last executing test programs:

3m16.76755771s ago: executing program 4 (id=1326):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)

3m16.627629023s ago: executing program 4 (id=1328):
socket$l2tp(0x2, 0x2, 0x73)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
clock_gettime(0x0, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
select(0x40, &(0x7f0000000180)={0x200, 0x0, 0x5c3e, 0xfe22, 0x0, 0x3, 0xab}, &(0x7f0000000300)={0x200, 0x0, 0x4, 0x9, 0x400, 0x9, 0x5}, &(0x7f0000000400)={0x7, 0x7, 0x494b615a, 0x2, 0x4, 0x9, 0x2, 0x7}, &(0x7f0000000480)={r3, r4/1000+10000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x7fffffffffffffff, 0x366c, 0x8, 0xffff}})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000018000000000c8586790c22f9f076ca8277c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m15.822411102s ago: executing program 0 (id=1339):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00e80000181100fe8000000000000000000000000000aa00000000000000a105eaecb7bd869c172210383046fc0000000000000000004e1d4e20001890780400000004000400ff7f00000000000047d52bd79e9f9069b5ba8f4e4bcd61765598d0e4886370108e4ba5502424bc6de07a2ff7d814c52c80"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000340)=0x2, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000380)={{r1}, "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"})
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000060003079b4a6cf0bf725d7c9221c1d6f6c7715bf6b05d4f97e5ed97ee742e4d28bbae177432a0457f43ff97b9f1a6de8c8dbb3ae2832f80471f98a0110da53de157ccdd589ed98396abc7afa79899688469da14a45a9c9a9ea511a6131f7681f43c9a71178f8ce16f8f9511fe89b5b8b384b59b4087c106ebae426f7667304da27ec19e816871becb4d0dbd60150dbf90fefd23500544e107b5b1bdb332947b5c7a15d967031d645b84eef40b73f3a82fcfbbe022f181a6864c60e55c0f74431ef7ffff526c8c8f949600"/232], 0x24}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00e80000181100fe8000000000000000000000000000aa00000000000000a105eaecb7bd869c172210383046fc0000000000000000004e1d4e20001890780400000004000400ff7f00000000000047d52bd79e9f9069b5ba8f4e4bcd61765598d0e4886370108e4ba5502424bc6de07a2ff7d814c52c80"], 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000340)=0x2, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000380)={{r1}, "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"}) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000060003079b4a6cf0bf725d7c9221c1d6f6c7715bf6b05d4f97e5ed97ee742e4d28bbae177432a0457f43ff97b9f1a6de8c8dbb3ae2832f80471f98a0110da53de157ccdd589ed98396abc7afa79899688469da14a45a9c9a9ea511a6131f7681f43c9a71178f8ce16f8f9511fe89b5b8b384b59b4087c106ebae426f7667304da27ec19e816871becb4d0dbd60150dbf90fefd23500544e107b5b1bdb332947b5c7a15d967031d645b84eef40b73f3a82fcfbbe022f181a6864c60e55c0f74431ef7ffff526c8c8f949600"/232], 0x24}}, 0x0) (async)

3m15.691922271s ago: executing program 0 (id=1342):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0)

3m15.54400804s ago: executing program 4 (id=1345):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084)

3m15.388753363s ago: executing program 0 (id=1347):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@private2, @in=@remote}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
unshare(0x400) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r4=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc)
listen(r2, 0x8) (async)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4)

3m15.0872133s ago: executing program 4 (id=1350):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3m14.991739456s ago: executing program 0 (id=1352):
r0 = socket(0x10, 0x1, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x0, 0x5, 0x1, 0xc, 0xfffffffd, 0x6, 0x4, 0x2, 0x84, 0xa, 0x28, 0x8, 0x1001, 0x4, 0x81, 0x0, 0x0, 0x10000, 0x544, 0x0, 0x3, 0x25ab}}) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0x17, 0x0, &(0x7f00000000c0)) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400a0684ce61000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf251500000008000300", @ANYRES32=r7, @ANYBLOB="08002a0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) (async)
r11 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
shutdown(r8, 0x0) (async)
getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) (async)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000703800a000100aaaaaaaaaa0000b4481d76e1eb0400221e3cb2071b5e9252697aee60c357f4622955f7b06b16c8b7c73b8255bdb5160277102f64edcd6c8ef33055047561e9a53bdad4e72706211500"/104], 0x40}}, 0x0)

3m14.946429538s ago: executing program 4 (id=1353):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x0, 0x5, 0x5, 0x79, 0x3}, 0x0, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
unshare(0x20000400)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x1, {}, 0xff}, 0x18)

3m14.892209636s ago: executing program 0 (id=1354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (fail_nth: 7)

3m14.504985091s ago: executing program 4 (id=1358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) (fail_nth: 2)

3m14.185833445s ago: executing program 32 (id=1358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) (fail_nth: 2)

3m14.139837519s ago: executing program 0 (id=1360):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x3, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00')
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="010000000000000000000a008add"], 0x1c}, 0x1, 0x0, 0x0, 0x20048880}, 0x4040094)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0xffffffffffffffff, 0x1000000, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$vsock_stream(r6, &(0x7f00000016c0)={0x28, 0x0, 0x2711}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa20000000000000702000004ffffffc103000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000d80000007b8af0ff00000000bfa100000700000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080)=0xfffffffe, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

3m14.107785135s ago: executing program 33 (id=1360):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x3, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='veth1_to_bond\x00')
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="010000000000000000000a008add"], 0x1c}, 0x1, 0x0, 0x0, 0x20048880}, 0x4040094)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x48, 0x30, 0xffffffffffffffff, 0x1000000, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$vsock_stream(r6, &(0x7f00000016c0)={0x28, 0x0, 0x2711}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa20000000000000702000004ffffffc103000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000d80000007b8af0ff00000000bfa100000700000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r10}, 0x10)
syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080)=0xfffffffe, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

12.627827337s ago: executing program 2 (id=2893):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, 0x0, 0x6)
close(0x3)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0xa0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x20004}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x8, [{0xfffffffa, 0x9}, {0x4}, {0x2, 0x6129}, {0x1ff, 0x3}, {0x8, 0xf541}, {0x9}, {0xc, 0x242}, {0x4, 0x6}]}})
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYRESOCT=r6], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

12.599792139s ago: executing program 2 (id=2894):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1}, {0x7}}}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xa00, 0x1, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0)

12.431971494s ago: executing program 2 (id=2897):
socket$l2tp(0x2, 0x2, 0x73)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
clock_gettime(0x0, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
select(0x40, &(0x7f0000000180)={0x200, 0x0, 0x5c3e, 0xfe22, 0x0, 0x3, 0xab}, &(0x7f0000000300)={0x200, 0x0, 0x4, 0x9, 0x400, 0x9, 0x5}, &(0x7f0000000400)={0x7, 0x7, 0x494b615a, 0x2, 0x4, 0x9, 0x2, 0x7}, &(0x7f0000000480)={r3, r4/1000+10000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x7fffffffffffffff, 0x366c, 0x8, 0xffff}})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000018000000000c8586790c22f9f076ca8277c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.461131439s ago: executing program 2 (id=2908):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) (async)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000000))

11.164010513s ago: executing program 2 (id=2914):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50)
close(r0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, 0x0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7fff8d0000000000000000115ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e79bb088a02186b4b644f942f14ef09f53da27fcd5434db0400c1d2f5b6cf9367cbdcdfc215bc25298ec69a78e80f0fb30a7ad66acf6e9770405a2636d133bf0bfab5283967bb18d8f08c064b36e4b00d82cba6", 0xf5}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

10.099408854s ago: executing program 2 (id=2930):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0xffff, 0x3ead, 0x3, 0x4, 0x10000, 0x2cc, 0x2, 0x101, 0xffffffffffffffff, 0x3, 0x8, 0x401, 0xf, 0x6, 0x9]}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f00000000c0))
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r4=>0x0})
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r4, 0x200002}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
write$cgroup_int(r6, &(0x7f0000000100)=0x3, 0x12)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0xffff, 0x3ead, 0x3, 0x4, 0x10000, 0x2cc, 0x2, 0x101, 0xffffffffffffffff, 0x3, 0x8, 0x401, 0xf, 0x6, 0x9]}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) (async)
bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r4, 0x200002}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) (async)
write$cgroup_int(r6, &(0x7f0000000100)=0x3, 0x12) (async)

6.843701229s ago: executing program 5 (id=2960):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300001600000003000000000000000400030007000000b90800000000000007000000000000000009000000000000050006006c0000000a00000000000000fe880000000000000000000000000001000010000000000004000400000000000700000000000000000000000000000000000020000000000200010000000000000000070000000005000500008000000a"], 0xb0}}, 0x40)

6.808567921s ago: executing program 5 (id=2961):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xefff, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3.908791014s ago: executing program 5 (id=2967):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0xfffffc01, 0x3, {{0x25, 0x4, 0x1, 0x39, 0x94, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x26, 0xffffffffffffffff, [{0x2, 0x7, "c06bdf055c"}, {0x1, 0x8, "a5924940a5a6"}, {0x1, 0x11, "b1cdb65c946e00dbbf3bf29511c77f"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xa9, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x30}, @local]}, @generic={0x83, 0xe, "df3d16a25442ba880d18c3dd"}, @lsrr={0x83, 0xb, 0xe1, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0xe, "71e8304c1970976bb2d9a4ea"}, @cipso={0x86, 0x17, 0x3, [{0x0, 0x7, "c129d7e121"}, {0x6, 0x8, "d74e788069b8"}, {0x6, 0x2}]}]}}}}})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x64, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x84}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x8810}, 0x4040)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21008d819c00fbdbdf250300000028000180cf94c46a14000400fc020000000000000000000000000000060001000a00800008000700", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
r6 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d907000000000000", 0xa)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

3.681361825s ago: executing program 6 (id=2970):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300001600000003000000000000000400030007000000b90800000000000007000000000000000000000000000000050006006c0000000a00000000000000fe88000000000000ff800000000000010000100000000000040004000000000007000000000000000000000000000000000000200000000002000100000000000000000700000000050005"], 0xb0}}, 0x40)

3.548061982s ago: executing program 6 (id=2971):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4000000)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x1027}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0)
r7 = socket(0xa, 0x2, 0x0)
getpeername$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r9, &(0x7f00000000c0), 0x9)
r10 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r10, &(0x7f0000000340)={0x1f, @none}, 0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

3.495217981s ago: executing program 3 (id=2973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x114, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x7a, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x8, &(0x7f0000000240)=@framed={{}, [@tail_call]}, 0x0, 0xf}, 0x94)
syz_emit_ethernet(0x9a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000000008080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c40dd3be27df3e34066d42ca0a5c15b37adac15084dbaf636b41e5af1802"}, {}]}}}}}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="ffffffff6673db2153a4043b483081ec72978e1721a41e06b7021dbeed8d8a90857f5a0309627a1f224bd6efe16adf6b9f696eff66cf97140f698945e69a83c7b6cd18589ce3295bd517d6000bf5caf0bec294551111d57f34e5dceb50b259b197c022196cf28890a7f6e5347a88ff9a8719eb76a3d6587f7ad005e896", @ANYRES16=r11, @ANYBLOB="010700000000000000001600000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r13, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
write(r7, &(0x7f0000000000)="0a000000010001", 0x7)

2.94375298s ago: executing program 5 (id=2975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e0106000000fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695658578feb8f3cce47f43a42919c288f7d5430ffc0226139916866a978312dd970e64629d7cd799c5e08b64de41458eb8951a54a7cf29a810823e869f5c087d15d9d3bae1c089701f970f8e7ce853654222f07959e7cdcfcf27332cb82016ccd91be54e588f6ea7b5c35a62c0ceaa4e90b29c3edc16f20db3d7fb4d6236232de07ccd7d7301f46a287dd296abe9baba499721311e1597853a2d0c7e1e64f827d31e6917175792398e0edaa900000000000000000002c900c08ac1d7b606000000000000000000000000000008000900", @ANYRES32, @ANYBLOB="080005"], 0x164}, 0x1, 0x0, 0xf8ff}, 0x0)

2.918564594s ago: executing program 3 (id=2976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x80}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x4, 0x0, 0x5}}}]}, {0x4}, {0xc, 0x7, {0x4000}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x0)

2.803278727s ago: executing program 5 (id=2978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6000000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d060028001280090001007665746800000000180002801400010000000400", @ANYRES32=0x0, @ANYBLOB="9423000040100100080020002f00000008001f000400000008000a0064"], 0x60}, 0x1, 0xba01}, 0x0)

2.791078143s ago: executing program 3 (id=2979):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000101020000400000000760203fa203f1d2d5063fc48f47f523b84283e3ce144422d1e553c19a03543b0cc617c0972465c04f58046e5582050547be3a1090cae691d4b6be590016e7f72c72610b551f849f08731bc0b4d3a4bd487f26017a6cfccd66d4481d87bf59f9ebb2fac5c123465c9441868ac32da8e60d14b284ddb2025b596ab8b9266e0d11d5fc56c126dcf0af89ac8dd4000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x5)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x10})
sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
close(0x3)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@empty, @dev}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)

2.601536376s ago: executing program 6 (id=2981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304000000000000006d06000000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000280012800a00010063616e"], 0x48}}, 0x0)

2.401839711s ago: executing program 1 (id=2983):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x104}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000610300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe3d}, 0x94)

2.296679075s ago: executing program 5 (id=2984):
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x4}, 0xb0}], 0x7, 0x20, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000bc0)="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", 0x148}, {&(0x7f0000001200)="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", 0x15d}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000940)="e813ccab313e4a6713c9f5ea8bede0016c2bd88c68dfc5608eb3d6269112caa6c5ca7ed2d06bae00287f2bad976233890fedcd168b41050369c206de8e679ffd72b2e45639608aea380fd37301910a6d85e6abfde9f9c26f7a6233550a986bfe980aa8ea3baa8048c5dea6", 0x6b}, {&(0x7f00000009c0)="28063bf24820022e586eb816b43756f769c4d98ef4ecacf6d277c0f4a25ad29746704965333311becde1a69dd8e82206a0a7697c2e870271bb79df563f1315691c255454240a31e385c0be22a13e9e1f34479721a4cfbc2df5ac3f6a7f283d574fef3757bd2e7f4e9b60a341f7d7ef3323c242c573ebed1bcebcf064a0fd7e36488527b8ad3e4c6387a7fdececded04073fc4345a35d986cc8c8d30072caaaf09f4baa0d506828eefff3bc1878e2a39a4919bc308e1b3d3e34dd03ce86407984c0289725d5c1aa731bcece91c5d01238ed700b42e3decef54dd9e70291550b05d1b6b154e2b04482851b1ff7ede71df42842aa2125011ff8", 0xf8}, {&(0x7f0000002dc0)="3e816b817c613f63cffacb5419bbc0c6dedf7e2169fb95b63610646ec34c091f2aab7ebd733a1e2f97a7e70ed92cd235d1ea4b8ac02112937f4162007d63012ec0f64050d72f08f4b092bd28f0a2b845499d55015c26d3392961dcc17dd27350df4500f4d33a4bfbf6392c650f9c1e95806e9706f13cbf5b6e85d2d4a79ed5f63aff1c3ada6d137903069f017cd3bd402ae1e6c3057aa68df74756683d0b4849ac69b3a270ffeea0ef435afddcddc4e0b3d31c0442cc20c3c431ab7bd3bdd5c84e732e435a7a417486ccf1811b9654f1c4f47a320aec6fa39fd9232777b463ec80c4c0dc077c51fb8847436ae7066a1e10db1b1e5771baca7d0013ef8fe999e415e178d5fef5956d82ae8de1e558049be065137d4b232609e1a2ca36031ae33ff18c77e155f20a83844d9ba573c7b6cc260839e65c71acd114ede14799c465e10845ecdc952da6f93f7d2a5bc2eddd63611601d9bbd507139c9ace67a9396896eb34c34e2a6261c58249630b19ec8a8a04179cf85d9714d9efe2e62237875d1237da412f4c6185248ea19691a2894473cf222222da81d78fa78a0810bdf6b213803df750e02acefbb1027939edfdc96bebea08d2d6b7970f45bfff87f3881d2f5fdb10745332037781f2b0fa16336116bf256261661dbd07e871b90c4fd787b991c272b07a8f142750dd2586ae1fb24fd85f95004f03bf969ee6e0b032afda6a90db850bbea21bc81ae52801ee82a5b25df784131f17b2c5fb9eeccb15c25cd22121df973d74ba4bdfa34c3e52d1e87505c29fb0cfc6fe4d66621b91f24cafb95d7c143eb8132201b3c53263cdb4e35ccef062e005d7d8c81e419c23d1aaf71ce5cd987e3afb39d70e68efe72369ff47756a562d49bf1998d6e6b72658230cb53582d410337cc7ab81d6f0c04f0abc2efd826502505ff50465f0a214f4a3b805691073fa51e376872164b3f9b3753bfbb0d63f5376b364f85c8ec3f70c614da8b1ecdedb0d22b28d4972240f24121e9d9ef6e101b0138d71fc53c65898ec2a9b16db5f3dcf7a96c10d877336df0c18b19b7885772a211d0b6ea7456392f7695eb98c0105003ea4afdaf9e4bc8ef7908d3daddfc8d8de66dff9c661fcbec44af4258b3bdf8e608b3891ec2007626ab320c69b53ea84ac17592402cac4f3b5bd693ac59fa62d21c18694aacc03985c6bc094799a6baf72dda002c6b4c14c6699f93d47c561d59a455b76ab22817bd545d882f84be4a160041b79d99ff20207a9f1d4ed4cac1f54429de5728b2bee0eef33be6e693182e04ddb99621e8a84b4ebc473e95ffa2ff6583482904c6501d206191b6ae92fd058f71322efcc5c321b0b2730742569b6d879e641c099dce497eb52bf4de43c7221fba17030945c9681255677e0252e6335381b1393e569e1dd5ff9be39fe39bfa6093e4c1698302c921f98ef92c865a2f91ccf0de8e033615b625449c15fd8bd984ee96fda80d745ab26ef694e2133fadb56e7d2a9c1782f20da0a1988eda2fc4b6874a94bf970deea2445e2384bcd7998d46837498879e4a50596c8d0c6eea9edb7606d755affb372c7fb9b1a84580ecb3af8862ac7a344f218f6f1c25ae478886041fa62773843d8a767fa619088585cace3bec618f2c4ea7dafb4739e1c721ea1a90001037e789dc74dafd2ad2145a5e201a0ccc5eb3e6811bab5d6ca65d208bf77751eb41e10f9efece7b3e9242a092f057b12d7f0c63262819287a16e29d0714fccf9e6f100f04c21d5945e18b83acd7d7861f1e46653b023d9dde2768d583a9e0cb6a8d90c99e2c90a31334f1d352d2ba3ff0f4ba5688ed06f2ee53f1906f1795dd1dfec94ae041341279c6cfa6f25985b94eaa5ea6448c5e64b4fd247884d533b99015a645abcf1e579c5bc1c930c75fc1d82d87df69bbfbd68b076ef97a4430f7dad1a704d04be22cad5c72d4e9c92595132e8f6430005a97be35d3774ab34bee72786678fe63e812ca2e84504c0f12e1a69daa2f7f86e034d4b14356fb6d0e5898b0ba88254b7755319cb3d34a43653cd049bdae35d5cc64a3d5d932245e4c7558d1252d7614f017a37a0ff1763352398a02ff356d271e432978a852e25a9de1b04d9f87024366fde33c1c36c6e57c25825d400ef230a8f3ec6e0f8061667df96eb75995218240c38d7126de68cbd2f581caaac13b3fe34f46104a81448501b705c4267b18fbe4494989c1892ed3339f7aec3848001c46126640f8ef61195c8f0f180260fbac0a50b7ab2087fa361e62002e337c3537a2ae3b2846326d1588c954dae6b9d8f8b5286cd52700c66b22bf0b00e76d2a24d7f81a2935f7b370c6cda2978931d326a53cbaedd388d5c7dde805f56a7429900c66fcf9e34ad786a3c278a47c4c73cdba64f1bc5ad0ad8ed1a6e026fb0ad181c873c42c3b8f59412acaeccb70ea2dff8764ba34c28ce1bcb0f8ff8d2046acd52125c5fb0285f595d979ad0e4079bbdccd374bbf0e63112e470f60dc8c4751fd9a90dfaa5df65166e58c6d69d72c73dd3dd3d5f0b85db07b733a58229deaa0ccdfad79eaa1a2c5d02dbe3762ca39bff9ab21d188b0ed819c462f2602375c9322146e603c26c89e2b92d20e9aeb4d0a1d659bf3e1c495c7489f7bad557d4d732939d8782070a431daf178ffa0e7d1a8d5eac5e33cfb9915275589be0f317f96dffba38c5e7596185c4830bdd45bd7be6e3751bee9d02851393a0578013dcdce318b5a29df56686e09816e0dac3b063337f798b2cec3140237587be00083e5f86f94356c50a5c514de76ac78973bcb46b3be65d036f115587ee63de97c3fb0fa788735aa8dac0d402dab236166061eba84f7fb445a4b5e8518778017473db000ac0191f89f05f9c01f86dfb01b54b182c942cc3d837da849b693c5c61b180cf24031d1a9af32ecabfcf0cc1b7d40140f90e4832779dc27e61819a7b126a82760de4cd4aa79dba3382f8df67cc59939affa10079a8c62edae0a51252f5ea9ed8db31141f9f37235fc35320e22f6eaaecfb3fcc7599efee97004c083339a7223119c1520d63dce402e16de5b4de48a4a6b8b29353d4dd7a4695bebc31cf61c6be3f4809d92b7c94141adc8492d8a622979d88242f55a5740ae7c7b919c3128704dd5e622b0f8f130399af0ad46d6ba5cdebd98011a93516c30479d81bd5ff465e01ebbd89f062eb4961f4c98c562ae12d79fa532238e0681d52e15a128dbda2fbeb6ebf4f5379522e528eae0349393a17dcb00f35e437fb388a1c66706ab2626334b4d06f87902c6f964818091470535fc89b4ec067c3c14996cf5f0593bb3ecf930c6ba7e29ffd1bdcf91b6a601a064042e059883a8ececc17f2eeed3090ceb273a9affa1f872c4549396be9ef67b1dbabb86e742b25122a17f6f8a20b0e18b7b9f5166a1fb41b4b9adb2f7f60dd4222cccbde6a9871b4fdc7446046d85311d7c8fe98971540675dffc2dea6e083316794990848f674d8089d119659eaac7d542a3b10a73760e892b9fe57b427412c14638abc96fbc9216578f14bebc8846412cda51145f902979b888784b561927b2d427607ab26f3e7ffdd024b499f3307c4462f9df0189e6748b568c135d63e21d57a64faeb3b85ba75a3da4daf0b8798c1112007d5404189481ff5e3f0e32667ce9f1b12d4de99e6b45ef926afcc1080fbe73cf5f69b2897c42349057566f5a6e71e12c0b04c97874fa254fa90dd3b1b10015cffe3799a2bd0c485edf0a27ba9fb47a06d8732f90cc8af8595cd9b7036d6dec9d3096759f0d2fa23b8af760c4e12c501288d08e2327dcc345742e9e25350069916860853a536f5a7ab2c9f6bee1178c877405e441a47021215d3907e5b0d99a9b8a87f19d49c5bbef4c6c894987994f6b0aa9625f8e8dec232905b4a7246d5b5971f72dfcc03d25da62a336c2b1cc461f8e52373482c5a44b954162751ba754c503228bb0702dc619423f0c1caa54c6b5ff3958da84e106e8284475d43ff34dd900a7b4e885324adafbb1ab055849a9132b00b56058dc2f711b9ef2a8569b95ca40337cae248a827867ddaad3efaf53b5e2dd70345eaa57e5b933308f09256de62132a9ec5dadd515743c91853f8c11191e41a74d2b5ec2bf657a305dfdeaf180ff4185f69a210c78eaa3eeecffe712d8a3acc28a386a159294b6bb5dbe11f31a90a2d06fd0e77e89fb75df023963060215014d71fbd28e494dcbd6d1e61bb27c397c88a8964816dfb053a425a07c5081de4cd9244ec925460ffd5e04b516eaa61d05eb27192c40e41926e9e6c3e11b420309127dd934733a47e7d4543f41b5df80d268bd048ef38ea99d7488fe6547d9446a700c3a51473bb7ecf6e16f5e05d1296537e1f624d6722a9c57472a689f0738cd39db301457098773f7fc32229abd72bb3a2f28d1547ad724c6b57c8e0c108cbf61fc9bf4af47125b0e2728429932b77cb3e4cfb5366b331d154de6af651ca9d99e41368b52a0063cb62da6418c8e6d126a4bdf2aad01bda7e0ad47ef9c2ecee8efe13c79c36765bbbbeeab73a6624256264edc6cfa7cf8f41129dfaf4dfe1f5a2b455a06271797df3790124f230439aea3fa7e44316d537576768660229aff591d45238e9163b9775711838d09811843dbd643f0f4b04d70c23f31153973869b3902f3ec71c502b75c2ee73d7273a2883375ed33bf36043ea6c57bcbc939e565240d3d35a050c7b18335529900d2614607c9d1f630939831368e7aaeb9107a8bc4c66fe247ff87ef438ba485b2110e66ca0a0865eeb9acbe46b9c88832291fb9efbcf4dd2cf9bc39a9d26cd1430f33186fe22a521df1762e77b87bff08887c104748d5d6ad5ebfa8f14531248875b46ec2138381664e51b1320e774f64a79f2282c317fe9bb890b0404738ddb9dc524b87146bcef23b35109f9b8e0f29994fc29a74e93452b3a029831a4f4d956f30b93688f32f2bab543954671c23584155e0ebdf5930f396d783c3645187e111dc854fa77620077c17985446f89665ad3ddade04406983996708de8051243fca1656fb19ea62766d3ae1c99581ed3f9784effa3f487b8d0cf1eb108ce12e47f2a67e1dba45441560a47bd723b1a31adf1f3a6a5682f74c4080f645fba56554c62655a2ede2b0c6612661c6176ccfc7b51a20e4934e7ba036a1811275fb7e57b30b7866f44bf86bd68730b2a837a4ba8779b3249a33718dc5ee7d1fe70671c021fda4024d6dac48c7fb16e01badd03bc132fe3a0227da9aedc259bd6431020ce752c941bb947c6962ed5765bcc534fe368bc43823191b1604964337b7ee2731e10603b76a3a1f9f85c0b57779c9b45a3f48cf0a7d1455df31d81a66fab898b1c553c02cbafa0642a14ec8311b53eda6bffacc668c1149976d27c3770fcaaf08a8035419ba713ad67c9d8822ae3faf224f1441ac4510118a0e3c7271dbd4b4f1793638ea787389d8d0726851a6fd03b9375bb3b33148e6b7ced7fb8d5ab0bb342322eb10be4787a789b153258710ded8db615f68a6ca5475d9188290ad54ef436a4d5d96c1d6fda1a46558468e41c4a84d282f859429fc4923881a76153138771bcd817cf6806405260714fb8a95cf924abdc27a622fb5abd0b73e9294916fe13a27fcf83268169437ac091375fc632b1ca142864688c16625ac8739c29e1844214efba65285270c9c330e0ba3a6e6bfae015d4c8d30d76e5f3eb20ab89e522a0e9e0ae28dfe7a9430f31a18de4a2d3040e7e68344b995ced3518f0f69f90dca090b81d0d25b0374dc8db76f050ee4484", 0x1000}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f00000003c0)="35372ea56bcf88e3dd5dd69e800d000000000000d60180784fb0ce60e03c87d9829be156bfe03483396ff5fd70762a9ef161be33ebc2320653871a7244486e9476a0078aec22c23ac15d79b98a05c4b3ac199c7575994a54830000000000", 0x5e}], 0x5, &(0x7f0000001140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xfffffff6}, {@empty, 0x2}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0xe0}]}, @ssrr={0x89, 0x1b, 0xd4, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x5, [0xffff, 0x200, 0x700000]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xb8}}], 0x3, 0xc0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010007000000000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0xb4}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30006081)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, 0x0, 0x0)
setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000540)=0x7, 0x4)
close(r5)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580))

