last executing test programs:

7.976434418s ago: executing program 3 (id=2919):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000013f55ac77fa69ccda5068a0000400044d7fc59b87e36c56197b13a202ab42c1a214e24885b0900000021d9c3c53f4eae70fdfc3c909a7f4f5c7d0149c55d814373673438cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0xc)
r4 = socket(0x1, 0x80802, 0x0)
epoll_create1(0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40421}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000002c0)=""/119, &(0x7f0000000080)=0x77)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x1, 0x5})
socket$packet(0x11, 0x2, 0x300)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0180000000000000000001ffffffffffff8001"], 0x28}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r8, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

7.591002992s ago: executing program 3 (id=2925):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf5, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x650, 0xffffffff, 0x258, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x580, 0x580, 0x580, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00], 'gre0\x00', 'pim6reg1\x00', {}, {}, 0x3b, 0x4, 0x3, 0x14}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0x8, 0xb, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff000000, 0xff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffffff], 0x505, 0x2004}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11, 0x5, 0x4}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0xff000000, 0xffffffff, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffffff], 'dvmrp0\x00', 'bond_slave_0\x00', {}, {}, 0x3c, 0x2, 0x0, 0x2}, 0x0, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x26, [{0x1, 0x8, 0x2a, 0x6}, {0x7, 0xe, 0xe, 0x3}, {0x7, 0x7, 0x0, 0x8000}, {0x3, 0x4, 0x0, 0x200}, {0xe, 0x40, 0xe, 0xc}, {0xfff, 0x0, 0xb6, 0x2}, {0x46, 0x2, 0x3, 0x2}, {0x56c6, 0xe, 0x9, 0xacb9}, {0x200, 0x4, 0x7, 0x86f4}, {0xf62a, 0x4, 0x4, 0x5}, {0x100, 0x29, 0x7, 0x5}, {0x7, 0x3c, 0xb, 0x5bf69e7}, {0x7, 0xa, 0x81, 0x40}, {0x2, 0x80, 0x2a, 0x1ff}, {0x7, 0x1, 0x2, 0x4}, {0x6, 0x8, 0x4, 0x369f}, {0xc0, 0x8, 0x5, 0x7}, {0x101, 0x7, 0x6, 0x3}, {0x4, 0x2, 0x4, 0x80000000}, {0x0, 0x5, 0x8, 0x2}, {0x6, 0x0, 0x48, 0xff}, {0x200, 0x5, 0x5, 0x70}, {0x0, 0x27, 0x3, 0x10000}, {0x8, 0x7, 0x7, 0x8}, {0x8, 0x27, 0x3, 0x1761}, {0x4, 0xff, 0x6, 0xfffffff9}, {0x1ff, 0xf1, 0x4d, 0x3}, {0x9, 0x2, 0x76, 0x4}, {0x2, 0x9, 0xd, 0xffff}, {0x2, 0x77, 0x1}, {0x9, 0xc, 0x2, 0x5}, {0x8000, 0x16, 0x2, 0x7}, {0x100, 0x97, 0x2, 0x8000}, {0x1, 0xfc, 0x3, 0xff}, {0x9, 0xfe, 0x2, 0x4}, {0x7, 0x95, 0xa2, 0x2}, {0x6, 0x4, 0x7, 0x7fff}, {0x7, 0x8, 0x3, 0x9}, {0xf, 0x2, 0x0, 0x3}, {0x3ff, 0x5, 0x4, 0x1}, {0x4, 0x5, 0x8, 0xffff}, {0x1, 0x13, 0x1f, 0x2}, {0x6, 0x1, 0x24, 0x2}, {0x0, 0x9, 0x8, 0xfffffff2}, {0x5, 0x2, 0x1}, {0xe, 0x0, 0x32, 0xfffffffd}, {0x6, 0x0, 0x7, 0x1}, {0x4, 0x9, 0x6, 0x80000000}, {0x7ff, 0x18, 0x2, 0x7}, {0x1, 0x3, 0x4, 0xfffffff9}, {0x8, 0x4, 0x9, 0x400}, {0x0, 0x4, 0x1, 0x6}, {0x1, 0x5, 0x3, 0x100}, {0xebbb, 0x1, 0x5, 0x2}, {0x2, 0x11, 0xff, 0xa3}, {0xba9c, 0x8, 0x6, 0x6}, {0x6, 0xe2, 0xfd, 0x8}, {0x100, 0xca, 0xf2, 0x9}, {0x9, 0x0, 0x4, 0xfffffffa}, {0x7, 0xad, 0xf9, 0xfffffffa}, {0x0, 0x80, 0x2, 0xfcb}, {0xfff1, 0x10, 0x9, 0x3}, {0x4, 0xe, 0xec, 0x1}, {0x81, 0x6, 0x4, 0x1}], {0x10}}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)

7.481540609s ago: executing program 3 (id=2928):
r0 = socket$inet6(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="070000000000f6"], 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)='`O', 0x2}], 0x1, 0x0, 0x0, 0x4000}, 0x1)
recvmmsg$unix(r4, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0)

7.402652367s ago: executing program 3 (id=2930):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800001c4608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.31673395s ago: executing program 3 (id=2932):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r3}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000480), &(0x7f0000000340)=@tcp6=r3}, 0x20)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x640100ff, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0xfffffffffffffffe, 0x400403, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0xd, 0x0, 0x7}, 0xfffffff9, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="23690f58112ffd214cbf8815213f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'})
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1d8}}], 0x1, 0x0)

7.254882645s ago: executing program 3 (id=2933):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40040)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl(r0, 0x8b2e, &(0x7f0000000040))
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc800)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
shutdown(r0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@local, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x4, 0x1}, {0x40000000020, 0x40000000, 0xfffffffffffffffd, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x3, 0x0, 0x4d}}, 0xe8)
sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r4=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r5, 0x20000000)

3.614973299s ago: executing program 4 (id=2967):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x3, @any, 0xe48, 0x3}, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb709}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r8], 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4a000) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0x2, 0x10, 0x3, 0x2, 0x0, 0x40}, 0xc)

3.418150082s ago: executing program 4 (id=2969):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r2, 0xfef94000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111750000000000851000000200000085000000a0000000951f0000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

3.210894335s ago: executing program 4 (id=2970):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = epoll_create1(0x80000) (async)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)) (async)
unshare(0x6a040000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000040), &(0x7f0000000940)=r4}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="17000000020001", 0x7)
setsockopt$inet_tcp_int(r9, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) (async)
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async)
getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

2.824767742s ago: executing program 1 (id=2971):
socket(0x2, 0xa, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x1ea}], 0x1, 0x0, 0x0, 0x1f000801}, 0x8004) (async)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0xff, 0x1}, 0x8) (async)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r1, 0x9, 0xffff, 0x7, 0x8001}, 0x14)

2.742374615s ago: executing program 1 (id=2972):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
shutdown(r1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, 0x3ed, 0x800, 0x70bd27, 0x25dfdbfb, "45fd2ec6c7edc8bcd0e2690785c659210ac05529bf8ac2cc5893796e3201dee154542fd41e2c1e885030c946577f4d5ea6c777841dee3a052e30762120578ccba3d52e3ea723dd8e87171d03e5f8e05831ad87f61bf9f12d71ae0c10ea50a733261d3142cc8d2abe18c324c4e9a0ed0fd050dc1e2b4fdfe2ccaf97ff40e0227c2b3ebe1f1feccdeda42bf347a0c6d930999bf498feefabcbaa6d8db157c7b9f36669fcdd10a5ea44045061ba25dc27503d664ece9c37403a7ec7bc2af2f3fa46718c6923c04702d1ec5ebbff89cad9bf8048e2d271b260a53325617980bde07a3b3b3dd8e6c18a", ["", "", "", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x4850)
clock_gettime(0x0, &(0x7f00000030c0)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000280)=@ax25={{0x3, @default}, [@null, @netrom, @bcast, @bcast, @netrom, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000340)=""/22, 0x16}], 0x2, &(0x7f00000003c0)=""/4096, 0x1000}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000013c0)=""/240, 0xf0}, {&(0x7f00000014c0)=""/123, 0x7b}], 0x2, &(0x7f0000001580)=""/13, 0xd}, 0x8001}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001640)=""/41, 0x29}, {&(0x7f0000001680)=""/42, 0x2a}, {&(0x7f00000016c0)=""/62, 0x3e}, {&(0x7f0000001700)=""/76, 0x4c}, {&(0x7f0000001780)=""/192, 0xc0}, {&(0x7f0000001840)=""/13, 0xd}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/191, 0xbf}], 0x8}, 0x6}, {{&(0x7f00000029c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002a40)=""/239, 0xef}, {&(0x7f0000002b40)=""/78, 0x4e}, {&(0x7f0000002bc0)=""/218, 0xda}, {&(0x7f0000002cc0)=""/231, 0xe7}, {&(0x7f0000002dc0)=""/96, 0x60}], 0x5, &(0x7f0000002ec0)=""/201, 0xc9}, 0x4}], 0x4, 0x40000040, &(0x7f0000003100)={r3, r4+60000000})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}]}, 0x1c}}, 0x8000)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003240)={<r5=>r0, 0x6, 0x2, 0x1})
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000033c0)={&(0x7f00000032c0)={0xc4, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x37}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}]}, {0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000003440)={@multicast1, @empty}, &(0x7f0000003480)=0x8)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000034c0)={<r6=>0x0, @dev, @multicast2}, &(0x7f0000003500)=0xc)
r7 = socket$key(0xf, 0x3, 0x2)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003540), &(0x7f0000003580)=0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000038c0)={r5, 0x20, &(0x7f0000003880)={&(0x7f0000003740)=""/140, 0x8c, <r8=>0x0, &(0x7f0000003800)=""/119, 0x77}}, 0x10)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003d00)={0x6, 0x33, &(0x7f0000003900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x7b}, @map_fd={0x18, 0x1f, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ac0)='syzkaller\x00', 0x800, 0xc3, &(0x7f0000003b00)=""/195, 0x40f00, 0x14, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003c00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000003c40)={0x0, 0x9, 0x3ff, 0x11a9f84c}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003c80)=[r5, r5, r5, 0xffffffffffffffff], &(0x7f0000003cc0)=[{0x3, 0x1, 0x9, 0x5}, {0x4, 0x1, 0x6, 0x8}], 0x10, 0x5}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x80000001, '\x00', r6, r1, 0x3, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000003ec0)={0x1a, 0xd, &(0x7f00000035c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0xba99}, [@exit, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000003640)='syzkaller\x00', 0x3, 0x79, &(0x7f0000003680)=""/121, 0x40f00, 0x20, '\x00', r6, @tracing=0x17, r5, 0x8, &(0x7f0000003700)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x4, &(0x7f0000003e40)=[r10], &(0x7f0000003e80)=[{0x5, 0x2, 0x0, 0xd}, {0x0, 0x3, 0x1, 0xb}, {0x3, 0x3, 0x0, 0x2}, {0x3, 0x3, 0x9, 0x7}], 0x10, 0x80000000}, 0x94)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000004300)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000042c0)={&(0x7f0000003fc0)={0x2d0, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a6d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7f, @private0, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @local, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "017fada62c26465bb57c5642edf815484f837f9046ff6fe1011c44143581"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7f439f5ed6f1c632b2673ecf4f2a4fa153af22139f2d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x62, 0x3, "1fefbaca4a1917f62bc97c7f8fad366f7e90b87d6fac2016016683f4b8e31e88497750b9d033e0607c12ab1731be07e7a53d4db16e8302dca49bd05eab7335d38717b888ecdf0ea3fc28407c1f8ce51e6f8117fc63c3c51211a402d8ba3c"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9e61}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20000091}, 0x4051)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000004340)={<r11=>0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x400}}}, &(0x7f0000004400)=0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000004440)={r11, 0x8, 0x0, 0x5}, 0x10)
sendmsg$xdp(r10, &(0x7f00000046c0)={&(0x7f0000004480)={0x2c, 0x8, r6}, 0x10, &(0x7f0000004680)=[{&(0x7f00000044c0)="a186d48cab350c093a6241ad724c4a41520f80dc2651f897b5d3091daa5860b2e39f52a360f8409dc725ec793b1fe794d221f36ec0a38b7b5a991bf74d1804e8f5f59dd7a5fd534c952922a6ee9aa60951860d68031364662b4be400f902dbbdce32aeed2cbead19279bdddbca6149d353d4db54b1bd26f1d8196f96ac37ccc2e79614b52e47f76c548658b7f2613dff6d8809213063509946", 0x99}, {&(0x7f0000004580)="5de4bf878916901d06259ce29e389731c883e106c6a15a65b3458eea", 0x1c}, {&(0x7f00000045c0)="606ecedb25d5832634cac7a92873eca39a12b554eb4ade70ac3b3d3dd930bbf60dd52e6e19b49b7c69a6aaa9a57445a2ba7eaf5869cb3e524dac05bb3c5b979bc413e21858db31e8dc98eff6e9182edb1dbbc5e9caf1113f10a6f5933ece18ff9b0d836ac0f0b1994769e910e805406fc09925f9c284855dc05f21a410c7aaff44fd186d1b52f7609d110bfed12127dd41ca88", 0x93}], 0x3, 0x0, 0x0, 0x44080}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004840)={r9, 0x0, 0x9, 0x26, &(0x7f0000004700)="c05b89a43ebc788e2d", &(0x7f0000004740)=""/38, 0x5, 0x0, 0x70, 0x8, &(0x7f0000004780)="bc1464c1a5aba8374f32fbd7e0f84e7f566578de4342f5d92859c0847df67b6d28d945d11bc264a8baae916ac68cc825b5b011448a6363223d5b147c24c5d605c3c76b689c942d5ec3981f4b66a211312d4a44de6fafc204485c261ae0b86b57f15df1d3b0f9605885f048ee7eeb8408", &(0x7f0000004800)="cc741f32bc32244c", 0x6, 0x0, 0x401}, 0x50)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000048c0)={'security\x00', 0x0, [0xa, 0x0, 0x6, 0x8001, 0x52b]}, &(0x7f0000004940)=0x54)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x60, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x56}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x7}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_ZONE={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
r12 = socket$isdn_base(0x22, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r12, 0x1, 0x53, &(0x7f0000004ac0)={0x7, 0x7, 0x3}, &(0x7f0000004b00)=0x28)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000004c00)={@private0, 0x35})

2.588676722s ago: executing program 1 (id=2975):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), 0x4)
sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72076fdbd11017c1a40f6f56bd41d59dcbabc1440634b9c7d6c12128a25de47cd5f85b9eecdacf10621e9dafb7a304208d2a10a3c99837", 0x4d}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c617665"], 0x2c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001ec0)={0x6, 0x8209, 0x0, 0x3b3}, &(0x7f0000001f00)=0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmmsg$alg(r7, &(0x7f0000004180)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="fbc6a5886e8a141b4321b588bfd1adb3be4d7711b451dfece9da7d75d7d2c022f366af2f6d065df8c726662a61b12a668e76b98014a4b56def2960", 0x3b}], 0x1, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], 0x1030, 0x8004}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)="297e797fd12ddf3661afede12d0bc3f3f20df3fd", 0x14}, {&(0x7f0000001d80)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="fc5dac1862c19466a87ad96dd8e6733ca130f1d23281983e4958bee165f25bed41d533552cf926e2328b5f53903a9432ade146449dae6815", 0x38}, {&(0x7f0000000a00)="d3270074e3a952234c898618733f743caef59645a3051a659ec02c9c31dd6739c1679ba2ed51f484d222be9dc704f8e3e6d47ce52454587d02e7240f7e4278563ada3d7dff3ad1696306b1f7bd9ef7034f787d54e95262b12707ad6b0245e663effbfc6bdf67ed2663631b8187cee5691ecee7a8da6b8f31d9a7c2da42b6ef9deaee234940d413ea8dd235445b518c2d9cc93a9017c273c7d9c6a8446a9b0bb8273bc81e3bedbd30b304c8c28713a42f35699f38ac890cce6262543ef87e245af92829d70fbe63eff66e96", 0xcb}], 0x7, 0x0, 0x0, 0x4000004}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="781304bf74068d012acad51e44e32ec2634ced568e6c82ce03f1ded0405de6579dc80713b9d96db31b2b70e8c9e84240b246d6efdb5a2a8dcab2edeb8913e02a283ba21d6c54305fe53eba93538550227fa5743f715df1867447c4b7d56179c96372c8b5072fa62f8d8a3675c9abca395d2c1ac2269c0ee812978544a027568f89e17663f9c36b065afcb971da9e8429c4fe958c535b0eb5ee1185fa44a4b0bde78db2abc9ece103b5680161f3642e3754da3c044a554565c790222748508bbec30777dceaca77f4881bf5091d6109aff9fd7063c1eeebb39a1baf7581efde944b0d", 0xe2}, {&(0x7f0000002d80)="b91e84c967d5615c5516f453314ecc238b97b5df3b4e4def440d0a12a5ae4e84c3adff92bc3e7ee9d143bf5f5ceccea92187485301f64ed857f5cb7a305f7e1f236341b1b6a084c623d120490b16ead2ef06616874fb1e832784583819e659bac0083408874e69961cbd17d082efafb316e08d3a8f21b44bb1ab813f", 0x7c}], 0x2, &(0x7f0000002e00)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x6c9}], 0x1060, 0x20000810}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000cc0)="cdcef075b1a1f7345903ee8436a601f9e6b39870c046cabcfd196ee7da30bcfecde0e9387c749e7fc0cf772a4a24", 0x2e}, {&(0x7f0000003e80)="2a5fe066dad3e50b9ba4157b1635f0f8a2bc70ead300c68c4aeb06f306cfec6df80cb5d89e28aca1a80057e07432f2656ce2a5fc4fe85fd95224e4fadb510d8f4d9d3de858b568da4440668f0bd5ee7d1f774d1e12d3ef4cc9608f6f7c39b8512d292f84547aeb9a1d66fcb186ccb0d5e7857839e9b9432c366b93942b3ffe69f5c5856a9eb98bd81fec19ad7f16201fc6b577459f4e9735d089256414939a34d3c74ddb876bac9f4b2b6feb291f9cc3a59142218e285ea12c081ef122d34842f5b830c3873d740bc09c6cf5944a72d0673c59990bfb47b7be4e5a2194c2f62b254046cb3d0737cf92fcba", 0xeb}], 0x2, &(0x7f0000003fc0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18}], 0x48, 0x800}, {0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004040)="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", 0xff}], 0x1, 0x0, 0x0, 0x4010}], 0x5, 0x4000180)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})

