563976][   T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.590628][   T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.617764][ T7633] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.656447][   T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.666015][ T5867] Bluetooth: hci0: command tx timeout
[  149.701459][   T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.738040][ T7702] netlink: 432 bytes leftover after parsing attributes in process `syz.3.416'.
[  150.411556][ T7717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.418'.
[  150.798633][ T7738] netem: change failed
[  150.870724][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'.
[  151.521547][ T7754] syzkaller0: entered promiscuous mode
[  151.542412][ T7754] syzkaller0: entered allmulticast mode
[  151.571694][   T59] syzkaller0: tun_net_xmit 70
[  151.583122][ T7756] syzkaller0: tun_chr_ioctl cmd 1074025677
[  151.606330][ T7756] syzkaller0: Linktype set failed because interface is up
[  151.882453][ T7786] IPv6: Can't replace route, no match found
[  151.929969][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.022224][ T7780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.485344][ T7799] bridge0: port 3(bond0) entered disabled state
[  152.492232][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.500351][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.714828][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.757602][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.797135][ T7804] netlink: 'syz.4.441': attribute type 2 has an invalid length.
[  153.053563][ T3019] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.082983][ T3019] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.373302][ T7820] __nla_validate_parse: 2 callbacks suppressed
[  153.373324][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[  153.422011][ T3019] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.453326][ T3019] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.475608][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'.
[  153.580294][ T7825] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  153.620083][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'.
[  153.912098][ T7839] netlink: 88 bytes leftover after parsing attributes in process `syz.2.448'.
[  153.956369][ T7841] netlink: 'syz.4.449': attribute type 2 has an invalid length.
[  154.102466][ T7841] ave_0: entered promiscuous mode
[  154.148854][ T7847] FAULT_INJECTION: forcing a failure.
[  154.148854][ T7847] name failslab, interval 1, probability 0, space 0, times 0
[  154.206974][ T7849] netlink: del zone limit has 4 unknown bytes
[  154.231709][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.2.452 Not tainted syzkaller #0 PREEMPT(full) 
[  154.231737][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  154.231749][ T7847] Call Trace:
[  154.231757][ T7847]  <TASK>
[  154.231765][ T7847]  dump_stack_lvl+0x189/0x250
[  154.231794][ T7847]  ? __pfx____ratelimit+0x10/0x10
[  154.231824][ T7847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.231846][ T7847]  ? __pfx__printk+0x10/0x10
[  154.231877][ T7847]  ? __pfx___might_resched+0x10/0x10
[  154.231902][ T7847]  should_fail_ex+0x414/0x560
[  154.231932][ T7847]  should_failslab+0xa8/0x100
[  154.231959][ T7847]  __kmalloc_cache_noprof+0x70/0x3d0
[  154.231982][ T7847]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  154.232010][ T7847]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  154.232052][ T7847]  genl_family_rcv_msg_doit+0x215/0x300
[  154.232084][ T7847]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  154.232123][ T7847]  ? bpf_lsm_capable+0x9/0x20
[  154.232145][ T7847]  ? security_capable+0x7e/0x2e0
[  154.232178][ T7847]  genl_rcv_msg+0x60e/0x790
[  154.232210][ T7847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.232232][ T7847]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  154.232259][ T7847]  ? __asan_memcpy+0x40/0x70
[  154.232278][ T7847]  ? __pfx_ref_tracker_free+0x10/0x10
[  154.232313][ T7847]  netlink_rcv_skb+0x205/0x470
[  154.232330][ T7847]  ? __lock_acquire+0xab9/0xd20
[  154.232357][ T7847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.232381][ T7847]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  154.232432][ T7847]  ? down_read+0x1ad/0x2e0
[  154.232457][ T7847]  genl_rcv+0x28/0x40
[  154.232478][ T7847]  netlink_unicast+0x82c/0x9e0
[  154.232517][ T7847]  ? __pfx_netlink_unicast+0x10/0x10
[  154.232545][ T7847]  ? netlink_sendmsg+0x642/0xb30
[  154.232561][ T7847]  ? skb_put+0x11b/0x210
[  154.232586][ T7847]  netlink_sendmsg+0x805/0xb30
[  154.232617][ T7847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.232640][ T7847]  ? aa_sock_msg_perm+0xf1/0x1d0
[  154.232661][ T7847]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.232680][ T7847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.232700][ T7847]  __sock_sendmsg+0x219/0x270
[  154.232730][ T7847]  ____sys_sendmsg+0x505/0x830
[  154.232760][ T7847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.232789][ T7847]  ? import_iovec+0x74/0xa0
[  154.232814][ T7847]  ___sys_sendmsg+0x21f/0x2a0
[  154.232837][ T7847]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.232903][ T7847]  ? __fget_files+0x2a/0x420
[  154.232919][ T7847]  ? __fget_files+0x3a0/0x420
[  154.232948][ T7847]  __x64_sys_sendmsg+0x19b/0x260
[  154.232973][ T7847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.233006][ T7847]  ? __pfx_ksys_write+0x10/0x10
[  154.233027][ T7847]  ? rcu_is_watching+0x15/0xb0
[  154.233051][ T7847]  ? do_syscall_64+0xbe/0x3b0
[  154.233075][ T7847]  do_syscall_64+0xfa/0x3b0
[  154.233091][ T7847]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.233109][ T7847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.233126][ T7847]  ? clear_bhb_loop+0x60/0xb0
[  154.233148][ T7847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.233165][ T7847] RIP: 0033:0x7f0860b8ebe9
[  154.233183][ T7847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.233199][ T7847] RSP: 002b:00007f0861abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.233219][ T7847] RAX: ffffffffffffffda RBX: 00007f0860dc5fa0 RCX: 00007f0860b8ebe9
[  154.233232][ T7847] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  154.233243][ T7847] RBP: 00007f0861abd090 R08: 0000000000000000 R09: 0000000000000000
[  154.233254][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  154.233263][ T7847] R13: 00007f0860dc6038 R14: 00007f0860dc5fa0 R15: 00007ffd4e567ee8
[  154.233297][ T7847]  </TASK>
[  154.609883][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.453'.
[  155.013172][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'.
[  155.148031][ T7854] bond0: (slave wlan1): Releasing backup interface
[  155.256284][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.457'.
[  155.332356][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'.
[  155.495528][ T7875] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003
[  156.375382][ T7898] batadv_slave_1: entered promiscuous mode
[  156.701675][ T7908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.870009][ T7918] netlink: 32 bytes leftover after parsing attributes in process `syz.4.469'.
[  156.879196][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.469'.
[  157.242814][ T7913] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.261255][ T7897] batadv_slave_1: left promiscuous mode
[  157.448965][ T7906] tipc: Disabling bearer <eth:syzkaller0>
[  157.492348][ T7913] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.662621][ T7913] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.728020][ T7932] FAULT_INJECTION: forcing a failure.
[  157.728020][ T7932] name failslab, interval 1, probability 0, space 0, times 0
[  157.751498][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(full) 
[  157.751525][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  157.751535][ T7932] Call Trace:
[  157.751542][ T7932]  <TASK>
[  157.751551][ T7932]  dump_stack_lvl+0x189/0x250
[  157.751577][ T7932]  ? __pfx____ratelimit+0x10/0x10
[  157.751606][ T7932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.751628][ T7932]  ? __pfx__printk+0x10/0x10
[  157.751669][ T7932]  ? __pfx___might_resched+0x10/0x10
[  157.751693][ T7932]  should_fail_ex+0x414/0x560
[  157.751724][ T7932]  should_failslab+0xa8/0x100
[  157.751752][ T7932]  __kmalloc_cache_noprof+0x70/0x3d0
[  157.751776][ T7932]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  157.751804][ T7932]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  157.751844][ T7932]  genl_family_rcv_msg_doit+0x215/0x300
[  157.751877][ T7932]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  157.751915][ T7932]  ? bpf_lsm_capable+0x9/0x20
[  157.751938][ T7932]  ? security_capable+0x7e/0x2e0
[  157.751974][ T7932]  genl_rcv_msg+0x60e/0x790
[  157.752005][ T7932]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.752027][ T7932]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  157.752066][ T7932]  netlink_rcv_skb+0x205/0x470
[  157.752083][ T7932]  ? __lock_acquire+0xab9/0xd20
[  157.752110][ T7932]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.752133][ T7932]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.752171][ T7932]  ? down_read+0x1ad/0x2e0
[  157.752194][ T7932]  genl_rcv+0x28/0x40
[  157.752214][ T7932]  netlink_unicast+0x82c/0x9e0
[  157.752252][ T7932]  ? __pfx_netlink_unicast+0x10/0x10
[  157.752280][ T7932]  ? netlink_sendmsg+0x642/0xb30
[  157.752295][ T7932]  ? skb_put+0x11b/0x210
[  157.752320][ T7932]  netlink_sendmsg+0x805/0xb30
[  157.752350][ T7932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.752373][ T7932]  ? aa_sock_msg_perm+0xf1/0x1d0
[  157.752394][ T7932]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  157.752413][ T7932]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.752434][ T7932]  __sock_sendmsg+0x219/0x270
[  157.752463][ T7932]  ____sys_sendmsg+0x505/0x830
[  157.752493][ T7932]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.752526][ T7932]  ? import_iovec+0x74/0xa0
[  157.752553][ T7932]  ___sys_sendmsg+0x21f/0x2a0
[  157.752577][ T7932]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.752641][ T7932]  ? __fget_files+0x2a/0x420
[  157.752668][ T7932]  ? __fget_files+0x3a0/0x420
[  157.752698][ T7932]  __x64_sys_sendmsg+0x19b/0x260
[  157.752721][ T7932]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  157.752753][ T7932]  ? __pfx_ksys_write+0x10/0x10
[  157.752774][ T7932]  ? rcu_is_watching+0x15/0xb0
[  157.752800][ T7932]  ? do_syscall_64+0xbe/0x3b0
[  157.752824][ T7932]  do_syscall_64+0xfa/0x3b0
[  157.752840][ T7932]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.752858][ T7932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.752874][ T7932]  ? clear_bhb_loop+0x60/0xb0
[  157.752896][ T7932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.752913][ T7932] RIP: 0033:0x7f234818ebe9
[  157.752931][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.752946][ T7932] RSP: 002b:00007f2348f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.752966][ T7932] RAX: ffffffffffffffda RBX: 00007f23483c5fa0 RCX: 00007f234818ebe9
[  157.752979][ T7932] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  157.752990][ T7932] RBP: 00007f2348f87090 R08: 0000000000000000 R09: 0000000000000000
[  157.753000][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  157.753010][ T7932] R13: 00007f23483c6038 R14: 00007f23483c5fa0 R15: 00007ffc603d15a8
[  157.753041][ T7932]  </TASK>
[  157.755617][ T7932] netlink: del zone limit has 4 unknown bytes
[  158.192941][ T7913] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.375804][ T7947] __nla_validate_parse: 1 callbacks suppressed
[  158.375825][ T7947] netlink: 256 bytes leftover after parsing attributes in process `syz.1.478'.
[  158.426027][ T7947] netlink: 48 bytes leftover after parsing attributes in process `syz.1.478'.
[  158.481423][   T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.588734][ T3019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.632987][ T3019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.790986][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.829113][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[  158.909116][ T7961] bond3: (slave ip6gretap1): making interface the new active one
[  158.953219][ T7964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'.
[  159.005555][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'.
[  159.052014][ T7961] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  159.150174][ T7985] netlink: 88 bytes leftover after parsing attributes in process `syz.0.485'.
[  159.636524][ T7997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.960737][ T8012] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  159.996453][ T8012] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  160.025986][ T7997] tipc: Resetting bearer <eth:syzkaller0>
[  160.218436][ T7996] tipc: Disabling bearer <eth:syzkaller0>
[  160.262961][ T8019] tipc: Started in network mode
[  160.270532][ T8019] tipc: Node identity 2e73ee63db25, cluster identity 4711
[  160.281355][ T8019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.292384][ T8019] syzkaller0: entered promiscuous mode
[  160.319720][ T8019] syzkaller0: entered allmulticast mode
[  160.355909][ T8019] netlink: 'syz.4.492': attribute type 29 has an invalid length.
[  160.363799][ T8019] netlink: 148 bytes leftover after parsing attributes in process `syz.4.492'.
[  160.532804][ T8018] tipc: Resetting bearer <eth:syzkaller0>
[  160.606070][ T8018] tipc: Disabling bearer <eth:syzkaller0>
[  160.621166][ T8026] netlink: 88 bytes leftover after parsing attributes in process `syz.0.494'.
[  160.822013][ T8031] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  160.865902][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'.
[  160.904412][ T8028] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.495'.
[  160.913748][ T8028] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  161.564317][ T8061] FAULT_INJECTION: forcing a failure.
[  161.564317][ T8061] name failslab, interval 1, probability 0, space 0, times 0
[  161.615201][ T8061] CPU: 1 UID: 0 PID: 8061 Comm: syz.4.503 Not tainted syzkaller #0 PREEMPT(full) 
[  161.615229][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  161.615239][ T8061] Call Trace:
[  161.615247][ T8061]  <TASK>
[  161.615255][ T8061]  dump_stack_lvl+0x189/0x250
[  161.615282][ T8061]  ? __pfx____ratelimit+0x10/0x10
[  161.615309][ T8061]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.615329][ T8061]  ? __pfx__printk+0x10/0x10
[  161.615372][ T8061]  ? __pfx___might_resched+0x10/0x10
[  161.615396][ T8061]  should_fail_ex+0x414/0x560
[  161.615428][ T8061]  should_failslab+0xa8/0x100
[  161.615456][ T8061]  __kmalloc_cache_noprof+0x70/0x3d0
[  161.615480][ T8061]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  161.615510][ T8061]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  161.615553][ T8061]  genl_family_rcv_msg_doit+0x215/0x300
[  161.615588][ T8061]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  161.615627][ T8061]  ? bpf_lsm_capable+0x9/0x20
[  161.615650][ T8061]  ? security_capable+0x7e/0x2e0
[  161.615685][ T8061]  genl_rcv_msg+0x60e/0x790
[  161.615716][ T8061]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.615738][ T8061]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  161.615765][ T8061]  ? __asan_memcpy+0x40/0x70
[  161.615785][ T8061]  ? __pfx_ref_tracker_free+0x10/0x10
[  161.615819][ T8061]  netlink_rcv_skb+0x205/0x470
[  161.615834][ T8061]  ? __lock_acquire+0xab9/0xd20
[  161.615861][ T8061]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.615887][ T8061]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.615929][ T8061]  ? down_read+0x1ad/0x2e0
[  161.615954][ T8061]  genl_rcv+0x28/0x40
[  161.615976][ T8061]  netlink_unicast+0x82c/0x9e0
[  161.616014][ T8061]  ? __pfx_netlink_unicast+0x10/0x10
[  161.616043][ T8061]  ? netlink_sendmsg+0x642/0xb30
[  161.616059][ T8061]  ? skb_put+0x11b/0x210
[  161.616084][ T8061]  netlink_sendmsg+0x805/0xb30
[  161.616116][ T8061]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.616140][ T8061]  ? aa_sock_msg_perm+0xf1/0x1d0
[  161.616161][ T8061]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.616180][ T8061]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.616201][ T8061]  __sock_sendmsg+0x219/0x270
[  161.616231][ T8061]  ____sys_sendmsg+0x505/0x830
[  161.616261][ T8061]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.616304][ T8061]  ? import_iovec+0x74/0xa0
[  161.616331][ T8061]  ___sys_sendmsg+0x21f/0x2a0
[  161.616365][ T8061]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.616431][ T8061]  ? __fget_files+0x2a/0x420
[  161.616447][ T8061]  ? __fget_files+0x3a0/0x420
[  161.616475][ T8061]  __x64_sys_sendmsg+0x19b/0x260
[  161.616500][ T8061]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.616535][ T8061]  ? __pfx_ksys_write+0x10/0x10
[  161.616557][ T8061]  ? rcu_is_watching+0x15/0xb0
[  161.616582][ T8061]  ? do_syscall_64+0xbe/0x3b0
[  161.616607][ T8061]  do_syscall_64+0xfa/0x3b0
[  161.616624][ T8061]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.616642][ T8061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.616660][ T8061]  ? clear_bhb_loop+0x60/0xb0
[  161.616684][ T8061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.616701][ T8061] RIP: 0033:0x7f717498ebe9
[  161.616719][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.616734][ T8061] RSP: 002b:00007f7175754038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.616755][ T8061] RAX: ffffffffffffffda RBX: 00007f7174bc5fa0 RCX: 00007f717498ebe9
[  161.616769][ T8061] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  161.616781][ T8061] RBP: 00007f7175754090 R08: 0000000000000000 R09: 0000000000000000
[  161.616792][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.616803][ T8061] R13: 00007f7174bc6038 R14: 00007f7174bc5fa0 R15: 00007fffaacdaa08
[  161.616837][ T8061]  </TASK>
[  161.623255][ T8066] netlink: del zone limit has 4 unknown bytes
[  162.150307][ T8072] nbd: must specify at least one socket
[  162.314742][ T8080] FAULT_INJECTION: forcing a failure.