2.216094346s ago: executing program 3 (id=2985):
socket$l2tp(0x2, 0x2, 0x73)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
clock_gettime(0x0, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
select(0x40, &(0x7f0000000180)={0x200, 0x0, 0x5c3e, 0xfe22, 0x0, 0x3, 0xab}, &(0x7f0000000300)={0x200, 0x0, 0x4, 0x9, 0x400, 0x9, 0x5}, &(0x7f0000000400)={0x7, 0x7, 0x494b615a, 0x2, 0x4, 0x9, 0x2, 0x7}, &(0x7f0000000480)={r3, r4/1000+10000})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x7fffffffffffffff, 0x366c, 0x8, 0xffff}})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000018000000000c8586790c22f9f076ca8277c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000003080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.215818064s ago: executing program 6 (id=2986):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4000000)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1f}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0)
r7 = socket(0xa, 0x2, 0x0)
getpeername$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r9, &(0x7f00000000c0), 0x9)
r10 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r10, &(0x7f0000000340)={0x1f, @none}, 0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

2.082441378s ago: executing program 1 (id=2987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) (fail_nth: 21)

1.574769939s ago: executing program 1 (id=2988):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a40)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x48}}, 0x4000) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffe6, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6600, 0x8, 0x80000000, 0x2, 0xd, 0xc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.13602204s ago: executing program 1 (id=2989):
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x24000010)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.115164086s ago: executing program 1 (id=2990):
socket$igmp6(0xa, 0x3, 0x3a)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000003f009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

1.021889118s ago: executing program 6 (id=2991):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x0, 0x102}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94)

922.136682ms ago: executing program 1 (id=2992):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x8, 0x6, 0x0, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc830)
sendmmsg$inet(r3, &(0x7f0000002900)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="5a76a2a7ec514709d4705e69d0dc2be00c412439710cf6c1dd99efc1af56e5b0ea447075b491c77fe8689bbf811b9e1e3934e7c54df4999fca0ef4ca8316f6b8946fde752614", 0x46}], 0x1}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000800)="b571714f16a07a5dff849e8270eac76565cbedb0e875671902a66686a311f87040402f0a6dadb19104531dfb1c04d3ac77f7751b07957a2c48caeb8976855d2d60b085ee5c1b3f4ca7886ad32d3c9b76c7ef549e45784e163d1c31e46ba6a4cce4f42c5384143609644cb2f62df97a809847b7969e3a4e0875cb649dcbe2b7e8e54083906d6a5402185802727e44899e826a19c00434c8e26935cb6743640802405e461a8c357c579ef3d259afa8aca07e5e26f1066d4792964dbe97bb93e92c7715913cc2d1e3c82b1e3abd5761f795a91695d484b997f8a36c8553cf", 0xdd}, {&(0x7f0000000900)="8addce0f47ab3fb830c57833201e783b8eeff1897470d78360a1dd34a59042c4e316db765d7f0f88f22884d445727418a39fa9941b2ac3d3e8303b30947fe1", 0x3f}, {&(0x7f0000000bc0)="60fc70fa1c2cfd4f3424380cd3b35766fa56557e1558b3fba8ad7c920d9cff14d17fd1671d151bcb0df27c4d2ca5f73ce2ff3e2cef9cd057cc51d7f0515ed43cb30182a3b59383beb7e48e87b2a018e544ec77e981118cb0721d4cef8d187b28bf0d8c545e9f0cec176719dbe82d3bc85f57c5979bc6d5d0cfa54789847b3fde688c85dedc55f06a74ccbe278531020cc5d9bec1e4c1f9998de513c504a9a7fb8b3e60eb1fff8761943d9222e2fdcd96196bc1f9d0184100422ca47169d6cc1879694acc570a19e2", 0xc8}, {&(0x7f0000000940)="c38fdb318bdf899e9a76b59f3d17e78eed", 0x11}, {&(0x7f0000000cc0)="05929975c6b7e158d0ff460482bb23d1243b15e86a76d1658c1745849b582503e7101e49adf143bc50cbfab2af1dff7af1b0254a6593bbf70c43ffa84e038c48c7456f7c690750560867948d30cf3f443774702ce508f2a0996fd5ea9d2ae216698cf9a0b88aee206eda3c3c9f56b62ac2ed9c76e9bcb83aea455af586f8f3e047f0b199287b8564a9ac8e211f9c050ff043c6a30681", 0x96}], 0x5, &(0x7f0000001000)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x88, 0x9, "7205e3434e40a4"}, @end, @ssrr={0x89, 0xb, 0xa2, [@broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xab, 0x3, 0x8, [{@remote, 0x7fffffff}, {@loopback, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x98}}, {{&(0x7f00000010c0)={0x2, 0x4e23, @broadcast}, 0x5, &(0x7f00000026c0)=[{&(0x7f0000001100)="a77b31013c98bc94d8e1a695af41a39adcc5efa8dd4901f8d1891dc481703f641e208a927c3a50b9df54ed67f1343d0d25d0f5b25620aed2f03c6dfb1a246eb5485fb5cd81c0fda723648c721e5c9f6fbb1de0137f8abf5e979316ba076f0e7d67c93a505adb9e4530af812e810d57", 0x6f}, {&(0x7f0000001180)="bc9b19e06f142dc01c9d7277ebf2db191c0185c0c0f6e862a1b39b1b917ced3240d5891e94ff52bb6777d82906dc", 0x2e}, {&(0x7f00000011c0)="0c4f691ad633700657fa80caddab6ca6c1c5af6c1e7ed84e0081e153183c087646909da7ec1d71dcd0b93fe8ba4af6a94fc9aa735f5c7b699f2ab4b208ff574bc8dbff51642da3dcecad3757aa8c95e43538a8fb588326bce0afc354f9ddbcec7cc952cd21f8b6e474a133cceee11051fd1ab602076130ebbf7843b0b55e6ca02133bdd39f92483fbd029957ce52dcde20970ed4c67f96354537f17b4290e1f3c6d79235963d660ed3873269f251a085b9b592de475415a748c2ea56511ed91d5b042fb009c32b4f0ec64b6fb6cc6a5583179f4a1aaf37ffd837e9a2e559f16e01d38e519cfa36b2bc36e24dd59005fb336a11b961af7250c2227557cd1c43e96a9776bb0be90e74a2611e83fb626018e5543f1bb4ffaff66a00a60febfc4771b5b109760f25ff80b8f8f76f408e4651540648591af101b52b105e3cc99c4a4214e2465879335195dbc07994256cf3c170f63b494059f8ede9983ef23638d232d595cad2750777bb87cbad247443e8842accf0d8a337f49f55b714f43e1bf1fb93e4f434a01b10f02ba5c21b82cf243bda98d92992ba845ce92f9960e809df19fbdd8fa7db83d8e4645c9fac55313f152c2937911c627007ff73d1a1106d82a2c1517226b728faab568a668533160e81fba505278293e1efd07e06b08dd656fcd1be6859296f9c9ef10c75f6c7b54ea4c421816042d96731cce0a498953546d37df368b8ddc53be46f1ec2e413ebfc5768f556d4539effc97b11709bebc59db072c0f2844b6481de777858ce311ab9e38b96211ea4d0419cf22fe3ea4a5aab47d614c73e427c93b55046a2da29fcdc1fcb327746aa359bc96d04c655fc4a71ff10da11117db05f50e76a621b9da2de94f88402e9504d56783c691fc6607db92e14c774dcf61513c45895a0ce3e34c540c53d5754911b84af1be057cb1ada1bec17d9ea3e573696700a208744ed7dee1552a4d8e72b0140b89327b19989121dbbdf7ef75989d247e5a93240bf8321bf80bd78547a88e713ba249a3a1be39fb72fb5b978a5bacad29ef16ad6d5026ab57694e0922ed9c0a5e1d6e287b786a9a9147b5757179da8e83ab9fe4a97e936baff890fd1af0df36c84a759751403ec08585b98a660977eed0d90c7802667551b20c8120a0d3382645a15601a3d282289bab619e8be18db82fed3d57db97a5055deb2e7ce28eeb4cc56d8c69d6ff66de547b741ee822fb9a93d2b8b87c2b85c63565450f6c6112ca6ca518d794e18e514944501fb120f50cd0e7134d96054a7ce0e355d218ecef8ca3ed5b6d16a6a8976d9230c96d187e3b15f7094747c370d9c8ce352222b97502380094812be7cc0b0c3aa1c764deea3bcc784414b25dc72964788cf569a907d719c9dbe267edb741d5264b1adf49598d83e5fe6b5bdeb07db91c88ee20b603e27bbce8bcabedfe283b15323876db2b1a5093e768edde8c6bed53eb3e8747a0eb0e7ae8aa05b056bd97c50fb3689d7089ec30e0ddfa82b126d04fd61c029f3796ebe8b97780dfcbe52ecde306b347cd02155678b57e2f276c64edc37792a98800c4ede786e13eec023d3d11aa0abed29993c759aabb15af3c44e3d0d1641212f83244e9b277388550dd61746d4412b930a1e43a95cab69d1c89f2a67209fe250edc03e551e23bbffeea423fc9b630b61ad1a847791fb6647a9420c9a52400623ac1e6337ea71c6a80dac66f5649fdcf7a00bea6b64b0605b54a948ad06c79b451bf930a407aca396a1ab0ffcac4dafa342ca313d8c65b2a0b4e28fbc053e101948f31eb6b1cf9806f4f26bb3cc3941f7af31db55cfb73ccdf8d6552c0ab36ef26a3931ef0f18ef05829d53350c7246c1f4591aee49237cc4eb96f4a575be70eac3c35d4929c247e24122bd75067af3c5176028616c7a77b234e6cd705f44f521b2f738ee42de8c9b8b42a5344f17d280bac64c28105749a8bfade2a2c9ae9e5aae4196eaafaf9d634b20e6e36daebf0f3d13eccfc18fc8a376d5e8225308c48fed207f5ee684cef28b7eb91325387a644fc196bb0f997410dda08cf1258a18d8b786e122e788694c8f6084fa1d82faaf61d7aaebf9a2ce2aff61fc5dbc76cb83c1f19864ba7c9575f099ab43bf151868538d2d09045c5371a4d608308b7a4679e2188102a8f7ee2979d8ef258d8d22c178b8889333e9dd3492d7458dde648a6577b87aee134c77ed91a3f3cc79f9562bb9ef7a7c15ec8b864d0a6daad09df0b85d9217416c249799175048a19a0a57482922a9130614ca23740ab1a08066b81b81e5ebf3204b5dfb63880a55de11f69a2af06dc6cc2ba44a71c9f58ea8c92682686850ec8415c3232410a8182ba1b63d1dbd4e7592dac10b684981a60d60272ecec9aa64dcbe4d1a9054055456d0d9e5e554abd640d9fa954068b6323dbdb887b22d3904cefd5998e4afbb2d9c13b4b2142c218cd3417c2e9bcd6d9a3b3fb17ed4b072d25e81f8db0016a7d19ee709d6a1049bf410234d5d141b00cbe3a166062992e34b2dc05c4216c8d3a49397dcf494679012fe0f3f976b8572416693b1cee0dbef7204fa92eae1f9cda92dba5b2a706223de9e74a8cb96d950f993143e7224ea938229b8822c315c0719f77f4133828ed0a4a71fc44c7ca70c4de0aa239f3c48d95be29f1bbf16dfbd7edac25e674c5c3bbaab5d1855d1b8b415084d0460d35be07ddfbb3127e8c4fe0200ef8b1adb8357991000d9afb919b51ed79c8b7a007b067838dabc032e25be882100263e8ef62b16df547082015dc564994bf18bdc1d43eeb5cd7585d7e69c054a0f3e734dff56495c18a61945c65284db3b6d62f3ab17d03b71a5c74e82b1db48fb4eee91c07f346127246eb0e939fbda6276f6f620628178de16d9dccd2e26045e06b5c7bf4ef2e4a1d13ae3a2b9f82eac6f947a7589779a675bcff7f07f90c3614212a58bc7e915d224914cde568920f93d1c1c09c7de5a33e99865411d0f0fac7d92ff51f398df7c2927023a8c93943df9234b0391789b95483e246bcd99db026c9c58c4db0d44c0d3ad975b6d9ce26428d520c64b4f07224aaaf8c4842e0e5e78bd504ed8f5696a427e31556ece9ff1a7e8acf3c4c3bea79af1ff02ba4f292ee4b59caa8e0d8d03fd300ddfc63fefda1ba72479e94b623c4fd30a0bb2a3768fe61c7c4ae40f195918e64ecd7445cf7092a7dc9decda5f1f3ccb2aeedf7e2592788b1f4120a9abfc7c0d11d028be3c6f291cb73c255bf2af41b4c3b63d8fcbb4485c4ba1f7a35b7373574292006be4bde6b8e301c31cef3e3ab5e99ecf560be35e84c19c025db91695f79c658abbcf75df16c2175d256b0dad24a8f4b0f57029cfdf21b7fdd802a891feb3660d01b175b2a624e29d20583bbf40f0d5de202a71318e8adc168f87db2db4c497ad332c8cd04d784837e007d7abb4a664059b573d8f993844a5e9c4afeee18349be18434dd09da7e3d102aeec9673db396f664ee0242a777d976be383f316980c4f9bfa4dce20fd760571aca8c21310cb5da0024d426804603494a97b92218cbf20bbf17af0b9785cc7c3cb4b8100aa4dcf75345a8b6e2a3337fcdb39cff6e4e00db61ab10c790725ba598467ffaa33d0584abf63aeb713e25304b063324312881bd6dbbd3f25798e8fac71d0f84b3dde974b7a233033b83a4b203596587f7b3b23ab917945512fd86c3dce5edee4794d41d2b61d6371d7414bbf4c907c5e0de1ef8b58e71fc6ff843976b618826dcce18d115fb72b796672d482c22976a2e3a9ce0dcc9a05ac041354b1f6e3aa25a4442770956f9e76d83f314cb22b69f792fded2594945aaba20022001dad475423a158cdc5c0e0d0ef9b7bb07ed81499ae68cc04a44803702e09f533012bc1188165a52a9d67e926e5d9834a317f565a6f7d673f052a23622f4faf3bb7f3258be611ed2f19693840085152312e0dc9b256191c6f66dc433861eff7f5a4752acff89f2f36e5ff66a8239533475d82980d8af90f4724db0ad231fc2eb541ff363c4ec52c9166c1d9bb705d9da90689b64719b12467bc0dca0dd1a515aa407161826e5bb9493d0a0465935082173a4b6bf0b4a20c7d41df3a1aadfc9d3e6e8e443f144b71bb3fa0446b67f72894e92a6fc400cc4d71cf45700e7a2a8fc4c1fcde5f41b2ffdaf02b1ec74806710dc88cda468b2ffff6e57585618d35649c5a604f12ec42f25e4e64747b63a0d824a8afacfbbb31a30a43776705b38cbcd4ec3e18046f8d88f775d6d68e4c45987c0e2fe086af2e99d2b76eb4616e1cb98b21dc34fdbe7518be7d94c45ba6d43973eba6d5a9d4a529307dea06e023d953001ec581a5ecc67f6b4f8a06bbb5f95bda78988bc2db473a2a84b420641f2907dff02096a9d8e89a129566430f336591d730d421c3fb6f801d0b567b5218382169f4878a6095e82758c2487bf44109a1f0e30f6746627b12d4fb49830b8b4da9077f3af69ec00deccbe0f0964dfd00014da1a0d157c830214d787ec5bdf9f7a39964e276aca39818c89500792849c64ac55a197c5a9b655e9153367c4d9fb544406ba7705494cc01b61449e65ca2d9f4b12cd6bf5df4dccd4a466e2a74009c168f3c2a1d78dc484302c26ef1cd78880f7ffe62e1fbae3d9a55917b82dba2a0f68f5fb85485cad79f2f4156e48ca1a0686bb68ad4c6faac9aad53d740665cc8d4572132faf94a2d72eef15dbbf67b9f8ad2d9325e2f0db9ca23b353fb35c4aa2c5c063ab00d278072d8916eda053da374395f467a052640279f3db8c8735fe3a149cb555f07d4e99f9987439684a36a694f76be3ae079b2588d340580dce338fe45660dde5fe592b2f8d362f2a6a1be95068918478098cf5510a6ebc3c84a2bb6434dd8dd201cf4c1870e523a351b97a0aa221a2a8f5ec7ffd4d55f0d4bcd5e708a36bc9cebb655ae9b9b589b0f9d22cd7e8bd79725f6a04943954f649459401863407116d3a865970dea8ada926b293000baacef1d452aba1248327d6cf7074cd17cdcc222aead178b80af42cbe113aebf1b3affdfb4cace85a4c7b772c2053dc2cc069cc009ed0be912c753a30635ed7d06cd2db62aed37b66658626e8238747610f237cebc96b040f98ae2487a5d273b8be7c0603cc153294645d04921f62e95159344387a3fffa53401136f4799568defa0fe33adfd191c848e23ba5df76b8815f76326a7f91da7183bc136d63f1277def2d0b9a71fbc37acf3c612d0a89e85271fc1206832e2ea77eafbf62ddc02e6176f9bd9909c11cdde8aa4526d3c009531ad7bbf788620c11c50544e546f4f54999e02ff67c82aaae41e64265d47294cb882765732e36c2a332c9c61955a8eb90411c9de03cab2108bb048d38a0fc295e2315992b55df24f12c25bc73241cda7ebf9375e870c3f6bc2fdfde18025531a668c8e94acb680e2cf8b245a4cb7b76a998b64919dd73752583c3b543f1dc42aa823460afe6df0fa255725daf692b772d9f1ede50b57eb42bb7c6584e871ed86f4e06c8b38dcf0957f2bd271ea8962e520ea5a3ee515ed527c746870371cf078bfea99496020ec0b793f849f5ae8c944bb742771df721cd1fb147186e1029b19b18efff83a1af84ea587f804b544e1fdcca125e86190d21fa2405d5ad9cf25ce3c76776fc22f369911750e48bcd78c77536c8ef571d01454c79d2d388752b5b56177fee7911ac0fd0cd7c505e5f34db36500020e2788f41215f7f4e78d4b9edc91e232e5d2c551c163c5e6636a2bb9e5b00cc0b85ab531c7af200d2925a3cb046387e4edb336", 0x1000}, {&(0x7f00000021c0)="5e0d9a044da4dff1fdb18535f6f9163133207d9a641bf7dbaf5f0cf634e422dc32cfa67d701d7fd697418b35b97f392ca3c31de24363334f9b149c9323e26cf2fd474797973009c1f3c021550662945c379e9477274c2eebbdab642bf0ffff1ad0176fa5259af746eda0c33798d65363dbad07d7cf5eda36f242e30790b2165cdd5cece4083d270072ef3cb98e443f9476d01afae4daf79111daa02860350620b6afa5f4305c146f3aa9246ddc4bbb27352f6c3f275fa16fb69235ee8f782c9089d303", 0xc3}, {&(0x7f00000022c0)="93a73231a6074e516cf1d3e995ae837974d226216b4109726bfd11ed22c39032b54b2dbcc282e492304b081754a06ac0eb922bcc383e7a764e18036f619974f765a266874bb6dee08cf827846ae12d9a5d616855e468a1202d43ce95b5d8291d1f09a48e63d6a94570d225065ab5400500b0302af6e8270892fb886af65eafea4f2c86fa9ca9d28ea56aefdfc76debb197954f886cd7d6e831208091ea4c2f91e6ba4f4e483c6342573c5524578c694f421b8cf89f312892fbaa89b6a4998f4137cb24d84d3af3d26d92", 0xca}, {&(0x7f00000023c0)="5dd18f31076cfd2718a923c46a66e8bba45dc9fbe2ec4fbfb515b3b27a8826e6c2e5a81cfe09840a4459e7c5faabd48a54096c1a16962872a70b607440010fb40612b27b22", 0x45}, {&(0x7f0000002440)="c0ff9df7f3ead79ed990814516f80f82fc132815ab5a6cc7f2e85e6e2bc29c7ff2b87da3a55a50d42b2ce1145721203d0952cf3eeb453bf6b44e2a59dda14e196576ebf8641ba67c018ae0ff5d64767d6d5cb4362437b522017605af023c8a6028286aa836b98870856f25b5", 0x6c}, {&(0x7f00000024c0)="84ab1aefb7b208b290992ab34ed61174aed251ad51037789e31511cba39547d4bd62d1ed1a6440fe2c4f67266d96195c457d21851f8a0bfca1c7aae926d95c172d58b061bf9f6ea798e7fdc290d3e0c16c711d5fc46ada09f9dc8eda5025c78e532d7a3e7ffb09fb5fe2f18cb4b98d507bb0b414cd8292f8cb0b5cdcef0a9fcdbba31aac4ba0a8b2ac59b2e3a30d587a2f025921bc519deef3bd443ab3ee11e3e4fa043f316dc404d282b3881256f09837e3311949cb5aff60f74ffdcda9d5e6095b3d73a4d8d4c690fc8bce50cbe9560fcd817f60c7bf49b3907ee2d18b0e475567b7e3ccc04c53", 0xe8}, {&(0x7f00000025c0)="a4b3267fcfb786e0c8b147125a79b2332c50dcbeff0c45bb58b6b04e0d29db465ab8e1d9a926ff226907bb21694b05909056b45e5c2a8cb3dea57988e26b11af6e2c0bea2c3c5e83ff30e8f9f5d7556d873012247c33eec29158459066b2e1cdaa99560452005460425c480a640648d24cef17cd7c6a3effc3c9b349a176e58d25709fad33652a16ab5f008df4478e73d7460407d68ddff30c5023a7e985355b9ef87b023efee3361657d5574c4c3b9beaafc7e5a6b422d5c7b47fb3e24bc44c75411feb39fb8d1dc8a998557fa82f4bae6affa6af4e", 0xd6}], 0x9, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbac1414bb000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414bb00000000"], 0x170}}], 0x3, 0x24000001)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f0000000200)=0x28)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001c00ff01000006001d"], 0x2c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

