last executing test programs:

4.123788995s ago: executing program 4 (id=2029):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', <r1=>0x0, 0x7800, 0x40, 0x101, 0x64a, {{0x2a, 0x4, 0x1, 0x5, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @loopback, {[@ssrr={0x89, 0x23, 0x46, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @private=0xa010100, @rand_addr=0x640100ff, @remote, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0xf, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7fff}, {@multicast2, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x7a, 0x1, 0xf, [{@rand_addr=0x64010100, 0x800}, {@broadcast, 0x6355}]}, @noop, @rr={0x7, 0x13, 0xe3, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102, @remote]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0x5b, [@local]}, @lsrr={0x83, 0x1f, 0x62, [@multicast1, @remote, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000e40)={'erspan0\x00', r1, 0x8, 0x20, 0x8179, 0x1, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket(0x840000000002, 0x3, 0xff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r3)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x2a)
connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x7, @multicast2}}, 0x1e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001180)=ANY=[@ANYBLOB="b6d40000", @ANYRES16=r2, @ANYBLOB="0100fa00ffff89efffff0700000008004308", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4840)
socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}}, 0x4000000)

3.426528472s ago: executing program 3 (id=2038):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x99, &(0x7f00000002c0)="b7f24a856c1525deb31d47442de61774f97f1cb1d5d10c610f41afee169a27ffb0feb04ac86c3cc7e7e4abd9622bab9144763f487e3576b6d6966d528ef28014a04ac6086104d7884f6ff58473b8409c9009276a89665b776155906503b15705e04e10e366104948b89b62fc7bfe204f92f0bdb2ee3ade65201ad4a6b2c652e64416cf3ada94bf498d291a6803f3cf69b0adf5ce31d8b75cfb"})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r3, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
unshare(0x2020600)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
pread64(r9, &(0x7f00000000c0)=""/244, 0xf4, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000150001000000800000030000e000000200000000000000000000000000000000000000000000ffff0a01010100000007000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000fcffffffffffff0c05000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000"], 0xb8}}, 0x90)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x1410, 0x40d, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r10, 0x0, 0x21, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

3.329372542s ago: executing program 2 (id=2040):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd700001dcdf2505000000080002000305"], 0x24}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)

3.154746635s ago: executing program 2 (id=2042):
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000001c0)="9fd122ec84cbca48fdc31bf04768691bd15d9f46abd252f9340f99225414387a1913b411b63b1150f249b73712c713e563019102553393ffd9444eb62be8d63efbd7d2dd4ca353116e75377e345dae6a2b0c551f6d5fa42954f8d4cfe5d317dd5f99d11bdb24a5d17773590d2506ab74f5e7123330c050f2413fdcf0764b3ee7b3003055f2c7aa3c", 0x88}, {&(0x7f0000000280)="1141b51dcbd68f2e4a2cba4725ab2a2fce79b77c5f78b2bd3d86f9303865ae4cae8332fefcbea3d285324ee2d33f1a4cdbcd934d320dd87643400162f3f5397626e28959fc24805ee37f81420349eea75913b636df9fbba410cb", 0x5a}, {&(0x7f0000000700)="f504be117f1434887052938628983bdda29224121eeb0380c26acd717f29dcb3fe93964a2d3f8698d2c521e5e8166984b52ed71eec7eb874afb7252bcd1ae7d08cc36d6b195e2ad4c61396049a3d8292e66748d9c3d48a823feea18b1dc1bef49ff2d09c3169fc04b84bcc06c8cb4e4a8f4126fd8ecf01e7e93ce78002677aceab5665b9b5868b5d3e520368de17659990bfbe01c48ef4585412c8dce93f8b63bb5215a08125c41a90e379d05e46b6e33b1c3557962687dc2b43709bb04d27e9668071c553e777b22d2786088a88fed4604499e9552ff3a6f1c5d7af77fe3dbb", 0xe0}, {&(0x7f0000000300)="0f103645f36fcba90a7560f47a9a9b6f92d5f8682b35b99aef007128d3368ef15520f6b010cccb76979638e3", 0x2c}, {&(0x7f0000000800)="586a911f66963abaf7ca7443328523229c4b02ee55c69d43d5db009c0d725541b88c98f076c6314e365709dcb7524b46dedf509694d1c2207ffea61cfa97a5a1af35576bf4aefa31611c34cd9f4a84e47895f776070ab8e988e1dcaf3c085beb6d8e0942b08b9ec53ad765709ea37aa117a283129e254e37734c1fb1e172694a1db6178eb372e5024122651bc47995fcfc9c61d1a4f865da4b5f770a98180180cb8e7ae487ef87a224571b85c90f3412b72ff7a2b84fe9421323a6340f6d2ce6bb3bfaaae3ed787849", 0xc9}, {0x0}, {&(0x7f0000000a00)="f00dc2e2b817e1de9fd0ecaa8df2518a7426e16c469838fce656578faf62f6ae09ad471091aeb45c6296595329df619cc91a305385845d57099b47709ef070899f4c43d6ced0ee812cffb414d131fe546f2bb053834f8450499193858f9cd28d14689deeeffe58159ae7936b459452298c8e7127fcddedda70d67f3f39b2699145166f30323dbd770cc4aa22f84c91e1bdb4cd55ad268bbbc8d079c59a7b12355d83028f4803235ef7422bed3fe12c5d82e7f9efd26b6a807d1851131301a24e98130b15c3e59d", 0xc7}, {&(0x7f0000000340)="a7dee580136debbba0467066ab048be3d11bf87717431bf08cb800b37f8b9d", 0x1f}], 0x8, 0x0, 0x0, 0x20040000}, 0x40000)
r0 = socket$netlink(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000bc0)=@get={0x1, &(0x7f0000000b40)=""/73, 0x8})
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (fail_nth: 6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)

3.111546204s ago: executing program 4 (id=2044):
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003c00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20}, 0x94)

2.788949935s ago: executing program 2 (id=2046):
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00'], 0x40, 0x4040800}}], 0x1, 0x4000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x7c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYRESDEC, @ANYRES8], 0x48)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c00046252f59a0002000000ac14140f000000ffffffff000000000000000099a801007564703a73797a320000000000000000000000000000000000b38b2eac758dbd20b74b10da3cf81c"], 0x54}}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0xffffffffffffff80, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x13, 0x0, 0x0, @u64=0x7ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x20000000000000be, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0xffff, 0x94, &(0x7f00000004c0)=""/160, 0x0, 0x44, '\x00', 0x0, 0x25, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="00000000000000099454be92118749f473cfe1480fc98fb70a1f6419fbd777dcaddff2c77b2d320ec0b185e36f3218df236edd", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800)

2.706994594s ago: executing program 1 (id=2047):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c)

2.576501737s ago: executing program 1 (id=2048):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r4 = socket$alg(0x26, 0x5, 0x0)
socketpair(0xa, 0x4, 0x9, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000300), 0x4)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10040001}, 0x801)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
sendfile(r8, r7, 0x0, 0x10000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000030000000000e00000000003850000001bb4a2813a01c53074ae6f8084"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x50)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x3, {0x9, 0x2, 0x400, 0xa2c, 0x10}})
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x1, @empty, 0x101}, 0x1c)

2.285090575s ago: executing program 2 (id=2049):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r3, r3, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7}, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0x65fc}]}}]}]}, 0x34}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x8000000000000001)

2.134855165s ago: executing program 4 (id=2050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000840)=""/206, 0xce}, {&(0x7f0000002f00)=""/4083, 0xff3}], 0x3, 0x0, 0xa1ff}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

2.091167051s ago: executing program 0 (id=2051):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000c00))
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x13, 0x0, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
unshare(0x20000400)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x3, 0x84)
socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@empty, 0x0, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x0, 0x15000000000000, 0x0, 0x2, 0x8001, 0xfffffffffffffffd, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x89, 0x1, 0x1}, {{@in6=@empty, 0x4da, 0x3c}, 0xa, @in=@multicast2, 0xfffffffe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000740)="ea40fb486d881eb9ec6316f2dcc192a78556d73fe204e30d766cd679940088405d85e4d76b541899de6f3bc6c33639c6fedabb4493", 0x35}, {&(0x7f00000002c0)="2362c46679bd7492095bd8e223d5044d43e1e72caaf593cfb61a882fe57ea6662b61273a5e4e7d441a0d62792a36feb2", 0x30}], 0x4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32], 0x48)
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000006c0)={0x3, 0x3})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)

1.690066495s ago: executing program 3 (id=2052):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd700001dcdf2505000000080002000305"], 0x24}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)

1.474615524s ago: executing program 4 (id=2053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280), 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast2, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r6}, {0x2, 0x6, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x4000000005c, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0xffffffde, 0x0, 0x67a01bcf906970c1, 0x81, 0x7}}, 0xe8)
sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4)
r7 = socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = accept$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast1, 0xffffffff, 0x6d2a, 0x4, 0x0, 0x0, 0x83150281, r11})
r12 = accept4$vsock_stream(r8, &(0x7f0000000240)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="8072bd115d290010a359c99c8f89055cacafa98de5fd871909e4956ce65cad0aeb34a1cba496b631f02f2cd002ccb08008ad1b1540d7c73c305ab1603cc4e64c484b3abb7f0cc5fd9d3c4a244b9f5ef5886e1d6875511ac021329d273b9c5c0b12da9e4f817990845468788d9e3d80da23282b01b85042f7a74c19201d9c1e0f69acf9a5e768193a9d98a7a793003de495ee25580a0928ce382a755040efb643220e9a2e984d22040ac6811768f37f9be22a81f7171c780f89d230beb86fd02f824403c0ad08d3c10cc0c83c09a85fcd62bda9c9ab", @ANYRES16=0x0, @ANYBLOB="01022cbd7000fedbdf25280000000a0001007770616e3000000008002c000100000005002b000200000005002e0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000600), r13)
sendmsg$NLBL_CIPSOV4_C_ADD(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x38, r14, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffd}]}]}]}, 0x38}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r14, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
clock_gettime(0x0, &(0x7f00000002c0)={<r15=>0x0, <r16=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r12, 0x28, 0x6, &(0x7f0000000340)={r15, r16/1000+10000}, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="30010000", @ANYRES16=r3, @ANYBLOB="010028bd700000dcdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff070000560000001400040073797a6b616c6c6572300000000000000800050007000000"], 0x130}, 0x1, 0x0, 0x0, 0x83}, 0x10)

1.473984616s ago: executing program 3 (id=2054):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', <r1=>0x0, 0x7800, 0x40, 0x101, 0x64a, {{0x2a, 0x4, 0x1, 0x5, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @loopback, {[@ssrr={0x89, 0x23, 0x46, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @private=0xa010100, @rand_addr=0x640100ff, @remote, @multicast2]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0xf, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x7fff}, {@multicast2, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x7a, 0x1, 0xf, [{@rand_addr=0x64010100, 0x800}, {@broadcast, 0x6355}]}, @noop, @rr={0x7, 0x13, 0xe3, [@remote, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010102, @remote]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0x5b, [@local]}, @lsrr={0x83, 0x1f, 0x62, [@multicast1, @remote, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000e40)={'erspan0\x00', r1, 0x8, 0x20, 0x8179, 0x1, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r3)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x2a)
connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x7, @multicast2}}, 0x1e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f0061109a0000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001180)=ANY=[@ANYBLOB="b6d40000", @ANYRES16=r2, @ANYBLOB="0100fa00ffff89efffff0700000008004308", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4840)
socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}}, 0x4000000)

1.469194235s ago: executing program 1 (id=2055):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001780)={<r1=>0x0, 0xd0b7}, &(0x7f00000017c0)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000005cc0)=[{&(0x7f0000000680)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000b00)="bf8fed62dcee3622cd9a0ba8db83a00a66a477b6368a78e8ccb171bc1585b44dc201ad64cd64ed858a529e7ab03d0859bd390a6e928a88123c28b5d1cd6f8951676cffa63515392837a2949ec84942939929a0375457cf2510af7a07d6ab8d0d9f98eebb04435f16951299fbc1185c69009001f330a9238929965012f8a44540e36515a052a3e4992b4880b596c061bcd2971bc11ad5f868307535560c9d196bfd1d07d601e79e950ae50f0d96abb4ce84de2f3dc68d3bb986ee704476e8707d94497f64cd9934fdd68777287e9ccd6afcf21d7a07d5467a7f66b64a593478b280e40768b270f932e04df91c5cb8817478cb27b620", 0xf5}, {&(0x7f0000000c00)="8be9bfba7d03cad8cffffebf69102b975258d8cc2554ebc392f5237414e75d8bd1bf04af4d0d8fb18ae1defdc7d4653ec8832e2f510b0cbb57784797bb47e91f4fdfa2d3985fcbe77b526935b7ebd1b4f60ba1f9cf691f2e23494d918d871a8b4f8b4dd0", 0x64}, {&(0x7f0000000c80)="9b90025b053ccc88c382e7f2decd122f02f6a64279bd37143f9830b53475875a129b3f287e4441041394fe588acfc493520dafbe8ea82a04dcfa92bb0924412e49b6f603220a1b2d2ceb0e561ad90a5e43c2941f7d52900ef48027d9d02f8bd9447fc06eedc71ab76b4f2f1ef1572227b293999573b6d8d5826c33108f1a16c00a079bee364a09caa1fbccdd4b3d857844b2bda39ad33d9e010b0f680d4149f49284b1d5942504d866af6a24910f06ac2579372feb8d3fbf61f10c88c669881748597e71b79c0d96d4c2bd2513b85c8e4448e9ed450cf4eb14d2ff33b959557f8a49b2d7de596a69d3ea1531020aa85cfc73f565", 0xf4}, {&(0x7f0000000d80)="a6b9b18e6aae960f5edfbe11ab2a7fc3a9e7265a332953ec7a5a4007b9918fb4b55575f4a40863815ff103a30a0fddabbd9e9137ab65727ee0174ba5adba08cc53413b4ad026f95816fbbe0d56f3a4e1523c7e8f30835366d4c873572d577ada413ddc65152cc66718fddbb15024c0b2a7a40619239be98cf5d9d481b39f96eba3e0029f4116959c630a17a939e7169a7100caede9a74f7cd393a2235c080c4372fb173022eae856", 0xa8}, {&(0x7f0000000e40)="b993a58172d3a8e61a1cfeb8f5177970b3ee9c2260be5e541fae9a797f84416ef99bfd85c23d95e86834066237f2143a76f8788de388163a79087f47300f0f294f52a0b50527cc62cc1b8f71dbcaf7557168f8812ccef4bda9d0af06d4812cfc72", 0x61}, {&(0x7f0000000ec0)="bc3ff9128a5a8f0382d3f1d4e186c011dc4e7aa72b0a8037e39e043c1f048066f5f27ed8a424f613703db7694b3bc657c6ca0c7d340a43c53d665b6ab5db65a6da814a4ddc449f8f198639450c9ee37abe6da1c7cc5f7cf3480265cbce5c6924039dc425cf44e23ff5690fa41e2a0e5bd4f140d5bc4e9822439e9018fdfff8e09bfe38df5b2910db29ee71bad638e2121b776c9286f70de87ec68a89a5466724396f5d096e4bfcf54699b3098036e635906653", 0xb3}, {&(0x7f0000000f80)="4b8992399739dfa1b6b6d9cc0d8e731006bda03217da046c52d55a44aac8f9f74f1d2342faaf28ad4381588584e218c44504bf74c1cccce926dd540632dbcad95dd8656e4ea92a068efc59937d5fe13bdfb5b3fafa632c5e430e731e31059a50c4181bca2c6f469922cea8b11138cc3ec2dcc527e6ee296411745209c57d0b5d7e4b93fa866941299430c19ab421af3715ec223ada51cf596b0d4c9433d8b78bdbafedf8454bf1361ea623a594fcfbf6b2696ea2436c8460eb1ed95813b8c9d7a8649fe66db3af2e07b9197383778021c117035bea36c6b808c533dc3983af812369f124ad7e10c9dcc465", 0xeb}], 0x7, &(0x7f0000001100)=[@dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x20, 0x8010}, {&(0x7f0000001140)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001180)="0e18ec7e38a15ab9cfadd08aa6a221ab4ac114ec83ed475b0f97b2a047cbf1b6e51e0c31b986f3549cb40503ac9cf535d67a60726b98b0fded4df7c89252efdedf0298c628eebab8e79d0e7cb55f39f468f4fe29e3054c08079939a1b3fb0a2f05a368bf260656bfec8a40", 0x6b}, {&(0x7f0000001200)="ebd5513540c91a169c1e6b91989bce59158a50f7d239abc1ffb6585ef25e3eea6e4e364c069d0d284d46a6bd33478f5e82dfcd27d2b148fbf59e4cbf077b2d960772df627104c7e0115731b8ddbfea18a15650b8ee7585ce8325f0b782c3e7fe7d5fc5a0112c5ee2467e2916c84e103def2b69ba1df3449a32071fc35a40fe92772212083d2021c3df299c1b0701da07ce1ce9938f6700cb8a1c0a29bc8c7e187610840b18e55fd3a093992ad6e165cf91926520f9f7fe9e65b3ee958fc089c6917b408b647355f3f6515d0a0002f8f336a83f56b147a7fcfe04cdad384352248c8717bea34e7d02bbc8475bae143a559151cf", 0xf3}, {&(0x7f0000001300)="fe3e4af6d1009188bfd63e05df2e50ab417e8bdaa1054e86504567aca11e1f66a76e1dcffa366af67333c864347afd603505557d15399ad114f1e469b162aa4aac80477e4b410df760aa29af4f13c0f47f", 0x51}], 0x3, &(0x7f00000013c0)=[@authinfo={0x18, 0x84, 0x6, {0xc}}], 0x18, 0x8000}, {&(0x7f0000001400)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001440)="83a647693847a0ef97b0093957b194fa7d3aab767956e1a2a4fdfe3535765af13c9a6840c7031ab90da96c35ba8f9769293efb1cf2e265f2b06579ee3bcf98c29621193f0e948a4b7da3827360464bc421aa93b0d91748abfa4a56f43f1176ead6bb63f65baeb19fd934470dca5df68825b5bb6a42147ca512660637ab0d99fba8df84316b72c0080d1bd1909b9f043ddbf0d8bb8a7517e555b75b01db13e359e33e4699598e83a1d954b08d2323eb5f093235d2278fa708fb23457b3d2702908bfe586b0a1cf2fefd496212a766cc41264ff0be3c1a24b64f304ee54d5db08c8e4f", 0xe2}, {&(0x7f0000001540)="1885e2c1f36bda2e52b7d2e6fad6af9992186584bd44c70f23a2d3e199163856686dd8e4b52009631f92ca8d45a6fdc1973afe2d811e576fa4b83207a687f11d3789293102", 0x45}, {&(0x7f00000015c0)="0a96e6a3b1df151d009c30094f524daabf24ddc907cf3ff4bd0e4865a53f30c5164e327c21e1390158772204f111daf0e096bc373a815efa2f6a2f70ee6a161f09f29d6bac6920d29a16aae994e4075e1c7e80193522213f9c00fc736aa13b942f4d872591e114a7b8e99daf906c55b44cf84a2449ed67fc0cda5782a3f988ef1d432b9fe62c", 0x86}, {&(0x7f0000001680)="5fb5fd298630328faa01ee59eeba94d8493887fd5d38b855355021d5e929660a1bbf280bb80598c939f0a5c29fb5babd018acc9aef5a4fa90ea2973170b95da363136586b0519ee09eb6c924f1692d42087a4fb7e5328cd3634b187d843dde1df300929a2312fb310b131e658709d24f02df88ed063d5e448189dc2b2f2c161c3d8c2ae497dea685", 0x88}], 0x4, &(0x7f0000001800)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xbe}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x9, 0x8002, 0x4, 0x6, 0xc, 0x4, 0x490e, r1}}], 0x48, 0x40d0}, {&(0x7f0000001880)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="72adb189c437ad1470676c9badd8a110072605fc53908028bcb869d0f9c0625022b171892ea3e50b97e4952d1c7d1ef04ba69eb29813a140d166f37edef0826252245594a5bdad954838ae3ff9a6dcc2fc4462186bbece07d3bac202258ad0acae2a24eb09204342f051d73e37b1803c6104b3e4b95edd52", 0x78}, {&(0x7f0000001940)="1ec2410674f4b65a81e4e9033862d97d29f60c099134a171c3e2f2c51b2c824a8d9562a5d04f64404e229b63865c8c9075c1cfe22f1d93251d4b0102", 0x3c}, {&(0x7f0000001980)="98a1f1e5c48714986fcb41c524a2959e3d3c78c8beb94de8b683f9546ccda4f8523286912e96ebc94764b0c84999c755e33e4b15122a12ebd3f381d78ddd8541395a64341c7e7c2177832e47155384268f1fb12c2c6224dccd8423dae196a9556fcab82b58bb452a474498548cf4925ef3feff464788e204c618411841959b04394a7914c7433a390d9abf736b23e4cbeee39c221b22487ef2041c0572aabfcf69e0cfa3a8ca1bebfff7f1b4f6550430f37a575adbf18298548af524df6b4e", 0xbf}, {&(0x7f0000001a40)="0870a125ff00b96da2bbe9a9ecc86b8bc8d0e39da66570b72547fc69be122b1b0a95c3d2b6250a9e06eb6d14d212b4d660f8adbd4dd4a21f6c159bf6207f9f8ba6cde20195a59cf86c4de08a6a3ffdf7e6726ea0b343c586e87e514e862d7de4c14db8981bed29d4677c6ab6c1c91f", 0x6f}], 0x4, 0x0, 0x0, 0xc000}, {&(0x7f0000001b00)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001b40)="a1ee57885c58f0a9f5ede9c8d7ebeb1a2f6e9a4cad043a95c1f7c8c836048bd585c0e72f879c301cdb1b850f52c4b61c0146cc76a2a70b93b9dead375121d42d26831bac71f40688d6abc057675cc338eb81a209279ce4732872939a8dcffa07b63bc91ae3122b6a16b971b4aff121e7528771ddb30d6e00ec3ab9abfda3", 0x7e}, {&(0x7f0000001bc0)="2edb307750e3d672ec2661eccc9db3528143fbba10e046497c4a3336c2fbf91574d2dd45a16d5224c2e757bf17193e765dd4f240cf9414d96131a55ce871c0ab3faf588c47f8bed63c270a4305488956574a9fb89ca65ebf39ece763570dc5a96fecb7b328035673f1cadeec398cb00bc62d9796380b57b440977210eeb4697bb49f", 0x82}], 0x2, 0x0, 0x0, 0x4040094}, {&(0x7f0000001cc0)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000001d00)="e14c42760d89b682151fba0fcfd92cb4d47fef62a36d491cfa1b0b1bccca90653df88b49dfcef0d74a3cf4c7aefe11f931b22d60ed0ac73fd389d346", 0x3c}, {&(0x7f0000001d40)="f68e4e2c0325549ff6bf6a9d7e2b901c60c33881f62342112df9d9386680a614667011006c003382428e026a0b639a6f70cc7b892e4f87b3699b26da3773c5ec66e085fec3e36b976c7cb5b4ff151ae67c9c150b4d22c86ab173aa16102f2b5329f771c30e6c343c2228f43cfcb5d01f1ba6349e67c647de4d0944bfb52b1141f48b80073226901c8a8dc8c7c4eaf16c5676c6541f61", 0x96}, {&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000001e00)="fccb8e4faddec7f9a5bdb9598926e4ff2916c710504cde5acdecd65e4307392707f77fd6cbb5dfc7cd2ab5c66c180a65c5893655df84c513795aad8354f26e01a6f79b25bc85cfcef2ef1b443b0442e1a035a78ae118840e1be95ec885d1240e29145143ca5757c939e591e06f1e31b709dc4282", 0x74}, {&(0x7f0000001f00)="91e923441dd97ffff46b356d627b37c350f8c673b68236d87bb7cc13aa8ab341cba900e7194ee68abafae45cc73e0aa1cdbbc47e67b754e65e184eb1e19e7560657e34d677e532b0cbe7d49dd392ab03f30eb9878fb037b379cc42e4a0a195f32b", 0x61}, {&(0x7f0000004640)="937902479f8a53b458ea6e9b7a71a0f8f7dc16fb4b27cc82912b9aefd804596f74f922d714f77aa4d16909504df45a13249bbbd374054b6654fb5dd52ed479f62ff6ddc132463e84b01402b7cd9c1141217c69f7ad73d0f8d8b93438e65cc6f1e4c3bb29a3bc1ae7d1e62cf8dc169dc741a36e03580ade7b98f69413f39de0072c2152aa6629da555d6d5dc48836589be1256891be06dbda4a178257a63133bd330a7d6013", 0xa5}, {&(0x7f0000004700)="a4cbe583baf8992af5bbe5cc1afc3d135297df67065d6880f032719b3587c1b04c5a6b69f1b209ef97e4d5abace31ef0d619303a2d999f85ba81a28ccb47abc76adafeeac1ef70e14c7250040131fc74e60f2152bf4e7283882e567047638bbab4f21c116812f8cd8c8f4490974c681baefda728f4049884f721f2dd0b9b74abdc5e18714e1b0c93977cf0a1aee0ac596c9f93bf17b90d6478ea", 0x9a}, {&(0x7f0000001f80)="538a1079cd560a5883c6e7f8d5ee78e7eecb0e52a2031dfc09a15322c2b110828e8b5507f4a29301", 0x28}], 0x8, 0x0, 0x0, 0x4001}, {&(0x7f0000001fc0)=@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000005940)=[{&(0x7f0000004840)}, {&(0x7f0000004900)="b09d9ebf6a372ab20fc18199f5285a61fa1c8e", 0x13}, {&(0x7f0000004940)="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", 0x1000}], 0x3, &(0x7f0000005980)=[@init={0x18, 0x84, 0x0, {0x4, 0x7}}, @init={0x18, 0x84, 0x0, {0xfffb, 0x3d5, 0x2b97, 0xd}}], 0x30, 0x20000000}, {&(0x7f00000059c0)=@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, 0x1c, &(0x7f0000005ac0)=[{&(0x7f0000005a00)="587ea5cc0a8b6627a3a52bbfa1bf97e44eeeecc3ed7ef0a3ac322d4b6b2f4b3ba750f2b3e4e105467c9f021ef6556a53cdb28439a32d7175a32fe9372ed78bf8f414ef723c46a5f28c942f56fb10b7f88b843b671a990dc71436967e4351033f87f374a2ece6f7405f00ed1c6e88f35d942c2bb2e0bc04f5d73f23e848a6dec7c67cb26e61ab154b5435d224cc5fa5616a3cafe05ad0a08a8674693e7d0712078ffd668e802b", 0xa6}], 0x1, &(0x7f0000005b00)=[@authinfo={0x18, 0x84, 0x6, {0x1}}], 0x18, 0x24008000}, {&(0x7f0000005b40)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000005c40)=[{&(0x7f0000005b80)}], 0x1, &(0x7f0000005c80), 0x0, 0x11}], 0x9, 0x4000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010400000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close(0x3)