[  162.314742][ T8080] name failslab, interval 1, probability 0, space 0, times 0
[  162.336218][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.1.512 Not tainted syzkaller #0 PREEMPT(full) 
[  162.336245][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  162.336256][ T8080] Call Trace:
[  162.336263][ T8080]  <TASK>
[  162.336272][ T8080]  dump_stack_lvl+0x189/0x250
[  162.336301][ T8080]  ? __pfx____ratelimit+0x10/0x10
[  162.336330][ T8080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.336351][ T8080]  ? __pfx__printk+0x10/0x10
[  162.336385][ T8080]  ? __pfx___might_resched+0x10/0x10
[  162.336403][ T8080]  ? fs_reclaim_acquire+0x7d/0x100
[  162.336437][ T8080]  should_fail_ex+0x414/0x560
[  162.336469][ T8080]  should_failslab+0xa8/0x100
[  162.336498][ T8080]  __kmalloc_cache_noprof+0x70/0x3d0
[  162.336523][ T8080]  ? nf_tables_newchain+0x1d01/0x2900
[  162.336552][ T8080]  nf_tables_newchain+0x1d01/0x2900
[  162.336608][ T8080]  ? __pfx_nf_tables_newchain+0x10/0x10
[  162.336674][ T8080]  ? nfnl_pernet+0x23/0x240
[  162.336714][ T8080]  ? __nla_parse+0x40/0x60
[  162.336748][ T8080]  nfnetlink_rcv+0x1132/0x2520
[  162.336815][ T8080]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  162.336906][ T8080]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.336948][ T8080]  netlink_unicast+0x82c/0x9e0
[  162.336988][ T8080]  ? __pfx_netlink_unicast+0x10/0x10
[  162.337018][ T8080]  ? netlink_sendmsg+0x642/0xb30
[  162.337034][ T8080]  ? skb_put+0x11b/0x210
[  162.337059][ T8080]  netlink_sendmsg+0x805/0xb30
[  162.337091][ T8080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.337114][ T8080]  ? aa_sock_msg_perm+0xf1/0x1d0
[  162.337136][ T8080]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.337155][ T8080]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.337174][ T8080]  __sock_sendmsg+0x219/0x270
[  162.337204][ T8080]  ____sys_sendmsg+0x505/0x830
[  162.337233][ T8080]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.337265][ T8080]  ? import_iovec+0x74/0xa0
[  162.337292][ T8080]  ___sys_sendmsg+0x21f/0x2a0
[  162.337318][ T8080]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.337379][ T8080]  ? __fget_files+0x2a/0x420
[  162.337396][ T8080]  ? __fget_files+0x3a0/0x420
[  162.337427][ T8080]  __x64_sys_sendmsg+0x19b/0x260
[  162.337453][ T8080]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.337486][ T8080]  ? __pfx_ksys_write+0x10/0x10
[  162.337507][ T8080]  ? rcu_is_watching+0x15/0xb0
[  162.337532][ T8080]  ? do_syscall_64+0xbe/0x3b0
[  162.337557][ T8080]  do_syscall_64+0xfa/0x3b0
[  162.337575][ T8080]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.337600][ T8080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.337618][ T8080]  ? clear_bhb_loop+0x60/0xb0
[  162.337642][ T8080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.337659][ T8080] RIP: 0033:0x7f234818ebe9
[  162.337678][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.337693][ T8080] RSP: 002b:00007f2348f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.337714][ T8080] RAX: ffffffffffffffda RBX: 00007f23483c5fa0 RCX: 00007f234818ebe9
[  162.337727][ T8080] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  162.337739][ T8080] RBP: 00007f2348f87090 R08: 0000000000000000 R09: 0000000000000000
[  162.337749][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  162.337760][ T8080] R13: 00007f23483c6038 R14: 00007f23483c5fa0 R15: 00007ffc603d15a8
[  162.337793][ T8080]  </TASK>
[  162.385295][ T8079] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  163.049861][ T8102] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  163.253108][ T8110] FAULT_INJECTION: forcing a failure.
[  163.253108][ T8110] name failslab, interval 1, probability 0, space 0, times 0
[  163.337309][ T8114] netlink: del zone limit has 4 unknown bytes
[  163.369749][ T8110] CPU: 0 UID: 0 PID: 8110 Comm: syz.0.521 Not tainted syzkaller #0 PREEMPT(full) 
[  163.369776][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  163.369787][ T8110] Call Trace:
[  163.369795][ T8110]  <TASK>
[  163.369804][ T8110]  dump_stack_lvl+0x189/0x250
[  163.369833][ T8110]  ? __pfx____ratelimit+0x10/0x10
[  163.369862][ T8110]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.369886][ T8110]  ? __pfx__printk+0x10/0x10
[  163.369919][ T8110]  ? __pfx___might_resched+0x10/0x10
[  163.369944][ T8110]  should_fail_ex+0x414/0x560
[  163.369975][ T8110]  should_failslab+0xa8/0x100
[  163.370004][ T8110]  __kmalloc_cache_noprof+0x70/0x3d0
[  163.370030][ T8110]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  163.370060][ T8110]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  163.370103][ T8110]  genl_family_rcv_msg_doit+0x215/0x300
[  163.370136][ T8110]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  163.370177][ T8110]  ? bpf_lsm_capable+0x9/0x20
[  163.370202][ T8110]  ? security_capable+0x7e/0x2e0
[  163.370238][ T8110]  genl_rcv_msg+0x60e/0x790
[  163.370270][ T8110]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.370292][ T8110]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  163.370328][ T8110]  ? __asan_memcpy+0x40/0x70
[  163.370350][ T8110]  ? __pfx_ref_tracker_free+0x10/0x10
[  163.370386][ T8110]  netlink_rcv_skb+0x205/0x470
[  163.370402][ T8110]  ? __lock_acquire+0xab9/0xd20
[  163.370429][ T8110]  ? __pfx_genl_rcv_msg+0x10/0x10
[  163.370455][ T8110]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  163.370496][ T8110]  ? down_read+0x1ad/0x2e0
[  163.370521][ T8110]  genl_rcv+0x28/0x40
[  163.370541][ T8110]  netlink_unicast+0x82c/0x9e0
[  163.370578][ T8110]  ? __pfx_netlink_unicast+0x10/0x10
[  163.370607][ T8110]  ? netlink_sendmsg+0x642/0xb30
[  163.370622][ T8110]  ? skb_put+0x11b/0x210
[  163.370647][ T8110]  netlink_sendmsg+0x805/0xb30
[  163.370678][ T8110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.370700][ T8110]  ? aa_sock_msg_perm+0xf1/0x1d0
[  163.370721][ T8110]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  163.370741][ T8110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.370762][ T8110]  __sock_sendmsg+0x219/0x270
[  163.370791][ T8110]  ____sys_sendmsg+0x505/0x830
[  163.370821][ T8110]  ? __pfx_____sys_sendmsg+0x10/0x10
[  163.370855][ T8110]  ? import_iovec+0x74/0xa0
[  163.370880][ T8110]  ___sys_sendmsg+0x21f/0x2a0
[  163.370904][ T8110]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.370969][ T8110]  ? __fget_files+0x2a/0x420
[  163.370986][ T8110]  ? __fget_files+0x3a0/0x420
[  163.371016][ T8110]  __x64_sys_sendmsg+0x19b/0x260
[  163.371042][ T8110]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  163.371084][ T8110]  ? rcu_is_watching+0x15/0xb0
[  163.371104][ T8110]  ? trace_sys_enter+0x25/0x100
[  163.371138][ T8110]  do_syscall_64+0xfa/0x3b0
[  163.371156][ T8110]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.371174][ T8110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.371191][ T8110]  ? clear_bhb_loop+0x60/0xb0
[  163.371215][ T8110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.371233][ T8110] RIP: 0033:0x7fc69058ebe9
[  163.371250][ T8110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.371264][ T8110] RSP: 002b:00007fc68e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.371285][ T8110] RAX: ffffffffffffffda RBX: 00007fc6907c5fa0 RCX: 00007fc69058ebe9
[  163.371298][ T8110] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  163.371310][ T8110] RBP: 00007fc68e7f6090 R08: 0000000000000000 R09: 0000000000000000
[  163.371330][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  163.371341][ T8110] R13: 00007fc6907c6038 R14: 00007fc6907c5fa0 R15: 00007ffca4e01bd8
[  163.371374][ T8110]  </TASK>
[  163.996851][ T8124] __nla_validate_parse: 11 callbacks suppressed
[  163.996870][ T8124] netlink: 88 bytes leftover after parsing attributes in process `syz.3.525'.
[  164.183417][ T8135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'.
[  164.261699][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'.
[  164.276087][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'.
[  164.310746][ T8128] veth1_macvtap: left promiscuous mode
[  164.316974][ T8128] macsec0: entered allmulticast mode
[  164.673355][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.531'.
[  164.711688][ T8156] netlink: 88 bytes leftover after parsing attributes in process `syz.4.534'.
[  164.892123][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.3.532'.
[  164.913252][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'.
[  164.923097][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'.
[  164.964568][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'.
[  165.448573][ T8182] netlink: 'syz.0.537': attribute type 1 has an invalid length.
[  166.651057][ T8224] netlink: 'syz.0.550': attribute type 10 has an invalid length.
[  166.705413][ T8227] netlink: 'syz.0.550': attribute type 10 has an invalid length.
[  166.945749][ T8224] team0: Port device dummy0 added
[  167.051056][ T8227] team0: Port device dummy0 removed
[  167.393067][ T8246] bridge0: port 3(erspan0) entered blocking state
[  167.438659][ T8246] bridge0: port 3(erspan0) entered disabled state
[  167.464068][ T8246] erspan0: entered allmulticast mode
[  167.501909][ T8246] erspan0: entered promiscuous mode
[  167.509004][ T8246] bridge0: port 3(erspan0) entered blocking state
[  167.515817][ T8246] bridge0: port 3(erspan0) entered forwarding state
[  167.524776][ T8249] netlink: 'syz.1.554': attribute type 12 has an invalid length.
[  167.547337][ T8250] syzkaller1: entered promiscuous mode
[  167.554032][ T8250] syzkaller1: entered allmulticast mode
[  167.572079][ T8258] erspan0: left allmulticast mode
[  167.580521][ T8258] erspan0: left promiscuous mode
[  167.603601][ T8258] bridge0: port 3(erspan0) entered disabled state
[  167.898454][ T8264] ip6tnl0: Master is either lo or non-ether device
[  168.045234][ T8283] dummy0: mtu less than device minimum
[  168.073107][ T8283] netlink: 'syz.2.565': attribute type 2 has an invalid length.
[  168.160051][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.367266][ T8302] netlink: 'syz.4.571': attribute type 7 has an invalid length.
[  168.454467][ T8302] bridge2: port 1(bond4) entered blocking state
[  168.461133][ T8302] bridge2: port 1(bond4) entered disabled state
[  168.468091][ T8302] bond4: entered allmulticast mode
[  168.510782][ T8312] FAULT_INJECTION: forcing a failure.
[  168.510782][ T8312] name failslab, interval 1, probability 0, space 0, times 0
[  168.524660][ T8312] CPU: 0 UID: 0 PID: 8312 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(full) 
[  168.524687][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  168.524696][ T8312] Call Trace:
[  168.524703][ T8312]  <TASK>
[  168.524711][ T8312]  dump_stack_lvl+0x189/0x250
[  168.524740][ T8312]  ? __pfx____ratelimit+0x10/0x10
[  168.524771][ T8312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.524794][ T8312]  ? __pfx__printk+0x10/0x10
[  168.524827][ T8312]  ? __pfx___might_resched+0x10/0x10
[  168.524849][ T8312]  should_fail_ex+0x414/0x560
[  168.524877][ T8312]  should_failslab+0xa8/0x100
[  168.524902][ T8312]  __kmalloc_cache_noprof+0x70/0x3d0
[  168.524926][ T8312]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  168.524953][ T8312]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  168.524993][ T8312]  genl_family_rcv_msg_doit+0x215/0x300
[  168.525025][ T8312]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  168.525060][ T8312]  ? bpf_lsm_capable+0x9/0x20
[  168.525083][ T8312]  ? security_capable+0x7e/0x2e0
[  168.525115][ T8312]  genl_rcv_msg+0x60e/0x790
[  168.525142][ T8312]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.525161][ T8312]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  168.525184][ T8312]  ? __asan_memcpy+0x40/0x70
[  168.525202][ T8312]  ? __pfx_ref_tracker_free+0x10/0x10
[  168.525234][ T8312]  netlink_rcv_skb+0x205/0x470
[  168.525249][ T8312]  ? __lock_acquire+0xab9/0xd20
[  168.525272][ T8312]  ? __pfx_genl_rcv_msg+0x10/0x10
[  168.525294][ T8312]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.525335][ T8312]  ? down_read+0x1ad/0x2e0
[  168.525359][ T8312]  genl_rcv+0x28/0x40
[  168.525380][ T8312]  netlink_unicast+0x82c/0x9e0
[  168.525415][ T8312]  ? __pfx_netlink_unicast+0x10/0x10
[  168.525444][ T8312]  ? netlink_sendmsg+0x642/0xb30
[  168.525460][ T8312]  ? skb_put+0x11b/0x210
[  168.525485][ T8312]  netlink_sendmsg+0x805/0xb30
[  168.525522][ T8312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.525546][ T8312]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.525567][ T8312]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.525586][ T8312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.525605][ T8312]  __sock_sendmsg+0x219/0x270
[  168.525635][ T8312]  ____sys_sendmsg+0x505/0x830
[  168.525662][ T8312]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.525699][ T8312]  ? import_iovec+0x74/0xa0
[  168.525726][ T8312]  ___sys_sendmsg+0x21f/0x2a0
[  168.525751][ T8312]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.525809][ T8312]  ? __fget_files+0x2a/0x420
[  168.525824][ T8312]  ? __fget_files+0x3a0/0x420
[  168.525853][ T8312]  __x64_sys_sendmsg+0x19b/0x260
[  168.525875][ T8312]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.525907][ T8312]  ? __pfx_ksys_write+0x10/0x10
[  168.525928][ T8312]  ? rcu_is_watching+0x15/0xb0
[  168.525954][ T8312]  ? do_syscall_64+0xbe/0x3b0
[  168.525978][ T8312]  do_syscall_64+0xfa/0x3b0
[  168.525994][ T8312]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.526010][ T8312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.526029][ T8312]  ? clear_bhb_loop+0x60/0xb0
[  168.526051][ T8312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.526069][ T8312] RIP: 0033:0x7f0860b8ebe9
[  168.526087][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.526101][ T8312] RSP: 002b:00007f0861abd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.526141][ T8312] RAX: ffffffffffffffda RBX: 00007f0860dc5fa0 RCX: 00007f0860b8ebe9
[  168.526154][ T8312] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  168.526165][ T8312] RBP: 00007f0861abd090 R08: 0000000000000000 R09: 0000000000000000
[  168.526176][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  168.526186][ T8312] R13: 00007f0860dc6038 R14: 00007f0860dc5fa0 R15: 00007ffd4e567ee8
[  168.526215][ T8312]  </TASK>
[  168.944171][ T8312] netlink: del zone limit has 4 unknown bytes
[  169.048887][ T8323] __nla_validate_parse: 14 callbacks suppressed
[  169.048907][ T8323] netlink: 88 bytes leftover after parsing attributes in process `syz.2.579'.