2.413467396s ago: executing program 1 (id=2976):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x40000100, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

2.303192894s ago: executing program 2 (id=2977):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000374608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.241479253s ago: executing program 2 (id=2978):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050016000200"], 0x3c}}, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xfb, 0x0, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x24008804}, 0x30048009)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000efd7", @ANYRES16=0x0, @ANYBLOB="050427bd7000fadbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c80)={0x5ec, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3301ff98}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r6}, {0x2a8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x9, 0x1, 0x7, 0xbd23}, {0x4, 0x3, 0x4, 0x3ff}, {0x8, 0xb, 0x6, 0x1}, {0x8, 0x5, 0x81, 0x5}, {0xeeac, 0x0, 0x7, 0x1}, {0x6, 0x4, 0x1, 0x1fc0}, {0x2, 0x6, 0x7, 0x8}, {0x8, 0xf8, 0x3, 0x5}, {0x2062, 0x0, 0x0, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc26}}, {0x8, 0x6, r4}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x44000}, 0x40001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040), 0x4)
sendto$inet6(r8, &(0x7f0000000580)="03", 0x1, 0x20000800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r11 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="3e2e51b05300080003000000000000000000", @ANYRES32=r12, @ANYBLOB="0400ff000600980008000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4050)

1.23485877s ago: executing program 1 (id=2987):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x801, 0xfffffffd, 0x8040000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x11}, @IFLA_IFALIASn={0x4}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x1}, {0xa}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xc43}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}]}, 0x5c}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100020008000b007369700008000800090000000600040000130000"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x4, 0x4, 0x4}}, 0x1f)
sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000004ecf4270981ed4d5dbe83b8f14000800000000000000000000000000000000000500140000000000741e10e79fc0a99975ff"], 0x30}}, 0x0)
sendfile(r2, r9, 0x0, 0xffffffff000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xba40}]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440304000000ad0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400000012800b00010067656e65766500000400028008001f000600f0ff08002c0002000000d11c16cb63c4510900e5c0f91dd091af045a7ebb01fd7be4c468819b675c7064a9a4255640f41a864717b0f5c5645283d8430642c6c4d0a0c3188ddc493cb08715dc2d8171b6d1052c6f969a46a50fa4b8de951eeae0cea9476bb3db24b0d469d3d6bb8cfa0000"], 0x44}}, 0x0)

1.155368704s ago: executing program 0 (id=2989):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x9, &(0x7f00000009c0)=[@fadd={0x58, 0x114, 0x6, {{0xc0000000, 0xb}, &(0x7f0000000640)=0x6, &(0x7f0000000680)=0xdf7, 0x305, 0xff, 0xffff, 0x897, 0x4, 0x100000000}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x200}, &(0x7f00000006c0)=0xa, &(0x7f0000000700)=0x3, 0x6, 0x1, 0x0, 0x1, 0xa, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffffffff}, @fadd={0x58, 0x114, 0x6, {{0x1, 0xc07a}, &(0x7f0000000740)=0x5d11, &(0x7f0000000780)=0x8, 0x573, 0x8, 0x7, 0xff, 0x9, 0x80000001}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffff801}, @mask_cswp={0x58, 0x114, 0x9, {{0xbf, 0x2}, &(0x7f00000007c0)=0x8, &(0x7f0000000800)=0x30c2, 0x4, 0xf1d6, 0x64c57c5c, 0x2, 0x45, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x43321163, 0x8}, &(0x7f0000000840)=0x9, &(0x7f0000000880)=0x9, 0x7fffffffffffffff, 0x7, 0x2, 0x1, 0x1b, 0x300}}, @mask_cswp={0x58, 0x114, 0x9, {{0x800, 0x7}, &(0x7f00000008c0)=0x90, &(0x7f0000000900)=0x8, 0xffffffffffffffff, 0xf6, 0x1, 0x10001, 0x22, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000cc0)=""/77, 0x4d}, &(0x7f0000000180)}}], 0x288, 0x24000851}, 0x4001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00', <r1=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0x12}, {0x6}, {0x2, 0xd}}}, 0x24}}, 0x20040054)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r3, 0x12}, 0x20)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000640)="00d0b106afda97c34598d556954942b108d5185381934889ebdd8a5076c2", 0x0, 0x3, 0x0, 0x8}, 0x31)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
clock_gettime(0x5, 0xfffffffffffffffe)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000040)="07000000010003", 0x7)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)
write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r9, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r9, &(0x7f0000000dc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

1.075130982s ago: executing program 4 (id=2990):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x2800c000)

1.030803465s ago: executing program 2 (id=2991):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a010000000000000f4f0003000004"], 0x14}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "d3e4e3a15ba0d580", "0c7abbbd0e191eea183754d3d2571ebb", "a3d787fd", "6b47f777c8214a65"}, 0x28)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x2, 0x5, 0x8, 0x8, 0x5]})

990.026932ms ago: executing program 4 (id=2992):
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
sendmmsg$unix(r4, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004}}, {{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)

827.108732ms ago: executing program 0 (id=2993):
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x0, {[@window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20048810}, 0x10000)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)=0x80000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)

765.126618ms ago: executing program 4 (id=2994):
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x8080)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='afs_make_fs_call\x00', r0, 0x0, 0x10000000006}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x94d0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0xfffffffffffff43a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000000, 0x7}, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r5], 0x23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r7}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r8, &(0x7f0000000040), 0x0}, 0x20)
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'})
close(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x80010, 0xffffffffffffffff, 0x1000)
socket$rds(0x15, 0x5, 0x0)
socket(0x10, 0x3, 0x0)

717.466631ms ago: executing program 0 (id=2995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000e3feffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESOCT], 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) (async, rerun: 32)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0)

490.943271ms ago: executing program 2 (id=2996):
setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@int=0x3, 0x4)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (rerun: 32)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async, rerun: 64)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r2, 0x98aa2000) (async, rerun: 32)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x58}}, 0x4048011) (async, rerun: 32)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) (rerun: 32)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6erspan0\x00', 0x10) (async, rerun: 64)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x3}, 0xe)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={0x0, @phonet={0x23, 0x0, 0x3, 0x9}, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0xffff, 0x8000000000000001, 0x4})

442.191881ms ago: executing program 0 (id=2997):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$sock_timeval(r2, 0x1, 0x31, &(0x7f0000000280)={0x0, 0xea60}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
close(0x4)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x18011)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000010000000061128c00020000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, 0xb}, 0x94)

395.670357ms ago: executing program 0 (id=2998):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800003f4608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

394.939691ms ago: executing program 2 (id=2999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800805014000000003040002000c00028005000100000004001400000008000200ac789c9e960005404c4157e8090001"], 0x58}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100a0}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{}, {0x4}}}]}, 0x3c}}, 0x0)

264.550631ms ago: executing program 0 (id=3000):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050016000200"], 0x3c}}, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083300fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xfb, 0x0, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x24008804}, 0x30048009)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000efd7", @ANYRES16=0x0, @ANYBLOB="050427bd7000fadbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c80)={0x5ec, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3301ff98}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r6}, {0x2a8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x9, 0x1, 0x7, 0xbd23}, {0x4, 0x3, 0x4, 0x3ff}, {0x8, 0xb, 0x6, 0x1}, {0x8, 0x5, 0x81, 0x5}, {0xeeac, 0x0, 0x7, 0x1}, {0x6, 0x4, 0x1, 0x1fc0}, {0x2, 0x6, 0x7, 0x8}, {0x8, 0xf8, 0x3, 0x5}, {0x2062, 0x0, 0x0, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc26}}, {0x8, 0x6, r4}}}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x44000}, 0x40001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000040), 0x4)
sendto$inet6(r8, &(0x7f0000000580)="03", 0x1, 0x20000800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r11 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="3e2e51b05300080003000000000000000000", @ANYRES32=r12, @ANYBLOB="0400ff000600980008000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4050)

172.114427ms ago: executing program 2 (id=3001):
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14f4ef7ae81fcd3d190000000400000004000200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRES64=r0], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
close(r4)
socket$netlink(0x10, 0x3, 0x4)
sendfile(r4, r3, 0x0, 0xf03a0005)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r8 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@default, @remote, @null, @null, @bcast, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48, 0x80000)
getsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f00000002c0)=0xfffffff7, &(0x7f0000000300)=0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

0s ago: executing program 1 (id=3002):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x6d, {{0xa, 0x4e22, 0x2, @mcast1, 0x1}}}, 0x88)
close(0x4)

kernel console output (not intermixed with test programs):