1.317898506s ago: executing program 0 (id=2056):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket(0x400000000010, 0x3, 0x0)
close(0x3)
r3 = socket(0x10, 0x803, 0x0)
write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xffff}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000d, 0x12, r2, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00'})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_sctp(0xa, 0xc6835f09d73912, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
bind(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e20, 0x8, @loopback, 0x3ff}}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

1.245194682s ago: executing program 1 (id=2057):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x24020400)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r1, 0xba, 0x8, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x1411, 0x7, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044085}, 0x804)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000061400022dbd01000100000008000100000000000800000002000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20008880)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
getsockname$qrtr(r2, 0x0, &(0x7f0000000100))
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bind$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x2a, 0x4, 0x4000}, 0xc)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8)
recvmmsg(r4, &(0x7f0000001600), 0x0, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.197688855s ago: executing program 2 (id=2058):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304087b02040912c90e2fba6bad80f032148548fcee0e28fdc801"], 0x1c)

1.175981258s ago: executing program 4 (id=2059):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x1})
r1 = socket$kcm(0x2, 0x2, 0x2)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}, @loopback}}}], 0x20}, 0x8000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x7, 0x6, @mcast2}]}, 0x44}}, 0x0)
recvmmsg(r2, &(0x7f0000000680)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000004880)=""/170, 0xaa}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x4, &(0x7f0000001880)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000380)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000000540)=""/107, 0x6b}], 0x5, &(0x7f0000000640)=""/41, 0x29}, 0x3}], 0x2, 0x10000, &(0x7f0000000700)={0x77359400})
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x81}, 0x3c)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082900fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000740)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 'wlc\x00', 0xf, 0xfffffffb, 0x4e}, 0x2c)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000780)={0x8, [0x69], 0x1}, 0x10)

1.054760979s ago: executing program 0 (id=2060):
socket(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xa215}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x62040200)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x1c)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

1.038662453s ago: executing program 2 (id=2061):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
socket(0x2, 0x80805, 0x0)
recvmmsg(r4, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
shutdown(r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x8000000000, 0x8, 0x8000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)

468.700264ms ago: executing program 0 (id=2062):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

467.507463ms ago: executing program 3 (id=2063):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0xffef, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

286.332296ms ago: executing program 0 (id=2064):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd700001dcdf2505000000080002000305"], 0x24}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)

206.785136ms ago: executing program 1 (id=2065):
r0 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x98, 0x378, 0x2d8, 0x0, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @multicast2, r1}, 0xc)

182.548971ms ago: executing program 3 (id=2066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "04000000070200", "594dd07ac07a2d565de4c2f90ea82852", "2f18c382", "82e4aa82bf4b0072"}, 0x28)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"})
write$cgroup_subtree(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="f031a226a3fadb45705c89b39da395a7f704630b0edd02f65469224ff13c9199a7f815ed3bf9019e892a030e10382d34b39472807ae6c27edbb32ab4b7385aaf1b976bc1373c27c929439784", @ANYBLOB="aaae329266bd45a1099bd39bef5e54f19f78194f20b4d98102fa915591dd423d5fb6fd34e9fa789168529013"], 0x3261e)
r3 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.oom.group\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000180)=0x400, 0x12)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', <r5=>0x0, 0x47, 0x7, 0x3, 0x1, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@generic={0x44, 0xa, "a1a334b5e08a3faa"}, @rr={0x7, 0xf, 0x94, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x55, [@empty, @multicast2, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @rr={0x7, 0x7, 0xe2, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x8, [{@local, 0x81}]}, @end, @rr={0x7, 0xb, 0xc8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}]}}}}})
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa82c010}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x250, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x29, 0x1, 0xf, 0x1, {0x4e22, 0x4e24, [0x7f, 0x0, 0xffffffff, 0x7fffffff], [0x4, 0x524, 0x3, 0xd693], r5, [0x7, 0x6]}, 0x9, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "afbe90b5e64287a36d9a9b23a3dde4f4b776b5752cb3a8a2dcbb5eabeb9467fe9d1ddb25c60f8281b620e4a9855d59462546e3159bfddc4d899f8582971089930fd04a6376bc21e77e51e14a978b4f5f8061ff9e9ff7e1f556aebb71b2b08ba63919ab4de0d8"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "1b0dd4adca4ca5d9464cb10cf8df820cdc4f38ef57addbed761efcc7cfe188c5bb2a2f4efad71b0419f90bce468415a8ee7630304ad49412e08dcbe92b3f7ac61c3bfddf1707852df950cc99bccaeffe6cec9b1381b818201f82000a8acf6fa1ba639650f26903812efb608898b230dc408c394e3681f7c9a090cc84d413b639f96de698ca6d83347b540fdac095d6233d772b616dae5b6de1fe4e5fa363"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "7eaf1d6507bc42f6e9ccbac6056829650d48e51b4874700c9b54a5d84c75c3b0382d4f5923a1372fac3bd57c354c628a3e5b0c1823483919e8267dfa1c943048a20950c0725db881be0e026f99a78a62be592d9a27d7e3beceab71505bfa708b4d2c7cc5fead81a39d0618f8299e853bdb3565740b216b87d8f37900e831f8801f03c7373d9783fb2c4b3610af83f976cc47eefad24b57c7951a19da4aad96dc93811001b4d5cbd615467e1886dd208a5bb8aab9e3dadb0c43fcb16072e8f1d6bd511613e328249431e7a7332b6be4253d6308b481b5e4e7d7562f2da21397d23dccd1533409fa657d0cacaf45fd09"}]}, 0x250}, 0x1, 0x0, 0x0, 0x12}, 0x40000)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd})
setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)

163.966095ms ago: executing program 0 (id=2067):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40800}, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053", 0x114)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d40460000001400000011"], 0x6c}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb81", 0x3c}, {0x0}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000002900000043000000020000000000215e"], 0x18}}], 0x1, 0x40004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085000000b4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xb, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5c061}, 0x4008000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @broadcast}, &(0x7f00000000c0)=0xc)

38.283486ms ago: executing program 1 (id=2068):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000200)=ANY=[], 0x4)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x20000000000000, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000704090000000000f0ff07ec39ce302fd98b17fd272365f600000700000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17f, 0x17f, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0xa, 0x40000}, {0x10, 0x3}, {0x6, 0x7}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}, @enum64={0xb, 0xa, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x9, 0x80}, {0xb, 0x3, 0x2}, {0xf, 0x5, 0x3}, {0x3, 0x3, 0xd}, {0x9, 0x7fffffff, 0x1ff}, {0x7, 0x9, 0x80000000}, {0x7, 0x48, 0x7}, {0x8, 0x8000}, {0xe, 0x7, 0x26f3}, {0xe, 0x5, 0x4}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0xb, 0x2}, @datasec={0x7, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x3c, 0x7}, {0x2, 0x8, 0x5}, {0x2, 0x5, 0x6}, {0x5, 0x2, 0xffffa61b}], "b3f475"}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x67}, @union={0x8, 0x6, 0x0, 0x5, 0x1, 0xfffffffb, [{0x8, 0x1, 0x18}, {0x4, 0x4, 0x511b}, {0x2, 0x2, 0xa}, {0x2, 0x3, 0x7}, {0x7, 0x5, 0x4}, {0xf, 0x3, 0x5}]}, @float={0x6, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x61, 0x2e, 0x1e]}}, &(0x7f0000000b00)=""/257, 0x19e, 0x101, 0x0, 0x6}, 0x28)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@loopback, <r8=>0x0}, &(0x7f0000000540)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x19, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe79}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', r8, @fallback=0x2e, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ASSERT(r10, 0x0, 0xcf, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r11=>0xffffffffffffffff, 0x8, 0x1, 0x100})
ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5201)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff010000140003000002"], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x200088c0)

36.382185ms ago: executing program 3 (id=2069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x7, 0x0, &(0x7f00000004c0))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x0, 0x0, 0x20000030, 0x20000060], 0x11e, 0x0, 0x0}, 0x109)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "9a3d50d555b04f4a0e02ce3b12ef1a4c56f835e25220568994ee7731d50e4e2e36d4455cc942028f5cae63b8163ec86822a3dc17524195393a"}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2f}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x11e, 0x1, 0x0, &(0x7f0000000000))
write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[], 0x10448)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r9, 0x60, &(0x7f0000001100)}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x9)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec03010000000000000000000000000a14000000f803010000000000000000200000000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b15790700000300000000000000", @ANYRES32=0x0, @ANYBLOB="02000000835c0000180012800b0001006970366772650000080002806100120008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48010)

0s ago: executing program 4 (id=2070):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100)=0x7, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="300000001900010025bd7008000000000a00a000000300000200000014000200"], 0x30}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
shutdown(r2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x20000001, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000001c0))
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003380)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x4044c94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

kernel console output (not intermixed with test programs):