[  169.071981][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'.
[  169.444767][ T8340] !
: renamed from dummy0 (while UP)
[  169.475803][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'.
[  169.616839][ T8329] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  169.970105][ T8356] netlink: 88 bytes leftover after parsing attributes in process `syz.0.588'.
[  170.115004][ T8359] netlink: 'syz.2.589': attribute type 4 has an invalid length.
[  170.166438][ T8360] netlink: 'syz.2.589': attribute type 4 has an invalid length.
[  170.453187][ T8370] netlink: 'syz.0.592': attribute type 13 has an invalid length.
[  170.471489][ T8370] netlink: 'syz.0.592': attribute type 17 has an invalid length.
[  170.598316][ T8370] 8021q: adding VLAN 0 to HW filter on device team0
[  170.729923][ T8370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.167868][ T8412] netlink: set zone limit has 4 unknown bytes
[  171.439825][ T8429] netlink: 88 bytes leftover after parsing attributes in process `syz.3.601'.
[  171.679389][ T8436] FAULT_INJECTION: forcing a failure.
[  171.679389][ T8436] name failslab, interval 1, probability 0, space 0, times 0
[  171.702336][ T8436] CPU: 0 UID: 0 PID: 8436 Comm: syz.3.603 Not tainted syzkaller #0 PREEMPT(full) 
[  171.702364][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  171.702374][ T8436] Call Trace:
[  171.702383][ T8436]  <TASK>
[  171.702391][ T8436]  dump_stack_lvl+0x189/0x250
[  171.702418][ T8436]  ? __pfx____ratelimit+0x10/0x10
[  171.702449][ T8436]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.702472][ T8436]  ? __pfx__printk+0x10/0x10
[  171.702504][ T8436]  ? __pfx___might_resched+0x10/0x10
[  171.702528][ T8436]  should_fail_ex+0x414/0x560
[  171.702559][ T8436]  should_failslab+0xa8/0x100
[  171.702589][ T8436]  __kmalloc_cache_noprof+0x70/0x3d0
[  171.702614][ T8436]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  171.702644][ T8436]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  171.702688][ T8436]  genl_family_rcv_msg_doit+0x215/0x300
[  171.702722][ T8436]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.702762][ T8436]  ? bpf_lsm_capable+0x9/0x20
[  171.702784][ T8436]  ? security_capable+0x7e/0x2e0
[  171.702819][ T8436]  genl_rcv_msg+0x60e/0x790
[  171.702851][ T8436]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.702872][ T8436]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  171.702900][ T8436]  ? __asan_memcpy+0x40/0x70
[  171.702921][ T8436]  ? __pfx_ref_tracker_free+0x10/0x10
[  171.702958][ T8436]  netlink_rcv_skb+0x205/0x470
[  171.702975][ T8436]  ? __lock_acquire+0xab9/0xd20
[  171.703003][ T8436]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.703027][ T8436]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.703069][ T8436]  ? down_read+0x1ad/0x2e0
[  171.703095][ T8436]  genl_rcv+0x28/0x40
[  171.703116][ T8436]  netlink_unicast+0x82c/0x9e0
[  171.703156][ T8436]  ? __pfx_netlink_unicast+0x10/0x10
[  171.703185][ T8436]  ? netlink_sendmsg+0x642/0xb30
[  171.703201][ T8436]  ? skb_put+0x11b/0x210
[  171.703226][ T8436]  netlink_sendmsg+0x805/0xb30
[  171.703273][ T8436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.703297][ T8436]  ? aa_sock_msg_perm+0xf1/0x1d0
[  171.703318][ T8436]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.703338][ T8436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.703358][ T8436]  __sock_sendmsg+0x219/0x270
[  171.703390][ T8436]  ____sys_sendmsg+0x505/0x830
[  171.703421][ T8436]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.703453][ T8436]  ? import_iovec+0x74/0xa0
[  171.703481][ T8436]  ___sys_sendmsg+0x21f/0x2a0
[  171.703505][ T8436]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.703576][ T8436]  ? __fget_files+0x2a/0x420
[  171.703593][ T8436]  ? __fget_files+0x3a0/0x420
[  171.703624][ T8436]  __x64_sys_sendmsg+0x19b/0x260
[  171.703651][ T8436]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.703685][ T8436]  ? __pfx_ksys_write+0x10/0x10
[  171.703707][ T8436]  ? rcu_is_watching+0x15/0xb0
[  171.703732][ T8436]  ? do_syscall_64+0xbe/0x3b0
[  171.703757][ T8436]  do_syscall_64+0xfa/0x3b0
[  171.703775][ T8436]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.703793][ T8436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.703810][ T8436]  ? clear_bhb_loop+0x60/0xb0
[  171.703832][ T8436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.703850][ T8436] RIP: 0033:0x7ff55078ebe9
[  171.703868][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.703882][ T8436] RSP: 002b:00007ff54e9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.703902][ T8436] RAX: ffffffffffffffda RBX: 00007ff5509c5fa0 RCX: 00007ff55078ebe9
[  171.703916][ T8436] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  171.703927][ T8436] RBP: 00007ff54e9f6090 R08: 0000000000000000 R09: 0000000000000000
[  171.703938][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  171.703948][ T8436] R13: 00007ff5509c6038 R14: 00007ff5509c5fa0 R15: 00007ffc95194438
[  171.703984][ T8436]  </TASK>
[  172.162561][ T8436] netlink: del zone limit has 4 unknown bytes
[  172.373493][ T8444] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  172.408733][ T8449] netlink: 'syz.4.607': attribute type 4 has an invalid length.
[  172.547396][ T8452] FAULT_INJECTION: forcing a failure.
[  172.547396][ T8452] name failslab, interval 1, probability 0, space 0, times 0
[  172.560196][ T8452] CPU: 1 UID: 0 PID: 8452 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) 
[  172.560225][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  172.560237][ T8452] Call Trace:
[  172.560254][ T8452]  <TASK>
[  172.560263][ T8452]  dump_stack_lvl+0x189/0x250
[  172.560294][ T8452]  ? __pfx____ratelimit+0x10/0x10
[  172.560326][ T8452]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.560349][ T8452]  ? __pfx__printk+0x10/0x10
[  172.560373][ T8452]  ? pfn_valid+0x125/0x4d0
[  172.560401][ T8452]  ? __lock_acquire+0xab9/0xd20
[  172.560434][ T8452]  should_fail_ex+0x414/0x560
[  172.560466][ T8452]  should_failslab+0xa8/0x100
[  172.560495][ T8452]  kmem_cache_alloc_bulk_noprof+0x77/0x790
[  172.560526][ T8452]  ? pfn_valid+0x125/0x4d0
[  172.560544][ T8452]  ? pfn_valid+0x125/0x4d0
[  172.560564][ T8452]  ? pfn_valid+0x125/0x4d0
[  172.560588][ T8452]  bpf_test_run_xdp_live+0x15f1/0x1b10
[  172.560622][ T8452]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  172.560654][ T8452]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  172.560673][ T8452]  ? 0xffffffffa02057c0
[  172.560692][ T8452]  ? 0xffffffffa02057c0
[  172.560764][ T8452]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  172.560793][ T8452]  ? _copy_from_user+0x94/0xb0
[  172.560817][ T8452]  ? bpf_test_init+0x133/0x170
[  172.560844][ T8452]  ? xdp_convert_md_to_buff+0x5b/0x330
[  172.560866][ T8452]  bpf_prog_test_run_xdp+0x713/0x1000
[  172.560905][ T8452]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  172.560931][ T8452]  ? __fget_files+0x2a/0x420
[  172.560956][ T8452]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  172.560977][ T8452]  bpf_prog_test_run+0x2c7/0x340
[  172.561009][ T8452]  __sys_bpf+0x581/0x870
[  172.561037][ T8452]  ? __pfx___sys_bpf+0x10/0x10
[  172.561077][ T8452]  ? ksys_write+0x22a/0x250
[  172.561106][ T8452]  ? __pfx_ksys_write+0x10/0x10
[  172.561128][ T8452]  ? rcu_is_watching+0x15/0xb0
[  172.561157][ T8452]  __x64_sys_bpf+0x7c/0x90
[  172.561181][ T8452]  do_syscall_64+0xfa/0x3b0
[  172.561199][ T8452]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.561217][ T8452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.561235][ T8452]  ? clear_bhb_loop+0x60/0xb0
[  172.561273][ T8452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.561291][ T8452] RIP: 0033:0x7f234818ebe9
[  172.561309][ T8452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.561325][ T8452] RSP: 002b:00007f2348f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  172.561346][ T8452] RAX: ffffffffffffffda RBX: 00007f23483c5fa0 RCX: 00007f234818ebe9
[  172.561359][ T8452] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  172.561371][ T8452] RBP: 00007f2348f87090 R08: 0000000000000000 R09: 0000000000000000
[  172.561382][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  172.561393][ T8452] R13: 00007f23483c6038 R14: 00007f23483c5fa0 R15: 00007ffc603d15a8
[  172.561423][ T8452]  </TASK>
[  172.941479][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'.
[  173.280957][ T8467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.316662][ T8467] syzkaller0: entered promiscuous mode
[  173.322205][ T8467] syzkaller0: entered allmulticast mode
[  173.405943][   T24] tipc: Node number set to 3893744676
[  173.432890][ T8477] FAULT_INJECTION: forcing a failure.
[  173.432890][ T8477] name failslab, interval 1, probability 0, space 0, times 0
[  173.451212][ T8477] CPU: 1 UID: 0 PID: 8477 Comm: syz.0.616 Not tainted syzkaller #0 PREEMPT(full) 
[  173.451239][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  173.451249][ T8477] Call Trace:
[  173.451257][ T8477]  <TASK>
[  173.451266][ T8477]  dump_stack_lvl+0x189/0x250
[  173.451293][ T8477]  ? __pfx____ratelimit+0x10/0x10
[  173.451320][ T8477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.451341][ T8477]  ? __pfx__printk+0x10/0x10
[  173.451372][ T8477]  ? __pfx___might_resched+0x10/0x10
[  173.451395][ T8477]  should_fail_ex+0x414/0x560
[  173.451425][ T8477]  should_failslab+0xa8/0x100
[  173.451451][ T8477]  __kmalloc_cache_noprof+0x70/0x3d0
[  173.451473][ T8477]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  173.451501][ T8477]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  173.451542][ T8477]  genl_family_rcv_msg_doit+0x215/0x300
[  173.451583][ T8477]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  173.451620][ T8477]  ? bpf_lsm_capable+0x9/0x20
[  173.451642][ T8477]  ? security_capable+0x7e/0x2e0
[  173.451674][ T8477]  genl_rcv_msg+0x60e/0x790
[  173.451704][ T8477]  ? __pfx_genl_rcv_msg+0x10/0x10
[  173.451726][ T8477]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  173.451751][ T8477]  ? __asan_memcpy+0x40/0x70
[  173.451770][ T8477]  ? __pfx_ref_tracker_free+0x10/0x10
[  173.451803][ T8477]  netlink_rcv_skb+0x205/0x470
[  173.451819][ T8477]  ? __lock_acquire+0xab9/0xd20
[  173.451844][ T8477]  ? __pfx_genl_rcv_msg+0x10/0x10
[  173.451867][ T8477]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  173.451908][ T8477]  ? down_read+0x1ad/0x2e0
[  173.451932][ T8477]  genl_rcv+0x28/0x40
[  173.451951][ T8477]  netlink_unicast+0x82c/0x9e0
[  173.451986][ T8477]  ? __pfx_netlink_unicast+0x10/0x10
[  173.452013][ T8477]  ? netlink_sendmsg+0x642/0xb30
[  173.452028][ T8477]  ? skb_put+0x11b/0x210
[  173.452052][ T8477]  netlink_sendmsg+0x805/0xb30
[  173.452081][ T8477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.452103][ T8477]  ? aa_sock_msg_perm+0xf1/0x1d0
[  173.452124][ T8477]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  173.452142][ T8477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.452162][ T8477]  __sock_sendmsg+0x219/0x270
[  173.452190][ T8477]  ____sys_sendmsg+0x505/0x830
[  173.452217][ T8477]  ? __pfx_____sys_sendmsg+0x10/0x10
[  173.452248][ T8477]  ? import_iovec+0x74/0xa0
[  173.452274][ T8477]  ___sys_sendmsg+0x21f/0x2a0
[  173.452297][ T8477]  ? __pfx____sys_sendmsg+0x10/0x10
[  173.452362][ T8477]  ? __fget_files+0x2a/0x420
[  173.452378][ T8477]  ? __fget_files+0x3a0/0x420
[  173.452407][ T8477]  __x64_sys_sendmsg+0x19b/0x260
[  173.452431][ T8477]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  173.452461][ T8477]  ? __pfx_ksys_write+0x10/0x10
[  173.452480][ T8477]  ? rcu_is_watching+0x15/0xb0
[  173.452504][ T8477]  ? do_syscall_64+0xbe/0x3b0
[  173.452526][ T8477]  do_syscall_64+0xfa/0x3b0
[  173.452554][ T8477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.452571][ T8477]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.452589][ T8477]  ? clear_bhb_loop+0x60/0xb0
[  173.452613][ T8477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.452632][ T8477] RIP: 0033:0x7fc69058ebe9
[  173.452651][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.452668][ T8477] RSP: 002b:00007fc68e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.452690][ T8477] RAX: ffffffffffffffda RBX: 00007fc6907c5fa0 RCX: 00007fc69058ebe9
[  173.452704][ T8477] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  173.452717][ T8477] RBP: 00007fc68e7f6090 R08: 0000000000000000 R09: 0000000000000000
[  173.452729][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  173.452740][ T8477] R13: 00007fc6907c6038 R14: 00007fc6907c5fa0 R15: 00007ffca4e01bd8
[  173.452775][ T8477]  </TASK>
[  173.506745][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.617'.
[  173.541379][ T8477] netlink: del zone limit has 4 unknown bytes
[  173.612161][ T8481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.614'.
[  173.938630][ T8485] netlink: 192 bytes leftover after parsing attributes in process `syz.0.618'.