920.663817ms ago: executing program 3 (id=2993):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
unshare(0x6020480)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0xfffffffffffffff3, &(0x7f0000001a80)={&(0x7f0000000180)={0x1, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r5}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r9}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r9}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r3}}, {}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r9}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r9}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r9}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r9}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r3}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0xf8}]}, 0x30}}, 0x20000000)
epoll_create1(0x0)
sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a0000008000000000000c85c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

788.135526ms ago: executing program 6 (id=2994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r2, &(0x7f0000000340)=""/49, 0x31)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x8044)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
sendto$inet6(r1, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0)
writev(r1, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000a80080002400000000008000140000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x80)

0s ago: executing program 3 (id=2995):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket(0x400000000010, 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in6={0xa, 0x0, 0x0, @empty}], 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendmsg$nl_generic(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x80)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="169fc4f5f2e0e303ef"]}]}, 0x28}}, 0x4010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000003c0)={0x1, 0x4}, 0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x300, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

kernel console output (not intermixed with test programs):

essed
[  247.564790][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'.
[  247.741710][T11987] netlink: 'syz.3.1874': attribute type 10 has an invalid length.
[  247.751338][T11987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1874'.
[  247.789507][T11989] netlink: 'syz.1.1872': attribute type 1 has an invalid length.
[  247.857475][T11987] team0: Port device geneve0 added
[  247.958848][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'.
[  247.988191][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'.
[  248.021100][T11989] 8021q: adding VLAN 0 to HW filter on device bond17
[  248.034691][ T3566] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.066330][ T3566] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.074748][ T3566] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.211000][T11994] bond15: (slave wlan0): Releasing active interface
[  248.234913][T11994] bond17: (slave wlan0): Enslaving as an active interface with a down link
[  248.302966][ T3566] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.428358][T12018] FAULT_INJECTION: forcing a failure.
[  248.428358][T12018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.441699][T12018] CPU: 0 UID: 0 PID: 12018 Comm: syz.3.1884 Not tainted syzkaller #0 PREEMPT(full) 
[  248.441725][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  248.441735][T12018] Call Trace:
[  248.441742][T12018]  <TASK>
[  248.441749][T12018]  dump_stack_lvl+0x189/0x250
[  248.441774][T12018]  ? __pfx____ratelimit+0x10/0x10
[  248.441793][T12018]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.441812][T12018]  ? __pfx__printk+0x10/0x10
[  248.441844][T12018]  should_fail_ex+0x414/0x560
[  248.441868][T12018]  _copy_to_user+0x31/0xb0
[  248.441890][T12018]  simple_read_from_buffer+0xe1/0x170
[  248.441915][T12018]  proc_fail_nth_read+0x1b3/0x220
[  248.441936][T12018]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  248.441958][T12018]  ? rw_verify_area+0x2a6/0x4d0
[  248.441976][T12018]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  248.441996][T12018]  vfs_read+0x1fd/0xa30
[  248.442021][T12018]  ? __pfx_aa_sk_perm+0x10/0x10
[  248.442048][T12018]  ? j1939_sk_bind+0x176/0xc80
[  248.442071][T12018]  ? __pfx_vfs_read+0x10/0x10
[  248.442091][T12018]  ? bpf_lsm_socket_bind+0x9/0x20
[  248.442110][T12018]  ? __sys_bind+0x2e9/0x3e0
[  248.442127][T12018]  ? __pfx___sys_bind+0x10/0x10
[  248.442147][T12018]  ksys_read+0x145/0x250
[  248.442169][T12018]  ? __pfx_ksys_read+0x10/0x10
[  248.442186][T12018]  ? rcu_is_watching+0x15/0xb0
[  248.442208][T12018]  ? do_syscall_64+0xbe/0x3b0
[  248.442231][T12018]  do_syscall_64+0xfa/0x3b0
[  248.442247][T12018]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.442264][T12018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.442279][T12018]  ? clear_bhb_loop+0x60/0xb0
[  248.442300][T12018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.442316][T12018] RIP: 0033:0x7f7101f8d8dc
[  248.442332][T12018] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  248.442346][T12018] RSP: 002b:00007f7102dea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  248.442372][T12018] RAX: ffffffffffffffda RBX: 00007f71021e5fa0 RCX: 00007f7101f8d8dc
[  248.442384][T12018] RDX: 000000000000000f RSI: 00007f7102dea0a0 RDI: 0000000000000005
[  248.442395][T12018] RBP: 00007f7102dea090 R08: 0000000000000000 R09: 0000000000000000
[  248.442406][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.442416][T12018] R13: 00007f71021e6038 R14: 00007f71021e5fa0 R15: 00007ffe512caa48
[  248.442446][T12018]  </TASK>
[  248.694424][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1885'.
[  248.807999][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1886'.
[  248.840276][T12030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.922292][T12035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1887'.
[  249.036763][T12046] netlink: 'syz.6.1890': attribute type 4 has an invalid length.
[  249.288335][T12052] netlink: 'syz.2.1894': attribute type 1 has an invalid length.
[  249.296336][T12052] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1894'.
[  249.431754][T12060] netlink: 'syz.3.1897': attribute type 1 has an invalid length.
[  249.719740][T12077] netlink: 'syz.2.1903': attribute type 1 has an invalid length.
[  249.782241][T12077] 8021q: adding VLAN 0 to HW filter on device bond10
[  249.803622][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'.
[  249.820200][T12082] bond8: (slave wlan0): Releasing active interface
[  249.865810][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'.
[  249.893430][T12082] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  249.958867][T12086] bond0: entered promiscuous mode
[  250.008642][T12086] batadv0: entered promiscuous mode
[  250.044614][T12086] debugfs: 'hsr0' already exists in 'hsr'
[  250.051336][T12086] Cannot create hsr debugfs directory
[  250.059722][T12086] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  250.080319][T12086] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  250.108137][T12086] 8021q: adding VLAN 0 to HW filter on device hsr0
[  250.242822][T12102] openvswitch: netlink: Flow key attr not present in new flow.
[  250.463332][T12115] bridge10: entered allmulticast mode
[  250.485505][T12117] netlink: 'syz.6.1914': attribute type 3 has an invalid length.
[  251.328088][T12159] netlink: 'syz.6.1926': attribute type 1 has an invalid length.
[  251.405939][T12162] openvswitch: netlink: Flow key attr not present in new flow.
[  251.467224][T12165] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.539831][T12165] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.631583][T12165] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.728501][T12165] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.771072][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.839748][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.893364][T12181] netlink: 'syz.5.1935': attribute type 1 has an invalid length.
[  251.906926][T12180] macsec1: entered promiscuous mode
[  251.917228][T12180] macvlan0: entered promiscuous mode
[  251.932147][T12180] macvlan0: left promiscuous mode
[  251.997429][T12181] 8021q: adding VLAN 0 to HW filter on device bond2
[  252.018138][T12186] bond1: (slave wlan0): Releasing active interface
[  252.049271][T12191] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  252.097197][T12186] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  252.320530][T12184] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.328294][T12184] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.690969][T12184] vlan2: left allmulticast mode
[  252.700958][T12184] vlan3: left promiscuous mode
[  252.705879][T12184] bridge0: left promiscuous mode
[  252.750864][T12184] vlan5: left promiscuous mode
[  252.755983][T12184] bond6: left promiscuous mode
[  252.761610][T12184] gretap1: left promiscuous mode
[  252.767272][T12184] vlan5: left allmulticast mode
[  252.772262][T12184] bond6: left allmulticast mode
[  252.784533][T12184] gretap1: left allmulticast mode
[  252.802327][T12184] hsr0: left allmulticast mode
[  252.807377][T12184] hsr_slave_0: left allmulticast mode
[  252.813027][T12184] hsr_slave_1: left allmulticast mode
[  252.819531][T12184] macvtap1: left allmulticast mode
[  252.840933][T12184] bridge10: left allmulticast mode
[  252.957184][T12197] 8021q: adding VLAN 0 to HW filter on device bond6
[  252.971618][T12197] team0: Port device bond6 added
[  253.027539][ T3566] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.061053][ T3566] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.096100][ T3566] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.104726][T12200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.131228][ T3566] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.171910][ T3566] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.195562][T12229] __nla_validate_parse: 15 callbacks suppressed
[  253.195587][T12229] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1948'.
[  253.211384][ T3566] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.221589][ T3566] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.251172][ T3566] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.374225][T12237] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1951'.
[  253.546257][T12244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.797039][T12251] netlink: 'syz.2.1955': attribute type 3 has an invalid length.
[  253.835279][T12252] netlink: 'syz.3.1954': attribute type 1 has an invalid length.
[  253.954694][T12252] 8021q: adding VLAN 0 to HW filter on device bond7
[  253.968577][T12255] bond7: (slave wlan0): Enslaving as an active interface with a down link
[  254.132293][T12254] 8021q: adding VLAN 0 to HW filter on device bond5
[  254.181930][T12254] bridge0: port 3(bond5) entered blocking state
[  254.198170][T12254] bridge0: port 3(bond5) entered disabled state
[  254.204673][T12254] bond5: entered allmulticast mode
[  254.230182][T12254] bond5: entered promiscuous mode
[  254.248805][T12254] bridge0: port 3(bond5) entered blocking state
[  254.255465][T12254] bridge0: port 3(bond5) entered forwarding state
[  254.285067][ T3509] bridge0: port 3(bond5) entered disabled state
[  254.371410][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1960'.
[  254.597847][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1963'.
[  255.050694][T12291] netlink: 'syz.1.1969': attribute type 1 has an invalid length.
[  255.201835][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1972'.
[  255.377202][T12296] veth7: entered promiscuous mode
[  255.708221][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.739635][T12322] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  255.832215][T12322] 8021q: adding VLAN 0 to HW filter on device bond18
[  255.898252][T12326] bond17: (slave wlan0): Releasing active interface
[  255.952485][T12326] bond18: (slave wlan0): Enslaving as an active interface with a down link
[  256.053563][T12329] syzkaller1: entered promiscuous mode
[  256.125221][T12342] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1983'.
[  256.284847][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1986'.
[  256.383516][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1989'.
[  256.402111][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1988'.
[  256.433878][T12356] bridge2: port 1(veth0_to_bond) entered blocking state
[  256.444959][T12356] bridge2: port 1(veth0_to_bond) entered disabled state
[  256.453062][T12356] veth0_to_bond: entered allmulticast mode
[  256.464203][T12356] veth0_to_bond: entered promiscuous mode
[  256.807776][T12376] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.862514][T12381] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  256.901363][T12376] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.972166][T12389] netlink: 'syz.1.2000': attribute type 1 has an invalid length.
[  256.988756][T12376] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.071133][T12376] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.102575][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2003'.
[  257.242733][T12395] veth9: entered promiscuous mode
[  257.431727][   T49] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.442913][T12399] tipc: Resetting bearer <eth:syzkaller0>
[  257.534406][ T3509] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.702291][ T3566] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.776114][ T3566] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.075080][T12439] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.174650][T12448] openvswitch: netlink: Flow key attr not present in new flow.
[  258.200162][T12439] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.283537][T12439] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.412291][T12439] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.599853][T12460] __nla_validate_parse: 3 callbacks suppressed
[  258.599872][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2024'.
[  258.621968][T12460] vlan3: entered promiscuous mode
[  258.648297][T12460] bridge0: port 4(vlan3) entered blocking state
[  258.662616][T12460] bridge0: port 4(vlan3) entered disabled state
[  258.696073][T12460] vlan3: entered allmulticast mode
[  258.715249][T12460] bridge0: entered allmulticast mode
[  258.744296][T12460] vlan3: left allmulticast mode
[  258.761173][T12460] bridge0: left allmulticast mode
[  258.809107][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'.
[  258.929289][T12475] bridge8: port 1(veth0_to_bond) entered blocking state
[  258.958258][T12475] bridge8: port 1(veth0_to_bond) entered disabled state
[  258.974608][T12475] veth0_to_bond: entered allmulticast mode
[  258.990335][T12475] veth0_to_bond: entered promiscuous mode
[  259.051337][ T3509] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.157769][ T6498] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.217630][ T3509] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.270784][ T3509] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.294652][T12494] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.2029'.
[  259.509984][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2033'.
[  259.614943][T12506] syz_tun: entered promiscuous mode
[  259.635105][T12506] syz_tun: left promiscuous mode
[  259.638531][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'.
[  259.725771][T12517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.938826][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'.
[  259.953284][T12528] netlink: 'syz.2.2039': attribute type 1 has an invalid length.
[  259.961494][T12528] netlink: 'syz.2.2039': attribute type 3 has an invalid length.
[  259.972528][T12528] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2039'.
[  260.218557][T12535] FAULT_INJECTION: forcing a failure.
[  260.218557][T12535] name failslab, interval 1, probability 0, space 0, times 0
[  260.252270][T12535] CPU: 1 UID: 0 PID: 12535 Comm: syz.5.2042 Not tainted syzkaller #0 PREEMPT(full) 
[  260.252298][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  260.252308][T12535] Call Trace:
[  260.252318][T12535]  <TASK>
[  260.252326][T12535]  dump_stack_lvl+0x189/0x250
[  260.252351][T12535]  ? __pfx____ratelimit+0x10/0x10
[  260.252370][T12535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.252389][T12535]  ? __pfx__printk+0x10/0x10
[  260.252414][T12535]  ? __lock_acquire+0xab9/0xd20
[  260.252446][T12535]  should_fail_ex+0x414/0x560
[  260.252476][T12535]  should_failslab+0xa8/0x100
[  260.252500][T12535]  kmem_cache_alloc_noprof+0x73/0x3c0
[  260.252521][T12535]  ? skb_clone+0x212/0x3a0
[  260.252548][T12535]  skb_clone+0x212/0x3a0
[  260.252573][T12535]  __netlink_deliver_tap+0x404/0x850
[  260.252606][T12535]  ? netlink_deliver_tap+0x2e/0x1b0
[  260.252627][T12535]  netlink_deliver_tap+0x19c/0x1b0
[  260.252648][T12535]  netlink_unicast+0x7fa/0x9e0
[  260.252676][T12535]  ? __pfx_netlink_unicast+0x10/0x10
[  260.252696][T12535]  ? netlink_sendmsg+0x642/0xb30
[  260.252713][T12535]  ? skb_put+0x11b/0x210
[  260.252734][T12535]  netlink_sendmsg+0x805/0xb30
[  260.252767][T12535]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.252790][T12535]  ? aa_sock_msg_perm+0xf1/0x1d0
[  260.252809][T12535]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  260.252827][T12535]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.252855][T12535]  __sock_sendmsg+0x21c/0x270
[  260.252876][T12535]  ____sys_sendmsg+0x505/0x830
[  260.252902][T12535]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.252932][T12535]  ? import_iovec+0x74/0xa0
[  260.252957][T12535]  ___sys_sendmsg+0x21f/0x2a0
[  260.252980][T12535]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.253039][T12535]  ? __fget_files+0x2a/0x420
[  260.253054][T12535]  ? __fget_files+0x3a0/0x420
[  260.253081][T12535]  __x64_sys_sendmsg+0x19b/0x260
[  260.253105][T12535]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.253143][T12535]  ? __pfx_ksys_write+0x10/0x10
[  260.253161][T12535]  ? rcu_is_watching+0x15/0xb0
[  260.253184][T12535]  ? do_syscall_64+0xbe/0x3b0
[  260.253206][T12535]  do_syscall_64+0xfa/0x3b0
[  260.253223][T12535]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.253238][T12535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.253254][T12535]  ? clear_bhb_loop+0x60/0xb0
[  260.253272][T12535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.253288][T12535] RIP: 0033:0x7f658138eec9
[  260.253304][T12535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.253318][T12535] RSP: 002b:00007f6582296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.253336][T12535] RAX: ffffffffffffffda RBX: 00007f65815e5fa0 RCX: 00007f658138eec9
[  260.253348][T12535] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000003
[  260.253360][T12535] RBP: 00007f6582296090 R08: 0000000000000000 R09: 0000000000000000
[  260.253371][T12535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.253380][T12535] R13: 00007f65815e6038 R14: 00007f65815e5fa0 R15: 00007ffde81c3428
[  260.253408][T12535]  </TASK>
[  260.954319][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2052'.
[  260.999586][T12562] veth0_to_bond: left allmulticast mode
[  261.005184][T12562] veth0_to_bond: left promiscuous mode
[  261.033211][T12562] bridge8: port 1(veth0_to_bond) entered disabled state
[  261.049488][T12567] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  261.265304][T12575] netlink: 'syz.6.2056': attribute type 1 has an invalid length.
[  261.341227][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'.
[  261.350388][T12580] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.375315][T12580] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.398519][T12580] batadv0 (unregistering): left promiscuous mode
[  261.450313][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'.
[  262.037999][T12620] netlink: 'syz.5.2070': attribute type 1 has an invalid length.
[  262.120350][T12617] 8021q: adding VLAN 0 to HW filter on device bond11
[  262.129436][T12617] team0: Port device bond11 added
[  262.219641][T12620] 8021q: adding VLAN 0 to HW filter on device bond3
[  264.045774][T12681] netlink: 'syz.3.2086': attribute type 1 has an invalid length.
[  264.410198][T12696] netlink: 'syz.3.2091': attribute type 3 has an invalid length.
[  265.057055][T12720] __nla_validate_parse: 7 callbacks suppressed
[  265.057073][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'.
[  265.356232][T12730] netlink: 'syz.1.2099': attribute type 1 has an invalid length.
[  265.358255][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  265.785845][T12748] tipc: Enabled bearer <udp:syz2>, priority 10
[  265.859569][T12756] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.036892][T12751] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  266.242609][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'.
[  266.493853][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'.
[  266.839438][T12799] lo speed is unknown, defaulting to 1000