 entered promiscuous mode
[  186.893861][ T8783] syzkaller0: entered allmulticast mode
[  186.994772][ T5148] block nbd0: Receive control failed (result -32)
[  187.013346][ T8785] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  187.104352][ T8783] tipc: Resetting bearer <eth:syzkaller0>
[  187.155645][ T8782] tipc: Resetting bearer <eth:syzkaller0>
[  187.187431][ T8782] tipc: Disabling bearer <eth:syzkaller0>
[  187.793381][ T8804] __nla_validate_parse: 3 callbacks suppressed
[  187.793401][ T8804] netlink: 296 bytes leftover after parsing attributes in process `syz.3.746'.
[  188.372292][ T8849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'.
[  188.409669][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'.
[  188.427053][ T8853] netlink: 'syz.1.759': attribute type 1 has an invalid length.
[  188.446096][ T8853] netlink: 224 bytes leftover after parsing attributes in process `syz.1.759'.
[  188.762708][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'.
[  188.810984][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  188.901828][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'.
[  189.664643][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'.
[  189.699021][ T8902] netlink: 'syz.3.773': attribute type 1 has an invalid length.
[  189.716613][ T8902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.773'.
[  190.307199][ T8927] netlink: 260 bytes leftover after parsing attributes in process `syz.3.782'.
[  190.464503][ T8927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  190.927507][ T8953] netlink: 'syz.4.790': attribute type 1 has an invalid length.
[  191.026140][ T8952] syzkaller1: entered promiscuous mode
[  191.032033][ T8952] syzkaller1: entered allmulticast mode
[  192.002565][ T8986] syzkaller0: entered promiscuous mode
[  192.012613][ T8986] syzkaller0: entered allmulticast mode
[  192.095891][ T8986] veth1_macvtap: left promiscuous mode
[  192.107795][ T8986] macsec0: entered promiscuous mode
[  192.146159][ T8986] veth1_macvtap: entered promiscuous mode
[  192.162473][ T8986] macsec0: left promiscuous mode
[  192.286742][ T3514] ip6gretap1: left promiscuous mode
[  192.692195][ T9023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30
[  192.976180][ T9020] __nla_validate_parse: 8 callbacks suppressed
[  192.976201][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.805'.
[  192.999965][ T9014] netlink: 'syz.1.805': attribute type 1 has an invalid length.
[  193.008122][ T9014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.805'.
[  193.266869][ T9043] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  193.651289][ T9064] xt_hashlimit: max too large, truncated to 1048576
[  193.662524][ T9064] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  193.731255][ T9060] netlink: 'syz.3.814': attribute type 4 has an invalid length.
[  193.781687][ T9064] netlink: 'syz.3.814': attribute type 4 has an invalid length.
[  193.832873][ T9062] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  193.900205][ T9070] vlan2: entered promiscuous mode
[  193.905333][ T9070] batadv0: entered promiscuous mode
[  194.690536][ T9100] syzkaller0: entered promiscuous mode
[  194.710029][ T9100] syzkaller0: entered allmulticast mode
[  194.968340][ T9121] FAULT_INJECTION: forcing a failure.
[  194.968340][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.988390][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.1.834 Not tainted syzkaller #0 PREEMPT(full) 
[  194.988421][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  194.988435][ T9121] Call Trace:
[  194.988444][ T9121]  <TASK>
[  194.988454][ T9121]  dump_stack_lvl+0xe8/0x150
[  194.988489][ T9121]  should_fail_ex+0x414/0x560
[  194.988530][ T9121]  _copy_from_user+0x2d/0xb0
[  194.988558][ T9121]  inet6_ioctl+0x180/0x280
[  194.988580][ T9121]  ? __pfx_inet6_ioctl+0x10/0x10
[  194.988598][ T9121]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  194.988633][ T9121]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  194.988661][ T9121]  sock_do_ioctl+0xdc/0x300
[  194.988697][ T9121]  ? __pfx_sock_do_ioctl+0x10/0x10
[  194.988726][ T9121]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  194.988770][ T9121]  sock_ioctl+0x576/0x790
[  194.988803][ T9121]  ? __pfx_sock_ioctl+0x10/0x10
[  194.988834][ T9121]  ? __fget_files+0x2a/0x420
[  194.988861][ T9121]  ? __fget_files+0x3a0/0x420
[  194.988886][ T9121]  ? __fget_files+0x2a/0x420
[  194.988917][ T9121]  ? bpf_lsm_file_ioctl+0x9/0x20
[  194.988950][ T9121]  ? __pfx_sock_ioctl+0x10/0x10
[  194.988980][ T9121]  __se_sys_ioctl+0xfc/0x170
[  194.989017][ T9121]  do_syscall_64+0xec/0xf80
[  194.989041][ T9121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.989062][ T9121]  ? trace_irq_disable+0x37/0x100
[  194.989090][ T9121]  ? clear_bhb_loop+0x60/0xb0
[  194.989117][ T9121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.989139][ T9121] RIP: 0033:0x7eff7bd8f749
[  194.989157][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.989176][ T9121] RSP: 002b:00007eff79fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  194.989204][ T9121] RAX: ffffffffffffffda RBX: 00007eff7bfe5fa0 RCX: 00007eff7bd8f749
[  194.989221][ T9121] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000003
[  194.989235][ T9121] RBP: 00007eff79fee090 R08: 0000000000000000 R09: 0000000000000000
[  194.989249][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.989262][ T9121] R13: 00007eff7bfe6038 R14: 00007eff7bfe5fa0 R15: 00007ffda35bc7e8
[  194.989298][ T9121]  </TASK>
[  196.428351][ T5148] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  196.435029][ T5148] Bluetooth: hci1: command 0x0c24 tx timeout
[  196.807112][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'.
[  197.003001][ T9150] netlink: 260 bytes leftover after parsing attributes in process `syz.1.841'.
[  197.043023][ T9150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  197.274945][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[  197.329927][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.845'.
[  197.628959][ T9182] netlink: 260 bytes leftover after parsing attributes in process `syz.2.853'.
[  197.645978][ T9182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  198.000487][ T9191] syzkaller0: entered promiscuous mode
[  198.020541][ T9195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.856'.
[  198.021113][ T9191] syzkaller0: entered allmulticast mode
[  198.330551][ T9208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.359840][ T9210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.864'.
[  198.399698][ T9207] tipc: Disabling bearer <eth:syzkaller0>
[  198.514849][ T9213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input31
[  198.698941][ T9221] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.866'.
[  199.067029][ T5148] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  199.069693][ T5829] Bluetooth: hci1: command 0x0c24 tx timeout
[  199.081684][ T5148] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  199.564754][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  199.889536][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  200.106868][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'.
[  200.149329][ T9260] netlink: 'syz.0.876': attribute type 1 has an invalid length.
[  200.207268][ T9260] netlink: 224 bytes leftover after parsing attributes in process `syz.0.876'.
[  200.787637][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'.
[  200.821697][ T9284] FAULT_INJECTION: forcing a failure.
[  200.821697][ T9284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.866468][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.4.885 Not tainted syzkaller #0 PREEMPT(full) 
[  200.866500][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  200.866513][ T9284] Call Trace:
[  200.866526][ T9284]  <TASK>
[  200.866536][ T9284]  dump_stack_lvl+0xe8/0x150
[  200.866569][ T9284]  should_fail_ex+0x414/0x560
[  200.866608][ T9284]  _copy_from_user+0x2d/0xb0
[  200.866636][ T9284]  bpf_test_init+0xd8/0x150
[  200.866668][ T9284]  bpf_prog_test_run_skb+0x376/0x1d50
[  200.866704][ T9284]  ? __fget_files+0x2a/0x420
[  200.866735][ T9284]  ? __fget_files+0x2a/0x420
[  200.866760][ T9284]  ? __fget_files+0x3a0/0x420
[  200.866787][ T9284]  ? __fget_files+0x2a/0x420
[  200.866819][ T9284]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  200.866848][ T9284]  bpf_prog_test_run+0x2c7/0x340
[  200.866883][ T9284]  __sys_bpf+0x562/0x860
[  200.866915][ T9284]  ? __pfx___sys_bpf+0x10/0x10
[  200.866960][ T9284]  ? ksys_write+0x22a/0x250
[  200.866983][ T9284]  ? __pfx_ksys_write+0x10/0x10
[  200.867012][ T9284]  __x64_sys_bpf+0x7c/0x90
[  200.867040][ T9284]  do_syscall_64+0xec/0xf80
[  200.867065][ T9284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.867085][ T9284]  ? trace_irq_disable+0x37/0x100
[  200.867112][ T9284]  ? clear_bhb_loop+0x60/0xb0
[  200.867138][ T9284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.867159][ T9284] RIP: 0033:0x7f04ecf8f749
[  200.867178][ T9284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.867196][ T9284] RSP: 002b:00007f04eded0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  200.867217][ T9284] RAX: ffffffffffffffda RBX: 00007f04ed1e5fa0 RCX: 00007f04ecf8f749
[  200.867230][ T9284] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  200.867241][ T9284] RBP: 00007f04eded0090 R08: 0000000000000000 R09: 0000000000000000
[  200.867252][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.867262][ T9284] R13: 00007f04ed1e6038 R14: 00007f04ed1e5fa0 R15: 00007ffc5433e2a8
[  200.867296][ T9284]  </TASK>
[  201.147621][ T5148] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  201.166657][ T5829] Bluetooth: hci1: command 0x0c24 tx timeout
[  201.172842][ T5148] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  201.380662][ T9300] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.891'.
[  201.404118][ T9293] FAULT_INJECTION: forcing a failure.
[  201.404118][ T9293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.443747][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.1.890 Not tainted syzkaller #0 PREEMPT(full) 
[  201.443779][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  201.443794][ T9293] Call Trace:
[  201.443803][ T9293]  <TASK>
[  201.443812][ T9293]  dump_stack_lvl+0xe8/0x150
[  201.443847][ T9293]  should_fail_ex+0x414/0x560
[  201.443888][ T9293]  _copy_to_user+0x31/0xb0
[  201.443918][ T9293]  bpf_test_finish+0x54b/0x6d0
[  201.443958][ T9293]  ? __pfx_bpf_test_finish+0x10/0x10
[  201.444003][ T9293]  bpf_prog_test_run_xdp+0x891/0x10e0
[  201.444051][ T9293]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  201.444085][ T9293]  ? __fget_files+0x2a/0x420
[  201.444119][ T9293]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  201.444148][ T9293]  bpf_prog_test_run+0x2c7/0x340
[  201.444187][ T9293]  __sys_bpf+0x562/0x860
[  201.444220][ T9293]  ? __pfx___sys_bpf+0x10/0x10
[  201.444266][ T9293]  ? ksys_write+0x22a/0x250
[  201.444288][ T9293]  ? __pfx_ksys_write+0x10/0x10
[  201.444317][ T9293]  __x64_sys_bpf+0x7c/0x90
[  201.444345][ T9293]  do_syscall_64+0xec/0xf80
[  201.444368][ T9293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.444389][ T9293]  ? trace_irq_disable+0x37/0x100
[  201.444425][ T9293]  ? clear_bhb_loop+0x60/0xb0
[  201.444453][ T9293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.444474][ T9293] RIP: 0033:0x7eff7bd8f749
[  201.444493][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.444512][ T9293] RSP: 002b:00007eff79fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  201.444536][ T9293] RAX: ffffffffffffffda RBX: 00007eff7bfe5fa0 RCX: 00007eff7bd8f749
[  201.444552][ T9293] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  201.444566][ T9293] RBP: 00007eff79fee090 R08: 0000000000000000 R09: 0000000000000000
[  201.444580][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.444592][ T9293] R13: 00007eff7bfe6038 R14: 00007eff7bfe5fa0 R15: 00007ffda35bc7e8
[  201.444625][ T9293]  </TASK>
[  201.741916][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'.
[  201.800302][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'.
[  203.101205][ T9336] FAULT_INJECTION: forcing a failure.
[  203.101205][ T9336] name failslab, interval 1, probability 0, space 0, times 0
[  203.122999][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.1.902 Not tainted syzkaller #0 PREEMPT(full) 
[  203.123030][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  203.123044][ T9336] Call Trace:
[  203.123053][ T9336]  <TASK>
[  203.123063][ T9336]  dump_stack_lvl+0xe8/0x150
[  203.123097][ T9336]  should_fail_ex+0x414/0x560
[  203.123138][ T9336]  should_failslab+0xa8/0x100
[  203.123167][ T9336]  kmem_cache_alloc_noprof+0x88/0x710
[  203.123203][ T9336]  ? alloc_empty_file+0x55/0x1d0
[  203.123236][ T9336]  alloc_empty_file+0x55/0x1d0
[  203.123274][ T9336]  alloc_file_pseudo+0x13d/0x210
[  203.123307][ T9336]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  203.123333][ T9336]  ? do_raw_spin_unlock+0x122/0x240
[  203.123368][ T9336]  ? _raw_spin_unlock+0x28/0x50
[  203.123410][ T9336]  sock_alloc_file+0xb8/0x2e0
[  203.123440][ T9336]  ? __sys_socket+0x12c/0x1b0
[  203.123462][ T9336]  __sys_socket+0x13d/0x1b0
[  203.123487][ T9336]  __x64_sys_socket+0x7a/0x90
[  203.123507][ T9336]  do_syscall_64+0xec/0xf80
[  203.123529][ T9336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.123549][ T9336]  ? trace_irq_disable+0x37/0x100
[  203.123578][ T9336]  ? clear_bhb_loop+0x60/0xb0
[  203.123604][ T9336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.123624][ T9336] RIP: 0033:0x7eff7bd91667
[  203.123643][ T9336] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.123662][ T9336] RSP: 002b:00007eff79fecfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  203.123685][ T9336] RAX: ffffffffffffffda RBX: 00007eff7bfe5fa0 RCX: 00007eff7bd91667
[  203.123701][ T9336] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  203.123714][ T9336] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  203.123726][ T9336] R10: 0000200000000240 R11: 0000000000000286 R12: 0000000000000001
[  203.123740][ T9336] R13: 00007eff7bfe6038 R14: 00007eff7bfe5fa0 R15: 00007ffda35bc7e8
[  203.123772][ T9336]  </TASK>
[  203.350573][ T5829] Bluetooth: hci1: command 0x0c24 tx timeout
[  203.497517][ T9342] __nla_validate_parse: 2 callbacks suppressed
[  203.497539][ T9342] netlink: 104 bytes leftover after parsing attributes in process `syz.3.901'.
[  203.972334][ T9357] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.910'.
[  204.113684][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'.
[  204.130915][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'.
[  204.948999][ T9385] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  204.956900][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  204.965735][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'.
[  204.976037][ T9385] netlink: 'syz.0.917': attribute type 2 has an invalid length.
[  204.996383][ T9385] netlink: 'syz.0.917': attribute type 2 has an invalid length.
[  205.009245][ T9385] netlink: 'syz.0.917': attribute type 2 has an invalid length.
[  205.324726][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.387553][ T5829] Bluetooth: hci1: command 0x0c24 tx timeout
[  206.042459][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[  206.074101][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'.
[  206.107499][ T9434] netlink: 'syz.1.930': attribute type 14 has an invalid length.
[  206.138653][ T9434] netlink: 'syz.1.930': attribute type 11 has an invalid length.
[  206.508730][ T9441] Bluetooth: MGMT ver 1.23
[  206.667577][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'.
[  206.886751][ T9456] netlink: 64 bytes leftover after parsing attributes in process `syz.4.935'.
[  207.076441][ T9457] bond0: entered promiscuous mode
[  207.086241][ T9457] debugfs: 'hsr1' already exists in 'hsr'
[  207.093357][ T9457] Cannot create hsr debugfs directory
[  207.104623][ T9457] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  207.139682][ T9457] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  207.174446][ T9457] 8021q: adding VLAN 0 to HW filter on device hsr1
[  207.186114][ T9457] bond0: left promiscuous mode
[  208.121244][ T9488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input32
[  208.160301][ T9490] FAULT_INJECTION: forcing a failure.
[  208.160301][ T9490] name failslab, interval 1, probability 0, space 0, times 0
[  208.174082][ T9490] CPU: 1 UID: 0 PID: 9490 Comm: syz.3.944 Not tainted syzkaller #0 PREEMPT(full) 
[  208.174110][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  208.174124][ T9490] Call Trace:
[  208.174132][ T9490]  <TASK>
[  208.174141][ T9490]  dump_stack_lvl+0xe8/0x150
[  208.174176][ T9490]  should_fail_ex+0x414/0x560
[  208.174218][ T9490]  should_failslab+0xa8/0x100
[  208.174247][ T9490]  kmem_cache_alloc_noprof+0x88/0x710
[  208.174283][ T9490]  ? skb_clone+0x212/0x3a0
[  208.174318][ T9490]  skb_clone+0x212/0x3a0
[  208.174349][ T9490]  __netlink_deliver_tap+0x404/0x850
[  208.174390][ T9490]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.174419][ T9490]  netlink_deliver_tap+0x19c/0x1b0
[  208.174448][ T9490]  netlink_unicast+0x7fa/0x9e0
[  208.174481][ T9490]  ? __pfx_netlink_unicast+0x10/0x10
[  208.174505][ T9490]  ? __alloc_skb+0x198/0x3a0
[  208.174528][ T9490]  ? netlink_sendmsg+0x642/0xb30
[  208.174555][ T9490]  ? skb_put+0x11b/0x210
[  208.174583][ T9490]  netlink_sendmsg+0x805/0xb30
[  208.174621][ T9490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.174654][ T9490]  ? aa_sock_msg_perm+0xf1/0x1b0
[  208.174684][ T9490]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.174703][ T9490]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.174746][ T9490]  __sock_sendmsg+0x21c/0x270
[  208.174783][ T9490]  ____sys_sendmsg+0x505/0x820
[  208.174817][ T9490]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.174854][ T9490]  ? import_iovec+0x74/0xa0
[  208.174886][ T9490]  ___sys_sendmsg+0x21f/0x2a0
[  208.174916][ T9490]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.174981][ T9490]  ? __fget_files+0x2a/0x420
[  208.175006][ T9490]  ? __fget_files+0x3a0/0x420
[  208.175045][ T9490]  __x64_sys_sendmsg+0x19b/0x260
[  208.175075][ T9490]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.175113][ T9490]  ? __pfx_ksys_write+0x10/0x10
[  208.175149][ T9490]  do_syscall_64+0xec/0xf80
[  208.175173][ T9490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.175194][ T9490]  ? trace_irq_disable+0x37/0x100
[  208.175223][ T9490]  ? clear_bhb_loop+0x60/0xb0
[  208.175249][ T9490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.175271][ T9490] RIP: 0033:0x7f492c98f749
[  208.175290][ T9490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.175309][ T9490] RSP: 002b:00007f492d7ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.175333][ T9490] RAX: ffffffffffffffda RBX: 00007f492cbe5fa0 RCX: 00007f492c98f749
[  208.175349][ T9490] RDX: 0000000000002800 RSI: 0000200000000140 RDI: 0000000000000005
[  208.175363][ T9490] RBP: 00007f492d7ea090 R08: 0000000000000000 R09: 0000000000000000
[  208.175377][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.175390][ T9490] R13: 00007f492cbe6038 R14: 00007f492cbe5fa0 R15: 00007ffda2fe1ee8
[  208.175426][ T9490]  </TASK>
[  209.012030][ T9501] syzkaller1: entered promiscuous mode
[  209.029151][ T9501] syzkaller1: entered allmulticast mode
[  209.088463][ T9521] __nla_validate_parse: 1 callbacks suppressed
[  209.088486][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'.
[  209.182834][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'.
[  209.192196][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'.
[  209.376458][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'.
[  209.391769][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.953'.
[  209.468740][ T9536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input33
[  209.540485][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'.
[  209.785915][ T9541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input34
[  209.810069][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  210.314843][ T9565] x_tables: ip_tables: icmp match: only valid for protocol 1
[  210.670319][ T9574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.962'.
[  211.022968][ T9584] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  211.040101][ T9584] macvtap1: entered promiscuous mode
[  211.059016][ T9584] macvtap1: entered allmulticast mode
[  211.072637][ T9584] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  211.091494][ T9584] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  211.098898][ T9584] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  211.260434][ T9588] syzkaller1: entered promiscuous mode
[  211.266101][ T9588] syzkaller1: entered allmulticast mode
[  211.319699][ T9603] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.966'.
[  211.513120][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'.
[  211.528604][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'.
[  211.560221][ T9618] xt_CT: You must specify a L4 protocol and not use inversions on it
[  211.870571][ T5829] Bluetooth: hci1: command 0x0c24 tx timeout
[  213.412581][ T9684] syzkaller1: entered promiscuous mode
[  213.421191][ T9684] syzkaller1: entered allmulticast mode
[  213.489352][ T9702] FAULT_INJECTION: forcing a failure.
[  213.489352][ T9702] name failslab, interval 1, probability 0, space 0, times 0
[  213.537638][ T9702] CPU: 1 UID: 0 PID: 9702 Comm: syz.0.984 Not tainted syzkaller #0 PREEMPT(full) 
[  213.537670][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  213.537684][ T9702] Call Trace:
[  213.537693][ T9702]  <TASK>
[  213.537703][ T9702]  dump_stack_lvl+0xe8/0x150
[  213.537737][ T9702]  should_fail_ex+0x414/0x560
[  213.537779][ T9702]  should_failslab+0xa8/0x100
[  213.537809][ T9702]  __kmalloc_noprof+0xdf/0x800
[  213.537830][ T9702]  ? __might_fault+0xb0/0x130
[  213.537860][ T9702]  ? sock_kmalloc+0xd6/0x160
[  213.537894][ T9702]  sock_kmalloc+0xd6/0x160
[  213.537926][ T9702]  __ip_mc_join_group+0x372/0x500
[  213.537958][ T9702]  do_mcast_group_source+0x35d/0x460
[  213.537993][ T9702]  ? __pfx_do_mcast_group_source+0x10/0x10
[  213.538040][ T9702]  ? look_up_lock_class+0x57/0x110
[  213.538065][ T9702]  ? register_lock_class+0x31/0x2e0
[  213.538091][ T9702]  ? __lock_acquire+0x6b6/0x2cf0
[  213.538150][ T9702]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  213.538192][ T9702]  ? __local_bh_enable_ip+0xd0/0x130
[  213.538220][ T9702]  do_ip_setsockopt+0x1aa5/0x2d00
[  213.538256][ T9702]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  213.538282][ T9702]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  213.538319][ T9702]  ? aa_sk_perm+0x7ee/0x920
[  213.538352][ T9702]  ? __pfx_aa_sk_perm+0x10/0x10
[  213.538382][ T9702]  ? __fget_files+0x2a/0x420
[  213.538408][ T9702]  ? aa_sock_opt_perm+0xff/0x1a0
[  213.538441][ T9702]  ip_setsockopt+0x66/0x110
[  213.538468][ T9702]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  213.538506][ T9702]  do_sock_setsockopt+0x17c/0x1b0
[  213.538538][ T9702]  __x64_sys_setsockopt+0x13f/0x1b0
[  213.538569][ T9702]  do_syscall_64+0xec/0xf80
[  213.538593][ T9702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.538614][ T9702]  ? trace_irq_disable+0x37/0x100
[  213.538642][ T9702]  ? clear_bhb_loop+0x60/0xb0
[  213.538669][ T9702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.538690][ T9702] RIP: 0033:0x7ff2ced8f749
[  213.538710][ T9702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.538729][ T9702] RSP: 002b:00007ff2cfc3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  213.538752][ T9702] RAX: ffffffffffffffda RBX: 00007ff2cefe5fa0 RCX: 00007ff2ced8f749
[  213.538769][ T9702] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000005
[  213.538782][ T9702] RBP: 00007ff2cfc3c090 R08: 0000000000000108 R09: 0000000000000000
[  213.538796][ T9702] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  213.538810][ T9702] R13: 00007ff2cefe6038 R14: 00007ff2cefe5fa0 R15: 00007ffc88ef5d48
[  213.538847][ T9702]  </TASK>
[  213.946885][ T5148] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  213.953399][ T5148] Bluetooth: hci1: command 0x0c24 tx timeout
[  214.148370][ T9717] __nla_validate_parse: 4 callbacks suppressed
[  214.148392][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[  214.204075][ T3514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.214313][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'.
[  214.243364][ T3514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.271793][ T3514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.301453][ T3514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.588350][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'.