[  173.948085][ T8485] netlink: zone id is out of range
[  173.953323][ T8485] netlink: zone id is out of range
[  173.968629][ T8465] tipc: Resetting bearer <eth:syzkaller0>
[  174.006920][ T8485] netlink: zone id is out of range
[  174.012910][ T8485] netlink: zone id is out of range
[  174.031044][ T8465] tipc: Disabling bearer <eth:syzkaller0>
[  174.059209][ T8485] netlink: zone id is out of range
[  174.074755][ T8485] netlink: zone id is out of range
[  174.079919][ T8485] netlink: zone id is out of range
[  174.093949][ T8485] netlink: zone id is out of range
[  174.104333][ T8485] netlink: zone id is out of range
[  174.192791][ T8494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.619'.
[  174.202346][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.619'.
[  174.282773][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.284728][ T8492] netlink: 88 bytes leftover after parsing attributes in process `syz.2.620'.
[  174.622584][ T8509] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.624'.
[  175.041495][ T8525] FAULT_INJECTION: forcing a failure.
[  175.041495][ T8525] name failslab, interval 1, probability 0, space 0, times 0
[  175.095851][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.1.629 Not tainted syzkaller #0 PREEMPT(full) 
[  175.095878][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  175.095889][ T8525] Call Trace:
[  175.095897][ T8525]  <TASK>
[  175.095905][ T8525]  dump_stack_lvl+0x189/0x250
[  175.095932][ T8525]  ? __pfx____ratelimit+0x10/0x10
[  175.095962][ T8525]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.096000][ T8525]  ? __pfx__printk+0x10/0x10
[  175.096033][ T8525]  ? __pfx___might_resched+0x10/0x10
[  175.096058][ T8525]  should_fail_ex+0x414/0x560
[  175.096089][ T8525]  should_failslab+0xa8/0x100
[  175.096119][ T8525]  __kmalloc_cache_noprof+0x70/0x3d0
[  175.096144][ T8525]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  175.096174][ T8525]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  175.096217][ T8525]  genl_family_rcv_msg_doit+0x215/0x300
[  175.096265][ T8525]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  175.096305][ T8525]  ? bpf_lsm_capable+0x9/0x20
[  175.096327][ T8525]  ? security_capable+0x7e/0x2e0
[  175.096362][ T8525]  genl_rcv_msg+0x60e/0x790
[  175.096393][ T8525]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.096415][ T8525]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  175.096458][ T8525]  netlink_rcv_skb+0x205/0x470
[  175.096475][ T8525]  ? __lock_acquire+0xab9/0xd20
[  175.096502][ T8525]  ? __pfx_genl_rcv_msg+0x10/0x10
[  175.096526][ T8525]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.096568][ T8525]  ? down_read+0x1ad/0x2e0
[  175.096592][ T8525]  genl_rcv+0x28/0x40
[  175.096614][ T8525]  netlink_unicast+0x82c/0x9e0
[  175.096652][ T8525]  ? __pfx_netlink_unicast+0x10/0x10
[  175.096681][ T8525]  ? netlink_sendmsg+0x642/0xb30
[  175.096697][ T8525]  ? skb_put+0x11b/0x210
[  175.096721][ T8525]  netlink_sendmsg+0x805/0xb30
[  175.096752][ T8525]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.096775][ T8525]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.096793][ T8525]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.096812][ T8525]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.096833][ T8525]  __sock_sendmsg+0x219/0x270
[  175.096859][ T8525]  ____sys_sendmsg+0x505/0x830
[  175.096888][ T8525]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.096918][ T8525]  ? import_iovec+0x74/0xa0
[  175.096943][ T8525]  ___sys_sendmsg+0x21f/0x2a0
[  175.096968][ T8525]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.097029][ T8525]  ? __fget_files+0x2a/0x420
[  175.097045][ T8525]  ? __fget_files+0x3a0/0x420
[  175.097074][ T8525]  __x64_sys_sendmsg+0x19b/0x260
[  175.097097][ T8525]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.097132][ T8525]  ? __pfx_ksys_write+0x10/0x10
[  175.097152][ T8525]  ? rcu_is_watching+0x15/0xb0
[  175.097179][ T8525]  ? do_syscall_64+0xbe/0x3b0
[  175.097204][ T8525]  do_syscall_64+0xfa/0x3b0
[  175.097222][ T8525]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.097248][ T8525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.097267][ T8525]  ? clear_bhb_loop+0x60/0xb0
[  175.097289][ T8525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.097305][ T8525] RIP: 0033:0x7f234818ebe9
[  175.097323][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.097339][ T8525] RSP: 002b:00007f2348f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.097361][ T8525] RAX: ffffffffffffffda RBX: 00007f23483c5fa0 RCX: 00007f234818ebe9
[  175.097375][ T8525] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  175.097388][ T8525] RBP: 00007f2348f87090 R08: 0000000000000000 R09: 0000000000000000
[  175.097399][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  175.097410][ T8525] R13: 00007f23483c6038 R14: 00007f23483c5fa0 R15: 00007ffc603d15a8
[  175.097445][ T8525]  </TASK>
[  175.121708][ T8533] netlink: 'syz.0.631': attribute type 21 has an invalid length.
[  175.147057][ T8530] netlink: 'syz.2.632': attribute type 10 has an invalid length.
[  175.262054][ T8543] netlink: 88 bytes leftover after parsing attributes in process `syz.3.633'.
[  175.316368][ T8533] netlink: 'syz.0.631': attribute type 1 has an invalid length.
[  175.474889][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'.
[  175.480721][ T8533] netlink: 144 bytes leftover after parsing attributes in process `syz.0.631'.
[  175.669593][ T8530] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  175.677939][ T8530] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.687924][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'.
[  175.972474][ T8569] netlink: 184 bytes leftover after parsing attributes in process `syz.1.638'.
[  176.042666][ T8573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.639'.
[  176.535691][ T8598] FAULT_INJECTION: forcing a failure.
[  176.535691][ T8598] name failslab, interval 1, probability 0, space 0, times 0
[  176.548527][ T8598] CPU: 0 UID: 0 PID: 8598 Comm: syz.3.648 Not tainted syzkaller #0 PREEMPT(full) 
[  176.548556][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  176.548567][ T8598] Call Trace:
[  176.548576][ T8598]  <TASK>
[  176.548584][ T8598]  dump_stack_lvl+0x189/0x250
[  176.548614][ T8598]  ? __pfx____ratelimit+0x10/0x10
[  176.548645][ T8598]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.548669][ T8598]  ? __pfx__printk+0x10/0x10
[  176.548702][ T8598]  ? __lock_acquire+0xab9/0xd20
[  176.548738][ T8598]  should_fail_ex+0x414/0x560
[  176.548771][ T8598]  should_failslab+0xa8/0x100
[  176.548800][ T8598]  kmem_cache_alloc_noprof+0x73/0x3c0
[  176.548826][ T8598]  ? skb_clone+0x212/0x3a0
[  176.548847][ T8598]  ? run_filter+0x23/0x270
[  176.548878][ T8598]  skb_clone+0x212/0x3a0
[  176.548898][ T8598]  ? packet_rcv+0x567/0x1730
[  176.548925][ T8598]  packet_rcv+0x65b/0x1730
[  176.548956][ T8598]  ? __pfx_packet_rcv_fanout+0x10/0x10
[  176.548987][ T8598]  __netif_receive_skb_core+0x3107/0x4020
[  176.549029][ T8598]  ? kernel_text_address+0xa5/0xe0
[  176.549057][ T8598]  ? __kernel_text_address+0xd/0x40
[  176.549085][ T8598]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  176.549108][ T8598]  ? arch_stack_walk+0xfc/0x150
[  176.549138][ T8598]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  176.549172][ T8598]  ? stack_trace_save+0x9c/0xe0
[  176.549212][ T8598]  ? kasan_save_track+0x4f/0x80
[  176.549235][ T8598]  ? kasan_save_track+0x3e/0x80
[  176.549253][ T8598]  ? __kasan_slab_alloc+0x6c/0x80
[  176.549275][ T8598]  ? bpf_test_run_xdp_live+0x15f1/0x1b10
[  176.549301][ T8598]  __netif_receive_skb_list_core+0x23f/0x800
[  176.549344][ T8598]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  176.549386][ T8598]  netif_receive_skb_list_internal+0x96f/0xcb0
[  176.549420][ T8598]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  176.549449][ T8598]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  176.549478][ T8598]  ? __phys_addr+0xd3/0x180
[  176.549511][ T8598]  ? build_skb_around+0x133/0x280
[  176.549534][ T8598]  ? __xdp_build_skb_from_frame+0x34b/0x740
[  176.549565][ T8598]  netif_receive_skb_list+0x54/0x450
[  176.549596][ T8598]  bpf_test_run_xdp_live+0x1786/0x1b10
[  176.549630][ T8598]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  176.549664][ T8598]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  176.549682][ T8598]  ? 0xffffffffa02057c0
[  176.549702][ T8598]  ? 0xffffffffa02057c0
[  176.549769][ T8598]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  176.549798][ T8598]  ? _copy_from_user+0x94/0xb0
[  176.549819][ T8598]  ? bpf_test_init+0x133/0x170
[  176.549841][ T8598]  ? xdp_convert_md_to_buff+0x5b/0x330
[  176.549860][ T8598]  bpf_prog_test_run_xdp+0x713/0x1000
[  176.549897][ T8598]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  176.549921][ T8598]  ? __fget_files+0x2a/0x420
[  176.549942][ T8598]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  176.549961][ T8598]  bpf_prog_test_run+0x2c7/0x340
[  176.549991][ T8598]  __sys_bpf+0x581/0x870
[  176.550017][ T8598]  ? __pfx___sys_bpf+0x10/0x10
[  176.550058][ T8598]  ? ksys_write+0x22a/0x250
[  176.550082][ T8598]  ? __pfx_ksys_write+0x10/0x10
[  176.550103][ T8598]  ? rcu_is_watching+0x15/0xb0
[  176.550130][ T8598]  __x64_sys_bpf+0x7c/0x90
[  176.550152][ T8598]  do_syscall_64+0xfa/0x3b0
[  176.550171][ T8598]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.550189][ T8598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.550207][ T8598]  ? clear_bhb_loop+0x60/0xb0
[  176.550231][ T8598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.550247][ T8598] RIP: 0033:0x7ff55078ebe9
[  176.550265][ T8598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.550281][ T8598] RSP: 002b:00007ff54e9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  176.550303][ T8598] RAX: ffffffffffffffda RBX: 00007ff5509c5fa0 RCX: 00007ff55078ebe9
[  176.550316][ T8598] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  176.550328][ T8598] RBP: 00007ff54e9f6090 R08: 0000000000000000 R09: 0000000000000000
[  176.550340][ T8598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.550351][ T8598] R13: 00007ff5509c6038 R14: 00007ff5509c5fa0 R15: 00007ffc95194438
[  176.550382][ T8598]  </TASK>
[  177.017065][ T8584] syzkaller1: entered promiscuous mode
[  177.022598][ T8584] syzkaller1: entered allmulticast mode
[  177.384532][ T8610] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[  177.519504][ T8613] netlink: 'syz.3.651': attribute type 10 has an invalid length.
[  177.611320][ T8613] 8021q: adding VLAN 0 to HW filter on device team0
[  177.652877][ T8613] bond0: (slave team0): Enslaving as an active interface with an up link
[  177.856992][ T8625] syzkaller0: entered promiscuous mode
[  177.901119][ T8625] syzkaller0: entered allmulticast mode
[  178.102706][ T8630] bond0: (slave team0): Releasing backup interface
[  178.150120][ T8630] bridge_slave_0: left allmulticast mode
[  178.200051][ T8630] bridge_slave_0: left promiscuous mode
[  178.234219][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.306637][ T8630] bridge_slave_1: left allmulticast mode
[  178.314658][ T8630] bridge_slave_1: left promiscuous mode
[  178.322460][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.354028][ T8647] FAULT_INJECTION: forcing a failure.
[  178.354028][ T8647] name failslab, interval 1, probability 0, space 0, times 0
[  178.366788][ T8647] CPU: 0 UID: 0 PID: 8647 Comm: syz.1.661 Not tainted syzkaller #0 PREEMPT(full) 
[  178.366814][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  178.366824][ T8647] Call Trace:
[  178.366831][ T8647]  <TASK>
[  178.366838][ T8647]  dump_stack_lvl+0x189/0x250
[  178.366866][ T8647]  ? __pfx____ratelimit+0x10/0x10
[  178.366895][ T8647]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.366917][ T8647]  ? __pfx__printk+0x10/0x10
[  178.366946][ T8647]  ? __lock_acquire+0xab9/0xd20
[  178.366978][ T8647]  should_fail_ex+0x414/0x560
[  178.367007][ T8647]  should_failslab+0xa8/0x100
[  178.367036][ T8647]  kmem_cache_alloc_noprof+0x73/0x3c0
[  178.367059][ T8647]  ? skb_clone+0x212/0x3a0
[  178.367077][ T8647]  ? run_filter+0x23/0x270
[  178.367103][ T8647]  skb_clone+0x212/0x3a0
[  178.367122][ T8647]  ? packet_rcv+0x567/0x1730
[  178.367146][ T8647]  packet_rcv+0x65b/0x1730
[  178.367183][ T8647]  ? __pfx_packet_rcv_fanout+0x10/0x10
[  178.367212][ T8647]  __netif_receive_skb_core+0x3107/0x4020
[  178.367251][ T8647]  ? kernel_text_address+0xa5/0xe0
[  178.367278][ T8647]  ? __kernel_text_address+0xd/0x40
[  178.367303][ T8647]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  178.367326][ T8647]  ? arch_stack_walk+0xfc/0x150
[  178.367354][ T8647]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  178.367387][ T8647]  ? stack_trace_save+0x9c/0xe0
[  178.367423][ T8647]  ? kasan_save_track+0x4f/0x80
[  178.367442][ T8647]  ? kasan_save_track+0x3e/0x80
[  178.367461][ T8647]  ? __kasan_slab_alloc+0x6c/0x80
[  178.367483][ T8647]  ? bpf_test_run_xdp_live+0x15f1/0x1b10
[  178.367508][ T8647]  __netif_receive_skb_list_core+0x23f/0x800
[  178.367551][ T8647]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  178.367591][ T8647]  netif_receive_skb_list_internal+0x96f/0xcb0
[  178.367623][ T8647]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  178.367652][ T8647]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  178.367680][ T8647]  ? __phys_addr+0xd3/0x180
[  178.367705][ T8647]  ? build_skb_around+0x133/0x280
[  178.367728][ T8647]  ? __xdp_build_skb_from_frame+0x34b/0x740
[  178.367758][ T8647]  netif_receive_skb_list+0x54/0x450
[  178.367788][ T8647]  bpf_test_run_xdp_live+0x1786/0x1b10
[  178.367821][ T8647]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  178.367856][ T8647]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  178.367874][ T8647]  ? 0xffffffffa02057c0
[  178.367892][ T8647]  ? 0xffffffffa02057c0
[  178.367965][ T8647]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  178.367993][ T8647]  ? _copy_from_user+0x94/0xb0
[  178.368016][ T8647]  ? bpf_test_init+0x133/0x170
[  178.368040][ T8647]  ? xdp_convert_md_to_buff+0x5b/0x330
[  178.368060][ T8647]  bpf_prog_test_run_xdp+0x713/0x1000
[  178.368098][ T8647]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  178.368123][ T8647]  ? __fget_files+0x2a/0x420
[  178.368144][ T8647]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  178.368170][ T8647]  bpf_prog_test_run+0x2c7/0x340
[  178.368198][ T8647]  __sys_bpf+0x581/0x870
[  178.368226][ T8647]  ? __pfx___sys_bpf+0x10/0x10
[  178.368266][ T8647]  ? ksys_write+0x22a/0x250
[  178.368293][ T8647]  ? __pfx_ksys_write+0x10/0x10
[  178.368315][ T8647]  ? rcu_is_watching+0x15/0xb0
[  178.368344][ T8647]  __x64_sys_bpf+0x7c/0x90
[  178.368368][ T8647]  do_syscall_64+0xfa/0x3b0
[  178.368386][ T8647]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.368403][ T8647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.368422][ T8647]  ? clear_bhb_loop+0x60/0xb0
[  178.368445][ T8647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.368463][ T8647] RIP: 0033:0x7f234818ebe9
[  178.368481][ T8647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.368497][ T8647] RSP: 002b:00007f2348f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  178.368520][ T8647] RAX: ffffffffffffffda RBX: 00007f23483c5fa0 RCX: 00007f234818ebe9
[  178.368534][ T8647] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  178.368547][ T8647] RBP: 00007f2348f87090 R08: 0000000000000000 R09: 0000000000000000
[  178.368559][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  178.368569][ T8647] R13: 00007f23483c6038 R14: 00007f23483c5fa0 R15: 00007ffc603d15a8
[  178.368603][ T8647]  </TASK>
[  178.373140][ T8630] bond0: (slave bond_slave_0): Releasing backup interface
[  178.960746][ T8630] bond0: (slave bond_slave_1): Releasing backup interface
[  179.000288][ T8630] team0: Port device team_slave_0 removed
[  179.029440][ T8630] team0: Port device team_slave_1 removed
[  179.039822][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.048396][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.057903][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.065809][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.096761][ T8630] team0: Port device bridge1 removed
[  179.315679][ T8665] netlink: 'syz.1.663': attribute type 13 has an invalid length.