k: 'syz.3.1780': attribute type 1 has an invalid length.
[  207.929680][T12422] IPv6: sit1: Disabled Multicast RS
[  207.941809][T12422] sit1: entered allmulticast mode
[  208.021607][T12433] gretap1: entered allmulticast mode
[  208.030006][T12433] bond9: (slave gretap1): making interface the new active one
[  208.042125][T12433] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  208.138878][T12415] syzkaller1: entered allmulticast mode
[  208.492880][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  208.753163][ T7453] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.791914][ T7453] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.823131][T12483] TCP: TCP_TX_DELAY enabled
[  208.831092][ T7453] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.868710][ T7453] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.501253][T12528] netlink: 'syz.1.1811': attribute type 1 has an invalid length.
[  209.519430][T12528] __nla_validate_parse: 4 callbacks suppressed
[  209.519450][T12528] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1811'.
[  209.538247][T12528] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1811'.
[  209.557649][T12528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.781113][T12542] netlink: 'syz.0.1815': attribute type 30 has an invalid length.
[  209.791464][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1815'.
[  209.801367][T12542] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  210.015358][T12545] sctp: [Deprecated]: syz.4.1816 (pid 12545) Use of int in max_burst socket option deprecated.
[  210.015358][T12545] Use struct sctp_assoc_value instead
[  210.366251][T12566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1825'.
[  210.519184][T12565] lo speed is unknown, defaulting to 1000
[  210.607017][T12579] dvmrp8: entered allmulticast mode
[  210.702453][T12578] lo speed is unknown, defaulting to 1000
[  210.733035][    C0] net_ratelimit: 3 callbacks suppressed
[  210.733056][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  210.805656][T12579] lo speed is unknown, defaulting to 1000
[  210.909591][T12587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1830'.
[  210.941118][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'.
[  211.111334][T12599] netlink: 'syz.4.1833': attribute type 12 has an invalid length.
[  211.123154][T12600] netlink: 'syz.4.1833': attribute type 12 has an invalid length.
[  211.157163][T12577] dvmrp8: left allmulticast mode
[  211.301343][T12603] : entered promiscuous mode
[  211.542293][T12615] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  211.575880][T12617] syzkaller0: entered promiscuous mode
[  211.581411][T12617] syzkaller0: entered allmulticast mode
[  211.645322][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'.
[  211.773213][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  211.849914][T12637] Bluetooth: MGMT ver 1.23
[  211.888997][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'.
[  212.249222][T12663] lo speed is unknown, defaulting to 1000
[  212.378331][T12674] ip6gre1: entered promiscuous mode
[  212.413224][T12673] sctp: [Deprecated]: syz.2.1851 (pid 12673) Use of int in max_burst socket option deprecated.
[  212.413224][T12673] Use struct sctp_assoc_value instead
[  212.717896][T12693] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  212.813068][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  212.848082][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1862'.
[  212.876757][T12706] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1863'.
[  213.332088][T12742] netlink: 'syz.1.1873': attribute type 1 has an invalid length.
[  213.408524][T12742] bond7: entered promiscuous mode
[  213.445574][T12742] 8021q: adding VLAN 0 to HW filter on device bond7
[  213.476578][T12745] bridge0: entered promiscuous mode
[  213.482003][T12745] macsec1: entered promiscuous mode
[  213.550050][T12745] bridge0: port 1(macsec1) entered blocking state
[  213.563703][T12745] bridge0: port 1(macsec1) entered disabled state
[  213.571028][T12745] macsec1: entered allmulticast mode
[  213.578042][T12745] bridge0: entered allmulticast mode
[  213.590149][T12745] macsec1: left allmulticast mode
[  213.603098][T12745] bridge0: left allmulticast mode
[  213.636390][T12745] bridge0: left promiscuous mode
[  213.707564][T12766] bond0: left promiscuous mode
[  213.759600][T12766] team0: Port device bond0 removed
[  213.790844][T12766] bond2: (slave veth1): Releasing active interface
[  213.852905][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  213.876811][T12766] vlan3: left promiscuous mode
[  213.885059][T12766] bridge0: left promiscuous mode
[  213.897598][T12766] bridge3: port 1(vlan3) entered disabled state
[  213.919000][T12782] nbd: nbd0 already in use
[  213.925033][T12782] block nbd0: NBD_DISCONNECT
[  213.929856][T12782] block nbd0: Send disconnect failed -32
[  214.048130][T12785] sctp: [Deprecated]: syz.3.1885 (pid 12785) Use of int in max_burst socket option deprecated.
[  214.048130][T12785] Use struct sctp_assoc_value instead
[  214.330669][T12808] netlink: 'syz.2.1894': attribute type 1 has an invalid length.
[  214.390945][T12808] bond5: entered promiscuous mode
[  214.396660][T12808] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.418035][T12812] bond5: (slave bridge5): making interface the new active one
[  214.425748][T12812] bridge5: entered promiscuous mode
[  214.434957][T12812] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  214.500999][ T7453] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  214.888945][T12850] __nla_validate_parse: 8 callbacks suppressed
[  214.888966][T12850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1905'.
[  214.897192][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  214.920994][T12849] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (76)
[  214.943790][T12849] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (76)
[  215.146554][T12860] pim6reg1: entered promiscuous mode
[  215.151956][T12860] pim6reg1: entered allmulticast mode
[  215.246849][ T7445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.264920][ T7445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.298011][ T7445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.308038][T12868] lo speed is unknown, defaulting to 1000
[  215.318186][ T7445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.485601][T12884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1918'.
[  215.828510][T12904] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1923'.
[  215.910301][T12904] 0ªX¹¦À: renamed from caif0
[  215.925968][T12904] 0ªX¹¦À: entered allmulticast mode
[  215.932894][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  215.948705][T12904] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  216.000611][T12917] C: renamed from team_slave_0
[  216.017538][T12917] netlink: 'syz.1.1928': attribute type 3 has an invalid length.
[  216.079897][T12917] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1928'.
[  216.110351][T12917] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  216.140379][T12927] netlink: 'syz.4.1929': attribute type 1 has an invalid length.
[  216.184946][T12927] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1929'.
[  216.371492][T12947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.639765][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'.
[  216.973030][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  218.012899][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  218.492973][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  219.053004][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  220.092903][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  221.133047][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  222.172899][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  223.213254][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  224.252878][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  225.292972][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  226.332872][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  226.413181][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  227.373041][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  228.412877][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  229.453052][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  230.492876][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  231.533370][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  232.572886][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  233.612989][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  234.652879][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  235.693031][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  236.012974][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  236.733240][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  237.772985][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  238.812897][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  239.853084][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  240.892866][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  241.773006][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  241.932996][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  242.972875][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  244.013018][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  245.052940][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  246.093069][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  247.132858][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  248.173177][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  249.212871][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  250.252972][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  251.292868][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  252.332980][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  253.372897][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  254.412999][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  255.452912][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  255.855830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  256.493044][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  257.532918][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  258.573017][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  259.612868][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  260.652971][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  261.702857][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  262.732988][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  263.772854][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  264.813133][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  265.852864][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  266.285803][T12987] !
: renamed from dummy0 (while UP)
[  266.321806][T12987] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  266.367990][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'.
[  266.390595][T12997] sctp: [Deprecated]: syz.0.1948 (pid 12997) Use of int in max_burst socket option deprecated.
[  266.390595][T12997] Use struct sctp_assoc_value instead
[  266.892902][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  266.928871][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'.
[  266.945273][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'.
[  267.014978][T13025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1950'.
[  267.664773][T13044] sctp: [Deprecated]: syz.0.1958 (pid 13044) Use of int in max_burst socket option deprecated.
[  267.664773][T13044] Use struct sctp_assoc_value instead
[  267.715880][T13045] lo speed is unknown, defaulting to 1000
[  267.750625][T13046] lo speed is unknown, defaulting to 1000
[  267.796424][ T5857] IPVS: starting estimator thread 0...
[  267.912692][T13052] IPVS: using max 34 ests per chain, 81600 per kthread
[  267.942960][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  267.994740][T13051] sctp: [Deprecated]: syz.1.1960 (pid 13051) Use of int in max_burst socket option deprecated.
[  267.994740][T13051] Use struct sctp_assoc_value instead
[  268.270739][T13067] FAULT_INJECTION: forcing a failure.
[  268.270739][T13067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.303012][T13067] CPU: 1 UID: 0 PID: 13067 Comm: syz.3.1961 Not tainted syzkaller #0 PREEMPT(full) 
[  268.303041][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  268.303055][T13067] Call Trace:
[  268.303062][T13067]  <TASK>
[  268.303070][T13067]  dump_stack_lvl+0x189/0x250
[  268.303101][T13067]  ? __pfx____ratelimit+0x10/0x10
[  268.303131][T13067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.303154][T13067]  ? __pfx__printk+0x10/0x10
[  268.303180][T13067]  ? __might_fault+0xb0/0x130
[  268.303212][T13067]  ? rcu_is_watching+0x15/0xb0
[  268.303234][T13067]  should_fail_ex+0x414/0x560
[  268.303263][T13067]  _copy_from_user+0x2d/0xb0
[  268.303288][T13067]  ___sys_sendmsg+0x158/0x2a0
[  268.303331][T13067]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.303374][T13067]  ? __fget_files+0x2a/0x420
[  268.303392][T13067]  ? __fget_files+0x3a0/0x420
[  268.303415][T13067]  __x64_sys_sendmsg+0x19b/0x260
[  268.303437][T13067]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.303461][T13067]  ? __pfx_ksys_write+0x10/0x10
[  268.303488][T13067]  ? rcu_is_watching+0x15/0xb0
[  268.303510][T13067]  do_syscall_64+0xfa/0x3b0
[  268.303528][T13067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.303546][T13067]  ? clear_bhb_loop+0x60/0xb0
[  268.303567][T13067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.303585][T13067] RIP: 0033:0x7f939578ebe9
[  268.303602][T13067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.303621][T13067] RSP: 002b:00007f93939f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.303642][T13067] RAX: ffffffffffffffda RBX: 00007f93959b6090 RCX: 00007f939578ebe9
[  268.303657][T13067] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  268.303670][T13067] RBP: 00007f93939f6090 R08: 0000000000000000 R09: 0000000000000000
[  268.303681][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.303692][T13067] R13: 00007f93959b6128 R14: 00007f93959b6090 R15: 00007ffc7811ca68
[  268.303715][T13067]  </TASK>
[  268.595668][T13073] tap0: tun_chr_ioctl cmd 1074025677
[  268.601751][T13073] tap0: linktype set to 270
[  268.781545][T13083] netlink: 'syz.3.1967': attribute type 1 has an invalid length.
[  268.790061][T13083] netlink: 'syz.3.1967': attribute type 2 has an invalid length.
[  268.798496][T13083] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1967'.
[  268.818137][T13081] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  268.982958][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  269.273036][T13116] FAULT_INJECTION: forcing a failure.
[  269.273036][T13116] name failslab, interval 1, probability 0, space 0, times 0
[  269.319965][T13116] CPU: 1 UID: 0 PID: 13116 Comm: syz.2.1975 Not tainted syzkaller #0 PREEMPT(full) 
[  269.319995][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  269.320008][T13116] Call Trace:
[  269.320016][T13116]  <TASK>
[  269.320024][T13116]  dump_stack_lvl+0x189/0x250
[  269.320054][T13116]  ? __pfx____ratelimit+0x10/0x10
[  269.320084][T13116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.320105][T13116]  ? __pfx__printk+0x10/0x10
[  269.320134][T13116]  ? fs_reclaim_acquire+0x7d/0x100
[  269.320165][T13116]  ? rcu_is_watching+0x15/0xb0
[  269.320186][T13116]  ? __pfx___might_resched+0x10/0x10
[  269.320205][T13116]  ? lock_acquire+0x5f/0x360
[  269.320237][T13116]  should_fail_ex+0x414/0x560
[  269.320266][T13116]  should_failslab+0xa8/0x100
[  269.320297][T13116]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  269.320326][T13116]  ? __alloc_skb+0x112/0x2d0
[  269.320348][T13116]  __alloc_skb+0x112/0x2d0
[  269.320368][T13116]  netlink_sendmsg+0x5c6/0xb30
[  269.320394][T13116]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.320415][T13116]  ? aa_sock_msg_perm+0xf1/0x1d0
[  269.320436][T13116]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.320458][T13116]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.320478][T13116]  __sock_sendmsg+0x21c/0x270
[  269.320508][T13116]  ____sys_sendmsg+0x505/0x830
[  269.320532][T13116]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.320560][T13116]  ? import_iovec+0x74/0xa0
[  269.320585][T13116]  ___sys_sendmsg+0x21f/0x2a0
[  269.320608][T13116]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.320662][T13116]  ? __fget_files+0x2a/0x420
[  269.320679][T13116]  ? __fget_files+0x3a0/0x420
[  269.320703][T13116]  __x64_sys_sendmsg+0x19b/0x260
[  269.320727][T13116]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.320755][T13116]  ? __pfx_ksys_write+0x10/0x10
[  269.320786][T13116]  ? rcu_is_watching+0x15/0xb0
[  269.320809][T13116]  do_syscall_64+0xfa/0x3b0
[  269.320834][T13116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.320855][T13116]  ? clear_bhb_loop+0x60/0xb0
[  269.320880][T13116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.320899][T13116] RIP: 0033:0x7f70d3d8ebe9
[  269.320918][T13116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.320936][T13116] RSP: 002b:00007f70d4c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.320959][T13116] RAX: ffffffffffffffda RBX: 00007f70d3fb6090 RCX: 00007f70d3d8ebe9
[  269.320975][T13116] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  269.320988][T13116] RBP: 00007f70d4c1e090 R08: 0000000000000000 R09: 0000000000000000
[  269.321002][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.321015][T13116] R13: 00007f70d3fb6128 R14: 00007f70d3fb6090 R15: 00007fff1aa2e688
[  269.321039][T13116]  </TASK>
[  269.839065][T13127] lo speed is unknown, defaulting to 1000
[  270.012802][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  270.296591][T13155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'.
[  270.605618][T13168] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1990'.
[  270.909794][T13179] netlink: 'syz.4.1994': attribute type 27 has an invalid length.
[  271.005000][T13179] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.027259][T13179] 8021q: adding VLAN 0 to HW filter on device team0
[  271.052957][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  271.061952][T13179] tipc: Resetting bearer <ib:team0>
[  271.069857][T13179] tipc: Resetting bearer <ib:team0>
[  271.070927][T13192] sctp: [Deprecated]: syz.3.1995 (pid 13192) Use of int in max_burst socket option deprecated.
[  271.070927][T13192] Use struct sctp_assoc_value instead
[  271.116215][T13179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.606278][T13224] netlink: 'syz.1.2007': attribute type 4 has an invalid length.
[  272.092859][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  272.224750][ T5948] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.256479][ T7448] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.298749][ T7448] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.338194][ T7448] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.400644][T13252] netlink: 'syz.4.2013': attribute type 1 has an invalid length.
[  272.431171][T13257] netlink: 'syz.0.2015': attribute type 1 has an invalid length.
[  272.443510][T13257] netlink: 'syz.0.2015': attribute type 2 has an invalid length.
[  272.497739][T13252] 8021q: adding VLAN 0 to HW filter on device bond4
[  272.515651][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'.
[  272.565546][T13261] sctp: [Deprecated]: syz.1.2016 (pid 13261) Use of int in max_burst socket option deprecated.
[  272.565546][T13261] Use struct sctp_assoc_value instead
[  272.690811][T13277] FAULT_INJECTION: forcing a failure.
[  272.690811][T13277] name failslab, interval 1, probability 0, space 0, times 0
[  272.696024][T13265] syzkaller1: entered promiscuous mode
[  272.721407][T13277] CPU: 1 UID: 0 PID: 13277 Comm: syz.2.2020 Not tainted syzkaller #0 PREEMPT(full) 
[  272.721437][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  272.721449][T13277] Call Trace:
[  272.721457][T13277]  <TASK>
[  272.721466][T13277]  dump_stack_lvl+0x189/0x250
[  272.721496][T13277]  ? __pfx____ratelimit+0x10/0x10
[  272.721527][T13277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.721552][T13277]  ? __pfx__printk+0x10/0x10
[  272.721597][T13277]  should_fail_ex+0x414/0x560
[  272.721629][T13277]  should_failslab+0xa8/0x100
[  272.721660][T13277]  kmem_cache_alloc_noprof+0x73/0x3c0
[  272.721688][T13277]  ? skb_clone+0x212/0x3a0
[  272.721715][T13277]  skb_clone+0x212/0x3a0
[  272.721746][T13277]  __netlink_deliver_tap+0x404/0x850
[  272.721786][T13277]  ? netlink_deliver_tap+0x2e/0x1b0
[  272.721817][T13277]  netlink_deliver_tap+0x19c/0x1b0
[  272.721851][T13277]  netlink_unicast+0x7fa/0x9e0
[  272.721884][T13277]  ? __pfx_netlink_unicast+0x10/0x10
[  272.721914][T13277]  ? netlink_sendmsg+0x642/0xb30
[  272.721932][T13277]  ? skb_put+0x11b/0x210
[  272.721953][T13277]  netlink_sendmsg+0x805/0xb30
[  272.721974][T13277]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.721992][T13277]  ? aa_sock_msg_perm+0xf1/0x1d0
[  272.722009][T13277]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  272.722030][T13277]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.722047][T13277]  __sock_sendmsg+0x21c/0x270
[  272.722076][T13277]  ____sys_sendmsg+0x505/0x830