[  214.896272][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'.
[  215.116224][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'.
[  215.145755][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  215.158379][ T9755] netlink: 'syz.4.1001': attribute type 21 has an invalid length.
[  215.184967][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  215.184987][ T3475] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.228376][ T3475] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.250917][ T3475] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.266933][ T3475] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.363909][ T9769] netlink: 104 bytes leftover after parsing attributes in process `syz.2.995'.
[  215.399284][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  215.417964][ T9773] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1008'.
[  215.455331][ T9773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  215.474628][ T9771] tipc: Failed to remove unknown binding: 66,1,1/0:1068420304/1068420306
[  215.495355][ T9771] tipc: Failed to remove unknown binding: 66,1,1/0:1068420304/1068420306
[  215.515169][ T9771] tipc: Failed to remove unknown binding: 66,1,1/0:1068420304/1068420306
[  216.152330][ T9789] FAULT_INJECTION: forcing a failure.
[  216.152330][ T9789] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.168762][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.2.1014 Not tainted syzkaller #0 PREEMPT(full) 
[  216.168794][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  216.168815][ T9789] Call Trace:
[  216.168824][ T9789]  <TASK>
[  216.168834][ T9789]  dump_stack_lvl+0xe8/0x150
[  216.168868][ T9789]  should_fail_ex+0x414/0x560
[  216.168908][ T9789]  _copy_from_user+0x2d/0xb0
[  216.168937][ T9789]  kstrtouint_from_user+0xc4/0x170
[  216.168963][ T9789]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  216.169004][ T9789]  proc_fail_nth_write+0x88/0x200
[  216.169029][ T9789]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  216.169059][ T9789]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  216.169085][ T9789]  vfs_write+0x27e/0xb30
[  216.169117][ T9789]  ? __pfx_vfs_write+0x10/0x10
[  216.169140][ T9789]  ? __fget_files+0x2a/0x420
[  216.169172][ T9789]  ? __fget_files+0x3a0/0x420
[  216.169199][ T9789]  ? __fget_files+0x2a/0x420
[  216.169236][ T9789]  ksys_write+0x145/0x250
[  216.169261][ T9789]  ? __pfx_ksys_write+0x10/0x10
[  216.169295][ T9789]  do_syscall_64+0xec/0xf80
[  216.169318][ T9789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.169339][ T9789]  ? trace_irq_disable+0x37/0x100
[  216.169366][ T9789]  ? clear_bhb_loop+0x60/0xb0
[  216.169391][ T9789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.169412][ T9789] RIP: 0033:0x7f3509b8e1ff
[  216.169430][ T9789] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  216.169447][ T9789] RSP: 002b:00007f350a9ae030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  216.169470][ T9789] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3509b8e1ff
[  216.169485][ T9789] RDX: 0000000000000001 RSI: 00007f350a9ae0a0 RDI: 0000000000000004
[  216.169499][ T9789] RBP: 00007f350a9ae090 R08: 0000000000000000 R09: 0000000000000000
[  216.169513][ T9789] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  216.169526][ T9789] R13: 00007f3509de6038 R14: 00007f3509de5fa0 R15: 00007fff110e0168
[  216.169562][ T9789]  </TASK>
[  216.989449][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  216.995723][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[  217.148954][ T9833] wg1: entered promiscuous mode
[  217.154122][ T9833] wg1: entered allmulticast mode
[  217.177648][ T9847] netlink: 'syz.0.1024': attribute type 10 has an invalid length.
[  217.320858][ T9842] dummy0: entered promiscuous mode
[  217.355808][ T9847] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  217.371162][ T9847] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  217.415358][ T9823] dummy0: left promiscuous mode
[  218.441607][ T9902] FAULT_INJECTION: forcing a failure.
[  218.441607][ T9902] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.455281][ T9902] CPU: 1 UID: 0 PID: 9902 Comm: syz.1.1046 Not tainted syzkaller #0 PREEMPT(full) 
[  218.455312][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  218.455326][ T9902] Call Trace:
[  218.455336][ T9902]  <TASK>
[  218.455345][ T9902]  dump_stack_lvl+0xe8/0x150
[  218.455379][ T9902]  should_fail_ex+0x414/0x560
[  218.455421][ T9902]  _copy_to_user+0x31/0xb0
[  218.455451][ T9902]  simple_read_from_buffer+0xe1/0x170
[  218.455485][ T9902]  proc_fail_nth_read+0x1b3/0x220
[  218.455513][ T9902]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  218.455540][ T9902]  ? rw_verify_area+0x2a6/0x4d0
[  218.455574][ T9902]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  218.455599][ T9902]  vfs_read+0x200/0xa30
[  218.455625][ T9902]  ? fdget_pos+0x247/0x320
[  218.455657][ T9902]  ? __pfx___mutex_lock+0x10/0x10
[  218.455684][ T9902]  ? __pfx_vfs_read+0x10/0x10
[  218.455706][ T9902]  ? __fget_files+0x2a/0x420
[  218.455739][ T9902]  ? __fget_files+0x3a0/0x420
[  218.455765][ T9902]  ? __fget_files+0x2a/0x420
[  218.455803][ T9902]  ksys_read+0x145/0x250
[  218.455826][ T9902]  ? __pfx_ksys_read+0x10/0x10
[  218.455858][ T9902]  do_syscall_64+0xec/0xf80
[  218.455881][ T9902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.455909][ T9902]  ? trace_irq_disable+0x37/0x100
[  218.455938][ T9902]  ? clear_bhb_loop+0x60/0xb0
[  218.455964][ T9902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.455986][ T9902] RIP: 0033:0x7eff7bd8e15c
[  218.456005][ T9902] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  218.456025][ T9902] RSP: 002b:00007eff79fee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  218.456048][ T9902] RAX: ffffffffffffffda RBX: 00007eff7bfe5fa0 RCX: 00007eff7bd8e15c
[  218.456064][ T9902] RDX: 000000000000000f RSI: 00007eff79fee0a0 RDI: 0000000000000004
[  218.456078][ T9902] RBP: 00007eff79fee090 R08: 0000000000000000 R09: 0000000000000000
[  218.456092][ T9902] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  218.456106][ T9902] R13: 00007eff7bfe6038 R14: 00007eff7bfe5fa0 R15: 00007ffda35bc7e8
[  218.456142][ T9902]  </TASK>
[  218.964700][ T9904] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35
[  219.174652][ T9915] __nla_validate_parse: 8 callbacks suppressed
[  219.174672][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  219.190713][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  219.466950][ T9917] netlink: 'syz.1.1051': attribute type 10 has an invalid length.
[  219.477099][ T9917] team0: left promiscuous mode
[  219.505032][ T9917] 8021q: adding VLAN 0 to HW filter on device team0
[  219.529201][ T9917] team0: entered promiscuous mode
[  219.535697][ T9917] bond0: (slave team0): Enslaving as an active interface with an up link
[  219.778030][ T9930] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  220.600813][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1065'.
[  220.633755][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'.
[  220.645506][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.680715][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.734921][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'.
[  220.817375][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'.
[  220.972963][ T9975] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  221.090480][ T9980] FAULT_INJECTION: forcing a failure.
[  221.090480][ T9980] name failslab, interval 1, probability 0, space 0, times 0
[  221.105998][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.0.1072 Not tainted syzkaller #0 PREEMPT(full) 
[  221.106029][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  221.106042][ T9980] Call Trace:
[  221.106051][ T9980]  <TASK>
[  221.106060][ T9980]  dump_stack_lvl+0xe8/0x150
[  221.106094][ T9980]  should_fail_ex+0x414/0x560
[  221.106135][ T9980]  should_failslab+0xa8/0x100
[  221.106163][ T9980]  kmem_cache_alloc_noprof+0x88/0x710
[  221.106193][ T9980]  ? __netlink_lookup+0xbd/0x8a0
[  221.106225][ T9980]  ? skb_clone+0x212/0x3a0
[  221.106259][ T9980]  skb_clone+0x212/0x3a0
[  221.106290][ T9980]  __netlink_deliver_tap+0x404/0x850
[  221.106331][ T9980]  ? netlink_deliver_tap+0x2e/0x1b0
[  221.106361][ T9980]  netlink_deliver_tap+0x19c/0x1b0
[  221.106391][ T9980]  netlink_unicast+0x7fa/0x9e0
[  221.106426][ T9980]  ? __pfx_netlink_unicast+0x10/0x10
[  221.106451][ T9980]  ? __alloc_skb+0x198/0x3a0
[  221.106475][ T9980]  ? netlink_sendmsg+0x642/0xb30
[  221.106502][ T9980]  ? skb_put+0x11b/0x210
[  221.106533][ T9980]  netlink_sendmsg+0x805/0xb30
[  221.106570][ T9980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.106601][ T9980]  ? aa_sock_msg_perm+0xf1/0x1b0
[  221.106631][ T9980]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.106651][ T9980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.106688][ T9980]  __sock_sendmsg+0x21c/0x270
[  221.106724][ T9980]  ____sys_sendmsg+0x505/0x820
[  221.106757][ T9980]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.106793][ T9980]  ? import_iovec+0x74/0xa0
[  221.106825][ T9980]  ___sys_sendmsg+0x21f/0x2a0
[  221.106854][ T9980]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.106919][ T9980]  ? __fget_files+0x2a/0x420
[  221.106947][ T9980]  ? __fget_files+0x3a0/0x420
[  221.106985][ T9980]  __x64_sys_sendmsg+0x19b/0x260
[  221.107016][ T9980]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.107054][ T9980]  ? __pfx_ksys_write+0x10/0x10
[  221.107088][ T9980]  do_syscall_64+0xec/0xf80
[  221.107112][ T9980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.107133][ T9980]  ? trace_irq_disable+0x37/0x100
[  221.107160][ T9980]  ? clear_bhb_loop+0x60/0xb0
[  221.107185][ T9980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.107204][ T9980] RIP: 0033:0x7ff2ced8f749
[  221.107225][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.107244][ T9980] RSP: 002b:00007ff2cfc3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.107266][ T9980] RAX: ffffffffffffffda RBX: 00007ff2cefe5fa0 RCX: 00007ff2ced8f749
[  221.107283][ T9980] RDX: 0000000020008800 RSI: 0000200000000180 RDI: 0000000000000003
[  221.107297][ T9980] RBP: 00007ff2cfc3c090 R08: 0000000000000000 R09: 0000000000000000
[  221.107309][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.107322][ T9980] R13: 00007ff2cefe6038 R14: 00007ff2cefe5fa0 R15: 00007ffc88ef5d48
[  221.107357][ T9980]  </TASK>
[  221.148680][ T9977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.545897][ T9982] syzkaller0: entered promiscuous mode
[  221.551682][ T9982] syzkaller0: entered allmulticast mode
[  221.558371][ T9982] tipc: Resetting bearer <eth:syzkaller0>
[  221.591990][ T9989] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  221.606885][ T9976] tipc: Resetting bearer <eth:syzkaller0>
[  221.634049][ T9994] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1077'.
[  221.950549][T10010] x_tables: duplicate underflow at hook 1
[  223.146020][ T9976] tipc: Disabling bearer <eth:syzkaller0>
[  223.155568][ T9989] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  223.185851][ T5916] tipc: Node number set to 4275052634
[  223.489765][T10029] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1085'.
[  223.586489][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'.
[  223.808600][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1089'.
[  224.639195][T10084] __nla_validate_parse: 2 callbacks suppressed
[  224.639216][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1099'.
[  224.665747][T10084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1099'.
[  225.141730][T10104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.178774][T10104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.662661][T10133] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1108'.
[  225.831074][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'.
[  226.499094][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1119'.
[  226.519733][T10182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1119'.
[  226.762018][T10185] syzkaller1: entered promiscuous mode
[  226.781930][T10185] syzkaller1: entered allmulticast mode
[  227.022190][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  227.114211][T10203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.310716][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  227.425647][T10215] dvmrp1: entered allmulticast mode
[  227.437551][T10216] dvmrp1: left allmulticast mode
[  227.544104][T10227] netlink: 'syz.0.1130': attribute type 1 has an invalid length.
[  227.568213][T10227] netlink: 'syz.0.1130': attribute type 2 has an invalid length.
[  227.670778][T10236] netlink: 'syz.2.1133': attribute type 10 has an invalid length.
[  227.696097][T10236] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  227.722545][T10236] netlink: 'syz.2.1133': attribute type 10 has an invalid length.
[  227.739589][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'.
[  228.329708][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'.
[  228.351481][T10273] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1144'.
[  229.311231][T10316] tipc: Invalid UDP bearer configuration
[  229.311289][T10316] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.712455][T10338] __nla_validate_parse: 7 callbacks suppressed
[  229.712476][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'.
[  230.507271][T10373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1171'.
[  230.712089][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.721592][T10387] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1173'.
[  230.832831][T10396] netlink: 'syz.4.1177': attribute type 10 has an invalid length.
[  230.850383][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1177'.
[  230.892247][T10395] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1176'.
[  230.911973][T10396] dummy0: entered promiscuous mode
[  230.922935][T10396] bridge0: port 1(dummy0) entered blocking state
[  230.930640][T10396] bridge0: port 1(dummy0) entered disabled state
[  230.937503][T10396] dummy0: entered allmulticast mode
[  230.943347][T10397] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1175'.
[  231.262522][T10412] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1180'.
[  231.292560][T10412] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1180'.
[  231.301834][T10412] netlink: 676 bytes leftover after parsing attributes in process `syz.0.1180'.
[  231.874741][T10445] netlink: 'syz.3.1191': attribute type 10 has an invalid length.
[  231.971073][T10445] team0: Device veth1_macvtap failed to register rx_handler
[  232.095449][T10452] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  232.283584][T10464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.740362][T10480] syzkaller0: entered promiscuous mode
[  232.746209][T10480] syzkaller0: entered allmulticast mode
[  233.181061][T10479] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[  233.636275][T10513] netlink: 'syz.1.1206': attribute type 3 has an invalid length.
[  233.686280][T10518] dummy0: left allmulticast mode
[  233.717743][T10518] bridge0: port 1(dummy0) entered disabled state
[  233.804635][T10518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  234.051497][T10533] openvswitch: netlink: Unknown key attributes 2
[  235.056901][T10579] __nla_validate_parse: 12 callbacks suppressed
[  235.056923][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  235.202941][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1220'.
[  235.247470][T10587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1220'.
[  235.766720][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'.
[  236.156081][T10628] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1218'.
[  236.382901][T10647] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1231'.
[  237.237374][T10665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1235'.
[  237.369660][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1238'.
[  237.387986][T10673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1238'.
[  237.884152][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'.
[  238.178966][T10710] netlink: 'syz.3.1248': attribute type 12 has an invalid length.
[  238.530760][T10726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  239.407980][T10770] bond2: entered promiscuous mode
[  239.413233][T10770] bond2: entered allmulticast mode
[  239.739933][T10792] netlink: 'syz.0.1275': attribute type 1 has an invalid length.
[  240.271438][T10810] __nla_validate_parse: 12 callbacks suppressed
[  240.271458][T10810] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1277'.
[  240.354935][T10812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'.
[  240.438159][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'.
[  240.541674][T10820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1286'.
[  240.554344][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'.
[  240.573165][T10821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36
[  240.986999][ T5836] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  240.993286][ T5148] Bluetooth: hci1: command 0x0c24 tx timeout
[  241.505559][T10844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1288'.
[  241.514886][T10844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1288'.
[  242.040117][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  242.066268][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'.
[  242.218130][T10837] netlink: 'syz.1.1289': attribute type 1 has an invalid length.
[  242.225938][T10837] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1289'.
[  242.348354][T10881] IPVS: length: 4096 != 8
[  242.437429][T10883] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  242.505701][T10888] netlink: 'syz.3.1297': attribute type 2 has an invalid length.
[  242.530911][T10883] !��9: entered promiscuous mode
[  242.646131][T10892] bond2: entered promiscuous mode
[  242.654090][T10892] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.661703][T10888] !��9: left promiscuous mode
[  243.387303][T10931] FAULT_INJECTION: forcing a failure.
[  243.387303][T10931] name failslab, interval 1, probability 0, space 0, times 0
[  243.400539][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.3.1310 Not tainted syzkaller #0 PREEMPT(full) 
[  243.400586][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.400619][T10931] Call Trace:
[  243.400629][T10931]  <TASK>
[  243.400638][T10931]  dump_stack_lvl+0xe8/0x150
[  243.400671][T10931]  should_fail_ex+0x414/0x560
[  243.400723][T10931]  should_failslab+0xa8/0x100
[  243.400752][T10931]  __kmalloc_noprof+0xdf/0x800
[  243.400773][T10931]  ? sk_prot_alloc+0xe7/0x220
[  243.400804][T10931]  sk_prot_alloc+0xe7/0x220
[  243.400827][T10931]  ? sk_alloc+0x27/0x390
[  243.400851][T10931]  sk_alloc+0x3a/0x390
[  243.400878][T10931]  bpf_prog_test_run_skb+0x3f4/0x1d50
[  243.400912][T10931]  ? __fget_files+0x2a/0x420
[  243.400942][T10931]  ? __fget_files+0x2a/0x420
[  243.400967][T10931]  ? __fget_files+0x3a0/0x420
[  243.400994][T10931]  ? __fget_files+0x2a/0x420
[  243.401026][T10931]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  243.401054][T10931]  bpf_prog_test_run+0x2c7/0x340
[  243.401091][T10931]  __sys_bpf+0x562/0x860
[  243.401121][T10931]  ? __pfx___sys_bpf+0x10/0x10
[  243.401164][T10931]  ? ksys_write+0x22a/0x250
[  243.401186][T10931]  ? __pfx_ksys_write+0x10/0x10
[  243.401210][T10931]  __x64_sys_bpf+0x7c/0x90
[  243.401236][T10931]  do_syscall_64+0xec/0xf80
[  243.401259][T10931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.401280][T10931]  ? trace_irq_disable+0x37/0x100
[  243.401313][T10931]  ? clear_bhb_loop+0x60/0xb0
[  243.401338][T10931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.401359][T10931] RIP: 0033:0x7f492c98f749
[  243.401379][T10931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.401399][T10931] RSP: 002b:00007f492d7ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  243.401422][T10931] RAX: ffffffffffffffda RBX: 00007f492cbe5fa0 RCX: 00007f492c98f749
[  243.401438][T10931] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  243.401452][T10931] RBP: 00007f492d7ea090 R08: 0000000000000000 R09: 0000000000000000
[  243.401466][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.401479][T10931] R13: 00007f492cbe6038 R14: 00007f492cbe5fa0 R15: 00007ffda2fe1ee8
[  243.401508][T10931]  </TASK>
[  243.847956][T10934] netlink: 'syz.2.1309': attribute type 1 has an invalid length.
[  245.348926][T11004] syzkaller0: entered promiscuous mode
[  245.376917][T11004] syzkaller0: entered allmulticast mode
[  245.744692][T11027] __nla_validate_parse: 15 callbacks suppressed
[  245.744713][T11027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1324'.
[  245.856367][T11032] Cannot find add_set index 3 as target
[  245.953137][T11029] lo: entered promiscuous mode
[  245.966613][T11029] tunl0: entered promiscuous mode
[  246.009622][T11029] gre0: entered promiscuous mode
[  246.035242][T11029] gretap0: entered promiscuous mode
[  246.063275][T11029] erspan0: entered promiscuous mode
[  246.089062][T11029] ip_vti0: entered promiscuous mode
[  246.131086][T11029] ip6_vti0: entered promiscuous mode
[  246.137660][T11029] sit0: entered promiscuous mode
[  246.172555][T11029] ip6tnl0: entered promiscuous mode
[  246.191876][T11029] ip6gre0: entered promiscuous mode
[  246.202605][T11043] netlink: 'syz.2.1331': attribute type 29 has an invalid length.
[  246.210839][T11029] syz_tun: entered promiscuous mode
[  246.248114][T11029] ip6gretap0: entered promiscuous mode
[  246.254419][T11029] bridge0: entered promiscuous mode
[  246.279149][T11029] bond0: entered promiscuous mode
[  246.318003][T11029] team0: entered promiscuous mode
[  246.324416][T11029] dummy0: entered promiscuous mode
[  246.348899][T11029] nlmon0: entered promiscuous mode
[  246.369021][T11029] caif0: entered promiscuous mode
[  246.374472][T11029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.549581][ T5836] Bluetooth: hci4: link tx timeout
[  246.555038][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  246.564570][ T5836] Bluetooth: hci4: link tx timeout
[  246.571752][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  246.586786][ T5836] Bluetooth: hci4: link tx timeout
[  246.592024][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  246.600194][ T5836] Bluetooth: hci4: link tx timeout
[  246.605362][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  246.613220][ T5836] Bluetooth: hci4: link tx timeout
[  246.618447][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  248.600093][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  248.653644][T11055] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  248.681781][ T6205] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.735977][ T6205] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.776610][ T6205] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.817075][ T6205] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.872099][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'.
[  248.995263][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'.
[  249.401405][T11112] tun0: tun_chr_ioctl cmd 1074025675
[  249.406892][T11112] tun0: persist enabled
[  249.411514][T11112] tun0: tun_chr_ioctl cmd 1074025681
[  249.417248][T11112] tun0: tun_chr_ioctl cmd 1074025675
[  249.422596][T11112] tun0: persist enabled
[  249.714953][T11130] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1343'.
[  249.808516][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'.
[  250.216738][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'.
[  250.238118][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1349'.
[  250.257026][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'.
[  250.267659][T11137] netlink: 'syz.3.1349': attribute type 1 has an invalid length.
[  250.270174][T11133] syzkaller1: entered promiscuous mode
[  250.275426][T11137] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1349'.
[  250.280863][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  250.306226][T11143] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  250.314647][T11133] syzkaller1: entered allmulticast mode
[  250.438893][T11155] netlink: 'syz.1.1353': attribute type 83 has an invalid length.
[  250.810294][T11162] bond0: (slave team0): Releasing backup interface
[  250.829389][T11166] FAULT_INJECTION: forcing a failure.
[  250.829389][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.830491][T11162] team0: left promiscuous mode
[  250.885450][T11162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  250.891087][T11166] CPU: 0 UID: 0 PID: 11166 Comm: syz.3.1358 Not tainted syzkaller #0 PREEMPT(full) 