[  179.444456][ T8658] __nla_validate_parse: 5 callbacks suppressed
[  179.444475][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  179.790840][ T8689] net_ratelimit: 31 callbacks suppressed
[  179.790862][ T8689] openvswitch: netlink: Multiple metadata blocks provided
[  179.931723][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'.
[  179.951726][ T8693] netlink: 'syz.4.665': attribute type 8 has an invalid length.
[  180.476359][ T8707] FAULT_INJECTION: forcing a failure.
[  180.476359][ T8707] name failslab, interval 1, probability 0, space 0, times 0
[  180.489082][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: syz.3.673 Not tainted syzkaller #0 PREEMPT(full) 
[  180.489108][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  180.489120][ T8707] Call Trace:
[  180.489137][ T8707]  <TASK>
[  180.489144][ T8707]  dump_stack_lvl+0x189/0x250
[  180.489174][ T8707]  ? __pfx____ratelimit+0x10/0x10
[  180.489204][ T8707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.489227][ T8707]  ? __pfx__printk+0x10/0x10
[  180.489259][ T8707]  ? __lock_acquire+0xab9/0xd20
[  180.489294][ T8707]  should_fail_ex+0x414/0x560
[  180.489326][ T8707]  should_failslab+0xa8/0x100
[  180.489356][ T8707]  kmem_cache_alloc_noprof+0x73/0x3c0
[  180.489380][ T8707]  ? skb_clone+0x212/0x3a0
[  180.489399][ T8707]  ? run_filter+0x23/0x270
[  180.489428][ T8707]  skb_clone+0x212/0x3a0
[  180.489448][ T8707]  ? packet_rcv+0x567/0x1730
[  180.489474][ T8707]  packet_rcv+0x65b/0x1730
[  180.489504][ T8707]  ? __pfx_packet_rcv_fanout+0x10/0x10
[  180.489533][ T8707]  __netif_receive_skb_core+0x3107/0x4020
[  180.489573][ T8707]  ? kernel_text_address+0xa5/0xe0
[  180.489600][ T8707]  ? __kernel_text_address+0xd/0x40
[  180.489626][ T8707]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  180.489649][ T8707]  ? arch_stack_walk+0xfc/0x150
[  180.489678][ T8707]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  180.489711][ T8707]  ? stack_trace_save+0x9c/0xe0
[  180.489750][ T8707]  ? kasan_save_track+0x4f/0x80
[  180.489771][ T8707]  ? kasan_save_track+0x3e/0x80
[  180.489791][ T8707]  ? __kasan_slab_alloc+0x6c/0x80
[  180.489814][ T8707]  ? bpf_test_run_xdp_live+0x15f1/0x1b10
[  180.489841][ T8707]  __netif_receive_skb_list_core+0x23f/0x800
[  180.489884][ T8707]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  180.489926][ T8707]  netif_receive_skb_list_internal+0x96f/0xcb0
[  180.489959][ T8707]  ? netif_receive_skb_list_internal+0x4fd/0xcb0
[  180.489987][ T8707]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  180.490015][ T8707]  ? __phys_addr+0xd3/0x180
[  180.490038][ T8707]  ? build_skb_around+0x133/0x280
[  180.490061][ T8707]  ? __xdp_build_skb_from_frame+0x34b/0x740
[  180.490091][ T8707]  netif_receive_skb_list+0x54/0x450
[  180.490122][ T8707]  bpf_test_run_xdp_live+0x1786/0x1b10
[  180.490163][ T8707]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  180.490196][ T8707]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  180.490214][ T8707]  ? 0xffffffffa02057c0
[  180.490234][ T8707]  ? 0xffffffffa02057c0
[  180.490307][ T8707]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  180.490336][ T8707]  ? _copy_from_user+0x94/0xb0
[  180.490359][ T8707]  ? bpf_test_init+0x133/0x170
[  180.490383][ T8707]  ? xdp_convert_md_to_buff+0x5b/0x330
[  180.490405][ T8707]  bpf_prog_test_run_xdp+0x713/0x1000
[  180.490444][ T8707]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  180.490468][ T8707]  ? __fget_files+0x2a/0x420
[  180.490492][ T8707]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  180.490513][ T8707]  bpf_prog_test_run+0x2c7/0x340
[  180.490543][ T8707]  __sys_bpf+0x581/0x870
[  180.490570][ T8707]  ? __pfx___sys_bpf+0x10/0x10
[  180.490610][ T8707]  ? ksys_write+0x22a/0x250
[  180.490639][ T8707]  ? __pfx_ksys_write+0x10/0x10
[  180.490659][ T8707]  ? rcu_is_watching+0x15/0xb0
[  180.490687][ T8707]  __x64_sys_bpf+0x7c/0x90
[  180.490711][ T8707]  do_syscall_64+0xfa/0x3b0
[  180.490729][ T8707]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.490747][ T8707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.490765][ T8707]  ? clear_bhb_loop+0x60/0xb0
[  180.490788][ T8707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.490807][ T8707] RIP: 0033:0x7ff55078ebe9
[  180.490824][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.490840][ T8707] RSP: 002b:00007ff54e9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  180.490862][ T8707] RAX: ffffffffffffffda RBX: 00007ff5509c5fa0 RCX: 00007ff55078ebe9
[  180.490875][ T8707] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  180.490887][ T8707] RBP: 00007ff54e9f6090 R08: 0000000000000000 R09: 0000000000000000
[  180.490899][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  180.490910][ T8707] R13: 00007ff5509c6038 R14: 00007ff5509c5fa0 R15: 00007ffc95194438
[  180.490940][ T8707]  </TASK>
[  181.173074][ T8717] netlink: 'syz.1.675': attribute type 10 has an invalid length.
[  181.456132][ T8717] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  181.474408][ T8717] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  181.483639][ T8717] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  181.625819][ T8726] geneve0: entered promiscuous mode
[  181.876952][ T8743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.684'.
[  181.897059][ T8743] netlink: 'syz.3.684': attribute type 1 has an invalid length.
[  182.006107][ T8743] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.011915][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'.
[  182.041351][ T8751] bond1: (slave gretap1): making interface the new active one
[  182.051315][ T8751] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  182.061580][ T8750] tipc: New replicast peer: 208.253.78.183
[  182.068518][ T8750] tipc: Enabled bearer <udp:s>, priority 10
[  182.089891][ T8754] macsec0: entered promiscuous mode
[  182.095536][ T8754] bond0: entered promiscuous mode
[  182.102477][ T8754] bond0: left promiscuous mode
[  182.128324][ T8756] tipc: Started in network mode
[  182.134143][ T8756] tipc: Node identity fa31df4bfa47, cluster identity 4711
[  182.141793][ T8756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.168748][ T8749] syzkaller0: entered promiscuous mode
[  182.186165][ T8749] syzkaller0: entered allmulticast mode
[  182.207929][ T8758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.687'.
[  182.236946][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.687'.
[  182.357905][ T8763] Bluetooth: MGMT ver 1.23
[  182.510333][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  182.679357][ T8740] tipc: Resetting bearer <eth:syzkaller0>
[  182.709671][ T8776] netlink: 'syz.3.691': attribute type 13 has an invalid length.
[  182.745006][ T8776] netlink: 'syz.3.691': attribute type 17 has an invalid length.
[  182.755672][ T8740] tipc: Disabling bearer <eth:syzkaller0>
[  182.777396][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.694'.
[  183.038438][ T8788] netlink: 248 bytes leftover after parsing attributes in process `syz.2.694'.
[  183.050038][ T8776] 8021q: adding VLAN 0 to HW filter on device team0
[  183.069077][ T5938] tipc: Node number set to 4047487725
[  183.080259][ T8790] netlink: 84 bytes leftover after parsing attributes in process `syz.0.695'.
[  183.105374][ T8776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.803020][ T8798] netlink: 'syz.4.697': attribute type 4 has an invalid length.
[  184.375343][   T51] Bluetooth: hci2: command 0x0401 tx timeout
[  184.381652][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  184.578793][ T8842] __nla_validate_parse: 3 callbacks suppressed
[  184.578814][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'.
[  184.625673][ T8845] netlink: 32 bytes leftover after parsing attributes in process `syz.1.704'.
[  184.651476][ T8845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.704'.
[  185.296604][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'.
[  185.336251][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  185.373208][ T8865] gtp0: entered promiscuous mode
[  185.509508][ T8870] netlink: 88 bytes leftover after parsing attributes in process `syz.3.711'.
[  185.568004][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.712'.
[  185.645813][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  185.724273][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'.
[  186.053404][ T8894] netlink: 'syz.2.717': attribute type 1 has an invalid length.
[  186.115115][ T8894] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.263008][ T8900] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.273611][ T8900] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  186.290643][ T8900] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  186.303341][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'.
[  186.429706][ T8894] veth3: entered promiscuous mode
[  186.449546][ T8894] bond1: (slave veth3): Enslaving as an active interface with a down link
[  186.470679][ T8904] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.969700][ T8967] netlink: 'syz.2.733': attribute type 1 has an invalid length.
[  187.992212][ T8969] netlink: 'syz.2.733': attribute type 1 has an invalid length.
[  188.256593][ T8960] geneve2: entered promiscuous mode
[  188.377820][ T8967] tipc: Invalid UDP bearer configuration
[  188.377890][ T8967] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  188.724201][ T8992] bridge_slave_1: left allmulticast mode
[  188.730193][ T8992] bridge_slave_1: left promiscuous mode
[  188.744188][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.783215][ T8992] bridge_slave_0: left allmulticast mode
[  188.842188][ T8992] bridge_slave_0: left promiscuous mode
[  188.854346][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.944811][ T8999] sctp: [Deprecated]: syz.2.738 (pid 8999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  188.944811][ T8999] Use struct sctp_sack_info instead
[  189.414201][ T9022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.436682][ T9023] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  189.458642][ T9023] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  189.479440][ T9018] syzkaller0: entered promiscuous mode
[  189.492480][ T9018] syzkaller0: entered allmulticast mode
[  189.507418][ T9023] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  189.552225][ T9018] tipc: Resetting bearer <eth:syzkaller0>
[  189.592262][ T9017] tipc: Resetting bearer <eth:syzkaller0>
[  189.718997][ T9017] tipc: Disabling bearer <eth:syzkaller0>
[  189.874844][ T9036] bridge: RTM_NEWNEIGH with invalid ether address
[  190.158911][ T9046] netlink: 'syz.0.749': attribute type 10 has an invalid length.
[  190.172541][ T9046] __nla_validate_parse: 6 callbacks suppressed
[  190.172561][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.749'.
[  190.621194][ T9068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.752'.
[  190.670933][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'.
[  190.831026][ T9074] netlink: 'syz.1.757': attribute type 7 has an invalid length.
[  190.877028][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.758'.
[  190.910296][ T9080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.916650][ T9078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.758'.
[  190.967082][ T9080] syzkaller0: entered promiscuous mode
[  190.997055][ T9080] syzkaller0: entered allmulticast mode
[  191.044700][ T9083] netlink: 88 bytes leftover after parsing attributes in process `syz.3.760'.
[  191.122838][ T9084] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  191.176443][ T9080] tipc: Resetting bearer <eth:syzkaller0>
[  191.274144][ T9079] tipc: Resetting bearer <eth:syzkaller0>
[  191.359590][ T9079] tipc: Disabling bearer <eth:syzkaller0>
[  191.389536][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'.
[  191.424097][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'.
[  191.539567][ T9105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.766'.
[  191.732792][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'.
[  192.141076][ T9105] batadv_slave_1: left promiscuous mode
[  192.254855][ T9105] macsec0: left allmulticast mode
[  192.425944][ T9105] macsec1: left promiscuous mode
[  192.430964][ T9105] macsec1: left allmulticast mode
[  192.498986][ T9105] geneve0: left promiscuous mode
[  192.543741][ T9111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.653782][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.661624][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.714661][ T9135] bridge0: entered allmulticast mode
[  192.727698][ T9120] syzkaller0: entered promiscuous mode
[  192.735413][ T9120] syzkaller0: entered allmulticast mode
[  192.815038][ T9139] bridge_slave_1: left allmulticast mode
[  192.831311][ T9139] bridge_slave_1: left promiscuous mode
[  192.842918][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.857989][ T9137] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  192.861359][ T9139] bridge_slave_0: left allmulticast mode
[  192.872036][ T9139] bridge_slave_0: left promiscuous mode
[  192.884504][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.976662][ T9137] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  193.126703][ T9132] tipc: Resetting bearer <eth:syzkaller0>
[  193.152678][   T59] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.185404][   T59] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.220900][   T59] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.256491][ T9107] tipc: Resetting bearer <eth:syzkaller0>
[  193.304695][ T9107] tipc: Disabling bearer <eth:syzkaller0>
[  193.366271][   T59] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.589944][ T9176] vxcan2: entered promiscuous mode
[  193.838763][ T9188] tap0: tun_chr_ioctl cmd 1074025677
[  193.849759][ T9189] netlink: 'syz.4.777': attribute type 1 has an invalid length.
[  193.866660][ T9188] tap0: linktype set to 780
[  194.350327][ T9220] sctp: [Deprecated]: syz.1.785 (pid 9220) Use of int in max_burst socket option.
[  194.350327][ T9220] Use struct sctp_assoc_value instead
[  194.469024][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  195.242979][ T9255] __nla_validate_parse: 14 callbacks suppressed
[  195.243010][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'.
[  195.354992][ T9261] netlink: 'syz.1.793': attribute type 13 has an invalid length.
[  195.362789][ T9261] netlink: 'syz.1.793': attribute type 17 has an invalid length.
[  195.649527][ T9261] bridge0: port 3(bond0) entered blocking state
[  195.656027][ T9261] bridge0: port 3(bond0) entered forwarding state
[  195.666802][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.676364][ T9261] 8021q: adding VLAN 0 to HW filter on device team0
[  195.690429][ T9261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.803028][ T9274] syzkaller0: entered promiscuous mode
[  195.809966][ T9274] syzkaller0: entered allmulticast mode
[  195.883054][ T9274] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.796'.