[  266.845282][T12799] lo speed is unknown, defaulting to 1000
[  266.865436][T12800] netlink: 'syz.5.2121': attribute type 1 has an invalid length.
[  266.896588][ T5967] tipc: Node number set to 1932010290
[  266.920200][T12800] 8021q: adding VLAN 0 to HW filter on device bond4
[  266.927828][T12799] lo speed is unknown, defaulting to 1000
[  266.947808][T12800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2121'.
[  266.949960][T12799] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  266.960809][T12811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.075034][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'.
[  267.103539][T12799] lo speed is unknown, defaulting to 1000
[  267.227614][T12799] lo speed is unknown, defaulting to 1000
[  267.248222][T12799] lo speed is unknown, defaulting to 1000
[  267.292401][T12799] lo speed is unknown, defaulting to 1000
[  267.313408][T12819] lo speed is unknown, defaulting to 1000
[  267.322916][T12799] lo speed is unknown, defaulting to 1000
[  267.395321][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2130'.
[  267.437469][T12835] vlan3: entered promiscuous mode
[  267.452217][T12835] bridge0: port 4(vlan3) entered blocking state
[  267.462025][T12835] bridge0: port 4(vlan3) entered disabled state
[  267.469476][T12835] vlan3: entered allmulticast mode
[  267.474998][T12835] bridge0: entered allmulticast mode
[  267.491665][T12835] vlan3: left allmulticast mode
[  267.496772][T12835] bridge0: left allmulticast mode
[  268.124020][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'.
[  268.280470][T12891] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  268.324068][T12886] 8021q: adding VLAN 0 to HW filter on device team0
[  268.339335][T12886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.493432][T12895] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  268.589710][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2153'.
[  268.876072][T12922] syzkaller1: entered promiscuous mode
[  268.895200][T12922] syzkaller1: entered allmulticast mode
[  268.967993][T12927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.671802][T12955] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2167'.
[  269.843478][T12961] netlink: 'syz.5.2173': attribute type 1 has an invalid length.
[  270.114957][T12980] netlink: 'syz.1.2177': attribute type 10 has an invalid length.
[  270.161524][T12980] __nla_validate_parse: 2 callbacks suppressed
[  270.161539][T12980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2177'.
[  270.188115][T12980] geneve0: entered promiscuous mode
[  270.194766][T12980] team0: Port device geneve0 added
[  270.339666][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2182'.
[  270.542429][T13000] netlink: 'syz.6.2185': attribute type 1 has an invalid length.
[  270.553207][T12998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.594975][ T5967] lo speed is unknown, defaulting to 1000
[  270.663732][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'.
[  270.670958][T13010] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2185'.
[  270.674328][T13000] 8021q: adding VLAN 0 to HW filter on device bond6
[  270.710376][T13005] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  271.233318][T13028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2192'.
[  271.520057][T13048] netlink: 'syz.3.2193': attribute type 11 has an invalid length.
[  271.576109][T13048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2193'.
[  271.713884][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2197'.
[  271.723426][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2197'.
[  271.759373][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2197'.
[  271.772882][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2197'.
[  271.847119][T13054] netlink: 'syz.3.2198': attribute type 2 has an invalid length.
[  272.071442][T13061] veth0_to_bond: left allmulticast mode
[  272.077632][T13061] veth0_to_bond: left promiscuous mode
[  272.083345][T13061] bridge10: port 1(veth0_to_bond) entered disabled state
[  272.992435][T13101] netlink: 'syz.2.2215': attribute type 1 has an invalid length.
[  273.058299][T13104] IPVS: sed: FWM 3 0x00000003 - no destination available
[  273.068250][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  273.079502][T13101] 8021q: adding VLAN 0 to HW filter on device bond12
[  273.253518][T13109] bond12: (slave veth17): Enslaving as an active interface with a down link
[  273.304204][T13102] lo speed is unknown, defaulting to 1000
[  273.328972][T13101] gretap2: entered promiscuous mode
[  273.358616][T13101] bond12: (slave gretap2): making interface the new active one
[  273.412049][T13101] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  273.510615][T13101] netlink: 'syz.2.2215': attribute type 1 has an invalid length.
[  273.588326][T13124] netlink: 'syz.3.2219': attribute type 10 has an invalid length.
[  273.652641][T13101] veth19: entered promiscuous mode
[  273.763414][T13119] lo speed is unknown, defaulting to 1000
[  273.822334][T13126] macsec1: entered promiscuous mode
[  273.836957][T13126] macvlan0: entered promiscuous mode
[  273.870050][T13126] macvlan0: left promiscuous mode
[  274.752619][ T3509] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.763271][ T3509] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.771931][ T3509] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.780394][ T3509] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.353699][T13146] netlink: 'syz.5.2227': attribute type 1 has an invalid length.
[  275.643879][T13155] __nla_validate_parse: 6 callbacks suppressed
[  275.643896][T13155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'.
[  275.670444][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2230'.
[  275.681089][T13155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'.
[  275.699103][T13155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2230'.
[  275.831599][T13162] lo speed is unknown, defaulting to 1000
[  275.871196][T13166] netlink: 'syz.2.2233': attribute type 12 has an invalid length.
[  275.890511][T13166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2233'.
[  275.976984][T13174] netlink: 'syz.2.2233': attribute type 13 has an invalid length.
[  276.013811][T13174] netlink: 'syz.2.2233': attribute type 17 has an invalid length.
[  276.214542][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2235'.
[  276.239026][T13174] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.260925][T13174] 8021q: adding VLAN 0 to HW filter on device team0
[  276.273761][T13181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2233'.
[  276.293872][T13174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.320352][T13024] Set syz1 is full, maxelem 65536 reached
[  276.450918][T13183] netlink: 'syz.6.2237': attribute type 1 has an invalid length.
[  276.540820][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2239'.
[  276.630427][T13183] 8021q: adding VLAN 0 to HW filter on device bond7
[  276.661625][T13190] bond6: (slave wlan0): Releasing active interface
[  276.677401][T13190] bond7: (slave wlan0): Enslaving as an active interface with a down link
[  276.798032][T13189] veth7: entered promiscuous mode
[  276.865679][T13196] vlan3: entered allmulticast mode
[  276.871815][T13196] veth1: entered allmulticast mode
[  276.878298][T13196] veth1: entered promiscuous mode
[  276.884159][T13196] veth1: left promiscuous mode
[  276.890902][T13196] bond7: (slave vlan3): making interface the new active one
[  276.898449][T13196] bond7: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  276.916516][T13196] veth1: entered promiscuous mode
[  276.922313][T13196] vlan3: entered promiscuous mode
[  276.928504][T13196] bond7: (slave vlan3): Enslaving as an active interface with an up link
[  276.941945][T13198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.073840][T13204] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2243'.
[  277.084411][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2243'.
[  277.115042][T13206] netlink: 'syz.3.2244': attribute type 10 has an invalid length.
[  277.303788][T13210] lo speed is unknown, defaulting to 1000
[  277.607275][T13229] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  277.667350][T13229] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  278.176219][T13251] FAULT_INJECTION: forcing a failure.
[  278.176219][T13251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  278.191301][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.3.2258 Not tainted syzkaller #0 PREEMPT(full) 
[  278.191326][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  278.191337][T13251] Call Trace:
[  278.191344][T13251]  <TASK>
[  278.191352][T13251]  dump_stack_lvl+0x189/0x250
[  278.191377][T13251]  ? __pfx____ratelimit+0x10/0x10
[  278.191396][T13251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.191414][T13251]  ? __pfx__printk+0x10/0x10
[  278.191448][T13251]  should_fail_ex+0x414/0x560
[  278.191476][T13251]  _copy_to_user+0x31/0xb0
[  278.191500][T13251]  hidp_sock_ioctl+0x3e2/0x560
[  278.191524][T13251]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  278.191582][T13251]  ? do_vfs_ioctl+0xbe8/0x1430
[  278.191615][T13251]  sock_do_ioctl+0xdc/0x300
[  278.191635][T13251]  ? __pfx_sock_do_ioctl+0x10/0x10
[  278.191649][T13251]  ? __lock_acquire+0xab9/0xd20
[  278.191687][T13251]  sock_ioctl+0x576/0x790
[  278.191713][T13251]  ? __pfx_sock_ioctl+0x10/0x10
[  278.191735][T13251]  ? __fget_files+0x2a/0x420
[  278.191750][T13251]  ? __fget_files+0x3a0/0x420
[  278.191764][T13251]  ? __fget_files+0x2a/0x420
[  278.191783][T13251]  ? bpf_lsm_file_ioctl+0x9/0x20
[  278.191803][T13251]  ? __pfx_sock_ioctl+0x10/0x10
[  278.191824][T13251]  __se_sys_ioctl+0xf9/0x170
[  278.191846][T13251]  do_syscall_64+0xfa/0x3b0
[  278.191863][T13251]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.191880][T13251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.191897][T13251]  ? clear_bhb_loop+0x60/0xb0
[  278.191916][T13251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.191932][T13251] RIP: 0033:0x7f7101f8eec9
[  278.191949][T13251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.191963][T13251] RSP: 002b:00007f7102dea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  278.191982][T13251] RAX: ffffffffffffffda RBX: 00007f71021e5fa0 RCX: 00007f7101f8eec9
[  278.191995][T13251] RDX: 0000200000000200 RSI: 00000000800448d2 RDI: 0000000000000004
[  278.192007][T13251] RBP: 00007f7102dea090 R08: 0000000000000000 R09: 0000000000000000
[  278.192018][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.192029][T13251] R13: 00007f71021e6038 R14: 00007f71021e5fa0 R15: 00007ffe512caa48
[  278.192057][T13251]  </TASK>
[  278.811489][T13271] netlink: 'syz.3.2266': attribute type 1 has an invalid length.
[  278.929111][T13271] 8021q: adding VLAN 0 to HW filter on device bond8
[  278.939142][T13281] FAULT_INJECTION: forcing a failure.
[  278.939142][T13281] name failslab, interval 1, probability 0, space 0, times 0
[  278.966817][T13281] CPU: 1 UID: 0 PID: 13281 Comm: syz.3.2266 Not tainted syzkaller #0 PREEMPT(full) 
[  278.966852][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  278.966862][T13281] Call Trace:
[  278.966868][T13281]  <TASK>
[  278.966876][T13281]  dump_stack_lvl+0x189/0x250
[  278.966898][T13281]  ? __pfx____ratelimit+0x10/0x10
[  278.966918][T13281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.966936][T13281]  ? __pfx__printk+0x10/0x10
[  278.966963][T13281]  ? __pfx___might_resched+0x10/0x10
[  278.966985][T13281]  should_fail_ex+0x414/0x560
[  278.967013][T13281]  should_failslab+0xa8/0x100
[  278.967036][T13281]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  278.967058][T13281]  ? __alloc_skb+0x112/0x2d0
[  278.967079][T13281]  __alloc_skb+0x112/0x2d0
[  278.967102][T13281]  netlink_sendmsg+0x5c6/0xb30
[  278.967131][T13281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.967153][T13281]  ? aa_sock_msg_perm+0xf1/0x1d0
[  278.967173][T13281]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  278.967190][T13281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.967210][T13281]  __sock_sendmsg+0x21c/0x270
[  278.967230][T13281]  ____sys_sendmsg+0x505/0x830
[  278.967257][T13281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.967287][T13281]  ? import_iovec+0x74/0xa0
[  278.967312][T13281]  ___sys_sendmsg+0x21f/0x2a0
[  278.967334][T13281]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.967389][T13281]  ? __fget_files+0x2a/0x420
[  278.967404][T13281]  ? __fget_files+0x3a0/0x420
[  278.967430][T13281]  __x64_sys_sendmsg+0x19b/0x260
[  278.967453][T13281]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.967484][T13281]  ? __pfx_ksys_write+0x10/0x10
[  278.967502][T13281]  ? rcu_is_watching+0x15/0xb0
[  278.967523][T13281]  ? do_syscall_64+0xbe/0x3b0
[  278.967545][T13281]  do_syscall_64+0xfa/0x3b0
[  278.967561][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.967578][T13281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.967595][T13281]  ? clear_bhb_loop+0x60/0xb0
[  278.967616][T13281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.967631][T13281] RIP: 0033:0x7f7101f8eec9
[  278.967645][T13281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.967658][T13281] RSP: 002b:00007f7102da8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.967678][T13281] RAX: ffffffffffffffda RBX: 00007f71021e6180 RCX: 00007f7101f8eec9
[  278.967691][T13281] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a
[  278.967702][T13281] RBP: 00007f7102da8090 R08: 0000000000000000 R09: 0000000000000000
[  278.967712][T13281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.967722][T13281] R13: 00007f71021e6218 R14: 00007f71021e6180 R15: 00007ffe512caa48
[  278.967751][T13281]  </TASK>
[  279.287586][T13275] bond7: (slave wlan0): Releasing active interface
[  279.315652][T13275] bond8: (slave wlan0): Enslaving as an active interface with a down link
[  279.339368][T13280] lo speed is unknown, defaulting to 1000
[  280.357391][ T5183] Bluetooth: hci2: link tx timeout
[  280.363044][ T5183] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.378899][ T5876] Bluetooth: hci2: link tx timeout
[  280.384081][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.401553][ T5876] Bluetooth: hci2: link tx timeout
[  280.407120][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.415201][ T5876] Bluetooth: hci2: link tx timeout
[  280.420839][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.450265][ T5876] Bluetooth: hci2: link tx timeout
[  280.455416][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.465021][ T5876] Bluetooth: hci2: link tx timeout
[  280.470486][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.482051][ T5876] Bluetooth: hci2: link tx timeout
[  280.488656][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.496343][ T5876] Bluetooth: hci2: link tx timeout
[  280.501673][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  280.593469][T13343] veth7: entered promiscuous mode
[  280.661959][T13348] veth0_to_bond: left allmulticast mode
[  280.670844][T13348] veth0_to_bond: left promiscuous mode
[  280.677422][T13348] bridge2: port 1(veth0_to_bond) entered disabled state
[  280.905073][T13366] netlink: 'syz.2.2294': attribute type 1 has an invalid length.
[  280.961679][T13372] netlink: 'syz.1.2296': attribute type 1 has an invalid length.
[  280.974425][T13366] 8021q: adding VLAN 0 to HW filter on device bond13
[  281.102183][T13366] bond10: (slave wlan0): Releasing active interface
[  281.155848][T13366] bond13: (slave wlan0): Enslaving as an active interface with a down link
[  281.314920][T13388] lo speed is unknown, defaulting to 1000
[  281.348893][T13393] lo speed is unknown, defaulting to 1000
[  281.582847][T13402] __nla_validate_parse: 7 callbacks suppressed
[  281.582866][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'.
[  282.261290][T13416] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2310'.
[  282.326283][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2311'.
[  282.416592][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[  282.487198][T13426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.494035][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2314'.
[  283.233737][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2326'.
[  283.574380][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2331'.
[  283.694506][T13489] lo speed is unknown, defaulting to 1000
[  283.801482][T13498] macsec1: entered promiscuous mode
[  283.806882][T13498] macvlan0: entered promiscuous mode
[  283.813789][T13498] macvlan0: left promiscuous mode
[  283.934137][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2339'.
[  284.038814][T13510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.235801][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2343'.
[  284.243199][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2344'.
[  284.452370][T13532] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  284.483421][T13527] lo speed is unknown, defaulting to 1000
[  284.554531][T13537] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2352'.
[  285.845844][T13595] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  285.908744][T13599] netlink: 'syz.6.2372': attribute type 21 has an invalid length.
[  286.198930][T13621] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  286.245412][T13621] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  286.279325][T13626] netlink: 'syz.3.2380': attribute type 3 has an invalid length.
[  286.548275][T13634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.619402][T13641] syzkaller0: entered promiscuous mode
[  286.636916][T13641] syzkaller0: entered allmulticast mode
[  286.831305][T13655] __nla_validate_parse: 7 callbacks suppressed
[  286.831322][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'.
[  286.860290][T13652] 8021q: adding VLAN 0 to HW filter on device bond8
[  286.860702][T13658] netlink: 'syz.3.2390': attribute type 1 has an invalid length.
[  286.877009][T13652] bond8: entered promiscuous mode
[  286.883954][T13652] team0: Port device bond8 added
[  286.929830][T13658] 8021q: adding VLAN 0 to HW filter on device bond9
[  287.034648][T13661] bond8: (slave wlan0): Releasing active interface
[  287.077250][T13661] bond9: (slave wlan0): Enslaving as an active interface with a down link
[  287.134775][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2392'.
[  287.247279][T13677] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  287.260731][T13677] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  287.439602][T13692] FAULT_INJECTION: forcing a failure.
[  287.439602][T13692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.453264][T13692] CPU: 1 UID: 0 PID: 13692 Comm: syz.3.2401 Not tainted syzkaller #0 PREEMPT(full) 
[  287.453289][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  287.453300][T13692] Call Trace:
[  287.453308][T13692]  <TASK>
[  287.453316][T13692]  dump_stack_lvl+0x189/0x250
[  287.453341][T13692]  ? __pfx____ratelimit+0x10/0x10
[  287.453360][T13692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.453379][T13692]  ? __pfx__printk+0x10/0x10
[  287.453401][T13692]  ? __might_fault+0xb0/0x130
[  287.453435][T13692]  should_fail_ex+0x414/0x560
[  287.453463][T13692]  _copy_from_user+0x2d/0xb0
[  287.453485][T13692]  __sys_connect+0x123/0x440
[  287.453505][T13692]  ? __fget_files+0x3a0/0x420
[  287.453521][T13692]  ? __pfx___sys_connect+0x10/0x10
[  287.453553][T13692]  ? __pfx_ksys_write+0x10/0x10
[  287.453572][T13692]  ? rcu_is_watching+0x15/0xb0
[  287.453597][T13692]  __x64_sys_connect+0x7a/0x90
[  287.453618][T13692]  do_syscall_64+0xfa/0x3b0
[  287.453636][T13692]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.453653][T13692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.453670][T13692]  ? clear_bhb_loop+0x60/0xb0
[  287.453691][T13692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.453707][T13692] RIP: 0033:0x7f7101f8eec9
[  287.453723][T13692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.453737][T13692] RSP: 002b:00007f7102dea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  287.453756][T13692] RAX: ffffffffffffffda RBX: 00007f71021e5fa0 RCX: 00007f7101f8eec9
[  287.453768][T13692] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004
[  287.453780][T13692] RBP: 00007f7102dea090 R08: 0000000000000000 R09: 0000000000000000
[  287.453790][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.453801][T13692] R13: 00007f71021e6038 R14: 00007f71021e5fa0 R15: 00007ffe512caa48
[  287.453831][T13692]  </TASK>
[  287.730950][T13696] lo speed is unknown, defaulting to 1000
[  287.736886][T13696] lo speed is unknown, defaulting to 1000
[  287.746664][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  287.753249][T13696] lo speed is unknown, defaulting to 1000
[  287.886063][T13696] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  287.936002][T13701] lo speed is unknown, defaulting to 1000
[  287.990825][T13696] lo speed is unknown, defaulting to 1000