[  250.891158][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  250.891200][T11166] Call Trace:
[  250.891223][T11166]  <TASK>
[  250.891245][T11166]  dump_stack_lvl+0xe8/0x150
[  250.891342][T11166]  should_fail_ex+0x414/0x560
[  250.891443][T11166]  _copy_from_user+0x2d/0xb0
[  250.891526][T11166]  ___sys_sendmsg+0x158/0x2a0
[  250.891620][T11166]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.891696][T11166]  ? __lock_acquire+0x6b6/0x2cf0
[  250.891893][T11166]  __sys_sendmmsg+0x227/0x430
[  250.891987][T11166]  ? __pfx___sys_sendmmsg+0x10/0x10
[  250.892051][T11166]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  250.892181][T11166]  ? ksys_write+0x22a/0x250
[  250.892242][T11166]  ? __pfx_ksys_write+0x10/0x10
[  250.892316][T11166]  __x64_sys_sendmmsg+0xa0/0xc0
[  250.892394][T11166]  do_syscall_64+0xec/0xf80
[  250.892457][T11166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.892505][T11166]  ? trace_irq_disable+0x37/0x100
[  250.892579][T11166]  ? clear_bhb_loop+0x60/0xb0
[  250.892650][T11166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.892711][T11166] RIP: 0033:0x7f492c98f749
[  250.892758][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.892810][T11166] RSP: 002b:00007f492d7ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  250.892876][T11166] RAX: ffffffffffffffda RBX: 00007f492cbe5fa0 RCX: 00007f492c98f749
[  250.892927][T11166] RDX: 07fffffffffffd33 RSI: 0000200000004d00 RDI: 0000000000000003
[  250.892976][T11166] RBP: 00007f492d7ea090 R08: 0000000000000000 R09: 0000000000000000
[  250.893032][T11166] R10: 0000000020000890 R11: 0000000000000246 R12: 0000000000000001
[  250.893080][T11166] R13: 00007f492cbe6038 R14: 00007f492cbe5fa0 R15: 00007ffda2fe1ee8
[  250.893167][T11166]  </TASK>
[  251.318364][T11182] __nla_validate_parse: 4 callbacks suppressed
[  251.318386][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  251.371634][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  251.403537][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'.
[  251.406774][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'.
[  251.468647][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  251.492245][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'.
[  252.212510][T11202] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1362'.
[  252.585278][T11190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.627041][T11218] syzkaller1: entered promiscuous mode
[  252.632771][T11218] syzkaller1: entered allmulticast mode
[  252.704493][T11221] tipc: Failed to remove unknown binding: 66,1,1/0:732734107/732734109
[  252.767803][T11221] tipc: Failed to remove unknown binding: 66,1,1/0:732734107/732734109
[  252.803166][T11221] tipc: Failed to remove unknown binding: 66,1,1/0:732734107/732734109
[  253.031435][T11237] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  253.351965][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'.
[  253.489882][T11266] syzkaller1: entered promiscuous mode
[  253.495422][T11266] syzkaller1: entered allmulticast mode
[  253.544678][T11270] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1383'.
[  253.835556][T11282] xt_hashlimit: size too large, truncated to 1048576
[  254.305876][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  254.476087][T11297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  254.717596][T11303] FAULT_INJECTION: forcing a failure.
[  254.717596][T11303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.730912][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.0.1394 Not tainted syzkaller #0 PREEMPT(full) 
[  254.730941][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  254.730954][T11303] Call Trace:
[  254.730962][T11303]  <TASK>
[  254.730970][T11303]  dump_stack_lvl+0xe8/0x150
[  254.731004][T11303]  should_fail_ex+0x414/0x560
[  254.731041][T11303]  _copy_from_user+0x2d/0xb0
[  254.731069][T11303]  ___sys_sendmsg+0x158/0x2a0
[  254.731099][T11303]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.731162][T11303]  ? __fget_files+0x2a/0x420
[  254.731189][T11303]  ? __fget_files+0x3a0/0x420
[  254.731227][T11303]  __x64_sys_sendmsg+0x19b/0x260
[  254.731254][T11303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.731283][T11303]  ? __pfx_ksys_write+0x10/0x10
[  254.731309][T11303]  do_syscall_64+0xec/0xf80
[  254.731328][T11303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.731344][T11303]  ? trace_irq_disable+0x37/0x100
[  254.731366][T11303]  ? clear_bhb_loop+0x60/0xb0
[  254.731387][T11303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.731403][T11303] RIP: 0033:0x7ff2ced8f749
[  254.731419][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.731435][T11303] RSP: 002b:00007ff2cfc3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.731455][T11303] RAX: ffffffffffffffda RBX: 00007ff2cefe5fa0 RCX: 00007ff2ced8f749
[  254.731468][T11303] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  254.731479][T11303] RBP: 00007ff2cfc3c090 R08: 0000000000000000 R09: 0000000000000000
[  254.731490][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.731500][T11303] R13: 00007ff2cefe6038 R14: 00007ff2cefe5fa0 R15: 00007ffc88ef5d48
[  254.731526][T11303]  </TASK>
[  254.800335][T11309] FAULT_INJECTION: forcing a failure.
[  254.800335][T11309] name failslab, interval 1, probability 0, space 0, times 0
[  254.956709][T11309] CPU: 0 UID: 0 PID: 11309 Comm: syz.2.1395 Not tainted syzkaller #0 PREEMPT(full) 
[  254.956739][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  254.956752][T11309] Call Trace:
[  254.956760][T11309]  <TASK>
[  254.956769][T11309]  dump_stack_lvl+0xe8/0x150
[  254.956811][T11309]  should_fail_ex+0x414/0x560
[  254.956853][T11309]  should_failslab+0xa8/0x100
[  254.956882][T11309]  __kmalloc_noprof+0xdf/0x800
[  254.956904][T11309]  ? tomoyo_encode+0x28b/0x550
[  254.956940][T11309]  tomoyo_encode+0x28b/0x550
[  254.956976][T11309]  tomoyo_realpath_from_path+0x58d/0x5d0
[  254.957009][T11309]  ? tomoyo_domain+0xd8/0x130
[  254.957045][T11309]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  254.957071][T11309]  tomoyo_path_number_perm+0x1e8/0x5a0
[  254.957103][T11309]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  254.957127][T11309]  ? __lock_acquire+0x6b6/0x2cf0
[  254.957167][T11309]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  254.957216][T11309]  ? __fget_files+0x2a/0x420
[  254.957247][T11309]  ? __fget_files+0x2a/0x420
[  254.957272][T11309]  ? __fget_files+0x3a0/0x420
[  254.957298][T11309]  ? __fget_files+0x2a/0x420
[  254.957330][T11309]  security_file_ioctl+0xcb/0x2d0
[  254.957355][T11309]  __se_sys_ioctl+0x47/0x170
[  254.957392][T11309]  do_syscall_64+0xec/0xf80
[  254.957415][T11309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.957436][T11309]  ? trace_irq_disable+0x37/0x100
[  254.957465][T11309]  ? clear_bhb_loop+0x60/0xb0
[  254.957492][T11309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.957513][T11309] RIP: 0033:0x7f3509b8f749
[  254.957533][T11309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.957552][T11309] RSP: 002b:00007f350a98d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  254.957576][T11309] RAX: ffffffffffffffda RBX: 00007f3509de6090 RCX: 00007f3509b8f749
[  254.957592][T11309] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000003
[  254.957607][T11309] RBP: 00007f350a98d090 R08: 0000000000000000 R09: 0000000000000000
[  254.957621][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.957634][T11309] R13: 00007f3509de6128 R14: 00007f3509de6090 R15: 00007fff110e0168
[  254.957671][T11309]  </TASK>
[  255.017029][T11309] ERROR: Out of memory at tomoyo_realpath_from_path.
[  255.191305][T11309] veth1_to_bridge: mtu greater than device maximum
[  255.429864][T11327] syzkaller0: entered promiscuous mode
[  255.436082][T11327] syzkaller0: entered allmulticast mode
[  255.534672][T11323] syzkaller1: entered promiscuous mode
[  255.542701][T11323] syzkaller1: entered allmulticast mode
[  255.826413][T11350] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  256.605783][T11394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  256.806208][T11404] __nla_validate_parse: 5 callbacks suppressed
[  256.806228][T11404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1409'.
[  257.023959][T11409] netlink: 'syz.0.1423': attribute type 3 has an invalid length.
[  257.264504][T11418] bond2: Removing last ns target with arp_interval on
[  257.670796][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1430'.
[  257.680008][T11440] netlink: 'syz.1.1431': attribute type 1 has an invalid length.
[  257.817997][T11440] 8021q: adding VLAN 0 to HW filter on device bond3
[  257.864020][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'.
[  257.881229][T11440] unsupported nlmsg_type 40
[  257.947271][T11445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input37
[  257.985304][T11447] 8021q: adding VLAN 0 to HW filter on device batadv1
[  258.033537][T11447] bond3: (slave batadv1): making interface the new active one
[  258.063632][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'.
[  258.088273][T11447] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  258.176187][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1434'.
[  258.218195][T11456] netlink: 'syz.3.1434': attribute type 1 has an invalid length.
[  258.260480][T11456] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1434'.
[  258.709700][T11471] netlink: 'syz.4.1436': attribute type 1 has an invalid length.
[  258.726709][T11471] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1436'.
[  258.838228][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  258.904392][T11477] sctp: [Deprecated]: syz.3.1439 (pid 11477) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.904392][T11477] Use struct sctp_sack_info instead
[  258.940191][T11482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1441'.
[  258.967944][T11477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1439'.
[  259.328099][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'.
[  259.362214][T11500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.448220][T11508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.537426][T11500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.562016][T11514] openvswitch: netlink: Flow key attr not present in new flow.
[  259.780889][T11526] netlink: 'syz.4.1454': attribute type 2 has an invalid length.
[  259.834527][T11526] ieee802154 phy1 wpan1: encryption failed: -22
[  260.001399][T11537] netlink: 'syz.0.1459': attribute type 3 has an invalid length.
[  260.031312][T11538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.052341][T11538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.170586][T11541] netlink: 'syz.0.1460': attribute type 10 has an invalid length.
[  260.252405][T11549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.400160][T11557] ip6t_srh: unknown srh invflags BA61
[  260.614654][T11562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input38
[  260.734505][T11567] netlink: 'syz.2.1470': attribute type 3 has an invalid length.
[  260.992047][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  261.120119][T11590] netlink: 'syz.3.1477': attribute type 1 has an invalid length.
[  261.210842][T11593] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  261.221821][T11593] bond0: (slave gre0): Error -95 calling set_mac_address
[  261.414590][T11603] bond1: option min_links: invalid value (18446744073709551612)
[  261.422777][T11603] bond1: option min_links: allowed values 0 - 2147483647
[  261.431574][T11603] bond1 (unregistering): Released all slaves
[  261.750194][T11618] netlink: 'syz.0.1484': attribute type 3 has an invalid length.
[  262.099366][T11646] netlink: 'syz.0.1494': attribute type 1 has an invalid length.
[  262.144620][T11646] netlink: 'syz.0.1494': attribute type 4 has an invalid length.
[  262.256311][T11646] __nla_validate_parse: 16 callbacks suppressed
[  262.256335][T11646] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1494'.
[  262.297272][T11658] IPVS: sh: FWM 3 0x00000003 - no destination available
[  262.304428][ T5910] IPVS: starting estimator thread 0...
[  262.316694][T11646] wlan1: mtu less than device minimum
[  262.406752][T11659] IPVS: using max 26 ests per chain, 62400 per kthread
[  262.500325][T11666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1503'.
[  262.551570][T11668] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  262.567992][T11668] bond0: (slave gre0): Error -95 calling set_mac_address
[  262.801450][T11678] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1506'.
[  262.981826][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  263.000103][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'.
[  263.014028][T11686] netlink: 'syz.4.1508': attribute type 1 has an invalid length.
[  263.022321][T11686] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1508'.
[  263.048027][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1507'.
[  263.060163][T11682] netlink: 'syz.3.1507': attribute type 1 has an invalid length.
[  263.068616][T11682] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1507'.
[  263.600568][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'.
[  263.632861][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'.
[  263.754899][T11705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input39
[  263.999970][T11712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.018571][T11712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.121750][T11712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.146243][T11712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.296250][T11712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.307480][T11712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.358120][T11726] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  264.696043][T11712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.707851][T11712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.861117][ T2024] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.875160][ T2024] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.905528][ T2024] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.924790][ T2024] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.952433][ T2024] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.970146][ T2024] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.029559][ T6205] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.055393][ T6205] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.579118][T11768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40
[  266.207494][T11795] netlink: 'syz.0.1547': attribute type 13 has an invalid length.
[  266.395663][T11797] team0: Mode changed to "broadcast"
[  266.404751][T11808] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  266.471793][T11808] syzkaller0: entered promiscuous mode
[  266.511782][T11808] syzkaller0: entered allmulticast mode
[  266.533082][T11814] FAULT_INJECTION: forcing a failure.
[  266.533082][T11814] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.569209][T11814] CPU: 1 UID: 0 PID: 11814 Comm: syz.1.1553 Not tainted syzkaller #0 PREEMPT(full) 
[  266.569238][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  266.569252][T11814] Call Trace:
[  266.569260][T11814]  <TASK>
[  266.569270][T11814]  dump_stack_lvl+0xe8/0x150
[  266.569303][T11814]  should_fail_ex+0x414/0x560
[  266.569343][T11814]  _copy_from_user+0x2d/0xb0
[  266.569372][T11814]  kstrtouint_from_user+0xc4/0x170
[  266.569399][T11814]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  266.569438][T11814]  proc_fail_nth_write+0x88/0x200
[  266.569463][T11814]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  266.569492][T11814]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  266.569517][T11814]  vfs_write+0x27e/0xb30
[  266.569548][T11814]  ? __pfx_vfs_write+0x10/0x10
[  266.569571][T11814]  ? __fget_files+0x2a/0x420
[  266.569603][T11814]  ? __fget_files+0x3a0/0x420
[  266.569628][T11814]  ? __fget_files+0x2a/0x420
[  266.569666][T11814]  ksys_write+0x145/0x250
[  266.569690][T11814]  ? __pfx_ksys_write+0x10/0x10
[  266.569724][T11814]  do_syscall_64+0xec/0xf80
[  266.569752][T11814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.569769][T11814]  ? trace_irq_disable+0x37/0x100
[  266.569793][T11814]  ? clear_bhb_loop+0x60/0xb0
[  266.569816][T11814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.569834][T11814] RIP: 0033:0x7eff7bd8e1ff
[  266.569851][T11814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  266.569868][T11814] RSP: 002b:00007eff79fee030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  266.569888][T11814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff7bd8e1ff
[  266.569902][T11814] RDX: 0000000000000001 RSI: 00007eff79fee0a0 RDI: 0000000000000003
[  266.569914][T11814] RBP: 00007eff79fee090 R08: 0000000000000000 R09: 0000000000000000
[  266.569925][T11814] R10: 0000000000008124 R11: 0000000000000293 R12: 0000000000000001
[  266.569936][T11814] R13: 00007eff7bfe6038 R14: 00007eff7bfe5fa0 R15: 00007ffda35bc7e8
[  266.569967][T11814]  </TASK>
[  266.781044][T11795] syzkaller0: left promiscuous mode
[  266.786316][T11795] syzkaller0: left allmulticast mode
[  267.248022][T11836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  267.377053][T11832] __nla_validate_parse: 24 callbacks suppressed
[  267.377073][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'.
[  268.818420][T11884] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1570'.
[  269.430802][T11857] ip6gretap1: entered promiscuous mode
[  269.436321][T11857] ip6gretap1: entered allmulticast mode
[  269.683998][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'.
[  269.693339][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'.
[  269.703247][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'.
[  269.736901][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'.
[  270.084013][T11916] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1580'.
[  270.221584][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'.
[  271.012548][T11927] syz.2.1582 uses old SIOCAX25GETINFO
[  271.779429][T11957] syzkaller1: entered promiscuous mode
[  271.796829][T11957] syzkaller1: entered allmulticast mode
[  272.075304][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'.
[  272.458102][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'.
[  272.509209][T12007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1603'.
[  272.718392][T12017] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1607'.
[  272.731678][T12018] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1606'.
[  272.781982][T12018] FAULT_INJECTION: forcing a failure.
[  272.781982][T12018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.815690][T12018] CPU: 0 UID: 0 PID: 12018 Comm: syz.2.1606 Not tainted syzkaller #0 PREEMPT(full) 
[  272.815722][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  272.815736][T12018] Call Trace:
[  272.815744][T12018]  <TASK>
[  272.815754][T12018]  dump_stack_lvl+0xe8/0x150
[  272.815788][T12018]  should_fail_ex+0x414/0x560
[  272.815829][T12018]  _copy_from_user+0x2d/0xb0
[  272.815858][T12018]  ___sys_sendmsg+0x158/0x2a0
[  272.815898][T12018]  ? __pfx____sys_sendmsg+0x10/0x10
[  272.815963][T12018]  ? __fget_files+0x2a/0x420
[  272.815991][T12018]  ? __fget_files+0x3a0/0x420
[  272.816029][T12018]  __x64_sys_sendmsg+0x19b/0x260
[  272.816059][T12018]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  272.816097][T12018]  ? __pfx_ksys_write+0x10/0x10
[  272.816131][T12018]  do_syscall_64+0xec/0xf80
[  272.816153][T12018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.816175][T12018]  ? trace_irq_disable+0x37/0x100
[  272.816204][T12018]  ? clear_bhb_loop+0x60/0xb0
[  272.816231][T12018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.816252][T12018] RIP: 0033:0x7f3509b8f749
[  272.816271][T12018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.816290][T12018] RSP: 002b:00007f350a9ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.816313][T12018] RAX: ffffffffffffffda RBX: 00007f3509de5fa0 RCX: 00007f3509b8f749
[  272.816330][T12018] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 000000000000000a
[  272.816344][T12018] RBP: 00007f350a9ae090 R08: 0000000000000000 R09: 0000000000000000
[  272.816358][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.816371][T12018] R13: 00007f3509de6038 R14: 00007f3509de5fa0 R15: 00007fff110e0168
[  272.816406][T12018]  </TASK>
[  272.886130][T12025] team0: Unable to change to the same mode the team is in
[  273.117724][T12031] team0: Mode changed to "broadcast"
[  273.268700][T12044] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1616'.
[  273.428649][T12057] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1619'.
[  273.442971][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'.
[  273.558708][T12057] team0: Mode changed to "loadbalance"
[  273.720775][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1624'.
[  273.735003][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'.
[  273.944641][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'.
[  273.957062][T12078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.965599][T12078] syzkaller0: entered promiscuous mode
[  273.971583][T12078] syzkaller0: entered allmulticast mode
[  273.987288][T12078] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  274.010962][T12078] tipc: Resetting bearer <eth:syzkaller0>
[  274.020775][T12078] netlink: 'syz.3.1628': attribute type 1 has an invalid length.
[  274.078141][T12078] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.115423][T12084] bond1: (slave ip6gretap2): making interface the new active one
[  274.125290][T12084] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[  274.244075][T12078] veth7: entered promiscuous mode
[  274.261757][T12078] bond1: (slave veth7): Enslaving as an active interface with a down link
[  274.290562][T12076] tipc: Resetting bearer <eth:syzkaller0>
[  274.317749][T12076] tipc: Disabling bearer <eth:syzkaller0>
[  274.336236][T12091] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  274.869513][T12121] x_tables: duplicate underflow at hook 1
[  275.281832][T12137] netlink: 'syz.2.1644': attribute type 10 has an invalid length.
[  275.309241][T12137] veth0_vlan: left promiscuous mode
[  275.328002][T12137] veth0_vlan: entered promiscuous mode
[  275.353146][T12137] team0: Device veth0_vlan failed to register rx_handler
[  275.783376][T12151] tunl0: Caught tx_queue_len zero misconfig
[  276.037660][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.079828][T12153] Cannot find add_set index 3 as target
[  276.733188][T12187] netlink: 'syz.0.1660': attribute type 1 has an invalid length.
[  277.474314][T12192] __nla_validate_parse: 8 callbacks suppressed
[  277.474336][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'.
[  277.521292][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'.
[  277.674300][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'.
[  277.692466][T12201] netlink: 'syz.1.1665': attribute type 1 has an invalid length.
[  277.763650][T12201] 8021q: adding VLAN 0 to HW filter on device bond4
[  277.883133][T12205] 8021q: adding VLAN 0 to HW filter on device bond4
[  277.920065][T12205] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  277.937854][T12205] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  278.048223][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'.
[  278.061310][T12209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.077860][T12211] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  278.087510][T12211] bond4: (slave wlan0): Opening slave failed
[  278.093911][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'.
[  278.116686][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'.
[  278.147202][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'.
[  278.189693][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'.
[  278.850012][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'.
[  279.178861][T12232] lec:lec_atm_close: lec0: Shut down!
[  279.341553][T12270] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  279.834487][T12294] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1693'.
[  280.894399][T12348] syzkaller1: entered promiscuous mode
[  280.900023][T12348] syzkaller1: entered allmulticast mode
[  281.791859][T12372] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input41
[  282.014266][T12380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input42
[  284.547153][T12468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input43
[  284.706665][T12478] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