[  195.925887][ T9274] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  195.997716][ T9284] netlink: 88 bytes leftover after parsing attributes in process `syz.4.799'.
[  196.470031][ T9298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.803'.
[  196.507562][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'.
[  196.724592][ T9305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.876245][ T9305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.064399][ T9305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.113691][ T9325] sit0: entered promiscuous mode
[  197.119686][ T9326] ieee802154 phy0 wpan0: encryption failed: -22
[  197.136556][ T9325] netlink: 'syz.2.809': attribute type 1 has an invalid length.
[  197.181439][ T9325] netlink: 1 bytes leftover after parsing attributes in process `syz.2.809'.
[  197.339322][ T9305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.381287][ T9332] netlink: 88 bytes leftover after parsing attributes in process `syz.3.811'.
[  197.557414][ T9336] syzkaller0: entered promiscuous mode
[  197.567046][ T9336] syzkaller0: entered allmulticast mode
[  197.580269][ T9336] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.813'.
[  197.605013][ T9336] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  197.744432][ T2984] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.961097][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.993017][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.014348][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.441795][ T9360] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  199.301474][ T9381] syzkaller0: entered promiscuous mode
[  199.310763][ T9381] syzkaller0: entered allmulticast mode
[  199.333781][ T9381] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  199.462322][ T9388] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  199.474099][ T9388] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  199.510504][ T9387] veth1_to_bond: entered allmulticast mode
[  199.511895][ T9384] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.826'.
[  199.538835][ T9384] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  199.629019][ T9390] bond_slave_1: entered promiscuous mode
[  199.955758][ T9390] bond_slave_1: left promiscuous mode
[  199.975822][ T9390] veth1_to_bond: left allmulticast mode
[  200.252108][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'.
[  200.452958][ T9415] bond0: left allmulticast mode
[  200.489314][ T9415] bond_slave_0: left allmulticast mode
[  200.506190][ T9415] bond_slave_1: left allmulticast mode
[  200.512724][ T9415] bond1: left allmulticast mode
[  200.528374][ T9415] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  200.540470][ T9415] bond0: left promiscuous mode
[  200.547253][ T9415] bond_slave_0: left promiscuous mode
[  200.553111][ T9415] bond_slave_1: left promiscuous mode
[  200.559079][ T9415] bond1: left promiscuous mode
[  200.564317][ T9415] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  200.574338][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'.
[  200.578246][ T9415] bridge0: port 3(bond0) entered disabled state
[  200.595923][ T9415] bridge_slave_1: left allmulticast mode
[  200.601777][ T9415] bridge_slave_1: left promiscuous mode
[  200.608380][ T9415] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.619897][ T9415] bridge_slave_0: left allmulticast mode
[  200.626272][ T9415] bridge_slave_0: left promiscuous mode
[  200.633888][ T9415] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.816174][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'.
[  200.902105][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.836'.
[  200.934326][ T9420] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.954836][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'.
[  201.069610][ T9420] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.220875][ T9420] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.303320][ T9420] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.451639][ T9448] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  201.592870][ T9450] netlink: 'syz.0.840': attribute type 1 has an invalid length.
[  201.620515][ T9450] netlink: 'syz.0.840': attribute type 2 has an invalid length.
[  201.692581][ T9452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.841'.
[  202.036551][   T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.174371][ T3003] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.203330][ T9466] netlink: 'syz.0.845': attribute type 10 has an invalid length.
[  202.276911][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'.
[  202.304959][   T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.350533][   T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.481810][ T9471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.717979][ T9497] netlink: 'syz.1.852': attribute type 10 has an invalid length.
[  202.960413][ T9519] netlink: 88 bytes leftover after parsing attributes in process `syz.4.857'.
[  203.501029][ T9543] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.864'.
[  203.517255][ T9543] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  203.931567][ T9554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.979277][ T9556] smc: net device bond0 applied user defined pnetid SYZ2
[  203.997150][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  204.010290][ T5867] Bluetooth: hci4: link tx timeout
[  204.017140][ T5867] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  204.026596][ T5867] Bluetooth: hci4: link tx timeout
[  204.031828][ T5867] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  204.206844][ T9563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.416059][ T9563] tipc: Resetting bearer <eth:syzkaller0>
[  204.651586][ T9582] netlink: 'syz.2.877': attribute type 4 has an invalid length.
[  204.705710][ T9579] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  205.458260][ T9611] syzkaller1: entered promiscuous mode
[  205.463786][ T9611] syzkaller1: entered allmulticast mode
[  205.505943][ T9611] __nla_validate_parse: 7 callbacks suppressed
[  205.505974][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.884'.
[  205.525325][  T848] IPVS: starting estimator thread 0...
[  205.618182][ T9621] IPVS: using max 26 ests per chain, 62400 per kthread
[  206.043716][ T9642] macsec1: entered promiscuous mode
[  206.054272][ T5867] Bluetooth: hci4: command 0x0405 tx timeout
[  206.098015][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'.
[  206.109164][ T9642] netlink: 'syz.4.891': attribute type 13 has an invalid length.
[  206.237089][ T9653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.892'.
[  206.276314][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.892'.
[  206.329949][ T9658] netlink: 68 bytes leftover after parsing attributes in process `syz.4.895'.
[  206.369292][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[  206.416638][ T9659] netlink: 'syz.1.896': attribute type 19 has an invalid length.
[  206.455337][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'.
[  206.650178][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[  206.651907][ T3003] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.679213][ T9659] netlink: 'syz.1.896': attribute type 19 has an invalid length.
[  206.690157][   T59] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.720899][   T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.727371][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'.
[  206.730988][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'.
[  206.754202][   T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.793215][ T9667] vlan3: entered promiscuous mode
[  206.803007][ T9667] veth0: entered promiscuous mode
[  207.015919][ T9670] macvlan2: entered allmulticast mode
[  207.021440][ T9670] veth1_vlan: entered allmulticast mode
[  207.030866][ T9670] veth1_vlan: left allmulticast mode
[  207.068604][ T9677] netlink: 'syz.4.902': attribute type 39 has an invalid length.
[  207.352201][ T9681] ip6tnl2: entered promiscuous mode
[  207.749249][  T848] IPVS: starting estimator thread 0...
[  207.864580][ T9703] IPVS: using max 27 ests per chain, 64800 per kthread
[  208.134128][ T5867] Bluetooth: hci4: command 0x0405 tx timeout
[  208.499530][ T9714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.673691][ T9737] FAULT_INJECTION: forcing a failure.
[  208.673691][ T9737] name failslab, interval 1, probability 0, space 0, times 0
[  208.693664][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT(full) 
[  208.693691][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.693703][ T9737] Call Trace:
[  208.693711][ T9737]  <TASK>
[  208.693719][ T9737]  dump_stack_lvl+0x189/0x250
[  208.693750][ T9737]  ? __pfx____ratelimit+0x10/0x10
[  208.693780][ T9737]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.693807][ T9737]  ? __pfx__printk+0x10/0x10
[  208.693837][ T9737]  ? __pfx___might_resched+0x10/0x10
[  208.693861][ T9737]  should_fail_ex+0x414/0x560
[  208.693892][ T9737]  should_failslab+0xa8/0x100
[  208.693920][ T9737]  __kmalloc_cache_noprof+0x70/0x3d0
[  208.693945][ T9737]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  208.693975][ T9737]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  208.694016][ T9737]  genl_family_rcv_msg_doit+0x215/0x300
[  208.694051][ T9737]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  208.694092][ T9737]  ? bpf_lsm_capable+0x9/0x20
[  208.694116][ T9737]  ? security_capable+0x7e/0x2e0
[  208.694164][ T9737]  genl_rcv_msg+0x60e/0x790
[  208.694197][ T9737]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.694220][ T9737]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  208.694247][ T9737]  ? __asan_memcpy+0x40/0x70
[  208.694269][ T9737]  ? __pfx_ref_tracker_free+0x10/0x10
[  208.694303][ T9737]  netlink_rcv_skb+0x205/0x470
[  208.694319][ T9737]  ? __lock_acquire+0xab9/0xd20
[  208.694346][ T9737]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.694372][ T9737]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.694414][ T9737]  ? down_read+0x1ad/0x2e0
[  208.694438][ T9737]  genl_rcv+0x28/0x40
[  208.694459][ T9737]  netlink_unicast+0x82c/0x9e0
[  208.694497][ T9737]  ? __pfx_netlink_unicast+0x10/0x10
[  208.694527][ T9737]  ? netlink_sendmsg+0x642/0xb30
[  208.694544][ T9737]  ? skb_put+0x11b/0x210
[  208.694568][ T9737]  netlink_sendmsg+0x805/0xb30
[  208.694600][ T9737]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.694624][ T9737]  ? aa_sock_msg_perm+0xf1/0x1d0
[  208.694646][ T9737]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.694666][ T9737]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.694687][ T9737]  __sock_sendmsg+0x219/0x270
[  208.694718][ T9737]  ____sys_sendmsg+0x505/0x830
[  208.694748][ T9737]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.694783][ T9737]  ? import_iovec+0x74/0xa0
[  208.694810][ T9737]  ___sys_sendmsg+0x21f/0x2a0
[  208.694835][ T9737]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.694897][ T9737]  ? __fget_files+0x2a/0x420
[  208.694911][ T9737]  ? __fget_files+0x3a0/0x420
[  208.694936][ T9737]  __x64_sys_sendmsg+0x19b/0x260
[  208.694961][ T9737]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.694995][ T9737]  ? __pfx_ksys_write+0x10/0x10
[  208.695017][ T9737]  ? rcu_is_watching+0x15/0xb0
[  208.695043][ T9737]  ? do_syscall_64+0xbe/0x3b0
[  208.695068][ T9737]  do_syscall_64+0xfa/0x3b0
[  208.695085][ T9737]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.695102][ T9737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.695120][ T9737]  ? clear_bhb_loop+0x60/0xb0
[  208.695171][ T9737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.695189][ T9737] RIP: 0033:0x7f234818ebe9
[  208.695207][ T9737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.695223][ T9737] RSP: 002b:00007f2348f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.695245][ T9737] RAX: ffffffffffffffda RBX: 00007f23483c5fa0 RCX: 00007f234818ebe9
[  208.695259][ T9737] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000009
[  208.695272][ T9737] RBP: 00007f2348f87090 R08: 0000000000000000 R09: 0000000000000000
[  208.695283][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  208.695295][ T9737] R13: 00007f23483c6038 R14: 00007f23483c5fa0 R15: 00007ffc603d15a8
[  208.695329][ T9737]  </TASK>
[  209.081915][ T9737] netlink: del zone limit has 4 unknown bytes
[  209.307024][ T9714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.541323][ T9714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.581033][ T9761] tipc: Cannot configure node identity twice
[  209.591054][ T9755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.599263][ T9755] syzkaller0: entered promiscuous mode
[  209.612340][ T9755] syzkaller0: entered allmulticast mode
[  209.679840][ T9714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.727206][ T9755] tipc: Resetting bearer <eth:syzkaller0>
[  209.741458][ T9763] team0: entered promiscuous mode
[  209.750628][ T9763] team_slave_0: entered promiscuous mode
[  209.756664][ T9763] team_slave_1: entered promiscuous mode
[  209.766964][ T9763] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  209.809799][ T9754] tipc: Resetting bearer <eth:syzkaller0>
[  209.887766][ T9754] tipc: Disabling bearer <eth:syzkaller0>
[  210.012643][ T9770] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  210.078608][   T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.141608][ T2984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.232600][ T3003] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.322067][ T3003] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.700911][ T9803] __nla_validate_parse: 8 callbacks suppressed
[  210.700932][ T9803] netlink: 52 bytes leftover after parsing attributes in process `syz.1.933'.
[  210.838146][ T9806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'.
[  210.950016][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'.
[  211.084182][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'.
[  211.205369][ T9819] syzkaller0: entered promiscuous mode
[  211.214313][ T9819] syzkaller0: entered allmulticast mode
[  211.271932][ T9819] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.938'.
[  211.304104][ T9819] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  211.374864][ T9826] Bluetooth: MGMT ver 1.23
[  211.897854][ T5871] Bluetooth: hci1: command 0x0406 tx timeout
[  211.897873][ T5865] Bluetooth: hci2: command 0x0401 tx timeout
[  211.897917][ T5865] Bluetooth: hci3: command 0x0406 tx timeout
[  212.258325][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'.
[  212.299588][ T9854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  212.562017][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'.
[  212.599556][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'.
[  212.709611][ T9873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'.
[  212.719200][ T9873] netlink: 'syz.0.949': attribute type 7 has an invalid length.
[  212.741265][ T9873] netlink: 'syz.0.949': attribute type 8 has an invalid length.
[  212.771348][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  212.881520][ T9877] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  213.589824][ T9911] netlink: 'syz.4.959': attribute type 10 has an invalid length.
[  213.666898][ T9911] geneve0: entered promiscuous mode
[  213.733223][ T9911] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  213.763253][ T9911] team0: Failed to send options change via netlink (err -105)
[  213.773501][ T9911] team0: Port device geneve0 added
[  214.074734][ T9936] syzkaller0: entered promiscuous mode
[  214.093736][ T9936] syzkaller0: entered allmulticast mode
[  214.139357][ T9936] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  214.751059][ T9956] wireguard0: entered promiscuous mode
[  214.757321][ T9956] wireguard0: entered allmulticast mode
[  214.784386][ T2911] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  215.167644][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.184682][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.343557][ T9998] netlink: 'syz.0.975': attribute type 12 has an invalid length.
[  215.460201][   T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.483029][   T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.518706][   T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.535293][   T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.652529][T10006] netlink: 'syz.3.978': attribute type 4 has an invalid length.
[  215.676690][T10008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.715224][T10008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  215.770238][T10008] __nla_validate_parse: 12 callbacks suppressed
[  215.770259][T10008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.977'.
[  215.795486][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'.
[  215.823037][T10008] tipc: Resetting bearer <eth:syzkaller0>
[  215.831656][T10015] netlink: 88 bytes leftover after parsing attributes in process `syz.4.981'.
[  216.018398][T10022] netlink: 'syz.3.983': attribute type 21 has an invalid length.
[  216.366264][T10043] netlink: 'syz.2.987': attribute type 1 has an invalid length.
[  216.427942][T10048] raw_sendmsg: syz.0.990 forgot to set AF_INET. Fix it!
[  216.622512][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'.
[  216.681442][T10055] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  216.829405][T10063] bond3: (slave geneve2): making interface the new active one
[  216.839926][T10063] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  216.849809][ T2984] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  216.947061][T10065] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  216.976921][T10075] netlink: 'syz.0.995': attribute type 9 has an invalid length.
[  216.998217][ T2984] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  217.008406][ T2984] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  217.025307][T10068] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  217.154265][ T2984] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  217.420871][T10086] batadv_slave_0: entered promiscuous mode
[  217.474771][T10086] batadv_slave_0: left promiscuous mode
[  217.512093][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.524365][T10088] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  217.533990][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.757920][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  217.771433][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  217.824164][T10093] vti0: entered promiscuous mode
[  217.829470][T10093] vti0: entered allmulticast mode
[  217.844342][T10099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1004'.
[  217.938844][T10095] syzkaller0: entered promiscuous mode
[  217.944532][T10095] syzkaller0: entered allmulticast mode
[  218.469665][T10120] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1008'.
[  218.635271][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'.
[  220.303008][T10139] !
: renamed from dummy0
[  220.309220][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1014'.
[  220.865325][T10160] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1019'.
[  220.895321][T10164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1020'.
[  220.985069][T10166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.190948][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'.
[  221.239742][T10182] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1022'.