[  272.722102][T13277]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.722130][T13277]  ? import_iovec+0x74/0xa0
[  272.722156][T13277]  ___sys_sendmsg+0x21f/0x2a0
[  272.722181][T13277]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.722224][T13277]  ? __fget_files+0x2a/0x420
[  272.722240][T13277]  ? __fget_files+0x3a0/0x420
[  272.722263][T13277]  __x64_sys_sendmsg+0x19b/0x260
[  272.722293][T13277]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  272.722322][T13277]  ? __pfx_ksys_write+0x10/0x10
[  272.722354][T13277]  ? rcu_is_watching+0x15/0xb0
[  272.722379][T13277]  do_syscall_64+0xfa/0x3b0
[  272.722400][T13277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.722421][T13277]  ? clear_bhb_loop+0x60/0xb0
[  272.722444][T13277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.722464][T13277] RIP: 0033:0x7f70d3d8ebe9
[  272.722482][T13277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.722501][T13277] RSP: 002b:00007f70d4c1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.722523][T13277] RAX: ffffffffffffffda RBX: 00007f70d3fb6090 RCX: 00007f70d3d8ebe9
[  272.722539][T13277] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  272.722553][T13277] RBP: 00007f70d4c1e090 R08: 0000000000000000 R09: 0000000000000000
[  272.722566][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.722579][T13277] R13: 00007f70d3fb6128 R14: 00007f70d3fb6090 R15: 00007fff1aa2e688
[  272.722611][T13277]  </TASK>
[  272.730089][T13265] syzkaller1: entered allmulticast mode
[  273.120061][T13288] sctp: [Deprecated]: syz.2.2023 (pid 13288) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.120061][T13288] Use struct sctp_sack_info instead
[  273.143047][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  273.151002][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  273.700197][T13324] FAULT_INJECTION: forcing a failure.
[  273.700197][T13324] name failslab, interval 1, probability 0, space 0, times 0
[  273.712938][T13324] CPU: 1 UID: 0 PID: 13324 Comm: syz.3.2034 Not tainted syzkaller #0 PREEMPT(full) 
[  273.712967][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  273.712980][T13324] Call Trace:
[  273.712988][T13324]  <TASK>
[  273.712997][T13324]  dump_stack_lvl+0x189/0x250
[  273.713029][T13324]  ? __pfx____ratelimit+0x10/0x10
[  273.713061][T13324]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.713085][T13324]  ? __pfx__printk+0x10/0x10
[  273.713114][T13324]  ? skb_network_protocol+0x4fe/0x760
[  273.713138][T13324]  ? unwind_next_frame+0xa5/0x2390
[  273.713167][T13324]  should_fail_ex+0x414/0x560
[  273.713197][T13324]  should_failslab+0xa8/0x100
[  273.713235][T13324]  kmem_cache_alloc_noprof+0x73/0x3c0
[  273.713263][T13324]  ? skb_clone+0x212/0x3a0
[  273.713289][T13324]  skb_clone+0x212/0x3a0
[  273.713311][T13324]  ? dev_queue_xmit_nit+0x25a/0xcc0
[  273.713331][T13324]  dev_queue_xmit_nit+0x416/0xcc0
[  273.713351][T13324]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  273.713370][T13324]  ? unwind_get_return_address+0x4d/0x90
[  273.713398][T13324]  dev_hard_start_xmit+0x1be/0x830
[  273.713431][T13324]  __dev_queue_xmit+0x1b8d/0x3b50
[  273.713463][T13324]  ? __dev_queue_xmit+0x27b/0x3b50
[  273.713495][T13324]  ? __pfx___dev_queue_xmit+0x10/0x10
[  273.713527][T13324]  ? __copy_skb_header+0xa7/0x550
[  273.713550][T13324]  ? __asan_memcpy+0x40/0x70
[  273.713583][T13324]  ? skb_clone+0x246/0x3a0
[  273.713607][T13324]  __netlink_deliver_tap+0x5ad/0x850
[  273.713647][T13324]  ? netlink_deliver_tap+0x2e/0x1b0
[  273.713680][T13324]  netlink_deliver_tap+0x19c/0x1b0
[  273.713712][T13324]  netlink_unicast+0x7fa/0x9e0
[  273.713746][T13324]  ? __pfx_netlink_unicast+0x10/0x10
[  273.713775][T13324]  ? netlink_sendmsg+0x642/0xb30
[  273.713792][T13324]  ? skb_put+0x11b/0x210
[  273.713813][T13324]  netlink_sendmsg+0x805/0xb30
[  273.713838][T13324]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.713858][T13324]  ? aa_sock_msg_perm+0xf1/0x1d0
[  273.713879][T13324]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  273.713901][T13324]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.713921][T13324]  __sock_sendmsg+0x21c/0x270
[  273.713951][T13324]  ____sys_sendmsg+0x505/0x830
[  273.713977][T13324]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.714005][T13324]  ? import_iovec+0x74/0xa0
[  273.714031][T13324]  ___sys_sendmsg+0x21f/0x2a0
[  273.714056][T13324]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.714098][T13324]  ? __fget_files+0x2a/0x420
[  273.714115][T13324]  ? __fget_files+0x3a0/0x420
[  273.714140][T13324]  __x64_sys_sendmsg+0x19b/0x260
[  273.714164][T13324]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.714192][T13324]  ? __pfx_ksys_write+0x10/0x10
[  273.714223][T13324]  ? rcu_is_watching+0x15/0xb0
[  273.714256][T13324]  do_syscall_64+0xfa/0x3b0
[  273.714276][T13324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.714297][T13324]  ? clear_bhb_loop+0x60/0xb0
[  273.714321][T13324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.714340][T13324] RIP: 0033:0x7f939578ebe9
[  273.714359][T13324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.714379][T13324] RSP: 002b:00007f93939f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.714401][T13324] RAX: ffffffffffffffda RBX: 00007f93959b6090 RCX: 00007f939578ebe9
[  273.714418][T13324] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  273.714431][T13324] RBP: 00007f93939f6090 R08: 0000000000000000 R09: 0000000000000000
[  273.714443][T13324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.714455][T13324] R13: 00007f93959b6128 R14: 00007f93959b6090 R15: 00007ffc7811ca68
[  273.714480][T13324]  </TASK>
[  274.172859][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  274.465281][T13335] netlink: 'syz.1.2039': attribute type 11 has an invalid length.
[  274.506328][T13335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.527740][T13339] netlink: 'syz.1.2039': attribute type 11 has an invalid length.
[  274.530297][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'.
[  274.550206][T13335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.563951][T13340] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2036'.
[  274.591323][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'.
[  274.720340][T13351] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2044'.
[  274.870549][T13344] lo speed is unknown, defaulting to 1000
[  274.887138][T13353] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2045'.
[  274.914739][T13353] netlink: 'syz.3.2045': attribute type 10 has an invalid length.
[  274.924905][T13366] FAULT_INJECTION: forcing a failure.
[  274.924905][T13366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.964098][T13353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.979442][T13366] CPU: 0 UID: 0 PID: 13366 Comm: syz.1.2046 Not tainted syzkaller #0 PREEMPT(full) 
[  274.979473][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  274.979487][T13366] Call Trace:
[  274.979495][T13366]  <TASK>
[  274.979504][T13366]  dump_stack_lvl+0x189/0x250
[  274.979534][T13366]  ? __pfx____ratelimit+0x10/0x10
[  274.979565][T13366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.979589][T13366]  ? __pfx__printk+0x10/0x10
[  274.979622][T13366]  ? rcu_is_watching+0x15/0xb0
[  274.979644][T13366]  should_fail_ex+0x414/0x560
[  274.979673][T13366]  _copy_to_user+0x31/0xb0
[  274.979697][T13366]  simple_read_from_buffer+0xe1/0x170
[  274.979730][T13366]  proc_fail_nth_read+0x1b3/0x220
[  274.979755][T13366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  274.979779][T13366]  ? rw_verify_area+0x2a6/0x4d0
[  274.979805][T13366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  274.979827][T13366]  vfs_read+0x1fd/0xa30
[  274.979854][T13366]  ? fdget_pos+0x247/0x320
[  274.979875][T13366]  ? __pfx___mutex_lock+0x10/0x10
[  274.979907][T13366]  ? __pfx_vfs_read+0x10/0x10
[  274.979939][T13366]  ? __fget_files+0x3a0/0x420
[  274.979956][T13366]  ? __fget_files+0x2a/0x420
[  274.979979][T13366]  ksys_read+0x145/0x250
[  274.980006][T13366]  ? __pfx_ksys_read+0x10/0x10
[  274.980037][T13366]  ? rcu_is_watching+0x15/0xb0
[  274.980057][T13366]  do_syscall_64+0xfa/0x3b0
[  274.980076][T13366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.980095][T13366]  ? clear_bhb_loop+0x60/0xb0
[  274.980117][T13366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.980137][T13366] RIP: 0033:0x7f1a7198d5fc
[  274.980156][T13366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  274.980184][T13366] RSP: 002b:00007f1a727f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  274.980206][T13366] RAX: ffffffffffffffda RBX: 00007f1a71bb6090 RCX: 00007f1a7198d5fc
[  274.980221][T13366] RDX: 000000000000000f RSI: 00007f1a727f00a0 RDI: 0000000000000009
[  274.980234][T13366] RBP: 00007f1a727f0090 R08: 0000000000000000 R09: 0000000000000000
[  274.980247][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.980259][T13366] R13: 00007f1a71bb6128 R14: 00007f1a71bb6090 R15: 00007ffc532e1288
[  274.980283][T13366]  </TASK>
[  275.010690][T13353] Ã: (slave batadv0): Enslaving as an active interface with an up link
[  275.128105][T13369] openvswitch: netlink: Flow key attr not present in new flow.
[  275.132959][ T7445] Ã: (slave batadv0): interface is now down
[  275.195903][T13358] block nbd0: server does not support multiple connections per device.
[  275.220433][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  275.242353][ T7445] Ã: now running without any active interface!
[  275.359737][T13358] block nbd0: shutting down sockets
[  275.430280][T13381] geneve2: left promiscuous mode
[  275.447059][T13381] veth3: left promiscuous mode
[  275.455070][T13381] bond0: left promiscuous mode
[  275.461327][T13381] geneve3: left promiscuous mode
[  275.567084][T13392] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  275.651559][T13387] lo speed is unknown, defaulting to 1000
[  275.953168][T13420] syzkaller1: entered promiscuous mode
[  275.993287][T13420] syzkaller1: entered allmulticast mode
[  276.020845][T13428] netlink: 'syz.2.2063': attribute type 11 has an invalid length.
[  276.031105][T13427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'.
[  276.058194][T13427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2062'.
[  276.083783][T13432] FAULT_INJECTION: forcing a failure.
[  276.083783][T13432] name failslab, interval 1, probability 0, space 0, times 0
[  276.083997][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2062'.
[  276.153406][T13434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2065'.
[  276.172868][T13432] CPU: 1 UID: 0 PID: 13432 Comm: syz.1.2064 Not tainted syzkaller #0 PREEMPT(full) 
[  276.172899][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  276.172913][T13432] Call Trace:
[  276.172921][T13432]  <TASK>
[  276.172930][T13432]  dump_stack_lvl+0x189/0x250
[  276.172970][T13432]  ? __pfx____ratelimit+0x10/0x10
[  276.173001][T13432]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.173026][T13432]  ? __pfx__printk+0x10/0x10
[  276.173057][T13432]  ? __pfx___might_resched+0x10/0x10
[  276.173077][T13432]  ? lock_acquire+0x5f/0x360
[  276.173109][T13432]  should_fail_ex+0x414/0x560
[  276.173138][T13432]  ? nf_hook_entries_grow+0x27c/0x710
[  276.173171][T13432]  should_failslab+0xa8/0x100
[  276.173201][T13432]  __kvmalloc_node_noprof+0x161/0x5f0
[  276.173230][T13432]  ? nf_hook_entries_grow+0x27c/0x710
[  276.173266][T13432]  nf_hook_entries_grow+0x27c/0x710
[  276.173307][T13432]  __nf_register_net_hook+0x2c9/0x930
[  276.173333][T13432]  nf_register_net_hook+0xb2/0x190
[  276.173353][T13432]  nf_register_net_hooks+0x44/0x1b0
[  276.173375][T13432]  nf_ct_netns_do_get+0x3bf/0x5a0
[  276.173398][T13432]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  276.173418][T13432]  ? __flush_work+0xd2/0xbc0
[  276.173441][T13432]  ? lock_release+0x4b/0x3e0
[  276.173477][T13432]  connlimit_mt_check+0x7f/0x240
[  276.173500][T13432]  xt_check_match+0x3d1/0xab0
[  276.173523][T13432]  ? __pfx___flush_work+0x10/0x10
[  276.173548][T13432]  ? __pfx_xt_check_match+0x10/0x10
[  276.173571][T13432]  ? nft_pernet+0x23/0x240
[  276.173593][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.173614][T13432]  ? __pfx___might_resched+0x10/0x10
[  276.173634][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.173656][T13432]  ? nft_pernet+0x23/0x240
[  276.173680][T13432]  ? lock_release+0x4b/0x3e0
[  276.173712][T13432]  ? nft_pernet+0x23/0x240
[  276.173734][T13432]  ? nft_pernet+0x23/0x240
[  276.173763][T13432]  __nft_match_init+0x63a/0x840
[  276.173797][T13432]  ? __pfx___nft_match_init+0x10/0x10
[  276.173850][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.173869][T13432]  ? trace_kmalloc+0x1f/0xd0
[  276.173895][T13432]  ? nf_tables_newrule+0x1506/0x2890
[  276.173921][T13432]  nf_tables_newrule+0x178f/0x2890
[  276.173953][T13432]  ? __pfx_nf_tables_newrule+0x10/0x10
[  276.173986][T13432]  ? nfnl_pernet+0x23/0x240
[  276.174010][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.174029][T13432]  ? nfnl_pernet+0x23/0x240
[  276.174061][T13432]  ? __nla_parse+0x40/0x60
[  276.174095][T13432]  nfnetlink_rcv+0x1132/0x2520
[  276.174142][T13432]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  276.174177][T13432]  ? kasan_save_track+0x4f/0x80
[  276.174202][T13432]  ? kasan_save_track+0x3e/0x80
[  276.174226][T13432]  ? __kasan_slab_alloc+0x6c/0x80
[  276.174273][T13432]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.174304][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.174323][T13432]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.174357][T13432]  ? lock_release+0x4b/0x3e0
[  276.174384][T13432]  ? net_generic+0x1e/0x240
[  276.174409][T13432]  ? net_generic+0x1e/0x240
[  276.174440][T13432]  netlink_unicast+0x82c/0x9e0
[  276.174473][T13432]  ? __pfx_netlink_unicast+0x10/0x10
[  276.174503][T13432]  ? netlink_sendmsg+0x642/0xb30
[  276.174520][T13432]  ? skb_put+0x11b/0x210
[  276.174541][T13432]  netlink_sendmsg+0x805/0xb30
[  276.174566][T13432]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.174587][T13432]  ? aa_sock_msg_perm+0xf1/0x1d0
[  276.174608][T13432]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.174631][T13432]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.174650][T13432]  __sock_sendmsg+0x21c/0x270
[  276.174680][T13432]  ____sys_sendmsg+0x505/0x830
[  276.174706][T13432]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.174734][T13432]  ? import_iovec+0x74/0xa0
[  276.174760][T13432]  ___sys_sendmsg+0x21f/0x2a0
[  276.174784][T13432]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.174828][T13432]  ? __fget_files+0x2a/0x420
[  276.174846][T13432]  ? __fget_files+0x3a0/0x420
[  276.174870][T13432]  __x64_sys_sendmsg+0x19b/0x260
[  276.174894][T13432]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  276.174923][T13432]  ? __pfx_ksys_write+0x10/0x10
[  276.174947][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.174977][T13432]  ? rcu_is_watching+0x15/0xb0
[  276.174999][T13432]  do_syscall_64+0xfa/0x3b0
[  276.175018][T13432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.175038][T13432]  ? clear_bhb_loop+0x60/0xb0
[  276.175061][T13432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.175081][T13432] RIP: 0033:0x7f1a7198ebe9
[  276.175099][T13432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.175118][T13432] RSP: 002b:00007f1a72811038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.175141][T13432] RAX: ffffffffffffffda RBX: 00007f1a71bb5fa0 RCX: 00007f1a7198ebe9
[  276.175157][T13432] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003
[  276.175171][T13432] RBP: 00007f1a72811090 R08: 0000000000000000 R09: 0000000000000000
[  276.175184][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  276.175196][T13432] R13: 00007f1a71bb6038 R14: 00007f1a71bb5fa0 R15: 00007ffc532e1288
[  276.175220][T13432]  </TASK>
[  276.175365][T13432] xt_connlimit: cannot load conntrack support for proto=2
[  276.262878][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  276.857172][T13458] lo speed is unknown, defaulting to 1000
[  277.292779][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  277.567583][T13502] __nla_validate_parse: 5 callbacks suppressed
[  277.567604][T13502] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2084'.
[  277.614279][T13502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2084'.
[  277.644765][T13502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2084'.
[  277.908767][T13520] sctp: [Deprecated]: syz.4.2088 (pid 13520) Use of int in max_burst socket option deprecated.
[  277.908767][T13520] Use struct sctp_assoc_value instead
[  277.992571][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'.
[  278.016898][T13532] bond0: (slave rose0): Error: Device can not be enslaved while up
[  278.096760][T13539] lo speed is unknown, defaulting to 1000
[  278.332893][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  278.439132][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2102'.
[  278.720331][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'.
[  279.066582][T13595] lo speed is unknown, defaulting to 1000
[  279.372835][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  279.411054][T13611] sctp: [Deprecated]: syz.0.2121 (pid 13611) Use of int in max_burst socket option deprecated.
[  279.411054][T13611] Use struct sctp_assoc_value instead
[  280.387782][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2142'.
[  280.407264][T13672] syzkaller0: entered promiscuous mode
[  280.412950][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  280.420602][T13672] syzkaller0: entered allmulticast mode
[  280.430387][T13672] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  280.835163][T13701] sctp: [Deprecated]: syz.1.2152 (pid 13701) Use of int in max_burst socket option deprecated.
[  280.835163][T13701] Use struct sctp_assoc_value instead
[  280.864021][T13703] dummy0: entered promiscuous mode
[  280.869341][T13703] macsec1: entered promiscuous mode
[  280.888198][T13703] macsec1: entered allmulticast mode
[  280.900832][T13703] dummy0: entered allmulticast mode
[  280.912201][T13703] dummy0: left allmulticast mode
[  280.919710][T13703] dummy0: left promiscuous mode
[  280.936320][T13711] _ÐZ`Ô€@: entered promiscuous mode
[  281.331826][T13743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2162'.
[  281.342008][T13746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2162'.
[  281.463130][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  281.529568][T13763] dvmrp0: entered allmulticast mode
[  281.588976][T13763] dvmrp8: entered allmulticast mode
[  281.607414][T13765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2168'.
[  281.625483][T13771] veth0_to_bond: entered allmulticast mode
[  281.659267][T13774] dvmrp0: left allmulticast mode
[  281.664424][T13774] dvmrp8: left allmulticast mode
[  281.751440][T13776] lo speed is unknown, defaulting to 1000
[  282.250330][T13812] sctp: [Deprecated]: syz.3.2181 (pid 13812) Use of int in max_burst socket option deprecated.
[  282.250330][T13812] Use struct sctp_assoc_value instead
[  282.391078][T13820] vlan4: entered promiscuous mode
[  282.396941][T13820] bond0: entered promiscuous mode
[  282.402181][T13820] vlan4: entered allmulticast mode
[  282.407657][T13820] bond0: entered allmulticast mode
[  282.492849][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  282.517777][T13829] bridge0: entered allmulticast mode
[  282.587371][T13826] lo speed is unknown, defaulting to 1000
[  282.604513][T13833] __nla_validate_parse: 6 callbacks suppressed
[  282.604537][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'.
[  282.802128][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2188'.
[  282.819469][T13844] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  282.857220][T13844] syzkaller0: entered promiscuous mode
[  282.879401][T13844] syzkaller0: entered allmulticast mode
[  282.909877][T13846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2190'.
[  282.939287][T13841] pim6reg: entered allmulticast mode
[  283.080258][T13852] sctp: [Deprecated]: syz.3.2192 (pid 13852) Use of struct sctp_assoc_value in delayed_ack socket option.
[  283.080258][T13852] Use struct sctp_sack_info instead
[  283.083397][T13850] netlink: 'syz.1.2191': attribute type 9 has an invalid length.
[  283.105203][T13850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2191'.
[  283.359898][T13865] vlan3: entered promiscuous mode
[  283.376591][T13865] vlan3: entered allmulticast mode
[  283.381800][T13865] hsr_slave_1: entered allmulticast mode
[  283.492212][T13877] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2198'.
[  283.522159][T13877] ..0·: renamed from hsr0
[  283.533021][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  283.565373][T13877] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  283.591904][T13877] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check.
[  283.596714][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2201'.
[  283.633475][T13880] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  283.654939][T13887] sctp: [Deprecated]: syz.0.2203 (pid 13887) Use of int in max_burst socket option deprecated.
[  283.654939][T13887] Use struct sctp_assoc_value instead
[  283.890701][T13903] netlink: 'syz.1.2209': attribute type 2 has an invalid length.
[  283.924796][T13903] netlink: 'syz.1.2209': attribute type 1 has an invalid length.