π�,���x���b�)%�	]�3D�L̥
[  284.916743][T12493] __nla_validate_parse: 5 callbacks suppressed
[  284.916764][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'.
[  284.937674][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'.
[  284.948506][T12491] tipc: Enabling of bearer <�dp:s> rejected, media not registered
[  285.182312][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'.
[  285.299482][T12511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.329418][T12511] syzkaller0: entered promiscuous mode
[  285.353432][T12511] syzkaller0: entered allmulticast mode
[  285.431458][T12509] veth1_to_bridge: mtu greater than device maximum
[  285.472435][T12518] bond0: (slave rose0): Enslaving as an active interface with an up link
[  285.528576][T12508] tipc: Resetting bearer <eth:syzkaller0>
[  285.555337][T12508] tipc: Disabling bearer <eth:syzkaller0>
[  286.634069][T12542] syzkaller0: entered promiscuous mode
[  286.644843][T12542] syzkaller0: entered allmulticast mode
[  287.212047][T12556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1760'.
[  287.251436][T12556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1760'.
[  287.445647][T12566] FAULT_INJECTION: forcing a failure.
[  287.445647][T12566] name failslab, interval 1, probability 0, space 0, times 0
[  287.483875][T12566] CPU: 1 UID: 0 PID: 12566 Comm: syz.1.1763 Not tainted syzkaller #0 PREEMPT(full) 
[  287.483909][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  287.483923][T12566] Call Trace:
[  287.483932][T12566]  <TASK>
[  287.483942][T12566]  dump_stack_lvl+0xe8/0x150
[  287.483976][T12566]  should_fail_ex+0x414/0x560
[  287.484017][T12566]  should_failslab+0xa8/0x100
[  287.484047][T12566]  __kmalloc_cache_noprof+0x84/0x700
[  287.484069][T12566]  ? __raw_spin_lock_init+0x45/0x100
[  287.484099][T12566]  ? pfkey_add+0x1355/0x2e00
[  287.484132][T12566]  pfkey_add+0x1355/0x2e00
[  287.484179][T12566]  ? __pfx_pfkey_add+0x10/0x10
[  287.484202][T12566]  ? pfkey_broadcast+0x3c2/0x3e0
[  287.484239][T12566]  pfkey_sendmsg+0xbfe/0x1090
[  287.484263][T12566]  ? unwind_next_frame+0xa5/0x23d0
[  287.484307][T12566]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  287.484360][T12566]  ? aa_sock_msg_perm+0xf1/0x1b0
[  287.484392][T12566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.484413][T12566]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  287.484440][T12566]  __sock_sendmsg+0x21c/0x270
[  287.484477][T12566]  ____sys_sendmsg+0x505/0x820
[  287.484510][T12566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.484548][T12566]  ? import_iovec+0x74/0xa0
[  287.484579][T12566]  ___sys_sendmsg+0x21f/0x2a0
[  287.484609][T12566]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.484683][T12566]  ? __fget_files+0x2a/0x420
[  287.484710][T12566]  ? __fget_files+0x3a0/0x420
[  287.484750][T12566]  __x64_sys_sendmsg+0x19b/0x260
[  287.484781][T12566]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.484819][T12566]  ? __pfx_ksys_write+0x10/0x10
[  287.484854][T12566]  do_syscall_64+0xec/0xf80
[  287.484878][T12566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.484899][T12566]  ? trace_irq_disable+0x37/0x100
[  287.484928][T12566]  ? clear_bhb_loop+0x60/0xb0
[  287.484955][T12566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.484977][T12566] RIP: 0033:0x7eff7bd8f749
[  287.484997][T12566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.485017][T12566] RSP: 002b:00007eff79fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.485041][T12566] RAX: ffffffffffffffda RBX: 00007eff7bfe5fa0 RCX: 00007eff7bd8f749
[  287.485058][T12566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  287.485072][T12566] RBP: 00007eff79fee090 R08: 0000000000000000 R09: 0000000000000000
[  287.485086][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.485099][T12566] R13: 00007eff7bfe6038 R14: 00007eff7bfe5fa0 R15: 00007ffda35bc7e8
[  287.485136][T12566]  </TASK>
[  288.977214][T12616] FAULT_INJECTION: forcing a failure.
[  288.977214][T12616] name failslab, interval 1, probability 0, space 0, times 0
[  289.016607][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.3.1777 Not tainted syzkaller #0 PREEMPT(full) 
[  289.016639][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.016653][T12616] Call Trace:
[  289.016661][T12616]  <TASK>
[  289.016670][T12616]  dump_stack_lvl+0xe8/0x150
[  289.016703][T12616]  should_fail_ex+0x414/0x560
[  289.016742][T12616]  should_failslab+0xa8/0x100
[  289.016770][T12616]  __kmalloc_cache_noprof+0x84/0x700
[  289.016797][T12616]  ? __asan_memset+0x22/0x50
[  289.016827][T12616]  ? nft_netdev_hook_alloc+0x220/0x570
[  289.016861][T12616]  nft_netdev_hook_alloc+0x220/0x570
[  289.016899][T12616]  nf_tables_parse_netdev_hooks+0x138/0x950
[  289.016939][T12616]  nft_flowtable_parse_hook+0x465/0x910
[  289.016981][T12616]  ? queue_delayed_work_on+0x12f/0x1d0
[  289.017007][T12616]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[  289.017049][T12616]  ? nf_flow_table_init+0x280/0x2a0
[  289.017081][T12616]  nf_tables_newflowtable+0x14d3/0x2390
[  289.017123][T12616]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  289.017148][T12616]  ? nfnl_pernet+0x23/0x240
[  289.017189][T12616]  ? __nla_parse+0x40/0x60
[  289.017218][T12616]  nfnetlink_rcv+0x11d9/0x2590
[  289.017282][T12616]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  289.017327][T12616]  ? ref_tracker_free+0x63a/0x7d0
[  289.017380][T12616]  ? __netlink_deliver_tap+0x807/0x850
[  289.017409][T12616]  ? netlink_deliver_tap+0x2e/0x1b0
[  289.017458][T12616]  netlink_unicast+0x82f/0x9e0
[  289.017493][T12616]  ? __pfx_netlink_unicast+0x10/0x10
[  289.017525][T12616]  ? __alloc_skb+0x198/0x3a0
[  289.017549][T12616]  ? netlink_sendmsg+0x642/0xb30
[  289.017576][T12616]  ? skb_put+0x11b/0x210
[  289.017605][T12616]  netlink_sendmsg+0x805/0xb30
[  289.017645][T12616]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.017678][T12616]  ? aa_sock_msg_perm+0xf1/0x1b0
[  289.017709][T12616]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.017729][T12616]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.017760][T12616]  __sock_sendmsg+0x21c/0x270
[  289.017796][T12616]  ____sys_sendmsg+0x505/0x820
[  289.017831][T12616]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.017868][T12616]  ? import_iovec+0x74/0xa0
[  289.017899][T12616]  ___sys_sendmsg+0x21f/0x2a0
[  289.017929][T12616]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.017997][T12616]  ? __fget_files+0x2a/0x420
[  289.018023][T12616]  ? __fget_files+0x3a0/0x420
[  289.018063][T12616]  __x64_sys_sendmsg+0x19b/0x260
[  289.018093][T12616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.018131][T12616]  ? __pfx_ksys_write+0x10/0x10
[  289.018165][T12616]  do_syscall_64+0xec/0xf80
[  289.018190][T12616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.018211][T12616]  ? trace_irq_disable+0x37/0x100
[  289.018240][T12616]  ? clear_bhb_loop+0x60/0xb0
[  289.018267][T12616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.018289][T12616] RIP: 0033:0x7f492c98f749
[  289.018309][T12616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.018328][T12616] RSP: 002b:00007f492d7ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.018352][T12616] RAX: ffffffffffffffda RBX: 00007f492cbe5fa0 RCX: 00007f492c98f749
[  289.018368][T12616] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  289.018382][T12616] RBP: 00007f492d7ea090 R08: 0000000000000000 R09: 0000000000000000
[  289.018396][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  289.018409][T12616] R13: 00007f492cbe6038 R14: 00007f492cbe5fa0 R15: 00007ffda2fe1ee8
[  289.018446][T12616]  </TASK>
[  289.414947][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1779'.
[  289.433530][T12621] ip6tnl0: Caught tx_queue_len zero misconfig
[  289.440771][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'.
[  291.615180][T12674] netlink: 'syz.1.1793': attribute type 1 has an invalid length.
[  291.673750][T12674] 8021q: adding VLAN 0 to HW filter on device bond5
[  291.682156][T12677] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.1793'.
[  291.922884][T12677] bond5 (unregistering): Released all slaves
[  292.155574][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'.
[  292.183330][T12695] ip6tnl2: entered promiscuous mode
[  292.218126][T12695] ip6tnl2: entered allmulticast mode
[  292.333167][T12700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.352173][T12700] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.432047][T12707] tun0: tun_chr_ioctl cmd 1074025675
[  292.437731][T12707] tun0: persist enabled
[  292.442347][T12707] tun0: tun_chr_ioctl cmd 1074025681
[  292.455693][T12707] tun0: tun_chr_ioctl cmd 1074025675
[  292.462050][T12707] tun0: persist enabled
[  292.495887][T12700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.509136][T12700] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.599738][T12700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.611896][T12700] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.740728][T12700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.751472][T12700] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.918710][ T6205] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  292.937671][ T6205] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.946095][ T6205] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  292.966756][ T6205] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.014531][T10864] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.029896][T10864] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.084191][ T3652] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.101686][ T3652] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.159185][T12740] FAULT_INJECTION: forcing a failure.
[  293.159185][T12740] name failslab, interval 1, probability 0, space 0, times 0
[  293.172207][T12740] CPU: 1 UID: 0 PID: 12740 Comm: syz.3.1813 Not tainted syzkaller #0 PREEMPT(full) 
[  293.172237][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  293.172248][T12740] Call Trace:
[  293.172256][T12740]  <TASK>
[  293.172265][T12740]  dump_stack_lvl+0xe8/0x150
[  293.172295][T12740]  should_fail_ex+0x414/0x560
[  293.172332][T12740]  should_failslab+0xa8/0x100
[  293.172362][T12740]  kmem_cache_alloc_noprof+0x88/0x710
[  293.172395][T12740]  ? __netlink_lookup+0xbd/0x8a0
[  293.172426][T12740]  ? skb_clone+0x212/0x3a0
[  293.172467][T12740]  skb_clone+0x212/0x3a0
[  293.172500][T12740]  __netlink_deliver_tap+0x404/0x850
[  293.172542][T12740]  ? netlink_deliver_tap+0x2e/0x1b0
[  293.172573][T12740]  netlink_deliver_tap+0x19c/0x1b0
[  293.172603][T12740]  netlink_unicast+0x7fa/0x9e0
[  293.172638][T12740]  ? __pfx_netlink_unicast+0x10/0x10
[  293.172663][T12740]  ? __alloc_skb+0x198/0x3a0
[  293.172686][T12740]  ? netlink_sendmsg+0x642/0xb30
[  293.172712][T12740]  ? skb_put+0x11b/0x210
[  293.172741][T12740]  netlink_sendmsg+0x805/0xb30
[  293.172780][T12740]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.172813][T12740]  ? aa_sock_msg_perm+0xf1/0x1b0
[  293.172844][T12740]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  293.172867][T12740]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.172898][T12740]  __sock_sendmsg+0x21c/0x270
[  293.172934][T12740]  ____sys_sendmsg+0x505/0x820
[  293.172967][T12740]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.173004][T12740]  ? import_iovec+0x74/0xa0
[  293.173035][T12740]  ___sys_sendmsg+0x21f/0x2a0
[  293.173070][T12740]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.173135][T12740]  ? __fget_files+0x2a/0x420
[  293.173160][T12740]  ? __fget_files+0x3a0/0x420
[  293.173198][T12740]  __x64_sys_sendmsg+0x19b/0x260
[  293.173228][T12740]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  293.173265][T12740]  ? __pfx_ksys_write+0x10/0x10
[  293.173299][T12740]  do_syscall_64+0xec/0xf80
[  293.173323][T12740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.173343][T12740]  ? trace_irq_disable+0x37/0x100
[  293.173371][T12740]  ? clear_bhb_loop+0x60/0xb0
[  293.173398][T12740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.173419][T12740] RIP: 0033:0x7f492c98f749
[  293.173438][T12740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.173464][T12740] RSP: 002b:00007f492d7ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.173487][T12740] RAX: ffffffffffffffda RBX: 00007f492cbe5fa0 RCX: 00007f492c98f749
[  293.173503][T12740] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  293.173518][T12740] RBP: 00007f492d7ea090 R08: 0000000000000000 R09: 0000000000000000
[  293.173531][T12740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.173544][T12740] R13: 00007f492cbe6038 R14: 00007f492cbe5fa0 R15: 00007ffda2fe1ee8
[  293.173580][T12740]  </TASK>
[  293.609310][T12744] team0: Mode changed to "broadcast"
[  293.668173][T12749] netlink: 'syz.4.1818': attribute type 1 has an invalid length.
[  293.690231][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'.
[  293.709650][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'.
[  293.768541][T12749] netlink: 'syz.4.1818': attribute type 13 has an invalid length.
[  294.012006][ T3652] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.042159][ T3652] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.071531][ T3652] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.098647][ T3652] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.367147][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'.
[  294.762480][T12794] syzkaller1: entered promiscuous mode
[  294.781191][T12794] syzkaller1: entered allmulticast mode
[  295.061857][T12822] xt_hashlimit: size too large, truncated to 1048576
[  296.323029][T12865] syzkaller1: entered promiscuous mode
[  296.328901][T12865] syzkaller1: entered allmulticast mode
[  296.699640][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'.
[  296.712002][    T9] IPVS: starting estimator thread 0...
[  296.720114][T12891] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  296.727565][T12897] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  296.837619][T12909] IPVS: using max 29 ests per chain, 69600 per kthread
[  296.963187][T12914] netlink: 'syz.4.1851': attribute type 21 has an invalid length.
[  297.872883][T12946] team0: Unable to change to the same mode the team is in
[  298.108739][T12954] netlink: 'syz.1.1860': attribute type 1 has an invalid length.
[  298.158787][T12954] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1860'.
[  298.374274][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'.
[  298.442913][T12977] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1863'.
[  298.473755][T12966] syzkaller1: entered promiscuous mode
[  298.500696][T12966] syzkaller1: entered allmulticast mode
[  298.548427][T12977] batadv0: entered promiscuous mode
[  298.569594][T12977] debugfs: 'hsr1' already exists in 'hsr'
[  298.575415][T12977] Cannot create hsr debugfs directory
[  298.628629][T12977] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  298.649531][T12977] 8021q: adding VLAN 0 to HW filter on device hsr1
[  298.671888][T12977] batadv0: left promiscuous mode
[  299.015311][T13005] netlink: 'syz.1.1870': attribute type 10 has an invalid length.
[  299.042621][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'.
[  299.084868][T13005] 8021q: adding VLAN 0 to HW filter on device team0
[  299.125599][T13005] team0: entered promiscuous mode
[  299.131621][T13005] bond0: (slave team0): Enslaving as an active interface with an up link
[  299.497177][T13038] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1881'.
[  300.415484][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'.
[  300.483591][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'.
[  300.688535][T13078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1887'.
[  300.699338][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'.
[  300.953878][T13099] netlink: 'syz.4.1893': attribute type 3 has an invalid length.
[  301.586898][T13124] FAULT_INJECTION: forcing a failure.
[  301.586898][T13124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.629822][T13124] CPU: 0 UID: 0 PID: 13124 Comm: syz.0.1899 Not tainted syzkaller #0 PREEMPT(full) 
[  301.629859][T13124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  301.629873][T13124] Call Trace:
[  301.629882][T13124]  <TASK>
[  301.629891][T13124]  dump_stack_lvl+0xe8/0x150
[  301.629926][T13124]  should_fail_ex+0x414/0x560
[  301.629966][T13124]  _copy_to_user+0x31/0xb0
[  301.629996][T13124]  bpf_test_finish+0x1dd/0x6d0
[  301.630032][T13124]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  301.630065][T13124]  ? __pfx_bpf_test_finish+0x10/0x10
[  301.630100][T13124]  ? _copy_from_user+0x94/0xb0
[  301.630127][T13124]  ? bpf_test_init+0x113/0x150
[  301.630156][T13124]  bpf_prog_test_run_xdp+0x891/0x10e0
[  301.630204][T13124]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  301.630239][T13124]  ? __fget_files+0x2a/0x420