[  221.295509][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'.
[  221.629851][T10182] hsr_slave_1 (unregistering): left promiscuous mode
[  221.677109][T10193] pimreg3: entered allmulticast mode
[  221.682337][T10207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.970760][T10214] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1032'.
[  222.165336][T10224] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1036'.
[  222.182327][T10224] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  222.551502][T10238] unknown channel width for channel at 909000KHz?
[  222.973566][T10252] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1046'.
[  223.220891][T10257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.445426][T10268] netlink: 'syz.3.1051': attribute type 9 has an invalid length.
[  223.477646][T10268] netlink: 'syz.3.1051': attribute type 9 has an invalid length.
[  223.497509][T10264] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1050'.
[  223.507509][T10264] openvswitch: netlink: Key 5 has unexpected len 4 expected 2
[  223.960719][T10284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.039121][T10284] syzkaller0: entered promiscuous mode
[  224.059020][T10284] syzkaller0: entered allmulticast mode
[  224.166537][T10284] tipc: Resetting bearer <eth:syzkaller0>
[  224.215741][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'.
[  224.257608][T10283] tipc: Resetting bearer <eth:syzkaller0>
[  224.361574][T10283] tipc: Disabling bearer <eth:syzkaller0>
[  224.784517][T10330] netlink: 'syz.0.1066': attribute type 7 has an invalid length.
[  224.910318][T10330] : entered promiscuous mode
[  225.085008][T10351] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  225.136121][T10351] netlink: 'syz.4.1072': attribute type 1 has an invalid length.
[  225.156554][T10351] nbd: error processing sock list
[  225.344965][T10366] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  225.377964][T10366] tipc: Can't bind to reserved service type 2
[  225.554687][T10376] netlink: 'syz.0.1080': attribute type 1 has an invalid length.
[  226.295712][T10413] netlink: 'syz.0.1092': attribute type 1 has an invalid length.
[  226.457577][T10420] __nla_validate_parse: 7 callbacks suppressed
[  226.457601][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1094'.
[  226.580201][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  226.856910][T10432] FAULT_INJECTION: forcing a failure.
[  226.856910][T10432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.881283][T10432] CPU: 1 UID: 0 PID: 10432 Comm: syz.0.1098 Not tainted syzkaller #0 PREEMPT(full) 
[  226.881311][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.881322][T10432] Call Trace:
[  226.881330][T10432]  <TASK>
[  226.881339][T10432]  dump_stack_lvl+0x189/0x250
[  226.881367][T10432]  ? __pfx____ratelimit+0x10/0x10
[  226.881397][T10432]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.881418][T10432]  ? __pfx__printk+0x10/0x10
[  226.881457][T10432]  should_fail_ex+0x414/0x560
[  226.881487][T10432]  _copy_to_user+0x31/0xb0
[  226.881510][T10432]  simple_read_from_buffer+0xe1/0x170
[  226.881541][T10432]  proc_fail_nth_read+0x1b3/0x220
[  226.881565][T10432]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  226.881589][T10432]  ? rw_verify_area+0x2a6/0x4d0
[  226.881613][T10432]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  226.881636][T10432]  vfs_read+0x1fd/0xa30
[  226.881670][T10432]  ? __pfx_vfs_read+0x10/0x10
[  226.881695][T10432]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  226.881719][T10432]  ? __pfx_aa_sk_perm+0x10/0x10
[  226.881756][T10432]  ksys_read+0x145/0x250
[  226.881780][T10432]  ? __pfx_ksys_read+0x10/0x10
[  226.881808][T10432]  ? do_syscall_64+0xbe/0x3b0
[  226.881830][T10432]  do_syscall_64+0xfa/0x3b0
[  226.881845][T10432]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.881861][T10432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.881877][T10432]  ? clear_bhb_loop+0x60/0xb0
[  226.881896][T10432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.881912][T10432] RIP: 0033:0x7fc69058d5fc
[  226.881929][T10432] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  226.881945][T10432] RSP: 002b:00007fc68e7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  226.881965][T10432] RAX: ffffffffffffffda RBX: 00007fc6907c5fa0 RCX: 00007fc69058d5fc
[  226.881979][T10432] RDX: 000000000000000f RSI: 00007fc68e7f60a0 RDI: 0000000000000004
[  226.881990][T10432] RBP: 00007fc68e7f6090 R08: 0000000000000000 R09: 0000000000000000
[  226.882001][T10432] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  226.882021][T10432] R13: 00007fc6907c6038 R14: 00007fc6907c5fa0 R15: 00007ffca4e01bd8
[  226.882052][T10432]  </TASK>
[  227.414039][T10450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1104'.
[  228.608204][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'.
[  228.617902][T10492] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1113'.
[  228.628267][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'.
[  228.679438][T10491] 8021q: adding VLAN 0 to HW filter on device bond1
[  228.702599][T10491] bond0: (slave bond1): Enslaving as an active interface with a down link
[  228.822080][T10498] bond0: (slave gretap0): Error: Device type is different from other slaves
[  228.964406][T10513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1116'.
[  228.982357][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1116'.
[  229.681051][T10532] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1123'.
[  229.729161][T10532] netlink: zone id is out of range
[  229.754686][T10532] netlink: zone id is out of range
[  229.759926][T10532] netlink: zone id is out of range
[  229.765873][T10532] netlink: zone id is out of range
[  229.771038][T10532] netlink: zone id is out of range
[  229.776763][T10532] netlink: zone id is out of range
[  229.781933][T10532] netlink: get zone limit has 8 unknown bytes
[  229.806583][T10539] geneve2: entered promiscuous mode
[  230.045451][T10549] netlink: 'syz.2.1127': attribute type 10 has an invalid length.
[  230.072601][T10549] team0: Device hsr_slave_0 failed to register rx_handler
[  230.398772][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'.
[  230.444421][   T30] audit: type=1804 audit(1756544294.597:2): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1132" name="/newroot/228/memory.events" dev="tmpfs" ino=1181 res=1 errno=0
[  230.506468][   T30] audit: type=1800 audit(1756544294.597:3): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1132" name="memory.events" dev="tmpfs" ino=1181 res=0 errno=0
[  231.537727][T10604] tc_dump_action: action bad kind
[  231.570499][T10614] syzkaller1: entered promiscuous mode
[  231.592586][T10614] syzkaller1: entered allmulticast mode
[  231.618366][T10617] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  232.280537][T10635] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  232.327205][T10635] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1147'.
[  232.377507][T10635] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  232.408797][T10635] netlink: 'syz.0.1147': attribute type 2 has an invalid length.
[  232.412945][T10640] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1150'.
[  233.250741][T10669] siw: device registration error -23
[  233.378060][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'.
[  233.738509][T10680] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  233.789742][T10683] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1163'.
[  235.545773][T10726] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1175'.
[  235.571683][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1174'.
[  235.651257][T10729] netlink: 'syz.3.1176': attribute type 1 has an invalid length.
[  235.764989][T10729] bond2: entered promiscuous mode
[  235.771486][T10729] 8021q: adding VLAN 0 to HW filter on device bond2
[  236.092932][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'.
[  236.235728][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'.
[  236.602444][T10761] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1182'.
[  236.855137][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'.
[  237.159528][T10780] lo: entered allmulticast mode
[  237.294111][T10785] lo: left allmulticast mode
[  237.362366][T10786] __nla_validate_parse: 2 callbacks suppressed
[  237.362387][T10786] netlink: 740 bytes leftover after parsing attributes in process `syz.0.1189'.
[  237.395533][T10787] netlink: 'syz.1.1190': attribute type 12 has an invalid length.
[  237.806738][T10800] IPVS: Unknown mcast interface: bridge0
[  238.011834][T10811] netlink: 'syz.1.1194': attribute type 10 has an invalid length.
[  238.257588][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1197'.
[  239.006198][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  239.046432][T10844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1202'.
[  239.075040][T10842] netlink: 'syz.2.1201': attribute type 5 has an invalid length.
[  239.110368][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1201'.
[  239.263160][T10842] geneve2: entered promiscuous mode
[  239.333059][T10842] geneve2: entered allmulticast mode
[  239.365844][   T49] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  239.397549][   T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  239.570537][   T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  239.615815][   T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  239.750883][T10872] netlink: 'syz.1.1208': attribute type 5 has an invalid length.
[  240.234906][T10889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1210'.
[  240.252392][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1210'.
[  240.444380][T10894] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  240.606247][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'.
[  241.289721][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'.
[  241.371888][T10935] netem: change failed
[  241.752482][T10948] netlink: 'syz.3.1226': attribute type 7 has an invalid length.
[  241.984778][T10955] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1228'.
[  242.017832][T10957] delete_channel: no stack
[  242.384333][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'.
[  242.419992][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'.
[  242.461348][T10979] netlink: 'syz.0.1235': attribute type 15 has an invalid length.
[  242.648329][T10965] tipc: Resetting bearer <eth:syzkaller0>
[  242.673626][T10965] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  242.700927][T10965] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  242.795983][T10984] bond0: entered promiscuous mode
[  242.818504][T10984] batadv0: entered promiscuous mode
[  242.842135][T10984] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  242.875738][T10984] hsr1: entered allmulticast mode
[  242.881355][T10984] bond0: entered allmulticast mode
[  242.889140][T10984] batadv0: entered allmulticast mode
[  242.901401][T10984] 8021q: adding VLAN 0 to HW filter on device hsr1
[  242.943975][   T59] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.972913][   T59] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  243.019791][   T59] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.052455][   T59] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  243.112951][   T59] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.136274][   T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  243.193718][T11003] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  243.254487][T11002] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  243.258747][T11008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1240'.
[  243.290241][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  243.321755][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  243.591542][T11025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1244'.
[  243.657923][T11022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1243'.
[  243.807628][T11029] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.822620][T11029] 8021q: adding VLAN 0 to HW filter on device team0
[  243.849024][T11029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.891584][T11036] netlink: 'syz.3.1247': attribute type 1 has an invalid length.
[  244.112712][T11045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1250'.
[  244.160236][T11036] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.245136][T11038] bond3: (slave ip6gretap1): making interface the new active one
[  244.264444][T11049] netlink: 'syz.4.1251': attribute type 6 has an invalid length.
[  244.273178][T11038] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  244.304494][T11041] veth5: entered promiscuous mode
[  244.317003][T11041] bond3: (slave veth5): Enslaving as an active interface with a down link
[  244.332343][T11051] netlink: 'syz.4.1251': attribute type 21 has an invalid length.
[  244.489074][T11051] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1251'.
[  244.655163][T11061] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  244.715158][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1255'.
[  245.712870][T11096] vxcan1: entered allmulticast mode
[  245.737106][T11101] vxcan1: left allmulticast mode
[  245.751565][T11110] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1261'.
[  247.405485][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'.
[  247.874624][T11166] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  247.904060][T11166] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.920423][T11166] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  247.979506][T11176] netlink: 'syz.3.1282': attribute type 5 has an invalid length.
[  248.052568][T11166] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.073602][T11166] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.084079][T11166] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  248.198212][T11180] bridge0: entered allmulticast mode
[  248.240046][T11166] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.251057][T11166] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.262597][T11166] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  248.307277][T11187] netlink: zone id is out of range
[  248.321137][T11187] netlink: zone id is out of range
[  248.369850][T11180] pim6reg: entered allmulticast mode
[  248.376198][T11192] netlink: del zone limit has 4 unknown bytes
[  248.427835][T11166] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.446912][T11166] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.456557][T11182] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1284'.
[  248.458267][T11166] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  248.484459][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'.
[  248.489889][T11187] netlink: set zone limit has 4 unknown bytes
[  248.728895][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.764882][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1287'.
[  248.775339][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  248.796829][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  248.807668][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'.
[  248.896415][ T3003] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.914427][ T3003] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  248.937614][ T3003] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  248.947676][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'.
[  248.958231][T11212] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1289'.