[  288.002771][T13708] lo speed is unknown, defaulting to 1000
[  288.022202][T13716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.047968][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'.
[  288.057803][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2407'.
[  288.106913][T13696] lo speed is unknown, defaulting to 1000
[  288.121688][T13708] lo speed is unknown, defaulting to 1000
[  288.128989][T13717] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2407'.
[  288.206078][T13696] lo speed is unknown, defaulting to 1000
[  288.262956][T13696] lo speed is unknown, defaulting to 1000
[  288.272734][T13696] lo speed is unknown, defaulting to 1000
[  288.339551][T13696] lo speed is unknown, defaulting to 1000
[  288.526600][   T49] vlan3: left promiscuous mode
[  288.906622][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'.
[  289.020224][T13741] bond0: (slave rose0): Error: Device can not be enslaved while up
[  289.112973][T13740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.135743][ T5967] lo speed is unknown, defaulting to 1000
[  289.183880][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2414'.
[  289.221113][T13751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2412'.
[  289.256438][T13751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2412'.
[  289.276284][T13754] netlink: 'syz.5.2416': attribute type 21 has an invalid length.
[  289.709804][T13773] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  289.917167][T13789] FAULT_INJECTION: forcing a failure.
[  289.917167][T13789] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.930745][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.1.2427 Not tainted syzkaller #0 PREEMPT(full) 
[  289.930769][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  289.930780][T13789] Call Trace:
[  289.930788][T13789]  <TASK>
[  289.930795][T13789]  dump_stack_lvl+0x189/0x250
[  289.930820][T13789]  ? __pfx____ratelimit+0x10/0x10
[  289.930839][T13789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.930858][T13789]  ? __pfx__printk+0x10/0x10
[  289.930880][T13789]  ? __might_fault+0xb0/0x130
[  289.930914][T13789]  should_fail_ex+0x414/0x560
[  289.930942][T13789]  _copy_from_user+0x2d/0xb0
[  289.930963][T13789]  ___sys_sendmsg+0x158/0x2a0
[  289.930988][T13789]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.931049][T13789]  ? __fget_files+0x2a/0x420
[  289.931064][T13789]  ? __fget_files+0x3a0/0x420
[  289.931089][T13789]  __x64_sys_sendmsg+0x19b/0x260
[  289.931113][T13789]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.931144][T13789]  ? __pfx_ksys_write+0x10/0x10
[  289.931163][T13789]  ? rcu_is_watching+0x15/0xb0
[  289.931186][T13789]  ? do_syscall_64+0xbe/0x3b0
[  289.931208][T13789]  do_syscall_64+0xfa/0x3b0
[  289.931224][T13789]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.931241][T13789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.931258][T13789]  ? clear_bhb_loop+0x60/0xb0
[  289.931286][T13789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.931302][T13789] RIP: 0033:0x7f8c4078eec9
[  289.931318][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.931333][T13789] RSP: 002b:00007f8c415bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.931352][T13789] RAX: ffffffffffffffda RBX: 00007f8c409e5fa0 RCX: 00007f8c4078eec9
[  289.931363][T13789] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  289.931373][T13789] RBP: 00007f8c415bf090 R08: 0000000000000000 R09: 0000000000000000
[  289.931382][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.931392][T13789] R13: 00007f8c409e6038 R14: 00007f8c409e5fa0 R15: 00007fff943d33e8
[  289.931418][T13789]  </TASK>
[  290.563564][T13816] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[  290.574301][T13816] macvtap1: entered promiscuous mode
[  290.586449][T13816] mac80211_hwsim hwsim19 wlan1: left promiscuous mode
[  290.807370][T13825] netlink: 'syz.2.2438': attribute type 13 has an invalid length.
[  290.818868][T13825] netlink: 'syz.2.2438': attribute type 17 has an invalid length.
[  290.851317][T13825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.962866][T13825] lo speed is unknown, defaulting to 1000
[  290.974400][T13825] lo speed is unknown, defaulting to 1000
[  291.023380][T13828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.124692][T13828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.418145][T13848] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[  291.437879][T13848] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001
[  291.684208][T13860] netlink: 'syz.1.2448': attribute type 1 has an invalid length.
[  291.700913][T13861] vlan4: entered promiscuous mode
[  291.714215][T13861] bridge0: port 4(vlan4) entered blocking state
[  291.726660][T13861] bridge0: port 4(vlan4) entered disabled state
[  291.737895][T13861] vlan4: entered allmulticast mode
[  291.743040][T13861] bridge0: entered allmulticast mode
[  291.755333][T13861] vlan4: left allmulticast mode
[  291.760345][T13861] bridge0: left allmulticast mode
[  291.824618][T13860] 8021q: adding VLAN 0 to HW filter on device bond20
[  291.864153][T13862] bond18: (slave wlan0): Releasing active interface
[  291.875137][T13862] bond20: (slave wlan0): Enslaving as an active interface with a down link
[  291.965920][T13864] veth9: entered promiscuous mode
[  292.040623][T13874] __nla_validate_parse: 17 callbacks suppressed
[  292.040643][T13874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2453'.
[  292.277929][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.286268][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.370853][ T4519] bond13: (slave wlan0): failed to get link speed/duplex
[  292.415950][T13891] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.500305][T13891] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.538431][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'.
[  292.566965][ T6490] bond13: (slave wlan0): failed to get link speed/duplex
[  292.594981][T13891] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.667793][T13915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2464'.
[  292.687041][ T6490] bond13: (slave wlan0): failed to get link speed/duplex
[  292.741169][T13891] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.818821][ T3509] bond13: (slave wlan0): failed to get link speed/duplex
[  292.926526][ T6490] bond13: (slave wlan0): failed to get link speed/duplex
[  293.016172][ T4519] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.036265][ T4519] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.057167][ T4519] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.066331][ T4519] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.086474][ T6490] bond13: (slave wlan0): failed to get link speed/duplex
[  293.269547][   T49] bond13: (slave wlan0): failed to get link speed/duplex
[  293.388632][ T4519] bond13: (slave wlan0): failed to get link speed/duplex
[  293.497895][   T49] bond13: (slave wlan0): failed to get link speed/duplex
[  293.523209][T13925] netlink: 'syz.6.2470': attribute type 1 has an invalid length.
[  293.531650][T13925] netlink: 'syz.6.2470': attribute type 3 has an invalid length.
[  293.541332][T13925] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2470'.
[  293.558310][T13925] NCSI netlink: No device for ifindex 246
[  293.581430][T13933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2471'.
[  293.611966][T13926] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2468'.
[  293.621367][   T49] bond13: (slave wlan0): failed to get link speed/duplex
[  293.705261][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'.
[  293.843336][T13939] netlink: 'syz.3.2474': attribute type 1 has an invalid length.
[  293.857012][ T4519] bond13: (slave wlan0): failed to get link speed/duplex
[  293.867800][T13939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2474'.
[  293.941866][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'.
[  293.975343][T13953] FAULT_INJECTION: forcing a failure.
[  293.975343][T13953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.028405][T13960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2474'.
[  294.036673][T13953] CPU: 0 UID: 0 PID: 13953 Comm: syz.6.2479 Not tainted syzkaller #0 PREEMPT(full) 
[  294.036698][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  294.036708][T13953] Call Trace:
[  294.036715][T13953]  <TASK>
[  294.036722][T13953]  dump_stack_lvl+0x189/0x250
[  294.036745][T13953]  ? __pfx____ratelimit+0x10/0x10
[  294.036764][T13953]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.036783][T13953]  ? __pfx__printk+0x10/0x10
[  294.036817][T13953]  should_fail_ex+0x414/0x560
[  294.036851][T13953]  _copy_from_user+0x2d/0xb0
[  294.036873][T13953]  __copy_msghdr+0x3c5/0x5b0
[  294.036898][T13953]  ___sys_sendmsg+0x1a5/0x2a0
[  294.036920][T13953]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.036976][T13953]  ? __fget_files+0x2a/0x420
[  294.036989][T13953]  ? __fget_files+0x3a0/0x420
[  294.037015][T13953]  __x64_sys_sendmsg+0x19b/0x260
[  294.037038][T13953]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.037068][T13953]  ? __pfx_ksys_write+0x10/0x10
[  294.037087][T13953]  ? rcu_is_watching+0x15/0xb0
[  294.037109][T13953]  ? do_syscall_64+0xbe/0x3b0
[  294.037130][T13953]  do_syscall_64+0xfa/0x3b0
[  294.037146][T13953]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.037162][T13953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.037185][T13953]  ? clear_bhb_loop+0x60/0xb0
[  294.037204][T13953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.037219][T13953] RIP: 0033:0x7fed0898eec9
[  294.037235][T13953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.037248][T13953] RSP: 002b:00007fed06bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.037267][T13953] RAX: ffffffffffffffda RBX: 00007fed08be5fa0 RCX: 00007fed0898eec9
[  294.037279][T13953] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  294.037289][T13953] RBP: 00007fed06bee090 R08: 0000000000000000 R09: 0000000000000000
[  294.037299][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.037309][T13953] R13: 00007fed08be6038 R14: 00007fed08be5fa0 R15: 00007ffdc830ce48
[  294.037337][T13953]  </TASK>
[  294.486503][ T3566] bond13: (slave wlan0): failed to get link speed/duplex
[  294.596987][ T3566] bond13: (slave wlan0): failed to get link speed/duplex
[  294.706967][ T4519] bond13: (slave wlan0): failed to get link speed/duplex
[  294.734505][T13987] nbd: socks must be embedded in a SOCK_ITEM attr
[  294.765818][T13978] lo speed is unknown, defaulting to 1000
[  294.800221][T13978] lo speed is unknown, defaulting to 1000
[  294.996499][ T4519] bond13: (slave wlan0): failed to get link speed/duplex
[  295.116999][T14000] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  295.159518][T14000] 8021q: adding VLAN 0 to HW filter on device bond14
[  295.184359][T14000] bond13: (slave wlan0): Releasing active interface
[  295.205699][T14000] bond14: (slave wlan0): Enslaving as an active interface with a down link
[  295.243900][T14000] FAULT_INJECTION: forcing a failure.
[  295.243900][T14000] name failslab, interval 1, probability 0, space 0, times 0
[  295.284425][T14000] CPU: 0 UID: 0 PID: 14000 Comm: syz.2.2490 Not tainted syzkaller #0 PREEMPT(full) 
[  295.284451][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  295.284461][T14000] Call Trace:
[  295.284468][T14000]  <TASK>
[  295.284475][T14000]  dump_stack_lvl+0x189/0x250
[  295.284501][T14000]  ? __pfx____ratelimit+0x10/0x10
[  295.284520][T14000]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.284538][T14000]  ? __pfx__printk+0x10/0x10
[  295.284565][T14000]  ? __pfx___might_resched+0x10/0x10
[  295.284580][T14000]  ? fs_reclaim_acquire+0x7d/0x100
[  295.284602][T14000]  should_fail_ex+0x414/0x560
[  295.284629][T14000]  ? alloc_netdev_mqs+0xa3/0x11b0
[  295.284651][T14000]  should_failslab+0xa8/0x100
[  295.284675][T14000]  __kvmalloc_node_noprof+0x161/0x5f0
[  295.284698][T14000]  ? alloc_netdev_mqs+0xa3/0x11b0
[  295.284718][T14000]  ? snprintf+0xda/0x120
[  295.284743][T14000]  alloc_netdev_mqs+0xa3/0x11b0
[  295.284764][T14000]  ? __pfx_vlan_setup+0x10/0x10
[  295.284793][T14000]  rtnl_create_link+0x31f/0xd10
[  295.284824][T14000]  rtnl_newlink_create+0x25c/0xb00
[  295.284851][T14000]  ? __lock_acquire+0xab9/0xd20
[  295.284878][T14000]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  295.284903][T14000]  ? __pfx___mutex_lock+0x10/0x10
[  295.284933][T14000]  ? ns_capable+0x8a/0xf0
[  295.284955][T14000]  rtnl_newlink+0x16e4/0x1c80
[  295.284975][T14000]  ? __dev_queue_xmit+0x1b8d/0x3b50
[  295.285006][T14000]  ? __pfx_rtnl_newlink+0x10/0x10
[  295.285054][T14000]  ? kasan_quarantine_put+0xdd/0x220
[  295.285074][T14000]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.285099][T14000]  ? nlmon_xmit+0xb0/0x100
[  295.285116][T14000]  ? kmem_cache_free+0x18f/0x400
[  295.285145][T14000]  ? __local_bh_enable_ip+0x12d/0x1c0
[  295.285163][T14000]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.285182][T14000]  ? __local_bh_enable_ip+0x12d/0x1c0
[  295.285199][T14000]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  295.285220][T14000]  ? __dev_queue_xmit+0x27b/0x3b50
[  295.285240][T14000]  ? __dev_queue_xmit+0x27b/0x3b50
[  295.285267][T14000]  ? __dev_queue_xmit+0x27b/0x3b50
[  295.285288][T14000]  ? __dev_queue_xmit+0x1d79/0x3b50
[  295.285313][T14000]  ? __lock_acquire+0xab9/0xd20
[  295.285359][T14000]  ? __pfx_rtnl_newlink+0x10/0x10
[  295.285376][T14000]  rtnetlink_rcv_msg+0x7cf/0xb70
[  295.285397][T14000]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  295.285414][T14000]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  295.285430][T14000]  ? ref_tracker_free+0x63a/0x7d0
[  295.285451][T14000]  ? __asan_memcpy+0x40/0x70
[  295.285469][T14000]  ? __pfx_ref_tracker_free+0x10/0x10
[  295.285483][T14000]  ? __skb_clone+0x63/0x7a0
[  295.285514][T14000]  netlink_rcv_skb+0x208/0x470
[  295.285534][T14000]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  295.285554][T14000]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  295.285587][T14000]  ? netlink_deliver_tap+0x2e/0x1b0
[  295.285616][T14000]  netlink_unicast+0x82f/0x9e0
[  295.285644][T14000]  ? __pfx_netlink_unicast+0x10/0x10
[  295.285664][T14000]  ? netlink_sendmsg+0x642/0xb30
[  295.285681][T14000]  ? skb_put+0x11b/0x210
[  295.285705][T14000]  netlink_sendmsg+0x805/0xb30
[  295.285734][T14000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.285758][T14000]  ? aa_sock_msg_perm+0xf1/0x1d0
[  295.285776][T14000]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.285795][T14000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.285814][T14000]  __sock_sendmsg+0x21c/0x270
[  295.285835][T14000]  ____sys_sendmsg+0x505/0x830
[  295.285863][T14000]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.285895][T14000]  ? import_iovec+0x74/0xa0
[  295.285920][T14000]  ___sys_sendmsg+0x21f/0x2a0
[  295.285944][T14000]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.286003][T14000]  ? __fget_files+0x2a/0x420
[  295.286018][T14000]  ? __fget_files+0x3a0/0x420
[  295.286046][T14000]  __x64_sys_sendmsg+0x19b/0x260
[  295.286070][T14000]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.286102][T14000]  ? __pfx_ksys_write+0x10/0x10
[  295.286130][T14000]  ? do_syscall_64+0xbe/0x3b0
[  295.286152][T14000]  do_syscall_64+0xfa/0x3b0
[  295.286168][T14000]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.286185][T14000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.286201][T14000]  ? clear_bhb_loop+0x60/0xb0
[  295.286222][T14000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.286238][T14000] RIP: 0033:0x7f050e38eec9
[  295.286262][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.286276][T14000] RSP: 002b:00007f050f240038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.286295][T14000] RAX: ffffffffffffffda RBX: 00007f050e5e5fa0 RCX: 00007f050e38eec9
[  295.286308][T14000] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a
[  295.286319][T14000] RBP: 00007f050f240090 R08: 0000000000000000 R09: 0000000000000000
[  295.286330][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.286340][T14000] R13: 00007f050e5e6038 R14: 00007f050e5e5fa0 R15: 00007ffdaf3ff838
[  295.286367][T14000]  </TASK>
[  295.403215][T13975] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  295.899207][T14010] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.906873][T14010] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.078315][ T5967] lo speed is unknown, defaulting to 1000
[  296.084123][ T5967] syz2: Port: 1 Link DOWN
[  296.122408][   T49] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.166084][   T49] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.235755][   T49] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.262222][   T49] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.391852][T14030] bond9: (slave wlan0): Releasing active interface
[  296.551956][T14046] lo speed is unknown, defaulting to 1000
[  296.577968][T14046] lo speed is unknown, defaulting to 1000
[  297.440508][T14078] lo speed is unknown, defaulting to 1000
[  297.466099][T14078] lo speed is unknown, defaulting to 1000
[  297.530048][   T43] IPVS: starting estimator thread 0...
[  297.646475][T14086] IPVS: using max 29 ests per chain, 69600 per kthread
[  297.759228][T14083] lo speed is unknown, defaulting to 1000
[  297.781647][T14083] lo speed is unknown, defaulting to 1000
[  298.673589][T14120] netlink: 'syz.3.2528': attribute type 1 has an invalid length.
[  298.703802][T14102] lo speed is unknown, defaulting to 1000
[  298.736650][ T5183] Bluetooth: hci4: command 0x0406 tx timeout
[  298.751209][T14120] 8021q: adding VLAN 0 to HW filter on device bond10
[  298.763631][T14122] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  298.784499][T14102] lo speed is unknown, defaulting to 1000
[  299.007818][T14129] veth1: left promiscuous mode
[  299.018746][T14129] batadv_slave_0: left promiscuous mode
[  299.058702][T14140] __nla_validate_parse: 5 callbacks suppressed
[  299.058721][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2537'.
[  299.282171][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2542'.
[  299.379422][T14145] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  299.690420][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'.
[  300.162575][T14181] 8021q: adding VLAN 0 to HW filter on device bond9
[  300.171394][T14181] bond9: entered promiscuous mode
[  300.178118][T14181] team0: Port device bond9 added
[  300.197115][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'.
[  300.281770][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2554'.
[  300.848660][T14207] lo speed is unknown, defaulting to 1000
[  300.879745][T14207] lo speed is unknown, defaulting to 1000
[  301.044369][T14218] tipc: Enabled bearer <udp:s>, priority 10
[  301.079479][T14220] netlink: 'syz.1.2565': attribute type 3 has an invalid length.
[  301.188190][T14214] lo speed is unknown, defaulting to 1000
[  301.202974][T14214] lo speed is unknown, defaulting to 1000
[  301.312072][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'.
[  301.593487][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2569'.
[  301.742086][T14245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2570'.
[  301.777629][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2570'.
[  301.815898][T14245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2570'.
[  301.817905][T14238] lo speed is unknown, defaulting to 1000
[  301.909780][T14238] lo speed is unknown, defaulting to 1000
[  302.097445][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[  302.436654][ T5967] tipc: Node number set to 3240611931
[  302.883786][T14275] 8021q: adding VLAN 0 to HW filter on device team0
[  302.899069][T14275] net_ratelimit: 1 callbacks suppressed
[  302.899079][T14275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.032773][T14282] FAULT_INJECTION: forcing a failure.
[  303.032773][T14282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  303.046233][T14281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.070848][T14282] CPU: 1 UID: 0 PID: 14282 Comm: syz.5.2584 Not tainted syzkaller #0 PREEMPT(full) 
[  303.070874][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  303.070883][T14282] Call Trace:
[  303.070890][T14282]  <TASK>
[  303.070897][T14282]  dump_stack_lvl+0x189/0x250
[  303.070921][T14282]  ? __pfx____ratelimit+0x10/0x10
[  303.070939][T14282]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.070957][T14282]  ? __pfx__printk+0x10/0x10
[  303.070978][T14282]  ? __might_fault+0xb0/0x130
[  303.071010][T14282]  should_fail_ex+0x414/0x560
[  303.071050][T14282]  _copy_from_user+0x2d/0xb0
[  303.071071][T14282]  ___sys_sendmsg+0x158/0x2a0
[  303.071095][T14282]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.071151][T14282]  ? __fget_files+0x2a/0x420
[  303.071165][T14282]  ? __fget_files+0x3a0/0x420
[  303.071189][T14282]  __x64_sys_sendmsg+0x19b/0x260
[  303.071213][T14282]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.071244][T14282]  ? __pfx_ksys_write+0x10/0x10
[  303.071262][T14282]  ? rcu_is_watching+0x15/0xb0