[  283.959318][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'.
[  284.015446][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'.
[  284.198114][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'.
[  284.242074][T13927] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2214'.
[  284.267821][T13929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.284331][T13929] syzkaller0: entered promiscuous mode
[  284.294794][T13929] syzkaller0: entered allmulticast mode
[  284.482879][T13929] tipc: Resetting bearer <eth:syzkaller0>
[  284.540738][T13929] tipc: Disabling bearer <eth:syzkaller0>
[  284.573586][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  284.610844][T13952] team0: Mode changed to "loadbalance"
[  284.741529][T13959] netlink: 'syz.1.2222': attribute type 10 has an invalid length.
[  284.752492][T13959] bond0: (slave wlan1): Opening slave failed
[  284.802122][T13958] lo speed is unknown, defaulting to 1000
[  284.887669][T13965] lo speed is unknown, defaulting to 1000
[  285.365279][T13986] netlink: 'syz.0.2231': attribute type 3 has an invalid length.
[  285.379776][T13986] netlink: 'syz.0.2231': attribute type 3 has an invalid length.
[  285.612885][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  285.626659][T13999] lo speed is unknown, defaulting to 1000
[  285.660793][T14000] syzkaller0: left promiscuous mode
[  285.668632][T14000] syzkaller0: left allmulticast mode
[  285.752010][T14006] lo speed is unknown, defaulting to 1000
[  286.652784][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  286.953553][T14054] veth1_to_team: entered allmulticast mode
[  286.968251][T14054] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  287.378236][T14079] dvmrp8: entered allmulticast mode
[  287.507662][T14081] syzkaller0: entered promiscuous mode
[  287.524637][T14081] syzkaller0: entered allmulticast mode
[  287.586408][T14086] 8021q: adding VLAN 0 to HW filter on device bond5
[  287.603348][T14087] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  287.613323][T14077] dvmrp8: left allmulticast mode
[  287.656685][T14068] __nla_validate_parse: 65 callbacks suppressed
[  287.656706][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'.
[  287.682661][T14081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2258'.
[  287.702915][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  287.723487][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  287.736673][T14068] macsec1: entered promiscuous mode
[  287.747757][T14068] syzkaller0: entered promiscuous mode
[  287.762378][T14068] batman_adv: batadv0: Adding interface: macsec1
[  287.782881][T14068] batman_adv: batadv0: Interface activated: macsec1
[  287.863423][ T1166] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  287.891769][T14067] batman_adv: batadv0: Interface deactivated: macsec1
[  287.899538][T14067] syzkaller0 (unregistering): left promiscuous mode
[  287.909400][T14067] batman_adv: batadv0: Removing interface: macsec1
[  287.970667][T14107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'.
[  287.986440][T14107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'.
[  287.999605][T14107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'.
[  288.316652][T14134] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2271'.
[  288.330731][T14139] netlink: 'syz.3.2272': attribute type 1 has an invalid length.
[  288.342603][T14139] netlink: 'syz.3.2272': attribute type 2 has an invalid length.
[  288.369817][T14142] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2274'.
[  288.438912][T14139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2272'.
[  288.478791][T14147] netlink: 'syz.1.2277': attribute type 1 has an invalid length.
[  288.732846][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  288.748762][T14153] netlink: 'syz.0.2278': attribute type 12 has an invalid length.
[  288.778315][T14153] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2278'.
[  288.976533][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'.
[  289.017551][T14188] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  289.037568][T14188] team0: Device ipvlan4 is already an upper device of the team interface
[  289.093539][T14189] macvlan0: left promiscuous mode
[  289.100497][T14189] gtp0: left promiscuous mode
[  289.133580][T14189] bond2: left promiscuous mode
[  289.154695][T14189] batadv1: left promiscuous mode
[  289.167663][T14189] batadv1: left allmulticast mode
[  289.193223][T14189] batadv2: left promiscuous mode
[  289.198317][T14189] batadv2: left allmulticast mode
[  289.207500][T14189] geneve3: left promiscuous mode
[  289.212499][T14189] geneve3: left allmulticast mode
[  289.265570][T14189] veth3: left promiscuous mode
[  289.279302][T14189] ip6gre1: left promiscuous mode
[  289.287688][T14189] bond7: left promiscuous mode
[  289.317201][T14202] hsr_slave_0: left promiscuous mode
[  289.367395][T14200] syzkaller1: entered promiscuous mode
[  289.375973][T14200] syzkaller1: entered allmulticast mode
[  289.385554][T14215] netlink: 'syz.4.2295': attribute type 12 has an invalid length.
[  289.576880][T14230] ip6tnl1: entered promiscuous mode
[  289.591736][T14228] delete_channel: no stack
[  289.618425][T14228] delete_channel: no stack
[  289.751992][T14242] lo speed is unknown, defaulting to 1000
[  289.772837][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  290.006453][T14261] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  290.032940][  T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  290.208353][T14266] syzkaller0: entered promiscuous mode
[  290.228165][T14266] syzkaller0: entered allmulticast mode
[  290.261221][T14276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.390764][T14276] syzkaller0: entered promiscuous mode
[  290.402403][T14276] syzkaller0: entered allmulticast mode
[  290.421782][T14276] tipc: Resetting bearer <eth:syzkaller0>
[  290.439928][   T59] tipc: Resetting bearer <eth:syzkaller0>
[  290.455278][T14275] tipc: Resetting bearer <eth:syzkaller0>
[  290.562530][T14275] tipc: Disabling bearer <eth:syzkaller0>
[  290.612429][T14299] lo speed is unknown, defaulting to 1000
[  290.812861][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  291.053484][ T5934] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.285185][T14338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.298609][T14339] syzkaller0: entered promiscuous mode
[  291.309274][T14339] syzkaller0: entered allmulticast mode
[  291.470076][T14368] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  291.566126][T14374] FAULT_INJECTION: forcing a failure.
[  291.566126][T14374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.585973][T14375] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  291.614307][T14374] CPU: 0 UID: 0 PID: 14374 Comm: syz.2.2341 Not tainted syzkaller #0 PREEMPT(full) 
[  291.614339][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  291.614353][T14374] Call Trace:
[  291.614361][T14374]  <TASK>
[  291.614370][T14374]  dump_stack_lvl+0x189/0x250
[  291.614400][T14374]  ? __pfx____ratelimit+0x10/0x10
[  291.614430][T14374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.614454][T14374]  ? __pfx__printk+0x10/0x10
[  291.614479][T14374]  ? __might_fault+0xb0/0x130
[  291.614511][T14374]  ? rcu_is_watching+0x15/0xb0
[  291.614532][T14374]  should_fail_ex+0x414/0x560
[  291.614560][T14374]  _copy_from_user+0x2d/0xb0
[  291.614583][T14374]  ___sys_sendmsg+0x158/0x2a0
[  291.614605][T14374]  ? __pfx____sys_sendmsg+0x10/0x10
[  291.614629][T14374]  ? kstrtouint+0x6e/0xe0
[  291.614683][T14374]  ? __fget_files+0x2a/0x420
[  291.614700][T14374]  ? __fget_files+0x3a0/0x420
[  291.614722][T14374]  __sys_sendmmsg+0x227/0x430
[  291.614746][T14374]  ? __pfx___sys_sendmmsg+0x10/0x10
[  291.614765][T14374]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  291.614812][T14374]  ? ksys_write+0x22a/0x250
[  291.614840][T14374]  ? __pfx_ksys_write+0x10/0x10
[  291.614864][T14374]  ? rcu_is_watching+0x15/0xb0
[  291.614888][T14374]  __x64_sys_sendmmsg+0xa0/0xc0
[  291.614910][T14374]  do_syscall_64+0xfa/0x3b0
[  291.614931][T14374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.614952][T14374]  ? clear_bhb_loop+0x60/0xb0
[  291.614976][T14374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.614996][T14374] RIP: 0033:0x7f70d3d8ebe9
[  291.615014][T14374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.615033][T14374] RSP: 002b:00007f70d4c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  291.615054][T14374] RAX: ffffffffffffffda RBX: 00007f70d3fb5fa0 RCX: 00007f70d3d8ebe9
[  291.615070][T14374] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003
[  291.615083][T14374] RBP: 00007f70d4c3f090 R08: 0000000000000000 R09: 0000000000000000
[  291.615096][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.615108][T14374] R13: 00007f70d3fb6038 R14: 00007f70d3fb5fa0 R15: 00007fff1aa2e688
[  291.615133][T14374]  </TASK>
[  291.693047][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.852897][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  292.124948][T13356] udevd[13356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  292.157972][T14408] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  292.415831][T14435] FAULT_INJECTION: forcing a failure.
[  292.415831][T14435] name failslab, interval 1, probability 0, space 0, times 0
[  292.447252][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.2.2356 Not tainted syzkaller #0 PREEMPT(full) 
[  292.447281][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  292.447293][T14435] Call Trace:
[  292.447300][T14435]  <TASK>
[  292.447309][T14435]  dump_stack_lvl+0x189/0x250
[  292.447338][T14435]  ? __pfx____ratelimit+0x10/0x10
[  292.447370][T14435]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.447394][T14435]  ? __pfx__printk+0x10/0x10
[  292.447421][T14435]  ? rcu_is_watching+0x15/0xb0
[  292.447444][T14435]  ? __pfx___might_resched+0x10/0x10
[  292.447463][T14435]  ? lock_acquire+0x5f/0x360
[  292.447495][T14435]  should_fail_ex+0x414/0x560
[  292.447526][T14435]  should_failslab+0xa8/0x100
[  292.447557][T14435]  __kmalloc_noprof+0xcb/0x4f0
[  292.447583][T14435]  ? sock_kmalloc+0xd6/0x160
[  292.447606][T14435]  ? rcu_is_watching+0x15/0xb0
[  292.447629][T14435]  sock_kmalloc+0xd6/0x160
[  292.447653][T14435]  ____sys_sendmsg+0x1b5/0x830
[  292.447679][T14435]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.447707][T14435]  ? import_iovec+0x74/0xa0
[  292.447732][T14435]  ___sys_sendmsg+0x21f/0x2a0
[  292.447756][T14435]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.447782][T14435]  ? kstrtouint+0x6e/0xe0
[  292.447828][T14435]  ? __fget_files+0x2a/0x420
[  292.447846][T14435]  ? __fget_files+0x3a0/0x420
[  292.447879][T14435]  __sys_sendmmsg+0x227/0x430
[  292.447905][T14435]  ? __pfx___sys_sendmmsg+0x10/0x10
[  292.447926][T14435]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  292.447975][T14435]  ? ksys_write+0x22a/0x250
[  292.448006][T14435]  ? __pfx_ksys_write+0x10/0x10
[  292.448032][T14435]  ? rcu_is_watching+0x15/0xb0
[  292.448056][T14435]  __x64_sys_sendmmsg+0xa0/0xc0
[  292.448081][T14435]  do_syscall_64+0xfa/0x3b0
[  292.448101][T14435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.448122][T14435]  ? clear_bhb_loop+0x60/0xb0
[  292.448146][T14435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.448167][T14435] RIP: 0033:0x7f70d3d8ebe9
[  292.448186][T14435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.448206][T14435] RSP: 002b:00007f70d4c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  292.448229][T14435] RAX: ffffffffffffffda RBX: 00007f70d3fb5fa0 RCX: 00007f70d3d8ebe9
[  292.448245][T14435] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003
[  292.448258][T14435] RBP: 00007f70d4c3f090 R08: 0000000000000000 R09: 0000000000000000
[  292.448272][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.448285][T14435] R13: 00007f70d3fb6038 R14: 00007f70d3fb5fa0 R15: 00007fff1aa2e688
[  292.448311][T14435]  </TASK>
[  292.729484][T14444] lo speed is unknown, defaulting to 1000
[  292.833323][T14448] netlink: 'syz.2.2360': attribute type 1 has an invalid length.
[  292.847778][T14448] __nla_validate_parse: 15 callbacks suppressed
[  292.847809][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2360'.
[  292.892781][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  292.910754][T14448] team2: entered promiscuous mode
[  292.916963][T14448] team2: entered allmulticast mode
[  292.975569][T14448] 8021q: adding VLAN 0 to HW filter on device team2
[  293.322367][T14479] FAULT_INJECTION: forcing a failure.
[  293.322367][T14479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.374627][T14479] CPU: 1 UID: 0 PID: 14479 Comm: syz.4.2370 Not tainted syzkaller #0 PREEMPT(full) 
[  293.374655][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.374667][T14479] Call Trace:
[  293.374676][T14479]  <TASK>
[  293.374684][T14479]  dump_stack_lvl+0x189/0x250
[  293.374713][T14479]  ? __pfx____ratelimit+0x10/0x10
[  293.374753][T14479]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.374777][T14479]  ? __pfx__printk+0x10/0x10
[  293.374804][T14479]  ? __might_fault+0xb0/0x130
[  293.374832][T14479]  ? rcu_is_watching+0x15/0xb0
[  293.374851][T14479]  should_fail_ex+0x414/0x560
[  293.374876][T14479]  _copy_from_user+0x2d/0xb0
[  293.374896][T14479]  ____sys_sendmsg+0x2fe/0x830
[  293.374917][T14479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.374939][T14479]  ? import_iovec+0x74/0xa0
[  293.374960][T14479]  ___sys_sendmsg+0x21f/0x2a0
[  293.374979][T14479]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.374999][T14479]  ? kstrtouint+0x6e/0xe0
[  293.375036][T14479]  ? __fget_files+0x2a/0x420
[  293.375050][T14479]  ? __fget_files+0x3a0/0x420
[  293.375069][T14479]  __sys_sendmmsg+0x227/0x430
[  293.375089][T14479]  ? __pfx___sys_sendmmsg+0x10/0x10
[  293.375106][T14479]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  293.375146][T14479]  ? ksys_write+0x22a/0x250
[  293.375169][T14479]  ? __pfx_ksys_write+0x10/0x10
[  293.375190][T14479]  ? rcu_is_watching+0x15/0xb0
[  293.375209][T14479]  __x64_sys_sendmmsg+0xa0/0xc0
[  293.375231][T14479]  do_syscall_64+0xfa/0x3b0
[  293.375248][T14479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.375265][T14479]  ? clear_bhb_loop+0x60/0xb0
[  293.375284][T14479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.375301][T14479] RIP: 0033:0x7fa63018ebe9
[  293.375316][T14479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.375332][T14479] RSP: 002b:00007fa630f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  293.375350][T14479] RAX: ffffffffffffffda RBX: 00007fa6303b5fa0 RCX: 00007fa63018ebe9
[  293.375363][T14479] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000003
[  293.375374][T14479] RBP: 00007fa630f9d090 R08: 0000000000000000 R09: 0000000000000000
[  293.375385][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.375395][T14479] R13: 00007fa6303b6038 R14: 00007fa6303b5fa0 R15: 00007ffecb323a88
[  293.375416][T14479]  </TASK>
[  293.696350][T14488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2373'.
[  293.883962][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2375'.
[  293.901004][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2375'.
[  293.932772][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  294.219517][T14519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'.
[  294.227405][T14520] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2379'.
[  294.401637][T14537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2386'.
[  294.439471][T14540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2387'.
[  294.450542][T14540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2387'.
[  294.461682][T14540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2387'.
[  294.487624][T14540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.670406][T14552] netlink: 'syz.1.2401': attribute type 15 has an invalid length.
[  294.674457][T14556] netlink: 'syz.0.2392': attribute type 3 has an invalid length.
[  294.688838][T14556] netlink: 'syz.0.2392': attribute type 2 has an invalid length.
[  294.696879][T14556] netlink: 'syz.0.2392': attribute type 2 has an invalid length.
[  294.728074][T14556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.738569][T14555] netlink: 'syz.4.2391': attribute type 1 has an invalid length.
[  294.791266][T14555] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  294.821618][T14561] sctp: [Deprecated]: syz.0.2394 (pid 14561) Use of int in max_burst socket option deprecated.
[  294.821618][T14561] Use struct sctp_assoc_value instead
[  294.972776][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  295.088806][T14573] netlink: 'syz.2.2398': attribute type 13 has an invalid length.
[  295.097100][T14573] netlink: 'syz.2.2398': attribute type 17 has an invalid length.
[  295.110563][T14573] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.127833][T14573] 0ªX¹¦À: left allmulticast mode
[  295.133491][ T5934] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.148173][T14573] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  295.339719][T14580] netlink: zone id is out of range
[  295.345791][T14580] netlink: zone id is out of range
[  295.351030][T14580] netlink: set zone limit has 4 unknown bytes
[  295.427276][T14586] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  295.464834][ T5934] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.628275][T14596] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  295.682455][T14599] sctp: [Deprecated]: syz.2.2407 (pid 14599) Use of int in max_burst socket option deprecated.
[  295.682455][T14599] Use struct sctp_assoc_value instead
[  295.704847][T14592] lo speed is unknown, defaulting to 1000
[  295.711622][T14592] lo speed is unknown, defaulting to 1000
[  295.728954][T14592] lo speed is unknown, defaulting to 1000
[  295.894001][T14607] netlink: 'syz.0.2408': attribute type 8 has an invalid length.
[  295.927699][T14592] infiniband syz0: set active
[  295.932516][    T9] lo speed is unknown, defaulting to 1000
[  295.949905][T14592] infiniband syz0: added lo
[  295.988758][T14592] RDS/IB: syz0: added
[  295.992892][T14592] smc: adding ib device syz0 with port count 1
[  295.999860][T14592] smc:    ib device syz0 port 1 has pnetid 
[  296.006564][    T9] lo speed is unknown, defaulting to 1000
[  296.012962][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  296.020952][T14592] lo speed is unknown, defaulting to 1000
[  296.176286][T14620] netlink: 'syz.3.2414': attribute type 1 has an invalid length.
[  296.314316][T14622] lo speed is unknown, defaulting to 1000
[  296.331230][T14592] lo speed is unknown, defaulting to 1000
[  296.564185][T14622] lo speed is unknown, defaulting to 1000
[  296.575496][T14641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.610580][T14643] tap0: tun_chr_ioctl cmd 1074025677
[  296.639396][T14643] tap0: linktype set to 774
[  296.665338][T14647] vlan0: entered promiscuous mode
[  296.744924][T14592] lo speed is unknown, defaulting to 1000
[  297.013284][  T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.052773][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  297.053285][  T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.098604][T14592] lo speed is unknown, defaulting to 1000
[  297.299918][T14679] unsupported nlmsg_type 40
[  297.377363][T14592] lo speed is unknown, defaulting to 1000
[  297.768748][T14709] lo speed is unknown, defaulting to 1000
[  297.776041][T14709] lo speed is unknown, defaulting to 1000
[  297.874216][T14715] sctp: [Deprecated]: syz.4.2442 (pid 14715) Use of int in max_burst socket option deprecated.
[  297.874216][T14715] Use struct sctp_assoc_value instead
[  298.177985][T14725] __nla_validate_parse: 17 callbacks suppressed
[  298.178006][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  298.197318][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  298.266022][T14730] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2445'.
[  298.501876][T14734] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2447'.
[  298.511208][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'.
[  298.956521][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'.
[  299.098458][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'.
[  299.123816][T14767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2459'.
[  299.142886][    C0] net_ratelimit: 1 callbacks suppressed
[  299.142910][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  299.292656][T14774] blkio.reset_stats is deprecated
[  299.340261][T14767] lo speed is unknown, defaulting to 1000
[  299.406022][T14767] lo speed is unknown, defaulting to 1000
[  299.435929][T14779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'.
[  299.516897][T14780] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2463'.
[  299.555580][T14780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.575164][T14780] syzkaller0: entered promiscuous mode
[  299.581500][T14780] syzkaller0: entered allmulticast mode
[  299.600260][T14780] tipc: Resetting bearer <eth:syzkaller0>
[  299.621586][T14777] tipc: Resetting bearer <eth:syzkaller0>
[  299.654731][T14777] tipc: Disabling bearer <eth:syzkaller0>
[  300.172765][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  300.436805][T14818] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  300.527722][T14818] syzkaller0: entered promiscuous mode
[  300.542845][T14818] syzkaller0: entered allmulticast mode