[  249.002696][ T2911] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.022596][ T2911] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  249.045453][ T2911] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  249.112318][ T2911] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.128881][ T2911] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  249.137714][ T2911] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  249.173280][T11168] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.198699][T11168] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.220190][T11168] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  249.245621][ T2911] ==================================================================
[  249.253735][ T2911] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  249.261314][ T2911] Read of size 8 at addr ffff88807df2b6b0 by task kworker/u8:6/2911
[  249.269313][ T2911] 
[  249.271666][ T2911] CPU: 1 UID: 0 PID: 2911 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  249.271690][ T2911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  249.271703][ T2911] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  249.271739][ T2911] Call Trace:
[  249.271748][ T2911]  <TASK>
[  249.271755][ T2911]  dump_stack_lvl+0x189/0x250
[  249.271778][ T2911]  ? __kasan_check_byte+0x12/0x40
[  249.271804][ T2911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.271825][ T2911]  ? lock_release+0x4b/0x3e0
[  249.271853][ T2911]  ? __virt_addr_valid+0x4a5/0x5c0
[  249.271877][ T2911]  print_report+0xca/0x240
[  249.271896][ T2911]  ? __mutex_lock+0x147/0x1350
[  249.271914][ T2911]  kasan_report+0x118/0x150
[  249.271938][ T2911]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  249.271964][ T2911]  ? __mutex_lock+0x147/0x1350
[  249.271986][ T2911]  __mutex_lock+0x147/0x1350
[  249.272007][ T2911]  ? __mutex_lock+0x5bb/0x1350
[  249.272027][ T2911]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  249.272058][ T2911]  ? __pfx___mutex_lock+0x10/0x10
[  249.272079][ T2911]  ? __lock_acquire+0xab9/0xd20
[  249.272110][ T2911]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  249.272142][ T2911]  ? process_scheduled_works+0x9ef/0x17b0
[  249.272160][ T2911]  ? process_scheduled_works+0x9ef/0x17b0
[  249.272177][ T2911]  process_scheduled_works+0xae1/0x17b0
[  249.272207][ T2911]  ? __pfx_process_scheduled_works+0x10/0x10
[  249.272230][ T2911]  worker_thread+0x8a0/0xda0
[  249.272261][ T2911]  kthread+0x70e/0x8a0
[  249.272285][ T2911]  ? __pfx_worker_thread+0x10/0x10
[  249.272302][ T2911]  ? __pfx_kthread+0x10/0x10
[  249.272323][ T2911]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.272347][ T2911]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.272364][ T2911]  ? __pfx_kthread+0x10/0x10
[  249.272384][ T2911]  ret_from_fork+0x3f9/0x770
[  249.272404][ T2911]  ? __pfx_ret_from_fork+0x10/0x10
[  249.272424][ T2911]  ? __switch_to_asm+0x39/0x70
[  249.272445][ T2911]  ? __switch_to_asm+0x33/0x70
[  249.272466][ T2911]  ? __pfx_kthread+0x10/0x10
[  249.272487][ T2911]  ret_from_fork_asm+0x1a/0x30
[  249.272516][ T2911]  </TASK>
[  249.272522][ T2911] 
[  249.476571][ T2911] Allocated by task 11166:
[  249.481069][ T2911]  kasan_save_track+0x3e/0x80
[  249.485848][ T2911]  __kasan_kmalloc+0x93/0xb0
[  249.490460][ T2911]  __kmalloc_noprof+0x27a/0x4f0
[  249.495324][ T2911]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  249.501503][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  249.506619][ T2911]  register_netdevice+0x1608/0x1ae0
[  249.511822][ T2911]  nsim_create+0xae8/0xf10
[  249.516246][ T2911]  __nsim_dev_port_add+0x6b6/0xb10
[  249.521472][ T2911]  nsim_dev_port_add_all+0x37/0xf0
[  249.526609][ T2911]  nsim_dev_reload_up+0x451/0x780
[  249.531638][ T2911]  devlink_reload+0x4e9/0x8d0
[  249.536315][ T2911]  devlink_nl_reload_doit+0xb35/0xd50
[  249.541683][ T2911]  genl_family_rcv_msg_doit+0x215/0x300
[  249.547246][ T2911]  genl_rcv_msg+0x60e/0x790
[  249.551838][ T2911]  netlink_rcv_skb+0x205/0x470
[  249.556600][ T2911]  genl_rcv+0x28/0x40
[  249.560585][ T2911]  netlink_unicast+0x82c/0x9e0
[  249.565379][ T2911]  netlink_sendmsg+0x805/0xb30
[  249.570146][ T2911]  __sock_sendmsg+0x219/0x270
[  249.574834][ T2911]  ____sys_sendmsg+0x505/0x830
[  249.579598][ T2911]  ___sys_sendmsg+0x21f/0x2a0
[  249.584277][ T2911]  __x64_sys_sendmsg+0x19b/0x260
[  249.589211][ T2911]  do_syscall_64+0xfa/0x3b0
[  249.593707][ T2911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.599615][ T2911] 
[  249.602130][ T2911] Freed by task 11168:
[  249.606187][ T2911]  kasan_save_track+0x3e/0x80
[  249.610864][ T2911]  kasan_save_free_info+0x46/0x50
[  249.615882][ T2911]  __kasan_slab_free+0x5b/0x80
[  249.620734][ T2911]  kfree+0x18e/0x440
[  249.624906][ T2911]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  249.631161][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  249.636293][ T2911]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  249.642810][ T2911]  unregister_netdevice_queue+0x33c/0x380
[  249.648546][ T2911]  nsim_destroy+0x1dd/0x670
[  249.653048][ T2911]  __nsim_dev_port_del+0x14d/0x1b0
[  249.658170][ T2911]  nsim_dev_reload_destroy+0x288/0x490
[  249.663646][ T2911]  nsim_dev_reload_down+0x8a/0xc0
[  249.668673][ T2911]  devlink_reload+0x1b3/0x8d0
[  249.673355][ T2911]  devlink_nl_reload_doit+0xb35/0xd50
[  249.678732][ T2911]  genl_family_rcv_msg_doit+0x215/0x300
[  249.684279][ T2911]  genl_rcv_msg+0x60e/0x790
[  249.688785][ T2911]  netlink_rcv_skb+0x205/0x470
[  249.693546][ T2911]  genl_rcv+0x28/0x40
[  249.697530][ T2911]  netlink_unicast+0x82c/0x9e0
[  249.702292][ T2911]  netlink_sendmsg+0x805/0xb30
[  249.707049][ T2911]  __sock_sendmsg+0x219/0x270
[  249.711726][ T2911]  ____sys_sendmsg+0x505/0x830
[  249.716513][ T2911]  ___sys_sendmsg+0x21f/0x2a0
[  249.721209][ T2911]  __x64_sys_sendmsg+0x19b/0x260
[  249.726143][ T2911]  do_syscall_64+0xfa/0x3b0
[  249.730648][ T2911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.736541][ T2911] 
[  249.738946][ T2911] Last potentially related work creation:
[  249.744671][ T2911]  kasan_save_stack+0x3e/0x60
[  249.749460][ T2911]  kasan_record_aux_stack+0xbd/0xd0
[  249.754655][ T2911]  insert_work+0x3d/0x330
[  249.758993][ T2911]  __queue_work+0xbaf/0xfb0
[  249.763591][ T2911]  queue_work_on+0x181/0x270
[  249.768187][ T2911]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  249.773830][ T2911]  udp_tunnel_push_rx_port+0x180/0x200
[  249.779292][ T2911]  geneve_offload_rx_ports+0xd7/0x160
[  249.784667][ T2911]  geneve_netdevice_event+0x6a/0x80
[  249.789869][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  249.794980][ T2911]  call_netdevice_notifiers+0x88/0xc0
[  249.800355][ T2911]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  249.806598][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  249.811712][ T2911]  register_netdevice+0x1608/0x1ae0
[  249.816912][ T2911]  nsim_create+0xae8/0xf10
[  249.821326][ T2911]  __nsim_dev_port_add+0x6b6/0xb10
[  249.826523][ T2911]  nsim_dev_port_add_all+0x37/0xf0
[  249.831815][ T2911]  nsim_dev_reload_up+0x451/0x780
[  249.836838][ T2911]  devlink_reload+0x4e9/0x8d0
[  249.841516][ T2911]  devlink_nl_reload_doit+0xb35/0xd50
[  249.846886][ T2911]  genl_family_rcv_msg_doit+0x215/0x300
[  249.852522][ T2911]  genl_rcv_msg+0x60e/0x790
[  249.857027][ T2911]  netlink_rcv_skb+0x205/0x470
[  249.862048][ T2911]  genl_rcv+0x28/0x40
[  249.866045][ T2911]  netlink_unicast+0x82c/0x9e0
[  249.870833][ T2911]  netlink_sendmsg+0x805/0xb30
[  249.875592][ T2911]  __sock_sendmsg+0x219/0x270
[  249.880530][ T2911]  ____sys_sendmsg+0x505/0x830
[  249.885302][ T2911]  ___sys_sendmsg+0x21f/0x2a0
[  249.889987][ T2911]  __x64_sys_sendmsg+0x19b/0x260
[  249.894941][ T2911]  do_syscall_64+0xfa/0x3b0
[  249.899465][ T2911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.905355][ T2911] 
[  249.907675][ T2911] Second to last potentially related work creation:
[  249.914256][ T2911]  kasan_save_stack+0x3e/0x60
[  249.918946][ T2911]  kasan_record_aux_stack+0xbd/0xd0
[  249.924141][ T2911]  insert_work+0x3d/0x330
[  249.928471][ T2911]  __queue_work+0xcd2/0xfb0
[  249.932971][ T2911]  queue_work_on+0x181/0x270
[  249.937557][ T2911]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  249.943192][ T2911]  udp_tunnel_push_rx_port+0x180/0x200
[  249.948657][ T2911]  vxlan_offload_rx_ports+0x139/0x200
[  249.954045][ T2911]  vxlan_netdevice_event+0x111/0x470
[  249.959336][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  249.964530][ T2911]  call_netdevice_notifiers+0x88/0xc0
[  249.969918][ T2911]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  249.976188][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  249.981309][ T2911]  register_netdevice+0x1608/0x1ae0
[  249.986513][ T2911]  nsim_create+0xae8/0xf10
[  249.990934][ T2911]  __nsim_dev_port_add+0x6b6/0xb10
[  249.996046][ T2911]  nsim_dev_port_add_all+0x37/0xf0
[  250.001160][ T2911]  nsim_dev_reload_up+0x451/0x780
[  250.006190][ T2911]  devlink_reload+0x4e9/0x8d0
[  250.010958][ T2911]  devlink_nl_reload_doit+0xb35/0xd50
[  250.016404][ T2911]  genl_family_rcv_msg_doit+0x215/0x300
[  250.021949][ T2911]  genl_rcv_msg+0x60e/0x790
[  250.026450][ T2911]  netlink_rcv_skb+0x205/0x470
[  250.031209][ T2911]  genl_rcv+0x28/0x40
[  250.035187][ T2911]  netlink_unicast+0x82c/0x9e0
[  250.040036][ T2911]  netlink_sendmsg+0x805/0xb30
[  250.044795][ T2911]  __sock_sendmsg+0x219/0x270
[  250.049485][ T2911]  ____sys_sendmsg+0x505/0x830
[  250.054247][ T2911]  ___sys_sendmsg+0x21f/0x2a0
[  250.058950][ T2911]  __x64_sys_sendmsg+0x19b/0x260
[  250.063886][ T2911]  do_syscall_64+0xfa/0x3b0
[  250.068390][ T2911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.074283][ T2911] 
[  250.076605][ T2911] The buggy address belongs to the object at ffff88807df2b600
[  250.076605][ T2911]  which belongs to the cache kmalloc-256 of size 256
[  250.090655][ T2911] The buggy address is located 176 bytes inside of
[  250.090655][ T2911]  freed 256-byte region [ffff88807df2b600, ffff88807df2b700)
[  250.104488][ T2911] 
[  250.106820][ T2911] The buggy address belongs to the physical page:
[  250.113326][ T2911] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7df2a
[  250.122176][ T2911] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  250.130675][ T2911] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  250.138233][ T2911] page_type: f5(slab)
[  250.142238][ T2911] raw: 00fff00000000040 ffff88801a441b40 ffffea0000b9a300 dead000000000004
[  250.150923][ T2911] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  250.159521][ T2911] head: 00fff00000000040 ffff88801a441b40 ffffea0000b9a300 dead000000000004
[  250.168222][ T2911] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  250.176982][ T2911] head: 00fff00000000001 ffffea0001f7ca81 00000000ffffffff 00000000ffffffff
[  250.185994][ T2911] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  250.194664][ T2911] page dumped because: kasan: bad access detected
[  250.201178][ T2911] page_owner tracks the page as allocated
[  250.206983][ T2911] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5864, tgid 5864 (syz-executor), ts 96092564089, free_ts 96048673066
[  250.228526][ T2911]  post_alloc_hook+0x240/0x2a0
[  250.233308][ T2911]  get_page_from_freelist+0x21e4/0x22c0
[  250.238845][ T2911]  __alloc_frozen_pages_noprof+0x181/0x370
[  250.244645][ T2911]  alloc_pages_mpol+0x232/0x4a0
[  250.249506][ T2911]  allocate_slab+0x8a/0x370
[  250.254013][ T2911]  ___slab_alloc+0xbeb/0x1410
[  250.258705][ T2911]  __kmalloc_cache_noprof+0x296/0x3d0
[  250.264087][ T2911]  ____ip_mc_inc_group+0x528/0xde0
[  250.269227][ T2911]  ip_mc_up+0x125/0x300
[  250.273403][ T2911]  inetdev_event+0xfb3/0x15b0
[  250.278082][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  250.283282][ T2911]  __dev_notify_flags+0x18d/0x2e0
[  250.288315][ T2911]  netif_change_flags+0xe8/0x1a0
[  250.293255][ T2911]  do_setlink+0xc55/0x41c0
[  250.297677][ T2911]  rtnl_newlink+0x160b/0x1c70
[  250.302355][ T2911]  rtnetlink_rcv_msg+0x7cf/0xb70
[  250.307383][ T2911] page last free pid 5874 tgid 5874 stack trace:
[  250.313706][ T2911]  __free_frozen_pages+0xbc4/0xd30
[  250.318842][ T2911]  __put_partials+0x156/0x1a0
[  250.323511][ T2911]  put_cpu_partial+0x17c/0x250
[  250.328290][ T2911]  __slab_free+0x2d5/0x3c0
[  250.332713][ T2911]  qlist_free_all+0x97/0x140
[  250.337299][ T2911]  kasan_quarantine_reduce+0x148/0x160
[  250.342753][ T2911]  __kasan_slab_alloc+0x22/0x80
[  250.347604][ T2911]  __kmalloc_cache_noprof+0x1be/0x3d0
[  250.353059][ T2911]  netdevice_event+0x3a1/0x8a0
[  250.357823][ T2911]  notifier_call_chain+0x1b6/0x3e0
[  250.363017][ T2911]  __dev_notify_flags+0x18d/0x2e0
[  250.368038][ T2911]  netif_change_flags+0xe8/0x1a0
[  250.372971][ T2911]  do_setlink+0xc55/0x41c0
[  250.377379][ T2911]  rtnl_newlink+0x160b/0x1c70
[  250.382048][ T2911]  rtnetlink_rcv_msg+0x7cf/0xb70
[  250.386977][ T2911]  netlink_rcv_skb+0x205/0x470
[  250.391736][ T2911] 
[  250.394053][ T2911] Memory state around the buggy address:
[  250.399772][ T2911]  ffff88807df2b580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.407851][ T2911]  ffff88807df2b600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.415919][ T2911] >ffff88807df2b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.423976][ T2911]                                      ^
[  250.429613][ T2911]  ffff88807df2b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.437677][ T2911]  ffff88807df2b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.445822][ T2911] ==================================================================
[  250.459429][ T2911] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  250.466701][ T2911] CPU: 0 UID: 0 PID: 2911 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  250.476191][ T2911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  250.486277][ T2911] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  250.493598][ T2911] Call Trace:
[  250.496941][ T2911]  <TASK>
[  250.499977][ T2911]  dump_stack_lvl+0x99/0x250
[  250.504697][ T2911]  ? __asan_memcpy+0x40/0x70
[  250.509356][ T2911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.514583][ T2911]  ? __pfx__printk+0x10/0x10
[  250.519201][ T2911]  vpanic+0x281/0x750
[  250.523192][ T2911]  ? preempt_schedule+0xae/0xc0
[  250.528079][ T2911]  ? __pfx_vpanic+0x10/0x10
[  250.532580][ T2911]  ? preempt_schedule_common+0x83/0xd0
[  250.538140][ T2911]  ? preempt_schedule+0xae/0xc0
[  250.543086][ T2911]  ? __pfx_preempt_schedule+0x10/0x10
[  250.548659][ T2911]  panic+0xb9/0xc0
[  250.552393][ T2911]  ? __pfx_panic+0x10/0x10
[  250.556810][ T2911]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  250.562735][ T2911]  ? __mutex_lock+0x147/0x1350
[  250.567501][ T2911]  check_panic_on_warn+0x89/0xb0
[  250.572440][ T2911]  ? __mutex_lock+0x147/0x1350
[  250.577208][ T2911]  end_report+0x78/0x160
[  250.581454][ T2911]  kasan_report+0x129/0x150
[  250.586043][ T2911]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  250.591942][ T2911]  ? __mutex_lock+0x147/0x1350
[  250.596709][ T2911]  __mutex_lock+0x147/0x1350
[  250.601305][ T2911]  ? __mutex_lock+0x5bb/0x1350
[  250.606073][ T2911]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  250.612407][ T2911]  ? __pfx___mutex_lock+0x10/0x10
[  250.617430][ T2911]  ? __lock_acquire+0xab9/0xd20
[  250.622291][ T2911]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  250.628372][ T2911]  ? process_scheduled_works+0x9ef/0x17b0
[  250.634107][ T2911]  ? process_scheduled_works+0x9ef/0x17b0
[  250.639913][ T2911]  process_scheduled_works+0xae1/0x17b0
[  250.645468][ T2911]  ? __pfx_process_scheduled_works+0x10/0x10
[  250.651495][ T2911]  worker_thread+0x8a0/0xda0
[  250.656102][ T2911]  kthread+0x70e/0x8a0
[  250.660177][ T2911]  ? __pfx_worker_thread+0x10/0x10
[  250.665299][ T2911]  ? __pfx_kthread+0x10/0x10
[  250.669895][ T2911]  ? _raw_spin_unlock_irq+0x23/0x50
[  250.675104][ T2911]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.680298][ T2911]  ? __pfx_kthread+0x10/0x10
[  250.684893][ T2911]  ret_from_fork+0x3f9/0x770
[  250.689483][ T2911]  ? __pfx_ret_from_fork+0x10/0x10
[  250.694687][ T2911]  ? __switch_to_asm+0x39/0x70
[  250.699455][ T2911]  ? __switch_to_asm+0x33/0x70
[  250.704217][ T2911]  ? __pfx_kthread+0x10/0x10
[  250.708824][ T2911]  ret_from_fork_asm+0x1a/0x30
[  250.713602][ T2911]  </TASK>
[  250.716898][ T2911] Kernel Offset: disabled
[  250.721215][ T2911] Rebooting in 86400 seconds..