[  303.071285][T14282]  ? do_syscall_64+0xbe/0x3b0
[  303.071312][T14282]  do_syscall_64+0xfa/0x3b0
[  303.071328][T14282]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.071345][T14282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.071361][T14282]  ? clear_bhb_loop+0x60/0xb0
[  303.071382][T14282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.071397][T14282] RIP: 0033:0x7f658138eec9
[  303.071410][T14282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.071424][T14282] RSP: 002b:00007f6582296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.071447][T14282] RAX: ffffffffffffffda RBX: 00007f65815e5fa0 RCX: 00007f658138eec9
[  303.071460][T14282] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011
[  303.071474][T14282] RBP: 00007f6582296090 R08: 0000000000000000 R09: 0000000000000000
[  303.071485][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.071495][T14282] R13: 00007f65815e6038 R14: 00007f65815e5fa0 R15: 00007ffde81c3428
[  303.071525][T14282]  </TASK>
[  303.073288][T14286] dummy0: entered promiscuous mode
[  303.286941][T14286] macsec1: entered promiscuous mode
[  303.293162][T14286] macsec1: entered allmulticast mode
[  303.302233][T14286] dummy0: entered allmulticast mode
[  303.311809][T14286] dummy0: left allmulticast mode
[  303.317503][T14286] dummy0: left promiscuous mode
[  304.218306][T14342] FAULT_INJECTION: forcing a failure.
[  304.218306][T14342] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.232732][T14342] CPU: 1 UID: 0 PID: 14342 Comm: syz.5.2605 Not tainted syzkaller #0 PREEMPT(full) 
[  304.232757][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  304.232777][T14342] Call Trace:
[  304.232784][T14342]  <TASK>
[  304.232791][T14342]  dump_stack_lvl+0x189/0x250
[  304.232815][T14342]  ? __pfx____ratelimit+0x10/0x10
[  304.232833][T14342]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.232850][T14342]  ? __pfx__printk+0x10/0x10
[  304.232871][T14342]  ? __might_fault+0xb0/0x130
[  304.232917][T14342]  should_fail_ex+0x414/0x560
[  304.232945][T14342]  _copy_from_iter+0x1de/0x1790
[  304.232969][T14342]  ? rcu_is_watching+0x15/0xb0
[  304.232987][T14342]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  304.233008][T14342]  ? __pfx__copy_from_iter+0x10/0x10
[  304.233028][T14342]  ? __build_skb_around+0x257/0x3e0
[  304.233051][T14342]  ? netlink_sendmsg+0x642/0xb30
[  304.233074][T14342]  ? skb_put+0x11b/0x210
[  304.233094][T14342]  netlink_sendmsg+0x6b2/0xb30
[  304.233122][T14342]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.233142][T14342]  ? aa_sock_msg_perm+0xf1/0x1d0
[  304.233159][T14342]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.233175][T14342]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.233195][T14342]  __sock_sendmsg+0x21c/0x270
[  304.233215][T14342]  ____sys_sendmsg+0x505/0x830
[  304.233247][T14342]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.233281][T14342]  ? import_iovec+0x74/0xa0
[  304.233302][T14342]  ___sys_sendmsg+0x21f/0x2a0
[  304.233324][T14342]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.233382][T14342]  ? __fget_files+0x2a/0x420
[  304.233397][T14342]  ? __fget_files+0x3a0/0x420
[  304.233423][T14342]  __x64_sys_sendmsg+0x19b/0x260
[  304.233446][T14342]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.233476][T14342]  ? __pfx_ksys_write+0x10/0x10
[  304.233495][T14342]  ? rcu_is_watching+0x15/0xb0
[  304.233518][T14342]  ? do_syscall_64+0xbe/0x3b0
[  304.233541][T14342]  do_syscall_64+0xfa/0x3b0
[  304.233557][T14342]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.233575][T14342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.233592][T14342]  ? clear_bhb_loop+0x60/0xb0
[  304.233613][T14342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.233628][T14342] RIP: 0033:0x7f658138eec9
[  304.233649][T14342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.233663][T14342] RSP: 002b:00007f6582275038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.233683][T14342] RAX: ffffffffffffffda RBX: 00007f65815e6090 RCX: 00007f658138eec9
[  304.233695][T14342] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a
[  304.233707][T14342] RBP: 00007f6582275090 R08: 0000000000000000 R09: 0000000000000000
[  304.233718][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.233728][T14342] R13: 00007f65815e6128 R14: 00007f65815e6090 R15: 00007ffde81c3428
[  304.233758][T14342]  </TASK>
[  304.571429][T14346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.594486][T14346] __nla_validate_parse: 9 callbacks suppressed
[  304.594504][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'.
[  304.744849][T14350] netlink: 'syz.1.2609': attribute type 3 has an invalid length.
[  304.781780][T14355] netlink: 'syz.1.2609': attribute type 3 has an invalid length.
[  304.808997][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2610'.
[  305.063020][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2614'.
[  305.121376][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2615'.
[  305.398584][T14384] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2620'.
[  305.415409][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2620'.
[  305.445241][T14384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2620'.
[  305.479228][T14384] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  305.508078][T14392] IPVS: set_ctl: invalid protocol: 159 172.20.20.170:20004
[  305.516948][T14384] netlink: 'syz.6.2620': attribute type 3 has an invalid length.
[  305.547557][T14389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2621'.
[  305.626766][T14389] netlink: 'syz.3.2621': attribute type 1 has an invalid length.
[  305.644225][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'.
[  305.679911][T14394] vlan2: entered promiscuous mode
[  306.290424][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'.
[  306.475073][T14421] lo speed is unknown, defaulting to 1000
[  306.568136][T14421] lo speed is unknown, defaulting to 1000
[  307.052169][T14448] netlink: 'syz.1.2637': attribute type 1 has an invalid length.
[  307.202485][T14452] dvmrp1: tun_chr_ioctl cmd 1074025673
[  307.228925][T14452] netlink: 'syz.5.2639': attribute type 3 has an invalid length.
[  307.242721][T14452] dvmrp1: tun_chr_ioctl cmd 1074025677
[  307.248825][T14452] dvmrp1: linktype set to 805
[  307.286611][T14453] dvmrp1: tun_chr_ioctl cmd 1074025677
[  307.306648][T14453] dvmrp1: linktype set to 805
[  307.378021][T14463] vlan2: entered promiscuous mode
[  307.383937][T14463] ip6gretap0: entered promiscuous mode
[  307.605302][T14478] lo speed is unknown, defaulting to 1000
[  307.642995][T14478] lo speed is unknown, defaulting to 1000
[  307.753361][T14489] netlink: 'syz.6.2650': attribute type 1 has an invalid length.
[  308.022880][T14504] openvswitch: netlink: VXLAN extension 4 out of range max 1
[  308.417865][T14526] netlink: 'syz.5.2663': attribute type 1 has an invalid length.
[  308.461720][T14529] vlan2: entered promiscuous mode
[  308.483713][T14529] team0: entered promiscuous mode
[  308.490502][T14529] team_slave_0: entered promiscuous mode
[  308.498683][T14529] team_slave_1: entered promiscuous mode
[  308.505357][T14529] bond4: entered promiscuous mode
[  308.522162][T14529] bond5: entered promiscuous mode
[  308.527781][T14529] geneve0: entered promiscuous mode
[  308.533475][T14529] bond6: entered promiscuous mode
[  308.541459][T14529] team0: Device vlan2 is already an upper device of the team interface
[  308.872933][T14541] lo speed is unknown, defaulting to 1000
[  308.914056][T14541] lo speed is unknown, defaulting to 1000
[  308.918282][T14543] lo speed is unknown, defaulting to 1000
[  308.992895][T14543] lo speed is unknown, defaulting to 1000
[  309.635701][T14574] netlink: 'syz.6.2679': attribute type 1 has an invalid length.
[  309.841732][T14576] __nla_validate_parse: 19 callbacks suppressed
[  309.841751][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2680'.
[  310.166600][T14587] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2684'.
[  310.267757][T14591] netlink: 'syz.3.2687': attribute type 3 has an invalid length.
[  310.304312][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2686'.
[  310.380487][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2686'.
[  310.621233][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2692'.
[  310.668114][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  310.744012][T14611] bridge_slave_1: left allmulticast mode
[  310.802150][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2693'.
[  310.811259][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2693'.
[  310.821090][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2693'.
[  310.837159][T14611] bridge_slave_1: left promiscuous mode
[  310.838889][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2693'.
[  310.873435][T14611] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.965551][T14611] bridge_slave_0: left allmulticast mode
[  311.009314][T14611] bridge_slave_0: left promiscuous mode
[  311.048079][T14611] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.565278][T14640] lo speed is unknown, defaulting to 1000
[  311.598647][T14640] lo speed is unknown, defaulting to 1000
[  311.954121][T14660] netlink: 'syz.5.2705': attribute type 11 has an invalid length.
[  312.053143][T14659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.123799][T14658] tipc: Disabling bearer <eth:syzkaller0>
[  312.404848][T14672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.874558][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.895830][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.913198][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  313.928362][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  313.943906][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.837474][T14702] netlink: 'syz.6.2721': attribute type 1 has an invalid length.
[  314.971708][T14702] 8021q: adding VLAN 0 to HW filter on device bond10
[  314.988372][T14696] lo speed is unknown, defaulting to 1000
[  315.013781][T14709] bond7: (slave wlan0): Releasing active interface
[  315.020779][T14709] bond7: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  315.038705][T14709] vlan3: entered promiscuous mode
[  315.050582][T14709] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  315.081032][T14696] lo speed is unknown, defaulting to 1000
[  315.099839][T14693] lo speed is unknown, defaulting to 1000
[  315.156120][T14693] lo speed is unknown, defaulting to 1000
[  315.369878][T14725] __nla_validate_parse: 7 callbacks suppressed
[  315.369897][T14725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'.
[  315.419131][T14719] 8021q: adding VLAN 0 to HW filter on device bond11
[  315.428046][T14719] bond11: entered promiscuous mode
[  315.435043][T14719] team0: Port device bond11 added
[  315.925583][T14741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.935429][T14741] syzkaller0: entered promiscuous mode
[  315.949298][T14741] syzkaller0: entered allmulticast mode
[  315.994859][T14741] tipc: Resetting bearer <eth:syzkaller0>
[  316.007157][T14741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2733'.
[  316.021060][ T5876] Bluetooth: hci4: command tx timeout
[  316.021257][T14693] chnl_net:caif_netlink_parms(): no params data found
[  316.117313][T14740] tipc: Resetting bearer <eth:syzkaller0>
[  316.138957][T14740] tipc: Disabling bearer <eth:syzkaller0>
[  316.277585][T14693] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.286042][T14693] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.314839][T14693] bridge_slave_0: entered allmulticast mode
[  316.348411][T14693] bridge_slave_0: entered promiscuous mode
[  316.359314][T14693] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.368751][T14693] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.381608][T14693] bridge_slave_1: entered allmulticast mode
[  316.390112][T14693] bridge_slave_1: entered promiscuous mode
[  316.541141][T14757] veth11: entered promiscuous mode
[  316.547626][T14769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'.
[  316.689641][T14693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.700643][T14773] netlink: 'syz.3.2742': attribute type 1 has an invalid length.
[  316.739289][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2743'.
[  316.772352][T14773] 8021q: adding VLAN 0 to HW filter on device bond11
[  316.795383][T14693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.848215][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'.
[  316.866575][T14773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.875987][T14773] bond11: (slave batadv0): making interface the new active one
[  316.888782][T14773] bond11: (slave batadv0): Enslaving as an active interface with an up link
[  316.898040][T14778] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  317.025475][T14782] bond11 (unregistering): (slave batadv0): Releasing active interface
[  317.035825][T14782] bond11 (unregistering): Released all slaves
[  317.061575][T14693] team0: Port device team_slave_0 added
[  317.071081][T14693] team0: Port device team_slave_1 added
[  317.112579][T14693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.119930][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.149428][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.157071][T14693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.169424][T14693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.178475][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.204449][T14693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.242897][T14693] hsr_slave_0: entered promiscuous mode
[  317.249324][T14693] hsr_slave_1: entered promiscuous mode
[  317.255350][T14693] debugfs: 'hsr0' already exists in 'hsr'
[  317.261256][T14693] Cannot create hsr debugfs directory
[  317.352784][T14693] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.413293][T14693] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.480831][T14693] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.530415][T14693] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.658927][T14693] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  317.672413][T14693] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  317.682727][T14693] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  317.692324][T14693] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  317.756705][T14693] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.782135][T14693] 8021q: adding VLAN 0 to HW filter on device team0
[  317.797973][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.805063][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.819479][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.826671][ T6493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.990142][T14693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.038348][T14693] veth0_vlan: entered promiscuous mode
[  318.049219][T14693] veth1_vlan: entered promiscuous mode
[  318.080357][T14693] veth0_macvtap: entered promiscuous mode
[  318.091857][T14693] veth1_macvtap: entered promiscuous mode
[  318.098458][ T5876] Bluetooth: hci4: command tx timeout
[  318.114055][T14693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.128703][T14693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.142746][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.151981][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.161771][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.171888][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.233131][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.241688][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.273575][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.283346][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.323024][T14794] netlink: 'syz.1.2718': attribute type 15 has an invalid length.
[  318.331310][T14794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2718'.
[  318.342893][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'.
[  318.352333][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'.
[  320.186553][ T5876] Bluetooth: hci4: command tx timeout
[  322.258276][ T5183] Bluetooth: hci4: command tx timeout
[  324.336551][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  326.027060][ T3509] vlan3: left promiscuous mode
[  368.859670][T14804] netlink: 'syz.6.2746': attribute type 1 has an invalid length.
[  368.868882][T14804] netlink: 'syz.6.2746': attribute type 1 has an invalid length.
[  368.949652][T14805] bond0: entered allmulticast mode
[  368.963221][T14805] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.024048][T14804] lo speed is unknown, defaulting to 1000
[  369.071615][T14804] lo speed is unknown, defaulting to 1000
[  369.159861][T14821] 8021q: adding VLAN 0 to HW filter on device bond5
[  369.169097][T14821] team0: Port device bond5 added
[  369.703168][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2762'.
[  369.722056][T14847] syz_tun: entered promiscuous mode
[  369.739988][T14847] syz_tun: left promiscuous mode
[  369.964313][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2765'.
[  370.183975][T14860] lo speed is unknown, defaulting to 1000
[  370.223274][T14860] lo speed is unknown, defaulting to 1000
[  370.293273][T14867] netlink: 'syz.5.2768': attribute type 10 has an invalid length.
[  370.311196][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2768'.
[  370.354877][T14867] team0: Port device geneve0 added
[  370.389793][ T3509] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.418514][ T3509] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.481368][ T3509] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.511525][ T3509] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.844458][T14890] netlink: 'syz.3.2777': attribute type 1 has an invalid length.
[  371.021067][T14887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.127971][T14890] 8021q: adding VLAN 0 to HW filter on device bond11
[  371.177686][T14893] 8021q: adding VLAN 0 to HW filter on device bond15
[  371.188774][T14893] team0: Port device bond15 added
[  371.231815][T14896] bond10: (slave wlan0): Releasing active interface
[  371.266268][T14896] bond11: (slave wlan0): Enslaving as an active interface with a down link
[  371.351308][T14914] netlink: 'syz.6.2780': attribute type 12 has an invalid length.
[  371.382781][T14914] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.2780'.
[  371.494001][T14916] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2781'.
[  371.539294][T14926] netlink: 'syz.5.2784': attribute type 14 has an invalid length.
[  371.657654][T14929] gretap0: entered promiscuous mode
[  371.660130][T14931] FAULT_INJECTION: forcing a failure.
[  371.660130][T14931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.690015][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.2.2785 Not tainted syzkaller #0 PREEMPT(full) 
[  371.690042][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  371.690054][T14931] Call Trace:
[  371.690060][T14931]  <TASK>
[  371.690066][T14931]  dump_stack_lvl+0x189/0x250
[  371.690087][T14931]  ? __pfx____ratelimit+0x10/0x10
[  371.690102][T14931]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.690117][T14931]  ? __pfx__printk+0x10/0x10
[  371.690139][T14931]  ? __might_fault+0xb0/0x130
[  371.690165][T14931]  should_fail_ex+0x414/0x560
[  371.690188][T14931]  _copy_from_iter+0x1de/0x1790
[  371.690209][T14931]  ? _copy_from_iter+0x24f/0x1790
[  371.690228][T14931]  ? __pfx__copy_from_iter+0x10/0x10
[  371.690240][T14931]  ? sock_alloc_send_pskb+0x875/0x990
[  371.690263][T14931]  ? __pfx__copy_from_iter+0x10/0x10
[  371.690280][T14931]  ? page_copy_sane+0x16a/0x280
[  371.690296][T14931]  copy_page_from_iter+0xdd/0x170
[  371.690314][T14931]  skb_copy_datagram_from_iter+0x306/0x720
[  371.690342][T14931]  packet_sendmsg+0x3797/0x5080
[  371.690363][T14931]  ? aa_label_strn_parse+0x6b0/0x1090
[  371.690396][T14931]  ? __pfx___might_resched+0x10/0x10
[  371.690408][T14931]  ? __lock_acquire+0xab9/0xd20
[  371.690437][T14931]  ? __pfx_packet_sendmsg+0x10/0x10
[  371.690448][T14931]  ? aa_sk_perm+0x81e/0x950
[  371.690472][T14931]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  371.690491][T14931]  ? aa_sock_msg_perm+0xf1/0x1d0
[  371.690505][T14931]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  371.690519][T14931]  ? __pfx_packet_sendmsg+0x10/0x10
[  371.690532][T14931]  __sock_sendmsg+0x21c/0x270
[  371.690548][T14931]  ____sys_sendmsg+0x505/0x830
[  371.690569][T14931]  ? __pfx_____sys_sendmsg+0x10/0x10
[  371.690593][T14931]  ? import_iovec+0x74/0xa0
[  371.690612][T14931]  ___sys_sendmsg+0x21f/0x2a0
[  371.690630][T14931]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.690678][T14931]  ? __fget_files+0x2a/0x420
[  371.690689][T14931]  ? __fget_files+0x3a0/0x420
[  371.690709][T14931]  __x64_sys_sendmsg+0x19b/0x260
[  371.690728][T14931]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  371.690752][T14931]  ? __pfx_ksys_write+0x10/0x10
[  371.690768][T14931]  ? rcu_is_watching+0x15/0xb0
[  371.690785][T14931]  ? do_syscall_64+0xbe/0x3b0