[  300.716344][T14827] sctp: [Deprecated]: syz.1.2478 (pid 14827) Use of struct sctp_assoc_value in delayed_ack socket option.
[  300.716344][T14827] Use struct sctp_sack_info instead
[  300.978727][T14837] ieee802154 phy0 wpan0: encryption failed: -22
[  301.212825][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  301.284885][T14848] validate_nla: 8 callbacks suppressed
[  301.284905][T14848] netlink: 'syz.2.2485': attribute type 9 has an invalid length.
[  302.100610][T14906] lo speed is unknown, defaulting to 1000
[  302.117213][T14906] lo speed is unknown, defaulting to 1000
[  302.198437][T14909] gtp1: entered promiscuous mode
[  302.226010][T14909] gtp1: entered allmulticast mode
[  302.252824][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  302.390181][T14913] lo speed is unknown, defaulting to 1000
[  302.409172][T14913] lo speed is unknown, defaulting to 1000
[  302.573255][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  302.727338][T14925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.744179][T14925] syzkaller0: entered promiscuous mode
[  302.770136][T14925] syzkaller0: entered allmulticast mode
[  302.820713][T14925] tipc: Resetting bearer <eth:syzkaller0>
[  302.854656][T14924] tipc: Resetting bearer <eth:syzkaller0>
[  302.900660][T14924] tipc: Disabling bearer <eth:syzkaller0>
[  303.049844][T14944] netlink: 'syz.3.2508': attribute type 39 has an invalid length.
[  303.115255][T14949] bridge6: entered allmulticast mode
[  303.292851][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  303.455748][T14960] __nla_validate_parse: 16 callbacks suppressed
[  303.455769][T14960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2515'.
[  303.807569][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'.
[  303.888979][T14981] sctp: [Deprecated]: syz.3.2519 (pid 14981) Use of int in max_burst socket option deprecated.
[  303.888979][T14981] Use struct sctp_assoc_value instead
[  304.332782][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  304.551613][T15010] lo speed is unknown, defaulting to 1000
[  304.560705][T15010] lo speed is unknown, defaulting to 1000
[  305.372788][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  306.341205][T15025] netlink: 'syz.4.2533': attribute type 4 has an invalid length.
[  306.391864][T15026] netlink: 'syz.4.2533': attribute type 4 has an invalid length.
[  306.849276][ T5862] lo speed is unknown, defaulting to 1000
[  306.860333][  T979] lo speed is unknown, defaulting to 1000
[  306.860335][ T5862] syz0: Port: 1 Link DOWN
[  306.877011][    T9] lo speed is unknown, defaulting to 1000
[  306.885476][ T5862] lo speed is unknown, defaulting to 1000
[  307.037200][T15046] syzkaller0: entered promiscuous mode
[  307.045339][T15046] syzkaller0: entered allmulticast mode
[  307.061702][T15044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.096219][T15044] tipc: Resetting bearer <eth:syzkaller0>
[  307.108624][T15044] tipc: Disabling bearer <eth:syzkaller0>
[  307.137479][T15049] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  307.324447][T15058] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2543'.
[  307.452862][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  307.539500][T15067] netlink: del zone limit has 4 unknown bytes
[  307.939901][T15086] sctp: [Deprecated]: syz.0.2550 (pid 15086) Use of int in max_burst socket option deprecated.
[  307.939901][T15086] Use struct sctp_assoc_value instead
[  308.316883][T15099] lo speed is unknown, defaulting to 1000
[  308.398758][T15102] netlink: 'syz.3.2553': attribute type 1 has an invalid length.
[  308.461091][T15104] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  308.492883][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  309.542813][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  310.572802][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  310.999041][T15112] netlink: 'syz.2.2557': attribute type 29 has an invalid length.
[  311.026141][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2557'.
[  311.065214][T15115] sctp: [Deprecated]: syz.0.2560 (pid 15115) Use of int in max_burst socket option deprecated.
[  311.065214][T15115] Use struct sctp_assoc_value instead
[  311.183732][T15122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.193801][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'.
[  311.214180][T15122] syzkaller0: entered promiscuous mode
[  311.219697][T15122] syzkaller0: entered allmulticast mode
[  311.244981][T15122] tipc: Resetting bearer <eth:syzkaller0>
[  311.612773][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  312.302838][ T5857] tipc: Node number set to 3997586376
[  312.652766][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  313.692785][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  314.018840][T15120] tipc: Resetting bearer <eth:syzkaller0>
[  314.027696][T15120] tipc: Disabling bearer <eth:syzkaller0>
[  314.037907][T15130] wg1: entered promiscuous mode
[  314.044314][T15130] wg1: entered allmulticast mode
[  314.052680][T15133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.099861][T15136] lo speed is unknown, defaulting to 1000
[  314.115496][T15136] lo speed is unknown, defaulting to 1000
[  314.177803][T15145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.312213][T15152] ipvlan0: entered promiscuous mode
[  314.401406][T15157] ipvlan0: entered promiscuous mode
[  314.732769][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  315.033925][T15178] netlink: 'syz.3.2579': attribute type 1 has an invalid length.
[  315.063280][T15178] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2579'.
[  315.095893][T15178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2579'.
[  315.120251][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2579'.
[  315.143959][T15178] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2579'.
[  315.163116][T15178] netlink: 'syz.3.2579': attribute type 3 has an invalid length.
[  315.179866][T15178] netlink: 'syz.3.2579': attribute type 2 has an invalid length.
[  315.190603][T15178] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2579'.
[  315.202263][T15178] netlink: 'syz.3.2579': attribute type 2 has an invalid length.
[  315.210787][T15183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2579'.
[  315.238493][T15184] syzkaller0: entered promiscuous mode
[  315.245732][T15184] syzkaller0: entered allmulticast mode
[  315.253165][T15182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.286945][T15179] macsec0: entered promiscuous mode
[  315.365923][T15187] sctp: [Deprecated]: syz.3.2582 (pid 15187) Use of int in max_burst socket option deprecated.
[  315.365923][T15187] Use struct sctp_assoc_value instead
[  315.447053][T15190] team0: Device macvlan4 is already an upper device of the team interface
[  315.599089][T15199] netlink: 'syz.2.2586': attribute type 1 has an invalid length.
[  315.682105][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'.
[  315.748672][T15204] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  315.772759][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  315.782005][T15204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.832261][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'.
[  315.849708][T15205] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  315.882606][T15205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.209957][T15226] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  316.235800][T15226] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  316.255910][T15223] lo speed is unknown, defaulting to 1000
[  316.263092][T15222] lo speed is unknown, defaulting to 1000
[  316.269988][T15222] lo speed is unknown, defaulting to 1000
[  316.276749][T15225] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  316.304658][T15225] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  316.553673][T15243] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  316.783283][T15223] lo speed is unknown, defaulting to 1000
[  316.812758][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  317.092071][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'.
[  317.298920][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.496915][T15271] netlink: 'syz.3.2608': attribute type 16 has an invalid length.
[  317.571556][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'.
[  317.608971][T15273] netlink: 'syz.0.2609': attribute type 13 has an invalid length.
[  317.756399][T15283] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2612'.
[  317.768144][T15291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.783702][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'.
[  317.806548][T15290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.827773][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'.
[  317.827866][T15290] netlink: 'syz.1.2613': attribute type 10 has an invalid length.
[  317.848077][T15283] syzkaller0: Caught tx_queue_len zero misconfig
[  317.858778][T15290] team0: Port device 
0!
 added
[  317.870325][T15290] netlink: 'syz.1.2613': attribute type 10 has an invalid length.
[  317.881277][T15290] team0: Port device 
0!
 removed
[  317.932346][T15295] syzkaller1: entered promiscuous mode
[  317.955124][T15295] syzkaller1: entered allmulticast mode
[  318.097265][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'.
[  318.613721][T15327] netlink: 'syz.4.2626': attribute type 10 has an invalid length.
[  318.650050][T15327] bridge0: port 1(macsec0) entered blocking state
[  318.673911][T15327] bridge0: port 1(macsec0) entered disabled state
[  318.684080][T15327] macsec0: entered allmulticast mode
[  318.702822][T15327] veth1_macvtap: entered allmulticast mode
[  318.723143][T15327] macsec0: entered promiscuous mode
[  318.775066][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'.
[  318.775147][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'.
[  318.812383][T15337] bridge0 (unregistering): left allmulticast mode
[  318.981651][T15351] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.001106][T15351] bond0: (slave rose0): Enslaving as an active interface with an up link
[  319.202586][T15363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'.
[  319.391909][T15382] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2644'.
[  319.473226][T15382] lo speed is unknown, defaulting to 1000
[  319.481046][T15382] lo speed is unknown, defaulting to 1000
[  319.621844][T15387] lo speed is unknown, defaulting to 1000
[  319.653799][T15387] lo speed is unknown, defaulting to 1000
[  319.887961][T15412] net_ratelimit: 2 callbacks suppressed
[  319.887975][T15412] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  319.916689][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  319.932944][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  320.059085][T15423] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  320.074775][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  320.142497][T15424] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  320.158911][T15415] lo speed is unknown, defaulting to 1000
[  320.224472][T15415] lo speed is unknown, defaulting to 1000
[  320.571189][T15452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.783519][T15461] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  320.807544][T15461] 8021q: VLANs not supported on ip6_vti0
[  320.853207][T15463] lo speed is unknown, defaulting to 1000
[  320.866182][T15463] lo speed is unknown, defaulting to 1000
[  320.972861][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  321.246341][T15476] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  321.263330][T15476] team0: Device ipvlan4 is already an upper device of the team interface
[  321.398784][T15464] lo speed is unknown, defaulting to 1000
[  321.471266][T15482] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.511101][T15464] lo speed is unknown, defaulting to 1000
[  321.529163][T15485] lo speed is unknown, defaulting to 1000
[  321.669438][T15498] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  321.696052][T15505] validate_nla: 5 callbacks suppressed
[  321.696074][T15505] netlink: 'syz.0.2678': attribute type 1 has an invalid length.
[  321.813702][T15507] netlink: 'syz.0.2679': attribute type 10 has an invalid length.
[  321.826105][T15507] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  321.848423][T15485] lo speed is unknown, defaulting to 1000
[  322.012816][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  322.061471][T15507] lo speed is unknown, defaulting to 1000
[  322.136320][T15507] lo speed is unknown, defaulting to 1000
[  322.406523][T15521] lo speed is unknown, defaulting to 1000
[  322.429197][T15521] lo speed is unknown, defaulting to 1000
[  322.556603][T15531] __nla_validate_parse: 7 callbacks suppressed
[  322.556626][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'.
[  322.573160][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'.
[  322.748092][T15541] netlink: 'syz.4.2686': attribute type 1 has an invalid length.
[  322.954047][T15541] 8021q: adding VLAN 0 to HW filter on device bond6
[  322.993411][T15551] veth7: entered promiscuous mode
[  323.028518][T15548] lo speed is unknown, defaulting to 1000
[  323.040689][T15548] lo speed is unknown, defaulting to 1000
[  323.056176][T15541] tipc: Resetting bearer <ib:team0>
[  323.062528][T15541] macsec0: left allmulticast mode
[  323.067753][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  323.085428][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  323.105845][T15541] veth1_macvtap: left allmulticast mode
[  323.119341][T15541] macsec0: left promiscuous mode
[  323.139707][T15541] bridge0: port 1(macsec0) entered disabled state
[  323.159422][T15541] bond5: (slave ip6gretap1): Removing an active aggregator
[  323.173039][T15541] bond5: (slave ip6gretap1): Releasing backup interface
[  323.373546][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  323.608389][T15590] netlink: 'syz.3.2698': attribute type 5 has an invalid length.
[  324.023765][T15613] lo: entered allmulticast mode
[  324.074038][T15613] dvmrp8: entered allmulticast mode
[  324.092910][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  324.187187][T15614] netlink: 'syz.2.2706': attribute type 23 has an invalid length.
[  324.524737][T15613] lo speed is unknown, defaulting to 1000
[  324.637744][T15613] lo speed is unknown, defaulting to 1000
[  324.679264][T15623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2710'.
[  324.914517][T15607] lo: left allmulticast mode
[  324.930789][T15607] dvmrp8: left allmulticast mode
[  325.132936][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  325.397875][T15666] netlink: 'syz.1.2723': attribute type 17 has an invalid length.
[  326.182834][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  326.935789][T15666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.100272][T15671] sctp: [Deprecated]: syz.0.2724 (pid 15671) Use of int in max_burst socket option deprecated.
[  327.100272][T15671] Use struct sctp_assoc_value instead
[  327.175256][T15678] netlink: 'syz.4.2725': attribute type 13 has an invalid length.
[  327.201348][T15678] netlink: 'syz.4.2725': attribute type 17 has an invalid length.
[  327.222872][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  327.302153][T15678] tipc: Resetting bearer <ib:team0>
[  327.312114][T15678] tipc: Resetting bearer <ib:team0>
[  327.320554][T15678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.337152][ T6930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.347316][    T9] lo speed is unknown, defaulting to 1000
[  327.355230][    T9] syz0: Port: 1 Link ACTIVE
[  327.401851][T15682] lo speed is unknown, defaulting to 1000
[  327.407910][    T9] lo speed is unknown, defaulting to 1000
[  327.457519][T15683] lo speed is unknown, defaulting to 1000
[  327.465017][T14358] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.485592][T14358] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  327.496083][T15682] lo speed is unknown, defaulting to 1000
[  327.658411][T15683] lo speed is unknown, defaulting to 1000
[  327.789429][T15690] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2729'.
[  327.942963][ T5857] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.090097][T15705] lo speed is unknown, defaulting to 1000
[  328.252852][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  328.268917][T15705] lo speed is unknown, defaulting to 1000
[  328.336787][T15727] netlink: 'syz.4.2741': attribute type 2 has an invalid length.
[  328.380259][T15730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2742'.
[  328.389076][T15735] netlink: 'syz.4.2741': attribute type 2 has an invalid length.
[  328.393957][T15730] netlink: 'syz.0.2742': attribute type 3 has an invalid length.
[  328.406660][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'.
[  328.428567][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.545178][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'.
[  328.646401][T15748] sctp: [Deprecated]: syz.0.2747 (pid 15748) Use of int in max_burst socket option deprecated.
[  328.646401][T15748] Use struct sctp_assoc_value instead
[  328.718295][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'.
[  328.750477][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'.
[  328.760676][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2749'.
[  328.832318][T15756] netlink: 'syz.2.2734': attribute type 13 has an invalid length.
[  328.856385][T15756] netlink: 'syz.2.2734': attribute type 17 has an invalid length.
[  328.872024][T15756] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  328.893517][ T6930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.953082][ T6930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.981569][T15767] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2751'.
[  329.230323][T15781] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2755'.
[  329.292840][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  329.327045][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'.
[  329.376503][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.486581][T15787] lo speed is unknown, defaulting to 1000
[  329.493977][T15787] lo speed is unknown, defaulting to 1000
[  330.169634][T15826] netlink: 'syz.3.2766': attribute type 4 has an invalid length.
[  330.342840][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  330.439660][T15847] sctp: [Deprecated]: syz.0.2772 (pid 15847) Use of int in max_burst socket option deprecated.
[  330.439660][T15847] Use struct sctp_assoc_value instead
[  330.680954][T15865] nbd: socks must be embedded in a SOCK_ITEM attr
[  330.696478][T15867] nbd: nbd64 already in use
[  330.720618][T13356] block nbd64: NBD_DISCONNECT
[  330.878047][T13356] udevd[13356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  331.024308][   T30] audit: type=1800 audit(1756401848.951:4): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2784" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2828 res=0 errno=0
[  331.077289][   T30] audit: type=1804 audit(1756401848.951:5): pid=15894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2784" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=2828 res=1 errno=0
[  331.132886][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  331.372876][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  331.450757][T15922] netlink: 'syz.1.2793': attribute type 1 has an invalid length.
[  331.485624][T15922] bond8: (slave bridge5): making interface the new active one
[  331.497212][T15922] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  331.852166][T15953] netlink: 'syz.2.2800': attribute type 11 has an invalid length.
[  331.986312][T15958] lo speed is unknown, defaulting to 1000
[  332.016897][T15958] lo speed is unknown, defaulting to 1000
[  332.036594][T15962] FAULT_INJECTION: forcing a failure.
[  332.036594][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.103029][T15962] CPU: 1 UID: 0 PID: 15962 Comm: syz.4.2803 Not tainted syzkaller #0 PREEMPT(full) 
[  332.103062][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  332.103088][T15962] Call Trace:
[  332.103096][T15962]  <TASK>
[  332.103105][T15962]  dump_stack_lvl+0x189/0x250
[  332.103137][T15962]  ? __pfx____ratelimit+0x10/0x10
[  332.103168][T15962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.103192][T15962]  ? __pfx__printk+0x10/0x10
[  332.103224][T15962]  ? rcu_is_watching+0x15/0xb0
[  332.103256][T15962]  should_fail_ex+0x414/0x560
[  332.103287][T15962]  _copy_to_user+0x31/0xb0
[  332.103314][T15962]  simple_read_from_buffer+0xe1/0x170
[  332.103346][T15962]  proc_fail_nth_read+0x1b3/0x220
[  332.103372][T15962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  332.103397][T15962]  ? rw_verify_area+0x2a6/0x4d0
[  332.103423][T15962]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  332.103447][T15962]  vfs_read+0x1fd/0xa30
[  332.103472][T15962]  ? fdget_pos+0x247/0x320
[  332.103492][T15962]  ? __pfx___mutex_lock+0x10/0x10
[  332.103525][T15962]  ? __pfx_vfs_read+0x10/0x10
[  332.103556][T15962]  ? __fget_files+0x3a0/0x420
[  332.103573][T15962]  ? __fget_files+0x2a/0x420
[  332.103595][T15962]  ksys_read+0x145/0x250
[  332.103623][T15962]  ? __pfx_ksys_read+0x10/0x10
[  332.103653][T15962]  ? rcu_is_watching+0x15/0xb0
[  332.103675][T15962]  do_syscall_64+0xfa/0x3b0
[  332.103695][T15962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.103715][T15962]  ? clear_bhb_loop+0x60/0xb0