[  301.630272][T13124]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  301.630302][T13124]  bpf_prog_test_run+0x2c7/0x340
[  301.630339][T13124]  __sys_bpf+0x562/0x860
[  301.630370][T13124]  ? __pfx___sys_bpf+0x10/0x10
[  301.630417][T13124]  ? ksys_write+0x22a/0x250
[  301.630441][T13124]  ? __pfx_ksys_write+0x10/0x10
[  301.630470][T13124]  __x64_sys_bpf+0x7c/0x90
[  301.630499][T13124]  do_syscall_64+0xec/0xf80
[  301.630522][T13124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.630544][T13124]  ? trace_irq_disable+0x37/0x100
[  301.630572][T13124]  ? clear_bhb_loop+0x60/0xb0
[  301.630598][T13124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.630620][T13124] RIP: 0033:0x7ff2ced8f749
[  301.630639][T13124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.630658][T13124] RSP: 002b:00007ff2cfc3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  301.630682][T13124] RAX: ffffffffffffffda RBX: 00007ff2cefe5fa0 RCX: 00007ff2ced8f749
[  301.630698][T13124] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  301.630713][T13124] RBP: 00007ff2cfc3c090 R08: 0000000000000000 R09: 0000000000000000
[  301.630739][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  301.630753][T13124] R13: 00007ff2cefe6038 R14: 00007ff2cefe5fa0 R15: 00007ffc88ef5d48
[  301.630788][T13124]  </TASK>
[  301.933867][T13130] __nla_validate_parse: 1 callbacks suppressed
[  301.933887][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'.
[  302.031394][T13136] FAULT_INJECTION: forcing a failure.
[  302.031394][T13136] name failslab, interval 1, probability 0, space 0, times 0
[  302.096189][T13136] CPU: 1 UID: 0 PID: 13136 Comm: syz.3.1904 Not tainted syzkaller #0 PREEMPT(full) 
[  302.096219][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  302.096232][T13136] Call Trace:
[  302.096241][T13136]  <TASK>
[  302.096251][T13136]  dump_stack_lvl+0xe8/0x150
[  302.096286][T13136]  should_fail_ex+0x414/0x560
[  302.096326][T13136]  should_failslab+0xa8/0x100
[  302.096355][T13136]  kmem_cache_alloc_noprof+0x88/0x710
[  302.096388][T13136]  ? sk_filter_trim_cap+0x1e1/0xd60
[  302.096419][T13136]  ? skb_clone+0x212/0x3a0
[  302.096452][T13136]  skb_clone+0x212/0x3a0
[  302.096489][T13136]  __netlink_deliver_tap+0x404/0x850
[  302.096529][T13136]  ? netlink_deliver_tap+0x2e/0x1b0
[  302.096557][T13136]  netlink_deliver_tap+0x19c/0x1b0
[  302.096586][T13136]  netlink_dump+0x92b/0xe90
[  302.096624][T13136]  ? __pfx_netlink_dump+0x10/0x10
[  302.096647][T13136]  ? __netlink_lookup+0x7db/0x8a0
[  302.096701][T13136]  ? netlink_lookup+0x30/0x200
[  302.096727][T13136]  ? netlink_lookup+0x30/0x200
[  302.096751][T13136]  ? netlink_lookup+0x30/0x200
[  302.096783][T13136]  __netlink_dump_start+0x5cb/0x7e0
[  302.096820][T13136]  rtnetlink_rcv_msg+0x9eb/0xb70
[  302.096846][T13136]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  302.096866][T13136]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  302.096889][T13136]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  302.096911][T13136]  ? ref_tracker_free+0x63a/0x7d0
[  302.096932][T13136]  ? __pfx_rtnl_dumpit+0x10/0x10
[  302.096956][T13136]  ? __pfx_tc_dump_qdisc+0x10/0x10
[  302.096988][T13136]  netlink_rcv_skb+0x208/0x470
[  302.097017][T13136]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  302.097044][T13136]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.097085][T13136]  ? netlink_deliver_tap+0x2e/0x1b0
[  302.097121][T13136]  netlink_unicast+0x82f/0x9e0
[  302.097156][T13136]  ? __pfx_netlink_unicast+0x10/0x10
[  302.097180][T13136]  ? __alloc_skb+0x198/0x3a0
[  302.097204][T13136]  ? netlink_sendmsg+0x642/0xb30
[  302.097231][T13136]  ? skb_put+0x11b/0x210
[  302.097259][T13136]  netlink_sendmsg+0x805/0xb30
[  302.097298][T13136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.097331][T13136]  ? aa_sock_msg_perm+0xf1/0x1b0
[  302.097361][T13136]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  302.097382][T13136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.097418][T13136]  __sock_sendmsg+0x21c/0x270
[  302.097454][T13136]  ____sys_sendmsg+0x505/0x820
[  302.097485][T13136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.097527][T13136]  ? import_iovec+0x74/0xa0
[  302.097558][T13136]  ___sys_sendmsg+0x21f/0x2a0
[  302.097587][T13136]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.097656][T13136]  ? __fget_files+0x2a/0x420
[  302.097681][T13136]  ? __fget_files+0x3a0/0x420
[  302.097724][T13136]  __x64_sys_sendmsg+0x19b/0x260
[  302.097753][T13136]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  302.097789][T13136]  ? __pfx_ksys_write+0x10/0x10
[  302.097820][T13136]  do_syscall_64+0xec/0xf80
[  302.097845][T13136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.097865][T13136]  ? trace_irq_disable+0x37/0x100
[  302.097894][T13136]  ? clear_bhb_loop+0x60/0xb0
[  302.097920][T13136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.097940][T13136] RIP: 0033:0x7f492c98f749
[  302.097959][T13136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.097978][T13136] RSP: 002b:00007f492d7ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.098002][T13136] RAX: ffffffffffffffda RBX: 00007f492cbe5fa0 RCX: 00007f492c98f749
[  302.098033][T13136] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003
[  302.098046][T13136] RBP: 00007f492d7ea090 R08: 0000000000000000 R09: 0000000000000000
[  302.098059][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.098072][T13136] R13: 00007f492cbe6038 R14: 00007f492cbe5fa0 R15: 00007ffda2fe1ee8
[  302.098107][T13136]  </TASK>
[  302.930253][T13151] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1901'.
[  303.008305][T13165] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  303.174867][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'.
[  303.628320][T13192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.688341][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'.
[  303.730917][T13198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.810868][T13192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.044083][T13211] lo: entered promiscuous mode
[  304.068718][T13211] tunl0: entered promiscuous mode
[  304.085398][T13211] gre0: entered promiscuous mode
[  304.115448][T13214] Cannot find add_set index 3 as target
[  304.127141][T13211] gretap0: entered promiscuous mode
[  304.148284][T13211] erspan0: entered promiscuous mode
[  304.155596][T13211] ip_vti0: entered promiscuous mode
[  304.163081][T13211] ip6_vti0: entered promiscuous mode
[  304.171226][T13211] sit0: entered promiscuous mode
[  304.185253][T13211] ip6tnl0: entered promiscuous mode
[  304.192832][T13211] ip6gre0: entered promiscuous mode
[  304.200314][T13211] syz_tun: entered promiscuous mode
[  304.208045][T13211] ip6gretap0: entered promiscuous mode
[  304.216097][T13211] bridge0: entered promiscuous mode
[  304.222988][T13211] bond0: entered promiscuous mode
[  304.229224][T13211] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.237335][T13211] `: entered promiscuous mode
[  304.243109][T13211] 8021q: adding VLAN 0 to HW filter on device `
[  304.254254][T13211] nlmon0: entered promiscuous mode
[  304.262170][T13211] caif0: entered promiscuous mode
[  304.267718][T13211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  304.691114][T13228] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1927'.
[  304.737955][T13232] syzkaller1: entered promiscuous mode
[  304.745731][T13232] syzkaller1: entered allmulticast mode
[  304.768516][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'.
[  305.508934][T13279] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1926'.
[  305.648645][T13285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input44
[  306.332174][T13314] syzkaller0: entered promiscuous mode
[  306.344231][T13314] syzkaller0: entered allmulticast mode
[  306.508683][ T5148] Bluetooth: hci1: command 0x0c24 tx timeout
[  306.518556][ T5836] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  306.682643][T13333] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1952'.
[  306.709632][T13333] netlink: 'syz.1.1952': attribute type 1 has an invalid length.
[  306.727300][T13333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.736229][T13336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.750441][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'.
[  306.797235][T13339] netlink: 'syz.1.1952': attribute type 1 has an invalid length.
[  306.818751][T13339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.964559][T13333] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1952'.
[  307.467194][T13357] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1950'.
[  307.681927][T13367] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20004
[  307.710378][T13370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1960'.
[  308.327365][T13394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  308.397418][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'.
[  308.524881][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'.
[  308.661096][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1968'.
[  309.067701][T13421] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1975'.
[  309.092359][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'.
[  309.111066][T13419] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  309.270629][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'.
[  309.578163][T13447] x_tables: duplicate underflow at hook 1
[  310.167443][T13465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1982'.
[  310.261610][T13471] FAULT_INJECTION: forcing a failure.
[  310.261610][T13471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.332095][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.2.1985 Not tainted syzkaller #0 PREEMPT(full) 
[  310.332127][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  310.332141][T13471] Call Trace:
[  310.332149][T13471]  <TASK>
[  310.332159][T13471]  dump_stack_lvl+0xe8/0x150
[  310.332193][T13471]  should_fail_ex+0x414/0x560
[  310.332233][T13471]  _copy_from_user+0x2d/0xb0
[  310.332262][T13471]  __copy_msghdr+0x3c5/0x5b0
[  310.332295][T13471]  ___sys_sendmsg+0x1a5/0x2a0
[  310.332324][T13471]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.332357][T13471]  ? kstrtouint+0x6e/0xe0
[  310.332417][T13471]  ? __fget_files+0x2a/0x420
[  310.332444][T13471]  ? __fget_files+0x3a0/0x420
[  310.332483][T13471]  __sys_sendmmsg+0x227/0x430
[  310.332516][T13471]  ? __pfx___sys_sendmmsg+0x10/0x10
[  310.332541][T13471]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  310.332602][T13471]  ? ksys_write+0x22a/0x250
[  310.332626][T13471]  ? __pfx_ksys_write+0x10/0x10
[  310.332663][T13471]  __x64_sys_sendmmsg+0xa0/0xc0
[  310.332693][T13471]  do_syscall_64+0xec/0xf80
[  310.332716][T13471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.332737][T13471]  ? trace_irq_disable+0x37/0x100
[  310.332766][T13471]  ? clear_bhb_loop+0x60/0xb0
[  310.332792][T13471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.332814][T13471] RIP: 0033:0x7f3509b8f749
[  310.332833][T13471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.332852][T13471] RSP: 002b:00007f350a9ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  310.332876][T13471] RAX: ffffffffffffffda RBX: 00007f3509de5fa0 RCX: 00007f3509b8f749
[  310.332893][T13471] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 000000000000000b
[  310.332908][T13471] RBP: 00007f350a9ae090 R08: 0000000000000000 R09: 0000000000000000
[  310.332921][T13471] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001
[  310.332935][T13471] R13: 00007f3509de6038 R14: 00007f3509de5fa0 R15: 00007fff110e0168
[  310.332970][T13471]  </TASK>
[  310.807717][T13476] netlink: 'syz.3.1987': attribute type 1 has an invalid length.
[  310.992444][T13494] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  311.080717][T13503] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  311.100756][T13490] rdma_op ffff88806a3719f0 conn xmit_rdma 0000000000000000
[  311.246634][T13509] FAULT_INJECTION: forcing a failure.
[  311.246634][T13509] name failslab, interval 1, probability 0, space 0, times 0
[  311.259607][T13509] CPU: 1 UID: 0 PID: 13509 Comm: syz.4.1996 Not tainted syzkaller #0 PREEMPT(full) 
[  311.259638][T13509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  311.259652][T13509] Call Trace:
[  311.259661][T13509]  <TASK>
[  311.259670][T13509]  dump_stack_lvl+0xe8/0x150
[  311.259704][T13509]  should_fail_ex+0x414/0x560
[  311.259746][T13509]  should_failslab+0xa8/0x100
[  311.259775][T13509]  kmem_cache_alloc_noprof+0x88/0x710
[  311.259811][T13509]  ? skb_clone+0x212/0x3a0
[  311.259844][T13509]  skb_clone+0x212/0x3a0
[  311.259877][T13509]  __netlink_deliver_tap+0x404/0x850
[  311.259919][T13509]  ? netlink_deliver_tap+0x2e/0x1b0
[  311.259950][T13509]  netlink_deliver_tap+0x19c/0x1b0
[  311.259980][T13509]  netlink_sendskb+0x68/0x140
[  311.260007][T13509]  netlink_unicast+0x397/0x9e0
[  311.260030][T13509]  ? __asan_memcpy+0x40/0x70
[  311.260072][T13509]  ? __pfx_netlink_unicast+0x10/0x10
[  311.260109][T13509]  netlink_rcv_skb+0x28c/0x470
[  311.260137][T13509]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  311.260165][T13509]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  311.260203][T13509]  ? bpf_lsm_capable+0x9/0x20
[  311.260226][T13509]  ? security_capable+0x7e/0x2e0
[  311.260259][T13509]  nfnetlink_rcv+0x282/0x2590
[  311.260297][T13509]  ? lockdep_hardirqs_on+0x7b/0x110
[  311.260320][T13509]  ? __dev_queue_xmit+0x289/0x31c0
[  311.260347][T13509]  ? __local_bh_enable_ip+0xd0/0x130
[  311.260369][T13509]  ? __dev_queue_xmit+0x289/0x31c0
[  311.260396][T13509]  ? __dev_queue_xmit+0x19cb/0x31c0
[  311.260423][T13509]  ? ___sys_sendmsg+0x21f/0x2a0
[  311.260456][T13509]  ? __dev_queue_xmit+0x289/0x31c0
[  311.260491][T13509]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  311.260522][T13509]  ? __pfx___dev_queue_xmit+0x10/0x10
[  311.260561][T13509]  ? ref_tracker_free+0x63a/0x7d0
[  311.260585][T13509]  ? __asan_memcpy+0x40/0x70
[  311.260628][T13509]  ? __pfx_ref_tracker_free+0x10/0x10
[  311.260665][T13509]  ? skb_clone+0x246/0x3a0
[  311.260695][T13509]  ? __netlink_deliver_tap+0x807/0x850
[  311.260723][T13509]  ? netlink_deliver_tap+0x2e/0x1b0
[  311.260759][T13509]  ? netlink_deliver_tap+0x2e/0x1b0
[  311.260795][T13509]  netlink_unicast+0x82f/0x9e0
[  311.260829][T13509]  ? __pfx_netlink_unicast+0x10/0x10
[  311.260853][T13509]  ? __alloc_skb+0x198/0x3a0
[  311.260877][T13509]  ? netlink_sendmsg+0x642/0xb30
[  311.260902][T13509]  ? skb_put+0x11b/0x210
[  311.260929][T13509]  netlink_sendmsg+0x805/0xb30
[  311.260969][T13509]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.261002][T13509]  ? aa_sock_msg_perm+0xf1/0x1b0
[  311.261032][T13509]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  311.261051][T13509]  ? __pfx_netlink_sendmsg+0x10/0x10
[  311.261081][T13509]  __sock_sendmsg+0x21c/0x270
[  311.261116][T13509]  ____sys_sendmsg+0x505/0x820
[  311.261149][T13509]  ? __pfx_____sys_sendmsg+0x10/0x10
[  311.261183][T13509]  ? import_iovec+0x74/0xa0
[  311.261213][T13509]  ___sys_sendmsg+0x21f/0x2a0
[  311.261241][T13509]  ? __pfx____sys_sendmsg+0x10/0x10
[  311.261304][T13509]  ? __fget_files+0x2a/0x420
[  311.261330][T13509]  ? __fget_files+0x3a0/0x420
[  311.261367][T13509]  __x64_sys_sendmsg+0x19b/0x260
[  311.261397][T13509]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  311.261433][T13509]  ? __pfx_ksys_write+0x10/0x10
[  311.261468][T13509]  do_syscall_64+0xec/0xf80
[  311.261491][T13509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.261510][T13509]  ? trace_irq_disable+0x37/0x100
[  311.261537][T13509]  ? clear_bhb_loop+0x60/0xb0
[  311.261563][T13509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.261583][T13509] RIP: 0033:0x7f04ecf8f749
[  311.261612][T13509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.261631][T13509] RSP: 002b:00007f04eded0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  311.261655][T13509] RAX: ffffffffffffffda RBX: 00007f04ed1e5fa0 RCX: 00007f04ecf8f749
[  311.261671][T13509] RDX: 0000000000004800 RSI: 00002000000000c0 RDI: 0000000000000003
[  311.261685][T13509] RBP: 00007f04eded0090 R08: 0000000000000000 R09: 0000000000000000
[  311.261699][T13509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.261712][T13509] R13: 00007f04ed1e6038 R14: 00007f04ed1e5fa0 R15: 00007ffc5433e2a8
[  311.261747][T13509]  </TASK>
[  311.811925][ T5836] block nbd1: Receive control failed (result -32)
[  312.311298][T13536] v: renamed from dummy0 (while UP)
[  312.336377][T13536] xt_TCPMSS: Only works on TCP SYN packets
[  312.343933][T13536] __nla_validate_parse: 3 callbacks suppressed
[  312.343953][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'.
[  312.361861][T13539] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2006'.
[  312.552417][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'.