[  371.690802][T14931]  do_syscall_64+0xfa/0x3b0
[  371.690815][T14931]  ? lockdep_hardirqs_on+0x9c/0x150
[  371.690829][T14931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.690842][T14931]  ? clear_bhb_loop+0x60/0xb0
[  371.690857][T14931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.690873][T14931] RIP: 0033:0x7f050e38eec9
[  371.690886][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.690897][T14931] RSP: 002b:00007f050f240038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  371.690913][T14931] RAX: ffffffffffffffda RBX: 00007f050e5e5fa0 RCX: 00007f050e38eec9
[  371.690923][T14931] RDX: 0000000000000010 RSI: 0000200000002ac0 RDI: 0000000000000004
[  371.690932][T14931] RBP: 00007f050f240090 R08: 0000000000000000 R09: 0000000000000000
[  371.690940][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.690948][T14931] R13: 00007f050e5e6038 R14: 00007f050e5e5fa0 R15: 00007ffdaf3ff838
[  371.690971][T14931]  </TASK>
[  371.691916][T14929] vlan2: entered promiscuous mode
[  371.826952][T14934] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2786'.
[  372.090086][T14920] tipc: Resetting bearer <eth:syzkaller0>
[  372.573389][T14950] lo speed is unknown, defaulting to 1000
[  372.629820][T14950] lo speed is unknown, defaulting to 1000
[  372.671756][T14974] lo speed is unknown, defaulting to 1000
[  372.720029][T14977] netlink: 'syz.1.2798': attribute type 12 has an invalid length.
[  372.753733][T14977] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2798'.
[  372.768242][T14974] lo speed is unknown, defaulting to 1000
[  372.974200][T14988] macsec1: entered promiscuous mode
[  372.981547][T14988] macvlan0: entered promiscuous mode
[  372.993490][T14988] macvlan0: left promiscuous mode
[  373.203336][T14995] FAULT_INJECTION: forcing a failure.
[  373.203336][T14995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  373.237523][T14995] CPU: 1 UID: 0 PID: 14995 Comm: syz.6.2802 Not tainted syzkaller #0 PREEMPT(full) 
[  373.237549][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  373.237560][T14995] Call Trace:
[  373.237567][T14995]  <TASK>
[  373.237575][T14995]  dump_stack_lvl+0x189/0x250
[  373.237598][T14995]  ? __pfx____ratelimit+0x10/0x10
[  373.237617][T14995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.237636][T14995]  ? __pfx__printk+0x10/0x10
[  373.237658][T14995]  ? __might_fault+0xb0/0x130
[  373.237690][T14995]  should_fail_ex+0x414/0x560
[  373.237718][T14995]  _copy_from_iter+0x1de/0x1790
[  373.237744][T14995]  ? _copy_from_iter+0x24f/0x1790
[  373.237768][T14995]  ? __pfx__copy_from_iter+0x10/0x10
[  373.237784][T14995]  ? sock_alloc_send_pskb+0x875/0x990
[  373.237813][T14995]  ? __pfx__copy_from_iter+0x10/0x10
[  373.237834][T14995]  ? page_copy_sane+0x16a/0x280
[  373.237862][T14995]  copy_page_from_iter+0xdd/0x170
[  373.237885][T14995]  skb_copy_datagram_from_iter+0x306/0x720
[  373.237920][T14995]  packet_sendmsg+0x3797/0x5080
[  373.237948][T14995]  ? aa_label_strn_parse+0x6b0/0x1090
[  373.237989][T14995]  ? __pfx___might_resched+0x10/0x10
[  373.238004][T14995]  ? __lock_acquire+0xab9/0xd20
[  373.238042][T14995]  ? __pfx_packet_sendmsg+0x10/0x10
[  373.238057][T14995]  ? aa_sk_perm+0x81e/0x950
[  373.238087][T14995]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  373.238112][T14995]  ? aa_sock_msg_perm+0xf1/0x1d0
[  373.238130][T14995]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  373.238147][T14995]  ? __pfx_packet_sendmsg+0x10/0x10
[  373.238168][T14995]  __sock_sendmsg+0x21c/0x270
[  373.238189][T14995]  ____sys_sendmsg+0x505/0x830
[  373.238215][T14995]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.238245][T14995]  ? import_iovec+0x74/0xa0
[  373.238269][T14995]  ___sys_sendmsg+0x21f/0x2a0
[  373.238292][T14995]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.238349][T14995]  ? __fget_files+0x2a/0x420
[  373.238364][T14995]  ? __fget_files+0x3a0/0x420
[  373.238390][T14995]  __x64_sys_sendmsg+0x19b/0x260
[  373.238414][T14995]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  373.238445][T14995]  ? __pfx_ksys_write+0x10/0x10
[  373.238464][T14995]  ? rcu_is_watching+0x15/0xb0
[  373.238486][T14995]  ? do_syscall_64+0xbe/0x3b0
[  373.238508][T14995]  do_syscall_64+0xfa/0x3b0
[  373.238525][T14995]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.238542][T14995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.238559][T14995]  ? clear_bhb_loop+0x60/0xb0
[  373.238579][T14995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.238596][T14995] RIP: 0033:0x7fed0898eec9
[  373.238611][T14995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.238625][T14995] RSP: 002b:00007fed06bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.238643][T14995] RAX: ffffffffffffffda RBX: 00007fed08be5fa0 RCX: 00007fed0898eec9
[  373.238656][T14995] RDX: 0000000000000010 RSI: 0000200000002ac0 RDI: 0000000000000004
[  373.238667][T14995] RBP: 00007fed06bee090 R08: 0000000000000000 R09: 0000000000000000
[  373.238677][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  373.238688][T14995] R13: 00007fed08be6038 R14: 00007fed08be5fa0 R15: 00007ffdc830ce48
[  373.238717][T14995]  </TASK>
[  373.599931][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  373.609564][T14997] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  373.618883][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.810747][T15010] tipc: Failed to obtain node identity
[  373.816887][T15010] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  373.852899][T15018] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2808'.
[  373.925093][T15018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.946136][T15018] syzkaller0: entered promiscuous mode
[  373.964911][T15018] syzkaller0: entered allmulticast mode
[  373.979783][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2815'.
[  374.061566][T15018] tipc: Resetting bearer <eth:syzkaller0>
[  374.247717][ T6493] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.265637][ T6493] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.321906][ T6493] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.344352][ T6493] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.405832][T15040] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.414694][T15040] 8021q: adding VLAN 0 to HW filter on device team0
[  374.425488][T15040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.462434][ T5967] lo speed is unknown, defaulting to 1000
[  374.468812][ T5967] syz2: Port: 1 Link ACTIVE
[  374.619450][T15012] tipc: Resetting bearer <eth:syzkaller0>
[  374.662487][T15062] netlink: 'syz.1.2826': attribute type 10 has an invalid length.
[  374.678299][T15012] tipc: Disabling bearer <eth:syzkaller0>
[  374.711471][T15062] team0: Port device geneve0 added
[  375.012644][T15081] __nla_validate_parse: 4 callbacks suppressed
[  375.012663][T15081] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2833'.
[  375.028779][T15081] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2833'.
[  375.090054][T15079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.104682][T15084] netlink: 'syz.6.2833': attribute type 83 has an invalid length.
[  375.114032][T15079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.193075][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2836'.
[  375.259292][T15079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.286563][T15079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.334548][T15090] vlan2: entered promiscuous mode
[  375.342929][T15090] bridge0: entered promiscuous mode
[  375.350036][T15090] bridge0: port 3(vlan2) entered blocking state
[  375.355189][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2837'.
[  375.360340][T15090] bridge0: port 3(vlan2) entered disabled state
[  375.372713][T15090] vlan2: entered allmulticast mode
[  375.379210][T15090] bridge0: entered allmulticast mode
[  375.386283][T15090] vlan2: left allmulticast mode
[  375.391982][T15090] bridge0: left allmulticast mode
[  375.459447][T15079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.469933][T15079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.601256][T15079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.605253][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2839'.
[  375.623134][T15079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.664450][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2839'.
[  375.726435][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'.
[  375.774839][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2841'.
[  375.854488][T15109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2843'.
[  375.867908][ T6493] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.877764][ T6493] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.962290][ T6493] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.975237][ T6493] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.995760][T15120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2846'.
[  376.029446][ T6493] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.037886][ T6493] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.093061][ T6493] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.103659][ T6493] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.413118][T15140] 8021q: adding VLAN 0 to HW filter on device bond12
[  376.421575][T15140] bond12: entered promiscuous mode
[  376.428520][T15140] team0: Port device bond12 added
[  376.892459][T15157] bridge8: port 1(veth0_to_bond) entered blocking state
[  376.899969][T15157] bridge8: port 1(veth0_to_bond) entered disabled state
[  376.912187][T15157] veth0_to_bond: entered allmulticast mode
[  376.926764][T15157] veth0_to_bond: entered promiscuous mode
[  377.073806][T15162] lo speed is unknown, defaulting to 1000
[  377.082444][T15162] lo speed is unknown, defaulting to 1000
[  377.552633][T15170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.580449][T15173] syzkaller0: entered promiscuous mode
[  377.585955][T15173] syzkaller0: entered allmulticast mode
[  377.753739][T15186] bridge0: entered promiscuous mode
[  377.769036][T15186] macsec1: entered promiscuous mode
[  377.780262][T15186] bridge0: port 3(macsec1) entered blocking state
[  377.799305][T15186] bridge0: port 3(macsec1) entered disabled state
[  377.806969][T15186] macsec1: entered allmulticast mode
[  377.812282][T15186] bridge0: entered allmulticast mode
[  377.821522][T15186] macsec1: left allmulticast mode
[  377.835476][T15186] bridge0: left allmulticast mode
[  377.852154][T15186] bridge0: left promiscuous mode
[  377.915774][T15170] tipc: Resetting bearer <eth:syzkaller0>
[  377.942495][T15197] netlink: 'syz.1.2874': attribute type 1 has an invalid length.
[  378.058939][T15165] tipc: Resetting bearer <eth:syzkaller0>
[  378.081930][T15165] tipc: Disabling bearer <eth:syzkaller0>
[  378.150922][T15206] veth13: entered promiscuous mode
[  378.218687][T15202] syz_tun: entered promiscuous mode
[  378.229076][T15202] syz_tun: left promiscuous mode
[  378.344336][ T5876] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  378.365238][T15213] lo speed is unknown, defaulting to 1000
[  378.417995][T15213] lo speed is unknown, defaulting to 1000
[  378.588665][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  379.155756][T15236] netlink: 'syz.2.2888': attribute type 10 has an invalid length.
[  379.202616][T15236] team0: Port device geneve0 added
[  379.242685][   T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.261991][   T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.295904][   T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.318434][   T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.018039][T15267] __nla_validate_parse: 15 callbacks suppressed
[  380.018056][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2895'.
[  380.755531][T15288] netlink: 'syz.6.2906': attribute type 1 has an invalid length.
[  380.769590][T15284] netlink: 'syz.3.2904': attribute type 12 has an invalid length.
[  380.786442][T15284] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2904'.
[  380.873093][T15292] netlink: 'syz.1.2907': attribute type 10 has an invalid length.
[  380.882637][T15288] 8021q: adding VLAN 0 to HW filter on device bond12
[  380.891672][T15290] bond10: (slave wlan0): Releasing active interface
[  380.898758][T15292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2907'.
[  380.910786][T15290] bond12: (slave wlan0): Opening slave failed
[  381.182281][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2910'.
[  381.194111][T15313] netlink: 'syz.3.2913': attribute type 29 has an invalid length.
[  381.202383][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'.
[  381.229759][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'.
[  381.244496][T15317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.252569][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2910'.
[  381.301045][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2910'.
[  381.360298][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2915'.
[  381.380818][T15321] syz_tun: entered promiscuous mode
[  381.390766][T15321] syz_tun: left promiscuous mode
[  381.563553][T15331] netlink: 'syz.3.2919': attribute type 12 has an invalid length.
[  381.576922][T15331] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2919'.
[  381.733038][T15336] FAULT_INJECTION: forcing a failure.
[  381.733038][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.748542][T15336] CPU: 1 UID: 0 PID: 15336 Comm: syz.5.2921 Not tainted syzkaller #0 PREEMPT(full) 
[  381.748568][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  381.748579][T15336] Call Trace:
[  381.748587][T15336]  <TASK>
[  381.748595][T15336]  dump_stack_lvl+0x189/0x250
[  381.748630][T15336]  ? __pfx____ratelimit+0x10/0x10
[  381.748655][T15336]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.748675][T15336]  ? __pfx__printk+0x10/0x10
[  381.748696][T15336]  ? __might_fault+0xb0/0x130
[  381.748729][T15336]  should_fail_ex+0x414/0x560
[  381.748758][T15336]  _copy_from_iter+0x1de/0x1790
[  381.748785][T15336]  ? rcu_is_watching+0x15/0xb0
[  381.748804][T15336]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  381.748827][T15336]  ? __pfx__copy_from_iter+0x10/0x10
[  381.748846][T15336]  ? __build_skb_around+0x257/0x3e0
[  381.748869][T15336]  ? netlink_sendmsg+0x642/0xb30
[  381.748885][T15336]  ? skb_put+0x11b/0x210
[  381.748906][T15336]  netlink_sendmsg+0x6b2/0xb30
[  381.748933][T15336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.748954][T15336]  ? aa_sock_msg_perm+0xf1/0x1d0
[  381.748972][T15336]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  381.748990][T15336]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.749011][T15336]  __sock_sendmsg+0x21c/0x270
[  381.749031][T15336]  ____sys_sendmsg+0x505/0x830
[  381.749058][T15336]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.749088][T15336]  ? import_iovec+0x74/0xa0
[  381.749111][T15336]  ___sys_sendmsg+0x21f/0x2a0
[  381.749135][T15336]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.749192][T15336]  ? __fget_files+0x2a/0x420
[  381.749207][T15336]  ? __fget_files+0x3a0/0x420
[  381.749233][T15336]  __x64_sys_sendmsg+0x19b/0x260
[  381.749256][T15336]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  381.749287][T15336]  ? __pfx_ksys_write+0x10/0x10
[  381.749306][T15336]  ? rcu_is_watching+0x15/0xb0
[  381.749327][T15336]  ? do_syscall_64+0xbe/0x3b0
[  381.749349][T15336]  do_syscall_64+0xfa/0x3b0
[  381.749366][T15336]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.749383][T15336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.749400][T15336]  ? clear_bhb_loop+0x60/0xb0
[  381.749420][T15336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.749440][T15336] RIP: 0033:0x7f658138eec9
[  381.749456][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.749470][T15336] RSP: 002b:00007f6582296038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.749488][T15336] RAX: ffffffffffffffda RBX: 00007f65815e5fa0 RCX: 00007f658138eec9
[  381.749501][T15336] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000008
[  381.749512][T15336] RBP: 00007f6582296090 R08: 0000000000000000 R09: 0000000000000000
[  381.749523][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.749533][T15336] R13: 00007f65815e6038 R14: 00007f65815e5fa0 R15: 00007ffde81c3428
[  381.749563][T15336]  </TASK>
[  382.219917][T15346] IPVS: stopping backup sync thread 15350 ...
[  382.221755][T15350] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  382.282912][T15358] openvswitch: netlink: Missing key (keys=40, expected=100)
[  382.354983][T15363] syz_tun: entered promiscuous mode
[  382.363026][T15363] syz_tun: left promiscuous mode
[  382.476209][T15369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.557281][T15374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.783913][T15382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  382.970091][T15387] lo speed is unknown, defaulting to 1000
[  383.000941][T15387] lo speed is unknown, defaulting to 1000
[  383.001967][T15381] lo speed is unknown, defaulting to 1000
[  383.111824][T15381] lo speed is unknown, defaulting to 1000
[  383.355372][T15409] FAULT_INJECTION: forcing a failure.
[  383.355372][T15409] name failslab, interval 1, probability 0, space 0, times 0
[  383.369138][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.382896][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.389296][T15409] CPU: 0 UID: 0 PID: 15409 Comm: syz.5.2942 Not tainted syzkaller #0 PREEMPT(full) 
[  383.389323][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  383.389334][T15409] Call Trace:
[  383.389341][T15409]  <TASK>
[  383.389348][T15409]  dump_stack_lvl+0x189/0x250
[  383.389372][T15409]  ? __pfx____ratelimit+0x10/0x10
[  383.389391][T15409]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.389410][T15409]  ? __pfx__printk+0x10/0x10
[  383.389434][T15409]  ? __lock_acquire+0xab9/0xd20
[  383.389464][T15409]  should_fail_ex+0x414/0x560
[  383.389500][T15409]  should_failslab+0xa8/0x100
[  383.389526][T15409]  kmem_cache_alloc_noprof+0x73/0x3c0
[  383.389546][T15409]  ? skb_clone+0x212/0x3a0
[  383.389572][T15409]  skb_clone+0x212/0x3a0
[  383.389596][T15409]  __netlink_deliver_tap+0x404/0x850
[  383.389628][T15409]  ? netlink_deliver_tap+0x2e/0x1b0
[  383.389648][T15409]  netlink_deliver_tap+0x19c/0x1b0
[  383.389668][T15409]  netlink_unicast+0x7fa/0x9e0
[  383.389694][T15409]  ? __pfx_netlink_unicast+0x10/0x10
[  383.389714][T15409]  ? netlink_sendmsg+0x642/0xb30
[  383.389730][T15409]  ? skb_put+0x11b/0x210
[  383.389753][T15409]  netlink_sendmsg+0x805/0xb30
[  383.389787][T15409]  ? __pfx_netlink_sendmsg+0x10/0x10
[  383.389810][T15409]  ? aa_sock_msg_perm+0xf1/0x1d0
[  383.389830][T15409]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  383.389847][T15409]  ? __pfx_netlink_sendmsg+0x10/0x10
[  383.389865][T15409]  __sock_sendmsg+0x21c/0x270
[  383.389883][T15409]  ____sys_sendmsg+0x505/0x830
[  383.389910][T15409]  ? __pfx_____sys_sendmsg+0x10/0x10
[  383.389938][T15409]  ? import_iovec+0x74/0xa0
[  383.389961][T15409]  ___sys_sendmsg+0x21f/0x2a0
[  383.389983][T15409]  ? __pfx____sys_sendmsg+0x10/0x10
[  383.390039][T15409]  ? __fget_files+0x2a/0x420
[  383.390054][T15409]  ? __fget_files+0x3a0/0x420
[  383.390080][T15409]  __x64_sys_sendmsg+0x19b/0x260
[  383.390103][T15409]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  383.390134][T15409]  ? __pfx_ksys_write+0x10/0x10
[  383.390152][T15409]  ? rcu_is_watching+0x15/0xb0
[  383.390174][T15409]  ? do_syscall_64+0xbe/0x3b0
[  383.390196][T15409]  do_syscall_64+0xfa/0x3b0
[  383.390211][T15409]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.390228][T15409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.390244][T15409]  ? clear_bhb_loop+0x60/0xb0
[  383.390264][T15409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.390279][T15409] RIP: 0033:0x7f658138eec9
[  383.390295][T15409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.390308][T15409] RSP: 002b:00007f6582275038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  383.390327][T15409] RAX: ffffffffffffffda RBX: 00007f65815e6090 RCX: 00007f658138eec9
[  383.390339][T15409] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000008
[  383.390350][T15409] RBP: 00007f6582275090 R08: 0000000000000000 R09: 0000000000000000
[  383.390361][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  383.390370][T15409] R13: 00007f65815e6128 R14: 00007f65815e6090 R15: 00007ffde81c3428
[  383.390400][T15409]  </TASK>
[  383.710368][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.722963][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.731516][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.762990][T15409] bridge10: port 1(veth0_to_bond) entered blocking state
[  383.772061][T15409] bridge10: port 1(veth0_to_bond) entered disabled state
[  383.782320][T15409] veth0_to_bond: entered allmulticast mode
[  383.790642][T15409] veth0_to_bond: entered promiscuous mode