[  332.103738][T15962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.103759][T15962] RIP: 0033:0x7fa63018d5fc
[  332.103778][T15962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  332.103796][T15962] RSP: 002b:00007fa630f9d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  332.103831][T15962] RAX: ffffffffffffffda RBX: 00007fa6303b5fa0 RCX: 00007fa63018d5fc
[  332.103847][T15962] RDX: 000000000000000f RSI: 00007fa630f9d0a0 RDI: 0000000000000004
[  332.103860][T15962] RBP: 00007fa630f9d090 R08: 0000000000000000 R09: 0000000000000000
[  332.103873][T15962] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.103887][T15962] R13: 00007fa6303b6038 R14: 00007fa6303b5fa0 R15: 00007ffecb323a88
[  332.103913][T15962]  </TASK>
[  332.412776][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  332.692339][T15977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.710810][T15977] syzkaller0: entered promiscuous mode
[  332.742822][T15977] syzkaller0: entered allmulticast mode
[  332.816091][T15987] __nla_validate_parse: 10 callbacks suppressed
[  332.816116][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'.
[  332.842984][T15988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2810'.
[  332.877283][T15977] syzkaller0: mtu less than device minimum
[  332.893354][T15974] tipc: Resetting bearer <eth:syzkaller0>
[  332.970849][T15974] tipc: Disabling bearer <eth:syzkaller0>
[  333.069104][T15993] lo speed is unknown, defaulting to 1000
[  333.107435][T15993] lo speed is unknown, defaulting to 1000
[  333.231397][T16004] lo speed is unknown, defaulting to 1000
[  333.297937][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'.
[  333.340916][T16004] lo speed is unknown, defaulting to 1000
[  333.425607][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2817'.
[  333.446901][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2817'.
[  333.462828][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  333.490937][T16012] gretap0: entered promiscuous mode
[  333.503139][T16012] gretap0: left promiscuous mode
[  333.569096][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'.
[  333.655019][T16015] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2819'.
[  333.715465][T16031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.866097][T16039] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2824'.
[  334.048267][T16048] netlink: 'syz.1.2828': attribute type 8 has an invalid length.
[  334.221103][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2833'.
[  334.296989][T16068] bond7: entered promiscuous mode
[  334.311119][T16068] 8021q: adding VLAN 0 to HW filter on device bond7
[  334.346355][T16073] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  334.363761][T16074] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  334.391890][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2836'.
[  334.492967][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  334.678245][T16076] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  335.058667][T16090] syzkaller0: entered allmulticast mode
[  335.283274][T14352] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  335.532770][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  336.067266][T16150] netlink: 'syz.3.2857': attribute type 1 has an invalid length.
[  336.127178][T16150] 8021q: adding VLAN 0 to HW filter on device bond10
[  336.221286][T16153] 8021q: adding VLAN 0 to HW filter on device bond10
[  336.242116][T16153] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  336.256276][T16153] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  336.293892][T16160] netlink: 'syz.1.2860': attribute type 10 has an invalid length.
[  336.324210][T16155] lo speed is unknown, defaulting to 1000
[  336.346817][T16155] lo speed is unknown, defaulting to 1000
[  336.380160][T16167] GUP no longer grows the stack in syz.2.2861 (16167): 200000006000-20000000a000 (200000005000)
[  336.394217][T16167] CPU: 0 UID: 0 PID: 16167 Comm: syz.2.2861 Not tainted syzkaller #0 PREEMPT(full) 
[  336.394248][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  336.394262][T16167] Call Trace:
[  336.394271][T16167]  <TASK>
[  336.394279][T16167]  dump_stack_lvl+0x189/0x250
[  336.394313][T16167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.394340][T16167]  ? __pfx__printk+0x10/0x10
[  336.394367][T16167]  ? find_vma+0xe7/0x160
[  336.394394][T16167]  ? mas_next_slot+0xc27/0xcf0
[  336.394432][T16167]  __get_user_pages+0x24d0/0x2ce0
[  336.394463][T16167]  ? __gup_longterm_locked+0xc68/0x1660
[  336.394500][T16167]  ? __gup_longterm_locked+0xc68/0x1660
[  336.394531][T16167]  __gup_longterm_locked+0xde9/0x1660
[  336.394563][T16167]  ? try_grab_folio_fast+0x1be/0x4f0
[  336.394592][T16167]  ? rcu_is_watching+0x15/0xb0
[  336.394616][T16167]  ? rcu_is_watching+0x15/0xb0
[  336.394639][T16167]  gup_fast_fallback+0x1e6a/0x2010
[  336.394686][T16167]  ? __pfx_gup_fast_fallback+0x10/0x10
[  336.394712][T16167]  ? __mutex_lock+0x335/0x1350
[  336.394736][T16167]  ? is_valid_gup_args+0x11f/0x200
[  336.394764][T16167]  ? get_user_pages_fast+0x4d/0xb0
[  336.394791][T16167]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  336.394822][T16167]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  336.394855][T16167]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  336.394896][T16167]  ? wait_for_space+0x24d/0x2d0
[  336.394930][T16167]  iov_iter_get_pages2+0x5e/0xa0
[  336.394956][T16167]  __se_sys_vmsplice+0x548/0x10d0
[  336.394995][T16167]  ? futex_private_hash_put+0x4b/0x280
[  336.395023][T16167]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  336.395057][T16167]  ? __pfx_futex_wake+0x10/0x10
[  336.395121][T16167]  ? rcu_is_watching+0x15/0xb0
[  336.395145][T16167]  ? rcu_is_watching+0x15/0xb0
[  336.395168][T16167]  do_syscall_64+0xfa/0x3b0
[  336.395188][T16167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.395210][T16167]  ? clear_bhb_loop+0x60/0xb0
[  336.395234][T16167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.395255][T16167] RIP: 0033:0x7f70d3d8ebe9
[  336.395274][T16167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.395293][T16167] RSP: 002b:00007f70d4c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  336.395316][T16167] RAX: ffffffffffffffda RBX: 00007f70d3fb5fa0 RCX: 00007f70d3d8ebe9
[  336.395332][T16167] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  336.395346][T16167] RBP: 00007f70d3e11e19 R08: 0000000000000000 R09: 0000000000000000
[  336.395359][T16167] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  336.395372][T16167] R13: 00007f70d3fb6038 R14: 00007f70d3fb5fa0 R15: 00007fff1aa2e688
[  336.395398][T16167]  </TASK>
[  336.666783][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  336.675033][T16153] veth11: entered promiscuous mode
[  336.687202][T16153] bond10: (slave veth11): Enslaving as an active interface with a down link
[  336.689754][T16170] nbd: socks must be embedded in a SOCK_ITEM attr
[  336.732986][ T5871] Bluetooth: hci0: command tx timeout
[  336.740189][T16175] erspan0: entered allmulticast mode
[  336.777940][T16175] bond10: (slave erspan0): making interface the new active one
[  336.793858][T16175] bond10: (slave erspan0): Enslaving as an active interface with an up link
[  337.047662][T16189] netlink: 'syz.0.2865': attribute type 4 has an invalid length.
[  337.401100][T16211] lo speed is unknown, defaulting to 1000
[  337.422147][T16211] lo speed is unknown, defaulting to 1000
[  337.702803][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  337.772907][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  338.181068][T16229] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000
[  338.412857][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.489130][ T5179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.496832][ T5179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.498395][T16234] sctp: [Deprecated]: syz.0.2877 (pid 16234) Use of int in max_burst socket option deprecated.
[  338.498395][T16234] Use struct sctp_assoc_value instead
[  338.520700][ T5179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.543336][ T5179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.552935][ T5179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.591116][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.615512][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.625770][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.633956][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.641895][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.742785][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  338.765007][T16236] lo speed is unknown, defaulting to 1000
[  338.783400][T16240] __nla_validate_parse: 10 callbacks suppressed
[  338.783427][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'.
[  338.822892][T16240] block nbd0: not configured, cannot reconfigure
[  338.829432][T16236] lo speed is unknown, defaulting to 1000
[  338.895874][T16239] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2878'.
[  338.905290][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'.
[  339.167809][T16254] lo speed is unknown, defaulting to 1000
[  339.174824][T16254] lo speed is unknown, defaulting to 1000
[  339.256741][T16258] tipc: Enabled bearer <eth:gre0>, priority 10
[  339.283816][T16236] chnl_net:caif_netlink_parms(): no params data found
[  339.472534][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'.
[  339.590602][T16281] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003
[  339.634485][T16236] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.641786][T16236] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.649292][T16236] bridge_slave_0: entered allmulticast mode
[  339.658276][T16236] bridge_slave_0: entered promiscuous mode
[  339.667177][T16236] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.674750][T16236] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.683156][T16236] bridge_slave_1: entered allmulticast mode
[  339.690673][T16236] bridge_slave_1: entered promiscuous mode
[  339.740065][T16287] team0: Device gtp3 is of different type
[  339.763584][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.772798][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  339.784285][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.818336][T16236] team0: Port device team_slave_0 added
[  339.827280][T16236] team0: Port device team_slave_1 added
[  339.956436][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.967193][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.999870][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.019692][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.027349][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.057051][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.213082][T16236] hsr_slave_0: entered promiscuous mode
[  340.221778][T16236] hsr_slave_1: entered promiscuous mode
[  340.248932][T16236] debugfs: 'hsr0' already exists in 'hsr'
[  340.262927][T16236] Cannot create hsr debugfs directory
[  340.382782][ T6930] tipc: Node number set to 467548927
[  340.525565][T16317] lo speed is unknown, defaulting to 1000
[  340.532419][T16317] lo speed is unknown, defaulting to 1000
[  340.599364][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'.
[  340.621008][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'.
[  340.707742][T16326] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  340.733188][ T5857] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  340.741126][ T5179] Bluetooth: hci5: command tx timeout
[  340.812827][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  340.814721][T16236] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  340.848694][T16236] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  340.866835][T16236] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  340.879120][T16236] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  340.962310][T16346] netlink: 'syz.2.2903': attribute type 4 has an invalid length.
[  340.990192][T16236] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.007603][T16236] 8021q: adding VLAN 0 to HW filter on device team0
[  341.019036][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.026238][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.130049][T14354] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.137221][T14354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.173462][T16350] sctp: [Deprecated]: syz.3.2907 (pid 16350) Use of int in max_burst socket option deprecated.
[  341.173462][T16350] Use struct sctp_assoc_value instead
[  341.428639][T16361] lo speed is unknown, defaulting to 1000
[  341.448045][T16361] lo speed is unknown, defaulting to 1000
[  341.454801][ T5857] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  341.562510][T16236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.620782][T16236] veth0_vlan: entered promiscuous mode
[  341.621212][T16371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2913'.
[  341.636565][T16236] veth1_vlan: entered promiscuous mode
[  341.660706][T16371] 8021q: adding VLAN 0 to HW filter on device bond7
[  341.684739][T16371] 8021q: adding VLAN 0 to HW filter on device bond7
[  341.691792][T16371] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  341.704325][T16371] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  341.759119][T16236] veth0_macvtap: entered promiscuous mode
[  341.807913][T16236] veth1_macvtap: entered promiscuous mode
[  341.845000][T16236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.852897][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  341.856491][T16236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.889684][T14357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.938499][T14357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.948077][T14357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.970374][T14357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.062676][T16380] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2915'.
[  342.147384][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.172514][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.241559][T14352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.272646][T14352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.469472][T16402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2920'.
[  342.483251][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2920'.
[  342.716369][T16415] : entered promiscuous mode
[  342.787343][T16420] sctp: [Deprecated]: syz.4.2926 (pid 16420) Use of int in max_burst socket option deprecated.
[  342.787343][T16420] Use struct sctp_assoc_value instead
[  342.814209][ T5179] Bluetooth: hci5: command 0x041b tx timeout
[  342.893375][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  342.910459][T16426] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.952968][T16431] netlink: 'syz.1.2931': attribute type 2 has an invalid length.
[  342.989517][T16431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.008914][T16426] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.077397][T16426] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.137780][T16426] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.229030][T14354] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.269166][T14354] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.281232][T16442] netlink: 'syz.1.2935': attribute type 1 has an invalid length.
[  343.290216][T14358] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.317891][T14358] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.369757][T16443] veth3: entered promiscuous mode
[  343.504389][T16452] netlink: 'syz.1.2937': attribute type 13 has an invalid length.
[  343.512424][T16452] netlink: 'syz.1.2937': attribute type 17 has an invalid length.
[  343.730900][T16452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.799940][T16456] lo speed is unknown, defaulting to 1000
[  343.808696][T16456] lo speed is unknown, defaulting to 1000
[  343.932859][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  344.158503][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  344.179506][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  344.187338][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  344.197120][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.206367][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.246985][T16474] __nla_validate_parse: 4 callbacks suppressed
[  344.247004][T16474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2944'.
[  344.299358][   T59] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.321697][   T59] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.409700][T16487] nft_compat: unsupported protocol 5
[  344.418241][T16487] raw_sendmsg: syz.2.2946 forgot to set AF_INET. Fix it!
[  344.428451][   T59] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.446052][   T59] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.458230][T16476] lo speed is unknown, defaulting to 1000
[  344.459563][T14357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.473714][T16476] lo speed is unknown, defaulting to 1000
[  344.497258][T14357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.524727][   T59] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.553635][   T59] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.624372][T16491] lo speed is unknown, defaulting to 1000
[  344.658902][   T59] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  344.688643][   T59] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.753126][T16502] sctp: [Deprecated]: syz.0.2951 (pid 16502) Use of int in max_burst socket option deprecated.
[  344.753126][T16502] Use struct sctp_assoc_value instead
[  344.773898][T16491] lo speed is unknown, defaulting to 1000
[  344.892936][ T5866] Bluetooth: hci5: command 0x041b tx timeout
[  344.937036][   T59] tipc: Resetting bearer <eth:gre0>
[  344.982892][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  344.990886][T16507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2948'.
[  345.047027][T16511] netlink: 'syz.4.2948': attribute type 13 has an invalid length.
[  345.065419][T16511] netlink: 'syz.4.2948': attribute type 17 has an invalid length.
[  345.117684][   T59] bond10 (unregistering): (slave erspan0): Releasing active interface
[  345.139518][   T59] bond9 (unregistering): (slave gretap1): Releasing active interface
[  345.153687][   T59] tipc: Disabling bearer <eth:gre0>
[  345.170880][   T59] dvmrp0 (unregistering): left allmulticast mode
[  345.187422][   T59] bond0 (unregistering): (slave geneve3): Releasing active interface
[  345.278379][   T59] Ã (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.288243][   T59] Ã (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.298362][   T59] Ã (unregistering): (slave batadv0): Releasing backup interface
[  345.308332][   T59] Ã (unregistering): Released all slaves
[  345.319185][   T59] bond1 (unregistering): Released all slaves
[  345.329414][   T59] bond2 (unregistering): Released all slaves
[  345.340229][   T59] bond3 (unregistering): Released all slaves
[  345.350529][   T59] bond4 (unregistering): Released all slaves
[  345.368580][   T59] bond5 (unregistering): Released all slaves
[  345.386044][   T59] bond6 (unregistering): Released all slaves
[  345.398540][   T59] bond0 (unregistering): Released all slaves
[  345.411566][   T59] bond7 (unregistering): (slave bond8): Releasing backup interface
[  345.420446][   T59] bond7 (unregistering): Released all slaves
[  345.432642][   T59] bond8 (unregistering): Released all slaves
[  345.443910][   T59] bond9 (unregistering): Released all slaves
[  345.457012][   T59] bond10 (unregistering): (slave veth11): Releasing active interface
[  345.467441][   T59] bond10 (unregistering): Released all slaves
[  345.516825][T16511] tipc: Resetting bearer <ib:team0>
[  345.535644][T16511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.551885][  T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.590004][   T59] : left promiscuous mode
[  345.615829][T16476] chnl_net:caif_netlink_parms(): no params data found
[  345.678890][   T59] tipc: Left network mode
[  345.862905][  T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.923763][T16476] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.931157][T16476] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.946447][T16476] bridge_slave_0: entered allmulticast mode
[  345.961380][T16476] bridge_slave_0: entered promiscuous mode
[  345.982902][T16476] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.990190][T16476] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.000316][T16476] bridge_slave_1: entered allmulticast mode
[  346.007755][T16476] bridge_slave_1: entered promiscuous mode
[  346.020784][T16529] 
‚: renamed from bond_slave_0 (while UP)
[  346.022898][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  346.071740][T16539] veth1_to_team: entered allmulticast mode
[  346.130157][T16476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.169187][T16476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.227070][T16545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2960'.
[  346.256193][ T5871] Bluetooth: hci0: command tx timeout
[  346.419940][T16476] team0: Port device team_slave_0 added