[  312.941140][T13571] FAULT_INJECTION: forcing a failure.
[  312.941140][T13571] name failslab, interval 1, probability 0, space 0, times 0
[  312.959675][T13571] CPU: 0 UID: 0 PID: 13571 Comm: syz.0.2016 Not tainted syzkaller #0 PREEMPT(full) 
[  312.959706][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  312.959718][T13571] Call Trace:
[  312.959727][T13571]  <TASK>
[  312.959736][T13571]  dump_stack_lvl+0xe8/0x150
[  312.959771][T13571]  should_fail_ex+0x414/0x560
[  312.959812][T13571]  should_failslab+0xa8/0x100
[  312.959842][T13571]  __kmalloc_cache_noprof+0x84/0x700
[  312.959863][T13571]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  312.959896][T13571]  ? sctp_add_bind_addr+0x8c/0x370
[  312.959933][T13571]  sctp_add_bind_addr+0x8c/0x370
[  312.959969][T13571]  sctp_copy_local_addr_list+0x30b/0x4e0
[  312.960006][T13571]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  312.960038][T13571]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  312.960072][T13571]  ? sctp_v6_is_any+0x64/0x80
[  312.960105][T13571]  ? sctp_copy_one_addr+0x93/0x360
[  312.960140][T13571]  sctp_bind_addr_copy+0xb3/0x3c0
[  312.960172][T13571]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  312.960204][T13571]  sctp_connect_new_asoc+0x2e0/0x690
[  312.960231][T13571]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  312.960261][T13571]  ? __local_bh_enable_ip+0xd0/0x130
[  312.960283][T13571]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  312.960306][T13571]  ? security_sctp_bind_connect+0x7e/0x2e0
[  312.960332][T13571]  sctp_sendmsg+0x155c/0x2840
[  312.960368][T13571]  ? __pfx_sctp_sendmsg+0x10/0x10
[  312.960388][T13571]  ? aa_sk_perm+0x15f/0x920
[  312.960417][T13571]  ? aa_sk_perm+0x7ee/0x920
[  312.960449][T13571]  ? __pfx_aa_sk_perm+0x10/0x10
[  312.960487][T13571]  ? sock_rps_record_flow+0x19/0x410
[  312.960521][T13571]  ? inet_sendmsg+0x2f4/0x370
[  312.960555][T13571]  __sock_sendmsg+0x19c/0x270
[  312.960592][T13571]  __sys_sendto+0x3bd/0x520
[  312.960620][T13571]  ? __pfx___sys_sendto+0x10/0x10
[  312.960641][T13571]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  312.960680][T13571]  ? __fget_files+0x3a0/0x420
[  312.960720][T13571]  ? ksys_write+0x22a/0x250
[  312.960745][T13571]  ? __pfx_ksys_write+0x10/0x10
[  312.960773][T13571]  __x64_sys_sendto+0xde/0x100
[  312.960800][T13571]  do_syscall_64+0xec/0xf80
[  312.960824][T13571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.960845][T13571]  ? trace_irq_disable+0x37/0x100
[  312.960875][T13571]  ? clear_bhb_loop+0x60/0xb0
[  312.960901][T13571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.960923][T13571] RIP: 0033:0x7ff2ced8f749
[  312.960943][T13571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.960963][T13571] RSP: 002b:00007ff2cfc3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  312.960986][T13571] RAX: ffffffffffffffda RBX: 00007ff2cefe5fa0 RCX: 00007ff2ced8f749
[  312.961003][T13571] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  312.961017][T13571] RBP: 00007ff2cfc3c090 R08: 0000200000000080 R09: 000000000000001c
[  312.961032][T13571] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  312.961046][T13571] R13: 00007ff2cefe6038 R14: 00007ff2cefe5fa0 R15: 00007ffc88ef5d48
[  312.961083][T13571]  </TASK>
[  313.395533][T13575] team0: Unable to change to the same mode the team is in
[  314.017594][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'.
[  314.527899][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  314.881569][T13608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2024'.
[  314.943192][T13615] netlink: 'syz.2.2024': attribute type 1 has an invalid length.
[  314.966655][T13615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2024'.
[  315.287477][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'.
[  315.369173][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'.
[  315.383153][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'.
[  315.648128][T13656] rdma_op ffff88807a1551f0 conn xmit_rdma 0000000000000000
[  315.688974][T13660] FAULT_INJECTION: forcing a failure.
[  315.688974][T13660] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.716836][T13660] CPU: 0 UID: 0 PID: 13660 Comm: syz.2.2042 Not tainted syzkaller #0 PREEMPT(full) 
[  315.716866][T13660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  315.716880][T13660] Call Trace:
[  315.716888][T13660]  <TASK>
[  315.716897][T13660]  dump_stack_lvl+0xe8/0x150
[  315.716931][T13660]  should_fail_ex+0x414/0x560
[  315.716972][T13660]  _copy_from_user+0x2d/0xb0
[  315.717001][T13660]  ___sys_recvmsg+0x12e/0x510
[  315.717036][T13660]  ? __pfx____sys_recvmsg+0x10/0x10
[  315.717068][T13660]  ? __fget_files+0x2a/0x420
[  315.717126][T13660]  do_recvmmsg+0x307/0x770
[  315.717162][T13660]  ? __pfx_do_recvmmsg+0x10/0x10
[  315.717202][T13660]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  315.717247][T13660]  __x64_sys_recvmmsg+0x190/0x240
[  315.717293][T13660]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  315.717335][T13660]  do_syscall_64+0xec/0xf80
[  315.717358][T13660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.717379][T13660]  ? trace_irq_disable+0x37/0x100
[  315.717407][T13660]  ? clear_bhb_loop+0x60/0xb0
[  315.717433][T13660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.717454][T13660] RIP: 0033:0x7f3509b8f749
[  315.717473][T13660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.717493][T13660] RSP: 002b:00007f350a9ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  315.717516][T13660] RAX: ffffffffffffffda RBX: 00007f3509de5fa0 RCX: 00007f3509b8f749
[  315.717532][T13660] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000004
[  315.717547][T13660] RBP: 00007f350a9ae090 R08: 0000000000000000 R09: 0000000000000000
[  315.717561][T13660] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001
[  315.717574][T13660] R13: 00007f3509de6038 R14: 00007f3509de5fa0 R15: 00007fff110e0168
[  315.717608][T13660]  </TASK>
[  316.135026][T13669] netlink: 'syz.2.2046': attribute type 1 has an invalid length.
[  317.363402][T13699] __nla_validate_parse: 6 callbacks suppressed
[  317.363421][T13699] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2053'.
[  317.708866][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'.
[  317.795454][T13715] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2059'.
[  317.827800][T13727] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input45
[  318.590437][T13746] xt_TPROXY: Can be used only with -p tcp or -p udp
[  318.844753][T13759] netlink: 167380 bytes leftover after parsing attributes in process `syz.4.2070'.
[  318.864923][T13761] ==================================================================
[  318.873156][T13761] BUG: KASAN: slab-out-of-bounds in strnchr+0x5e/0x80
[  318.879979][T13761] Read of size 1 at addr ffff88802b13b3b0 by task syz.1.2068/13761
[  318.887917][T13761] 
[  318.890318][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.1.2068 Not tainted syzkaller #0 PREEMPT(full) 
[  318.890348][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  318.890363][T13761] Call Trace:
[  318.890373][T13761]  <TASK>
[  318.890382][T13761]  dump_stack_lvl+0xe8/0x150
[  318.890416][T13761]  print_report+0xca/0x240
[  318.890440][T13761]  ? strnchr+0x5e/0x80
[  318.890464][T13761]  kasan_report+0x118/0x150
[  318.890492][T13761]  ? strnchr+0x5e/0x80
[  318.890521][T13761]  strnchr+0x5e/0x80
[  318.890547][T13761]  bpf_bprintf_prepare+0x167/0x13d0
[  318.890589][T13761]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  318.890622][T13761]  ? __pfx___schedule+0x10/0x10
[  318.890644][T13761]  ? bpf_snprintf+0x47/0x1b0
[  318.890678][T13761]  bpf_snprintf+0xd3/0x1b0
[  318.890714][T13761]  bpf_prog_b55c89c768b664bf+0x55/0x84
[  318.890736][T13761]  __bpf_prog_test_run_raw_tp+0x1f7/0x440
[  318.890767][T13761]  ? __bpf_prog_test_run_raw_tp+0xcb/0x440
[  318.890797][T13761]  ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10
[  318.890832][T13761]  bpf_prog_test_run_raw_tp+0x3e3/0x6a0
[  318.890864][T13761]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  318.890894][T13761]  ? __fget_files+0x2a/0x420
[  318.890925][T13761]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  318.890963][T13761]  bpf_prog_test_run+0x2c7/0x340
[  318.891000][T13761]  __sys_bpf+0x562/0x860
[  318.891032][T13761]  ? __pfx___sys_bpf+0x10/0x10
[  318.891076][T13761]  ? rcu_is_watching+0x15/0xb0
[  318.891109][T13761]  __x64_sys_bpf+0x7c/0x90
[  318.891137][T13761]  do_syscall_64+0xec/0xf80
[  318.891161][T13761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.891183][T13761]  ? trace_irq_disable+0x37/0x100
[  318.891213][T13761]  ? clear_bhb_loop+0x60/0xb0
[  318.891238][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.891261][T13761] RIP: 0033:0x7eff7bd8f749
[  318.891281][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.891301][T13761] RSP: 002b:00007eff79fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  318.891326][T13761] RAX: ffffffffffffffda RBX: 00007eff7bfe6090 RCX: 00007eff7bd8f749
[  318.891343][T13761] RDX: 0000000000000037 RSI: 0000200000000380 RDI: 000000000000000a
[  318.891358][T13761] RBP: 00007eff7be13f91 R08: 0000000000000000 R09: 0000000000000000
[  318.891373][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.891386][T13761] R13: 00007eff7bfe6128 R14: 00007eff7bfe6090 R15: 00007ffda35bc7e8
[  318.891413][T13761]  </TASK>
[  318.891422][T13761] 
[  319.140916][T13761] Allocated by task 13761:
[  319.145352][T13761]  kasan_save_track+0x3e/0x80
[  319.150057][T13761]  __kasan_kmalloc+0x93/0xb0
[  319.154664][T13761]  __kmalloc_node_noprof+0x57a/0x820
[  319.159975][T13761]  bpf_map_area_alloc+0x64/0x180
[  319.164933][T13761]  insn_array_alloc+0x52/0x140
[  319.169807][T13761]  map_create+0xafd/0x16a0
[  319.174247][T13761]  __sys_bpf+0x5f0/0x860
[  319.178518][T13761]  __x64_sys_bpf+0x7c/0x90
[  319.182956][T13761]  do_syscall_64+0xec/0xf80
[  319.187489][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.193396][T13761] 
[  319.195735][T13761] The buggy address belongs to the object at ffff88802b13b000
[  319.195735][T13761]  which belongs to the cache kmalloc-cg-1k of size 1024
[  319.210074][T13761] The buggy address is located 0 bytes to the right of
[  319.210074][T13761]  allocated 944-byte region [ffff88802b13b000, ffff88802b13b3b0)
[  319.224590][T13761] 
[  319.226947][T13761] The buggy address belongs to the physical page:
[  319.233389][T13761] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b138
[  319.242168][T13761] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  319.250682][T13761] memcg:ffff888057215001
[  319.254945][T13761] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  319.262519][T13761] page_type: f5(slab)
[  319.266550][T13761] raw: 00fff00000000040 ffff88813ffb0280 dead000000000100 dead000000000122
[  319.275158][T13761] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff888057215001
[  319.283766][T13761] head: 00fff00000000040 ffff88813ffb0280 dead000000000100 dead000000000122
[  319.292474][T13761] head: 0000000000000000 0000000080100010 00000000f5000000 ffff888057215001
[  319.301263][T13761] head: 00fff00000000003 ffffea0000ac4e01 00000000ffffffff 00000000ffffffff
[  319.309957][T13761] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  319.318643][T13761] page dumped because: kasan: bad access detected
[  319.325079][T13761] page_owner tracks the page as allocated
[  319.330811][T13761] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 122860673713, free_ts 106213384981
[  319.352376][T13761]  post_alloc_hook+0x234/0x290
[  319.357162][T13761]  get_page_from_freelist+0x24e0/0x2580
[  319.362734][T13761]  __alloc_frozen_pages_noprof+0x181/0x370
[  319.368564][T13761]  alloc_pages_mpol+0x232/0x4a0
[  319.373435][T13761]  allocate_slab+0x86/0x3b0
[  319.377963][T13761]  ___slab_alloc+0xe53/0x1820
[  319.382658][T13761]  __slab_alloc+0x65/0x100
[  319.387098][T13761]  __kvmalloc_node_noprof+0x6b6/0x920
[  319.392583][T13761]  xt_alloc_table_info+0x40/0xb0
[  319.397540][T13761]  do_ip6t_set_ctl+0x88a/0xce0
[  319.402334][T13761]  nf_setsockopt+0x26f/0x290
[  319.406944][T13761]  do_sock_setsockopt+0x17c/0x1b0
[  319.411996][T13761]  __x64_sys_setsockopt+0x13f/0x1b0
[  319.417223][T13761]  do_syscall_64+0xec/0xf80
[  319.421754][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.427726][T13761] page last free pid 6231 tgid 6231 stack trace:
[  319.434087][T13761]  __free_frozen_pages+0xbc8/0xd30
[  319.439229][T13761]  __slab_free+0x2ce/0x320
[  319.443667][T13761]  qlist_free_all+0x97/0x100
[  319.448274][T13761]  kasan_quarantine_reduce+0x148/0x160
[  319.453752][T13761]  __kasan_slab_alloc+0x22/0x80
[  319.458630][T13761]  __kmalloc_noprof+0x3cf/0x800
[  319.463586][T13761]  tomoyo_realpath_from_path+0xe3/0x5d0
[  319.469158][T13761]  tomoyo_realpath_nofollow+0xbb/0x100
[  319.474643][T13761]  tomoyo_find_next_domain+0x251/0x1aa0
[  319.480207][T13761]  tomoyo_bprm_check_security+0x11c/0x180
[  319.485975][T13761]  security_bprm_check+0x89/0x270
[  319.491028][T13761]  bprm_execve+0x887/0x1400
[  319.495561][T13761]  kernel_execve+0x8f0/0x9f0
[  319.500179][T13761]  call_usermodehelper_exec_async+0x210/0x360
[  319.506266][T13761]  ret_from_fork+0x510/0xa50
[  319.510871][T13761]  ret_from_fork_asm+0x1a/0x30
[  319.515669][T13761] 
[  319.518108][T13761] Memory state around the buggy address:
[  319.523779][T13761]  ffff88802b13b280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  319.531863][T13761]  ffff88802b13b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  319.539947][T13761] >ffff88802b13b380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  319.548024][T13761]                                      ^
[  319.553670][T13761]  ffff88802b13b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  319.561744][T13761]  ffff88802b13b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  319.569821][T13761] ==================================================================
[  319.579407][T13761] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  319.586648][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.1.2068 Not tainted syzkaller #0 PREEMPT(full) 
[  319.596051][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  319.606137][T13761] Call Trace:
[  319.609447][T13761]  <TASK>
[  319.612408][T13761]  vpanic+0x1e0/0x670
[  319.616432][T13761]  panic+0xb9/0xc0
[  319.620186][T13761]  ? __pfx_panic+0x10/0x10
[  319.624650][T13761]  ? strnchr+0x5e/0x80
[  319.628765][T13761]  ? strnchr+0x5e/0x80
[  319.632884][T13761]  check_panic_on_warn+0x89/0xb0
[  319.637879][T13761]  ? strnchr+0x5e/0x80
[  319.641974][T13761]  end_report+0x6f/0x140
[  319.646233][T13761]  kasan_report+0x129/0x150
[  319.650756][T13761]  ? strnchr+0x5e/0x80
[  319.654848][T13761]  strnchr+0x5e/0x80
[  319.658762][T13761]  bpf_bprintf_prepare+0x167/0x13d0
[  319.664004][T13761]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  319.669663][T13761]  ? __pfx___schedule+0x10/0x10
[  319.674535][T13761]  ? bpf_snprintf+0x47/0x1b0
[  319.679146][T13761]  bpf_snprintf+0xd3/0x1b0
[  319.683620][T13761]  bpf_prog_b55c89c768b664bf+0x55/0x84
[  319.689096][T13761]  __bpf_prog_test_run_raw_tp+0x1f7/0x440
[  319.694945][T13761]  ? __bpf_prog_test_run_raw_tp+0xcb/0x440
[  319.700786][T13761]  ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10
[  319.707057][T13761]  bpf_prog_test_run_raw_tp+0x3e3/0x6a0
[  319.712646][T13761]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  319.718733][T13761]  ? __fget_files+0x2a/0x420
[  319.723352][T13761]  ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10
[  319.729442][T13761]  bpf_prog_test_run+0x2c7/0x340
[  319.734415][T13761]  __sys_bpf+0x562/0x860
[  319.738694][T13761]  ? __pfx___sys_bpf+0x10/0x10
[  319.743515][T13761]  ? rcu_is_watching+0x15/0xb0
[  319.748414][T13761]  __x64_sys_bpf+0x7c/0x90
[  319.752865][T13761]  do_syscall_64+0xec/0xf80
[  319.757400][T13761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.763485][T13761]  ? trace_irq_disable+0x37/0x100
[  319.768532][T13761]  ? clear_bhb_loop+0x60/0xb0
[  319.773238][T13761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.779146][T13761] RIP: 0033:0x7eff7bd8f749
[  319.783580][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.803243][T13761] RSP: 002b:00007eff79fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  319.811686][T13761] RAX: ffffffffffffffda RBX: 00007eff7bfe6090 RCX: 00007eff7bd8f749
[  319.819684][T13761] RDX: 0000000000000037 RSI: 0000200000000380 RDI: 000000000000000a
[  319.827772][T13761] RBP: 00007eff7be13f91 R08: 0000000000000000 R09: 0000000000000000
[  319.835769][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.843762][T13761] R13: 00007eff7bfe6128 R14: 00007eff7bfe6090 R15: 00007ffda35bc7e8
[  319.851774][T13761]  </TASK>
[  319.855414][T13761] Kernel Offset: disabled
[  319.859744][T13761] Rebooting in 86400 seconds..