[  346.440816][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.462920][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.506245][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.530343][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.530667][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'.
[  346.555146][   T59] veth1_macvtap: left promiscuous mode
[  346.558617][T16552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2964'.
[  346.757929][   T59] pim6reg (unregistering): left allmulticast mode
[  346.940060][T16571] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.2968'.
[  346.976431][ T5871] Bluetooth: hci5: command 0x041b tx timeout
[  347.062773][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  347.081257][T16574] netlink: 'syz.0.2968': attribute type 10 has an invalid length.
[  347.160319][   T59] team0 (unregistering): Port device team_slave_1 removed
[  347.196896][   T59] team0 (unregistering): Port device team_slave_0 removed
[  347.491766][T16476] team0: Port device team_slave_1 added
[  347.528487][    T9] lo speed is unknown, defaulting to 1000
[  347.537623][    T9] infiniband syz2: ib_query_port failed (-19)
[  347.609387][T16577] lo speed is unknown, defaulting to 1000
[  347.616101][T16476] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.642758][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.671324][T16585] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2973'.
[  347.680067][T16476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.681196][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2973'.
[  347.693294][T16476] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.732517][T16476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.759051][T16476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.769676][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2973'.
[  347.793834][T16585] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  347.914853][T16476] hsr_slave_0: entered promiscuous mode
[  347.938143][T16476] hsr_slave_1: entered promiscuous mode
[  347.951059][T16476] debugfs: 'hsr0' already exists in 'hsr'
[  347.967372][T16476] Cannot create hsr debugfs directory
[  348.092760][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  348.287108][T16610] sctp: [Deprecated]: syz.2.2978 (pid 16610) Use of int in max_burst socket option deprecated.
[  348.287108][T16610] Use struct sctp_assoc_value instead
[  348.318648][T16611] lo speed is unknown, defaulting to 1000
[  348.335658][ T5871] Bluetooth: hci0: command tx timeout
[  348.918698][T16476] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  348.946409][T16476] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  348.963533][T16476] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  348.975681][T16476] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  349.040676][T16635] netlink: 'syz.0.2986': attribute type 1 has an invalid length.
[  349.053221][ T5871] Bluetooth: hci5: command 0x041b tx timeout
[  349.062151][T16638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.084820][T16635] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  349.132787][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  349.195991][ T6930] IPVS: starting estimator thread 0...
[  349.251061][T16476] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.295887][T16650] IPVS: using max 33 ests per chain, 79200 per kthread
[  349.308263][T16476] 8021q: adding VLAN 0 to HW filter on device team0
[  349.324490][T14358] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.331786][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.360062][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.367419][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.675449][T16476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  349.985807][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'.
[  350.004548][T16690] netlink: 'syz.2.2999': attribute type 1 has an invalid length.
[  350.038487][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2999'.
[  350.054164][T16476] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.092210][T16694] sctp: [Deprecated]: syz.0.3000 (pid 16694) Use of int in max_burst socket option deprecated.
[  350.092210][T16694] Use struct sctp_assoc_value instead
[  350.145450][T16476] veth0_vlan: entered promiscuous mode
[  350.170519][T16476] veth1_vlan: entered promiscuous mode
[  350.176249][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  350.224890][T16476] veth0_macvtap: entered promiscuous mode
[  350.236666][T16476] veth1_macvtap: entered promiscuous mode
[  350.258494][T16476] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.270097][T16698] netlink: 'syz.2.3001': attribute type 39 has an invalid length.
[  350.283114][T16476] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.306525][   T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.317983][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.328445][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.340793][   T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.417562][ T5871] Bluetooth: hci0: command tx timeout
[  350.464562][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.484044][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.522243][T14353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.543498][T14353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.588006][T16709] delete_channel: no stack
[  350.615308][T16712] netlink: 'syz.2.3007': attribute type 1 has an invalid length.
[  350.644659][T16712] 8021q: adding VLAN 0 to HW filter on device bond8
[  350.705453][T16722] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  350.713899][T16712] 8021q: adding VLAN 0 to HW filter on device bond8
[  350.731332][T16712] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  350.754298][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3008'.
[  350.756467][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'.
[  350.773360][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'.
[  350.783792][T16727] netlink: 'syz.1.3010': attribute type 5 has an invalid length.
[  350.792067][T16727] netlink: 'syz.1.3010': attribute type 6 has an invalid length.
[  350.794822][T16712] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  350.852052][T16728] veth21: entered promiscuous mode
[  350.876107][T16728] bond8: (slave veth21): Enslaving as an active interface with a down link
[  350.898973][T16728] erspan0: entered allmulticast mode
[  350.915413][T16728] bond8: (slave erspan0): making interface the new active one
[  350.926561][T16728] bond8: (slave erspan0): Enslaving as an active interface with an up link
[  350.936137][T16729] lo speed is unknown, defaulting to 1000
[  351.142762][ T5871] Bluetooth: hci5: command 0x041b tx timeout
[  351.222766][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  352.252835][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  352.493270][ T5871] Bluetooth: hci0: command tx timeout
[  353.292867][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  353.773259][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.332853][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  355.372833][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  356.412846][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  357.452836][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  358.492825][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  359.533200][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  360.572834][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  361.612829][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  362.652816][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  363.692834][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  364.732841][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  365.772840][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  366.812824][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  367.852980][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  368.892833][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  369.932830][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  370.972820][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  372.012905][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  373.052843][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  373.612791][    C0] ==================================================================
[  373.621090][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  373.629009][    C0] Read of size 2 at addr ffff888058d62c2a by task swapper/0/0
[  373.636467][    C0] 
[  373.638818][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  373.638837][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  373.638850][    C0] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  373.638858][    C0]  <IRQ>
[  373.638866][    C0]  dump_stack_lvl+0x189/0x250
[  373.638888][    C0]  ? rcu_is_watching+0x15/0xb0
[  373.638905][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.638922][    C0]  ? rcu_is_watching+0x15/0xb0
[  373.638936][    C0]  ? lock_release+0x4b/0x3e0
[  373.638962][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  373.638983][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  373.639003][    C0]  print_report+0xca/0x240
[  373.639018][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  373.639039][    C0]  kasan_report+0x118/0x150
[  373.639062][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  373.639087][    C0]  rose_timer_expiry+0x471/0x4b0
[  373.639110][    C0]  call_timer_fn+0x17e/0x5f0
[  373.639133][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  373.639154][    C0]  ? call_timer_fn+0xbe/0x5f0
[  373.639175][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  373.639202][    C0]  ? rcu_is_watching+0x15/0xb0
[  373.639216][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  373.639238][    C0]  __run_timer_base+0x61a/0x860
[  373.639259][    C0]  ? ktime_get+0x3e/0x1f0
[  373.639280][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  373.639300][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  373.639325][    C0]  run_timer_softirq+0xb7/0x180
[  373.639346][    C0]  handle_softirqs+0x283/0x870
[  373.639363][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  373.639380][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  373.639403][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  373.639424][    C0]  __irq_exit_rcu+0xca/0x1f0
[  373.639438][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  373.639457][    C0]  irq_exit_rcu+0x9/0x30
[  373.639470][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  373.639493][    C0]  </IRQ>
[  373.639498][    C0]  <TASK>
[  373.639504][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  373.639524][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  373.639548][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  373.639561][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  373.639575][    C0] RAX: 33db639e11368400 RBX: ffffffff819683b8 RCX: 33db639e11368400
[  373.639587][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  373.639598][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  373.639610][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38330
[  373.639621][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  373.639633][    C0]  ? do_idle+0x1e8/0x510
[  373.639649][    C0]  ? do_idle+0x1e8/0x510
[  373.639664][    C0]  default_idle+0x13/0x20
[  373.639678][    C0]  default_idle_call+0x74/0xb0
[  373.639693][    C0]  do_idle+0x1e8/0x510
[  373.639709][    C0]  ? __pfx_do_idle+0x10/0x10
[  373.639730][    C0]  cpu_startup_entry+0x44/0x60
[  373.639745][    C0]  rest_init+0x2de/0x300
[  373.639763][    C0]  start_kernel+0x3a9/0x410
[  373.639784][    C0]  x86_64_start_reservations+0x24/0x30
[  373.639809][    C0]  x86_64_start_kernel+0x143/0x1c0
[  373.639832][    C0]  common_startup_64+0x13e/0x147
[  373.639861][    C0]  </TASK>
[  373.639866][    C0] 
[  373.964736][    C0] Allocated by task 14350:
[  373.969160][    C0]  kasan_save_track+0x3e/0x80
[  373.973902][    C0]  __kasan_kmalloc+0x93/0xb0
[  373.978509][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  373.983988][    C0]  batadv_forw_packet_alloc+0x1e9/0x390
[  373.989562][    C0]  batadv_iv_ogm_queue_add+0x85f/0xd30
[  373.995040][    C0]  batadv_iv_ogm_schedule+0x866/0xf00
[  374.000703][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0
[  374.007922][    C0]  process_scheduled_works+0xae1/0x17b0
[  374.013573][    C0]  worker_thread+0x8a0/0xda0
[  374.018198][    C0]  kthread+0x70e/0x8a0
[  374.022303][    C0]  ret_from_fork+0x3f9/0x770
[  374.027028][    C0]  ret_from_fork_asm+0x1a/0x30
[  374.031811][    C0] 
[  374.034153][    C0] Freed by task 14352:
[  374.038220][    C0]  kasan_save_track+0x3e/0x80
[  374.042905][    C0]  kasan_save_free_info+0x46/0x50
[  374.048430][    C0]  __kasan_slab_free+0x5b/0x80
[  374.053212][    C0]  kfree+0x18e/0x440
[  374.057247][    C0]  process_scheduled_works+0xae1/0x17b0
[  374.062814][    C0]  worker_thread+0x8a0/0xda0
[  374.067431][    C0]  kthread+0x70e/0x8a0
[  374.071523][    C0]  ret_from_fork+0x3f9/0x770
[  374.076645][    C0]  ret_from_fork_asm+0x1a/0x30
[  374.081531][    C0] 
[  374.083914][    C0] Last potentially related work creation:
[  374.089713][    C0]  kasan_save_stack+0x3e/0x60
[  374.094398][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  374.099728][    C0]  insert_work+0x3d/0x330
[  374.104184][    C0]  __queue_work+0xbaf/0xfb0
[  374.108689][    C0]  call_timer_fn+0x17e/0x5f0
[  374.113342][    C0]  __run_timer_base+0x646/0x860
[  374.118582][    C0]  run_timer_softirq+0xb7/0x180
[  374.123446][    C0]  handle_softirqs+0x283/0x870
[  374.128220][    C0]  __irq_exit_rcu+0xca/0x1f0
[  374.132851][    C0]  irq_exit_rcu+0x9/0x30
[  374.137101][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  374.142934][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  374.148924][    C0] 
[  374.151251][    C0] The buggy address belongs to the object at ffff888058d62c00
[  374.151251][    C0]  which belongs to the cache kmalloc-512 of size 512
[  374.165420][    C0] The buggy address is located 42 bytes inside of
[  374.165420][    C0]  freed 512-byte region [ffff888058d62c00, ffff888058d62e00)
[  374.179541][    C0] 
[  374.181886][    C0] The buggy address belongs to the physical page:
[  374.188396][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58d60
[  374.197184][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  374.205704][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  374.213276][    C0] page_type: f5(slab)
[  374.217383][    C0] raw: 00fff00000000040 ffff88801a441c80 ffffea0000ccec00 dead000000000002
[  374.225965][    C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  374.234643][    C0] head: 00fff00000000040 ffff88801a441c80 ffffea0000ccec00 dead000000000002
[  374.243329][    C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  374.252009][    C0] head: 00fff00000000002 ffffea0001635801 00000000ffffffff 00000000ffffffff
[  374.260691][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  374.269364][    C0] page dumped because: kasan: bad access detected
[  374.275784][    C0] page_owner tracks the page as allocated
[  374.281499][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6336, tgid 6335 (syz.0.94), ts 84426528994, free_ts 78803471236
[  374.301153][    C0]  post_alloc_hook+0x240/0x2a0
[  374.306118][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  374.311673][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  374.317484][    C0]  alloc_pages_mpol+0x232/0x4a0
[  374.322366][    C0]  allocate_slab+0x8a/0x370
[  374.326878][    C0]  ___slab_alloc+0xbeb/0x1410
[  374.331573][    C0]  __kmalloc_noprof+0x305/0x4f0
[  374.336448][    C0]  hash_ip4_add+0x18ba/0x1ec0
[  374.341132][    C0]  hash_ip4_uadt+0x640/0x850
[  374.345759][    C0]  call_ad+0x380/0xb00
[  374.349877][    C0]  ip_set_ad+0x791/0x930
[  374.354181][    C0]  nfnetlink_rcv_msg+0xb4a/0x1130
[  374.359240][    C0]  netlink_rcv_skb+0x205/0x470
[  374.364056][    C0]  nfnetlink_rcv+0x26a/0x2520
[  374.368773][    C0]  netlink_unicast+0x82c/0x9e0
[  374.373561][    C0]  netlink_sendmsg+0x805/0xb30
[  374.378347][    C0] page last free pid 5942 tgid 5942 stack trace:
[  374.384681][    C0]  __free_frozen_pages+0xbc4/0xd30
[  374.389815][    C0]  __put_partials+0x156/0x1a0
[  374.394489][    C0]  put_cpu_partial+0x17c/0x250
[  374.399271][    C0]  __slab_free+0x2d5/0x3c0
[  374.403792][    C0]  qlist_free_all+0x97/0x140
[  374.408410][    C0]  kasan_quarantine_reduce+0x148/0x160
[  374.413893][    C0]  __kasan_slab_alloc+0x22/0x80
[  374.418809][    C0]  __kmalloc_cache_noprof+0x1be/0x3d0
[  374.424282][    C0]  nsim_fib_event_work+0x1174/0x3180
[  374.429577][    C0]  process_scheduled_works+0xae1/0x17b0
[  374.435224][    C0]  worker_thread+0x8a0/0xda0
[  374.439839][    C0]  kthread+0x70e/0x8a0
[  374.443926][    C0]  ret_from_fork+0x3f9/0x770
[  374.448533][    C0]  ret_from_fork_asm+0x1a/0x30
[  374.453424][    C0] 
[  374.455766][    C0] Memory state around the buggy address:
[  374.461403][    C0]  ffff888058d62b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  374.469733][    C0]  ffff888058d62b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  374.478148][    C0] >ffff888058d62c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.486295][    C0]                                   ^
[  374.491669][    C0]  ffff888058d62c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.499741][    C0]  ffff888058d62d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.507899][    C0] ==================================================================
[  374.516225][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  374.523517][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  374.532983][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  374.543064][    C0] Call Trace:
[  374.546445][    C0]  <IRQ>
[  374.549300][    C0]  dump_stack_lvl+0x99/0x250
[  374.553908][    C0]  ? __asan_memcpy+0x40/0x70
[  374.558549][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.563859][    C0]  ? __pfx__printk+0x10/0x10
[  374.568481][    C0]  vpanic+0x281/0x750
[  374.572589][    C0]  ? __pfx_vpanic+0x10/0x10
[  374.577117][    C0]  ? ct_nmi_exit+0x14b/0x1d0
[  374.581850][    C0]  panic+0xb9/0xc0
[  374.585649][    C0]  ? __pfx_panic+0x10/0x10
[  374.590188][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  374.596212][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  374.602157][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  374.607389][    C0]  check_panic_on_warn+0x89/0xb0
[  374.612482][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  374.617796][    C0]  end_report+0x78/0x160
[  374.622079][    C0]  kasan_report+0x129/0x150
[  374.626705][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  374.631860][    C0]  rose_timer_expiry+0x471/0x4b0
[  374.636829][    C0]  call_timer_fn+0x17e/0x5f0
[  374.641528][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  374.647004][    C0]  ? call_timer_fn+0xbe/0x5f0
[  374.651703][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  374.656851][    C0]  ? rcu_is_watching+0x15/0xb0
[  374.661729][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  374.667321][    C0]  __run_timer_base+0x61a/0x860
[  374.672197][    C0]  ? ktime_get+0x3e/0x1f0
[  374.676552][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  374.682032][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  374.688322][    C0]  run_timer_softirq+0xb7/0x180
[  374.693205][    C0]  handle_softirqs+0x283/0x870
[  374.698246][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  374.703041][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  374.708389][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  374.713632][    C0]  __irq_exit_rcu+0xca/0x1f0
[  374.718231][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  374.723441][    C0]  irq_exit_rcu+0x9/0x30
[  374.727697][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  374.733349][    C0]  </IRQ>
[  374.736302][    C0]  <TASK>
[  374.739337][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  374.745330][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  374.751073][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  374.770685][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  374.776768][    C0] RAX: 33db639e11368400 RBX: ffffffff819683b8 RCX: 33db639e11368400
[  374.784783][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  374.792853][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  374.800866][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38330
[  374.808842][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  374.816822][    C0]  ? do_idle+0x1e8/0x510
[  374.821080][    C0]  ? do_idle+0x1e8/0x510
[  374.825328][    C0]  default_idle+0x13/0x20
[  374.829662][    C0]  default_idle_call+0x74/0xb0
[  374.834427][    C0]  do_idle+0x1e8/0x510
[  374.838504][    C0]  ? __pfx_do_idle+0x10/0x10
[  374.843125][    C0]  cpu_startup_entry+0x44/0x60
[  374.847896][    C0]  rest_init+0x2de/0x300
[  374.852307][    C0]  start_kernel+0x3a9/0x410
[  374.856825][    C0]  x86_64_start_reservations+0x24/0x30
[  374.862403][    C0]  x86_64_start_kernel+0x143/0x1c0
[  374.867556][    C0]  common_startup_64+0x13e/0x147
[  374.872866][    C0]  </TASK>
[  374.876168][    C0] Kernel Offset: disabled
[  374.880506][    C0] Rebooting in 86400 seconds..