[  383.817905][ T6498] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.957502][ T6498] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.117822][ T6498] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.154068][T15404] lo speed is unknown, defaulting to 1000
[  384.178848][T15404] lo speed is unknown, defaulting to 1000
[  384.207590][ T6498] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.413688][T15432] vlan4: entered promiscuous mode
[  384.420207][T15432] bridge0: port 4(vlan4) entered blocking state
[  384.426945][T15432] bridge0: port 4(vlan4) entered disabled state
[  384.433495][T15432] vlan4: entered allmulticast mode
[  384.438769][T15432] bridge0: entered allmulticast mode
[  384.447981][T15432] vlan4: left allmulticast mode
[  384.452860][T15432] bridge0: left allmulticast mode
[  384.511193][T15434] vlan4: entered promiscuous mode
[  384.517528][T15434] team0: Device vlan4 is already an upper device of the team interface
[  384.833989][ T6498] bridge_slave_1: left allmulticast mode
[  384.855321][ T6498] bridge_slave_1: left promiscuous mode
[  384.873626][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.897647][ T6498] bridge_slave_0: left allmulticast mode
[  384.904607][ T6498] bridge_slave_0: left promiscuous mode
[  384.927742][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.043134][ T6498] veth9: left allmulticast mode
[  385.051928][ T6498] veth9: left promiscuous mode
[  385.060604][ T6498] bridge8: port 1(veth9) entered disabled state
[  385.297367][ T6498] bond6 (unregistering): (slave gretap1): Releasing active interface
[  385.323457][ T6498] bond12 (unregistering): (slave gretap2): Releasing active interface
[  385.377127][ T6498] dvmrp1 (unregistering): left allmulticast mode
[  385.421316][ T6498] team0: Port device geneve0 removed
[  385.540894][T15478] __nla_validate_parse: 11 callbacks suppressed
[  385.540913][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2961'.
[  385.786785][ T5183] Bluetooth: hci3: command tx timeout
[  386.310056][ T6498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  386.319443][ T6498] bond_slave_0: left promiscuous mode
[  386.325914][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.336288][ T6498] bond_slave_1: left promiscuous mode
[  386.342131][ T6498] bond0 (unregistering): Released all slaves
[  386.447995][ T6498] bond1 (unregistering): (slave vlan2): Releasing active interface
[  386.457152][ T6498] bond1 (unregistering): Released all slaves
[  386.560466][ T6498] team0: Port device bond2 removed
[  386.567228][ T6498] bond2 (unregistering): Released all slaves
[  386.672087][ T6498] team0: Port device bond3 removed
[  386.678527][ T6498] bond3 (unregistering): Released all slaves
[  386.779899][ T6498] bond4 (unregistering): Released all slaves
[  386.881623][ T6498] bond5 (unregistering): Released all slaves
[  387.004245][ T6498] bond6 (unregistering): Released all slaves
[  387.102524][ T6498] team0: Port device bond7 removed
[  387.109045][ T6498] bond7 (unregistering): Released all slaves
[  387.205846][ T6498] bond8 (unregistering): Released all slaves
[  387.306703][ T6498] team0: Port device bond9 removed
[  387.312800][ T6498] bond9 (unregistering): Released all slaves
[  387.410822][ T6498] bond10 (unregistering): Released all slaves
[  387.513133][ T6498] team0: Port device bond11 removed
[  387.519683][ T6498] bond11 (unregistering): Released all slaves
[  387.620504][ T6498] bond12 (unregistering): (slave veth17): Releasing active interface
[  387.629877][ T6498] bond12 (unregistering): Released all slaves
[  387.729745][ T6498] bond13 (unregistering): Released all slaves
[  387.827735][ T6498] bond14 (unregistering): (slave wlan0): Releasing active interface
[  387.836992][ T6498] bond14 (unregistering): Released all slaves
[  387.861402][ T5183] Bluetooth: hci3: command tx timeout
[  387.942245][ T6498] team0: Port device bond15 removed
[  387.949193][ T6498] bond15 (unregistering): Released all slaves
[  388.074628][T15481] netlink: 'syz.3.2962': attribute type 12 has an invalid length.
[  388.094103][T15481] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2962'.
[  388.160778][T15478] vlan2: entered promiscuous mode
[  388.165961][T15478] team0: entered promiscuous mode
[  388.172837][T15478] team_slave_0: entered promiscuous mode
[  388.179787][T15478] team_slave_1: entered promiscuous mode
[  388.185826][T15478] bond5: entered promiscuous mode
[  388.191560][T15478] geneve0: entered promiscuous mode
[  388.203818][T15478] team0: Device vlan2 is already an upper device of the team interface
[  388.370239][T15404] chnl_net:caif_netlink_parms(): no params data found
[  388.478616][T15495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2967'.
[  388.502283][T15495] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2967'.
[  388.582910][T15500] netlink: 'syz.5.2967': attribute type 13 has an invalid length.
[  388.608659][T15500] netlink: 'syz.5.2967': attribute type 17 has an invalid length.
[  388.897838][T15500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  388.916653][T15404] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.924625][T15404] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.947703][T15404] bridge_slave_0: entered allmulticast mode
[  388.961709][T15404] bridge_slave_0: entered promiscuous mode
[  388.997402][T15522] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  389.095508][T15404] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.128996][T15404] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.149823][T15404] bridge_slave_1: entered allmulticast mode
[  389.174631][T15404] bridge_slave_1: entered promiscuous mode
[  389.345956][T15529] netlink: 'syz.1.2974': attribute type 8 has an invalid length.
[  389.387160][T15404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  389.413874][T15404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  389.534467][T15404] team0: Port device team_slave_0 added
[  389.557674][T15404] team0: Port device team_slave_1 added
[  389.750428][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'.
[  389.756841][T15541] veth13: entered promiscuous mode
[  389.862118][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2981'.
[  389.877482][T15404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  389.894784][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.922196][T15404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.942423][ T5183] Bluetooth: hci3: command tx timeout
[  389.956254][T15404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.963523][T15404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  389.990551][T15404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.997883][T15558] netlink: 'syz.1.2983': attribute type 1 has an invalid length.
[  390.001935][ T6498] tipc: Disabling bearer <udp:syz2>
[  390.018714][ T6498] tipc: Left network mode
[  390.129454][T15565] bond1: (slave vti1): The slave device specified does not support setting the MAC address
[  390.141384][T15565] bond1: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  390.153821][T15565] bond1: (slave vti1): making interface the new active one
[  390.162640][T15565] bond1: (slave vti1): Enslaving as an active interface with an up link
[  390.271662][T15574] FAULT_INJECTION: forcing a failure.
[  390.271662][T15574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  390.285193][T15574] CPU: 0 UID: 0 PID: 15574 Comm: syz.1.2987 Not tainted syzkaller #0 PREEMPT(full) 
[  390.285219][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  390.285229][T15574] Call Trace:
[  390.285237][T15574]  <TASK>
[  390.285245][T15574]  dump_stack_lvl+0x189/0x250
[  390.285271][T15574]  ? __pfx____ratelimit+0x10/0x10
[  390.285290][T15574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.285309][T15574]  ? __pfx__printk+0x10/0x10
[  390.285331][T15574]  ? __might_fault+0xb0/0x130
[  390.285364][T15574]  should_fail_ex+0x414/0x560
[  390.285393][T15574]  _copy_from_iter+0x1de/0x1790
[  390.285419][T15574]  ? _copy_from_iter+0x24f/0x1790
[  390.285443][T15574]  ? __pfx__copy_from_iter+0x10/0x10
[  390.285459][T15574]  ? sock_alloc_send_pskb+0x875/0x990
[  390.285488][T15574]  ? __pfx__copy_from_iter+0x10/0x10
[  390.285510][T15574]  ? page_copy_sane+0x16a/0x280
[  390.285530][T15574]  copy_page_from_iter+0xdd/0x170
[  390.285554][T15574]  skb_copy_datagram_from_iter+0x306/0x720
[  390.285590][T15574]  packet_sendmsg+0x3797/0x5080
[  390.285618][T15574]  ? aa_label_strn_parse+0x6b0/0x1090
[  390.285660][T15574]  ? __pfx___might_resched+0x10/0x10
[  390.285676][T15574]  ? __lock_acquire+0xab9/0xd20
[  390.285712][T15574]  ? __pfx_packet_sendmsg+0x10/0x10
[  390.285726][T15574]  ? aa_sk_perm+0x81e/0x950
[  390.285755][T15574]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  390.285780][T15574]  ? aa_sock_msg_perm+0xf1/0x1d0
[  390.285798][T15574]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  390.285817][T15574]  ? __pfx_packet_sendmsg+0x10/0x10
[  390.285835][T15574]  __sock_sendmsg+0x21c/0x270
[  390.285855][T15574]  ____sys_sendmsg+0x505/0x830
[  390.285882][T15574]  ? __pfx_____sys_sendmsg+0x10/0x10
[  390.285912][T15574]  ? import_iovec+0x74/0xa0
[  390.285936][T15574]  ___sys_sendmsg+0x21f/0x2a0
[  390.285967][T15574]  ? __pfx____sys_sendmsg+0x10/0x10
[  390.286024][T15574]  ? __fget_files+0x2a/0x420
[  390.286040][T15574]  ? __fget_files+0x3a0/0x420
[  390.286066][T15574]  __x64_sys_sendmsg+0x19b/0x260
[  390.286090][T15574]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  390.286120][T15574]  ? __pfx_ksys_write+0x10/0x10
[  390.286139][T15574]  ? rcu_is_watching+0x15/0xb0
[  390.286162][T15574]  ? do_syscall_64+0xbe/0x3b0
[  390.286184][T15574]  do_syscall_64+0xfa/0x3b0
[  390.286201][T15574]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.286218][T15574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.286234][T15574]  ? clear_bhb_loop+0x60/0xb0
[  390.286255][T15574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.286271][T15574] RIP: 0033:0x7f1268f8eec9
[  390.286287][T15574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.286302][T15574] RSP: 002b:00007f12671f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  390.286323][T15574] RAX: ffffffffffffffda RBX: 00007f12691e5fa0 RCX: 00007f1268f8eec9
[  390.286334][T15574] RDX: 0000000000000010 RSI: 0000200000002ac0 RDI: 0000000000000004
[  390.286343][T15574] RBP: 00007f12671f6090 R08: 0000000000000000 R09: 0000000000000000
[  390.286353][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  390.286363][T15574] R13: 00007f12691e6038 R14: 00007f12691e5fa0 R15: 00007fff9b81ba58
[  390.286393][T15574]  </TASK>
[  390.835953][T15404] hsr_slave_0: entered promiscuous mode
[  390.857997][T15404] hsr_slave_1: entered promiscuous mode
[  390.878154][T15404] debugfs: 'hsr0' already exists in 'hsr'
[  390.904432][T15404] Cannot create hsr debugfs directory
[  391.110490][T15563] lo speed is unknown, defaulting to 1000
[  391.331123][T15563] lo speed is unknown, defaulting to 1000
[  391.525866][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2993'.
[  391.538604][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2993'.
[  391.548301][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2993'.
[  391.556006][T15593] netlink: 'syz.1.2992': attribute type 28 has an invalid length.
[  391.559875][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2993'.
[  391.789061][T15600] netlink: 'syz.6.2994': attribute type 10 has an invalid length.
[  391.797138][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2994'.
[  392.017031][ T5183] Bluetooth: hci3: command tx timeout
[  392.084762][ T6498] team0 (unregistering): Port device team_slave_1 removed
[  392.126138][ T6498] team0 (unregistering): Port device team_slave_0 removed
[  392.401889][T15604] netlink: zone id is out of range
[  392.900405][T15598] lo speed is unknown, defaulting to 1000
[  392.919219][T15598] lo speed is unknown, defaulting to 1000
[  393.197023][ T6498] ==================================================================
[  393.205136][ T6498] BUG: KASAN: slab-out-of-bounds in __xfrm_state_delete+0x666/0xca0
[  393.213133][ T6498] Write of size 8 at addr ffff8880688c3768 by task kworker/u8:13/6498
[  393.221289][ T6498] 
[  393.223628][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  393.223659][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  393.223672][ T6498] Workqueue: netns cleanup_net
[  393.223696][ T6498] Call Trace:
[  393.223705][ T6498]  <TASK>
[  393.223714][ T6498]  dump_stack_lvl+0x189/0x250
[  393.223735][ T6498]  ? __virt_addr_valid+0x1c8/0x5c0
[  393.223754][ T6498]  ? rcu_is_watching+0x15/0xb0
[  393.223769][ T6498]  ? __kasan_check_byte+0x12/0x40
[  393.223790][ T6498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.223807][ T6498]  ? rcu_is_watching+0x15/0xb0
[  393.223823][ T6498]  ? lock_release+0x4b/0x3e0
[  393.223847][ T6498]  ? __virt_addr_valid+0x1c8/0x5c0
[  393.223865][ T6498]  ? __virt_addr_valid+0x4a5/0x5c0
[  393.223885][ T6498]  print_report+0xca/0x240
[  393.223901][ T6498]  ? __xfrm_state_delete+0x666/0xca0
[  393.223921][ T6498]  kasan_report+0x118/0x150
[  393.223942][ T6498]  ? __xfrm_state_delete+0x666/0xca0
[  393.223965][ T6498]  __xfrm_state_delete+0x666/0xca0
[  393.223990][ T6498]  xfrm_state_flush+0x45f/0x770
[  393.224014][ T6498]  xfrm6_tunnel_net_exit+0x3c/0x100
[  393.224038][ T6498]  ops_undo_list+0x49a/0x990
[  393.224059][ T6498]  ? __pfx_ops_undo_list+0x10/0x10
[  393.224076][ T6498]  ? do_raw_spin_unlock+0x122/0x240
[  393.224096][ T6498]  cleanup_net+0x4c5/0x800
[  393.224115][ T6498]  ? __pfx_cleanup_net+0x10/0x10
[  393.224135][ T6498]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.224156][ T6498]  ? process_scheduled_works+0x9ef/0x17b0
[  393.224171][ T6498]  ? process_scheduled_works+0x9ef/0x17b0
[  393.224185][ T6498]  process_scheduled_works+0xae1/0x17b0
[  393.224209][ T6498]  ? __pfx_process_scheduled_works+0x10/0x10
[  393.224230][ T6498]  worker_thread+0x8a0/0xda0
[  393.224256][ T6498]  kthread+0x70e/0x8a0
[  393.224276][ T6498]  ? __pfx_worker_thread+0x10/0x10
[  393.224292][ T6498]  ? __pfx_kthread+0x10/0x10
[  393.224310][ T6498]  ? _raw_spin_unlock_irq+0x23/0x50
[  393.224331][ T6498]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.224345][ T6498]  ? __pfx_kthread+0x10/0x10
[  393.224362][ T6498]  ret_from_fork+0x439/0x7d0
[  393.224380][ T6498]  ? __pfx_ret_from_fork+0x10/0x10
[  393.224397][ T6498]  ? __switch_to_asm+0x39/0x70
[  393.224416][ T6498]  ? __switch_to_asm+0x33/0x70
[  393.224434][ T6498]  ? __pfx_kthread+0x10/0x10
[  393.224452][ T6498]  ret_from_fork_asm+0x1a/0x30
[  393.224479][ T6498]  </TASK>
[  393.224485][ T6498] 
[  393.452561][ T6498] Allocated by task 13024:
[  393.456960][ T6498]  kasan_save_track+0x3e/0x80
[  393.461625][ T6498]  __kasan_kmalloc+0x93/0xb0
[  393.466200][ T6498]  __kmalloc_noprof+0x27a/0x4f0
[  393.471047][ T6498]  hash_ip4_add+0x18ba/0x1ec0
[  393.475715][ T6498]  hash_ip4_uadt+0x63d/0x850
[  393.480289][ T6498]  call_ad+0x383/0xb00
[  393.484390][ T6498]  ip_set_ad+0x791/0x930
[  393.488616][ T6498]  nfnetlink_rcv_msg+0xb4a/0x1130
[  393.493627][ T6498]  netlink_rcv_skb+0x208/0x470
[  393.498373][ T6498]  nfnetlink_rcv+0x26a/0x2520
[  393.503035][ T6498]  netlink_unicast+0x82f/0x9e0
[  393.507786][ T6498]  netlink_sendmsg+0x805/0xb30
[  393.512545][ T6498]  __sock_sendmsg+0x21c/0x270
[  393.517210][ T6498]  ____sys_sendmsg+0x505/0x830
[  393.521971][ T6498]  ___sys_sendmsg+0x21f/0x2a0
[  393.526642][ T6498]  __x64_sys_sendmsg+0x19b/0x260
[  393.531574][ T6498]  do_syscall_64+0xfa/0x3b0
[  393.536065][ T6498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.541947][ T6498] 
[  393.544257][ T6498] The buggy address belongs to the object at ffff8880688c3400
[  393.544257][ T6498]  which belongs to the cache kmalloc-512 of size 512
[  393.558296][ T6498] The buggy address is located 552 bytes to the right of
[  393.558296][ T6498]  allocated 320-byte region [ffff8880688c3400, ffff8880688c3540)
[  393.572945][ T6498] 
[  393.575259][ T6498] The buggy address belongs to the physical page:
[  393.581659][ T6498] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x688c0
[  393.590407][ T6498] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  393.598898][ T6498] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  393.606448][ T6498] page_type: f5(slab)
[  393.610420][ T6498] raw: 00fff00000000040 ffff88801a441c80 dead000000000122 0000000000000000
[  393.619078][ T6498] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  393.627648][ T6498] head: 00fff00000000040 ffff88801a441c80 dead000000000122 0000000000000000
[  393.636391][ T6498] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  393.645059][ T6498] head: 00fff00000000002 ffffea0001a23001 00000000ffffffff 00000000ffffffff
[  393.653736][ T6498] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  393.662396][ T6498] page dumped because: kasan: bad access detected
[  393.668809][ T6498] page_owner tracks the page as allocated
[  393.674511][ T6498] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13024, tgid 13015 (syz.6.2188), ts 276051031845, free_ts 275611701018
[  393.693953][ T6498]  post_alloc_hook+0x240/0x2a0
[  393.698718][ T6498]  get_page_from_freelist+0x21e4/0x22c0
[  393.704340][ T6498]  __alloc_frozen_pages_noprof+0x181/0x370
[  393.710170][ T6498]  alloc_pages_mpol+0x232/0x4a0
[  393.715010][ T6498]  allocate_slab+0x8a/0x370
[  393.719495][ T6498]  ___slab_alloc+0xbeb/0x1420
[  393.724161][ T6498]  __kmalloc_noprof+0x305/0x4f0
[  393.728996][ T6498]  hash_ip4_add+0x18ba/0x1ec0
[  393.733657][ T6498]  hash_ip4_uadt+0x63d/0x850
[  393.738232][ T6498]  call_ad+0x383/0xb00
[  393.742281][ T6498]  ip_set_ad+0x791/0x930
[  393.746523][ T6498]  nfnetlink_rcv_msg+0xb4a/0x1130
[  393.751530][ T6498]  netlink_rcv_skb+0x208/0x470
[  393.756275][ T6498]  nfnetlink_rcv+0x26a/0x2520
[  393.760940][ T6498]  netlink_unicast+0x82f/0x9e0
[  393.765703][ T6498]  netlink_sendmsg+0x805/0xb30
[  393.770463][ T6498] page last free pid 5868 tgid 5868 stack trace:
[  393.776775][ T6498]  __free_frozen_pages+0xbc4/0xd30
[  393.781877][ T6498]  __slab_free+0x303/0x3c0
[  393.786277][ T6498]  qlist_free_all+0x97/0x140
[  393.790854][ T6498]  kasan_quarantine_reduce+0x148/0x160
[  393.796298][ T6498]  __kasan_slab_alloc+0x22/0x80
[  393.801138][ T6498]  __kmalloc_noprof+0x224/0x4f0
[  393.805977][ T6498]  tomoyo_realpath_from_path+0xe3/0x5d0
[  393.811509][ T6498]  tomoyo_path_perm+0x213/0x4b0
[  393.816349][ T6498]  tomoyo_path_unlink+0xa2/0xe0
[  393.821196][ T6498]  security_path_unlink+0x167/0x360
[  393.826385][ T6498]  do_unlinkat+0x2c1/0x560
[  393.830882][ T6498]  __x64_sys_unlink+0x47/0x50
[  393.835544][ T6498]  do_syscall_64+0xfa/0x3b0
[  393.840029][ T6498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.845908][ T6498] 
[  393.848228][ T6498] Memory state around the buggy address:
[  393.853925][ T6498]  ffff8880688c3600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  393.861970][ T6498]  ffff8880688c3680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  393.870016][ T6498] >ffff8880688c3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  393.878057][ T6498]                                                           ^
[  393.885505][ T6498]  ffff8880688c3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  393.893551][ T6498]  ffff8880688c3800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  393.901590][ T6498] ==================================================================
[  393.909823][ T6498] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  393.917024][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  393.926570][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  393.936636][ T6498] Workqueue: netns cleanup_net
[  393.941422][ T6498] Call Trace:
[  393.944710][ T6498]  <TASK>
[  393.947646][ T6498]  dump_stack_lvl+0x99/0x250
[  393.952283][ T6498]  ? __asan_memcpy+0x40/0x70
[  393.956873][ T6498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.962085][ T6498]  ? __pfx__printk+0x10/0x10
[  393.966694][ T6498]  vpanic+0x281/0x750
[  393.970675][ T6498]  ? __pfx_print_hex_dump+0x10/0x10
[  393.975858][ T6498]  ? __pfx_vpanic+0x10/0x10
[  393.980355][ T6498]  ? irqentry_exit+0x74/0x90
[  393.984932][ T6498]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.990126][ T6498]  panic+0xb9/0xc0
[  393.993836][ T6498]  ? __pfx_panic+0x10/0x10
[  393.998241][ T6498]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  394.004136][ T6498]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  394.010476][ T6498]  ? __xfrm_state_delete+0x666/0xca0
[  394.015762][ T6498]  check_panic_on_warn+0x89/0xb0
[  394.020706][ T6498]  ? __xfrm_state_delete+0x666/0xca0
[  394.026001][ T6498]  end_report+0x78/0x160
[  394.030241][ T6498]  kasan_report+0x129/0x150
[  394.034739][ T6498]  ? __xfrm_state_delete+0x666/0xca0
[  394.040029][ T6498]  __xfrm_state_delete+0x666/0xca0
[  394.045145][ T6498]  xfrm_state_flush+0x45f/0x770
[  394.049992][ T6498]  xfrm6_tunnel_net_exit+0x3c/0x100
[  394.055181][ T6498]  ops_undo_list+0x49a/0x990
[  394.059772][ T6498]  ? __pfx_ops_undo_list+0x10/0x10
[  394.064885][ T6498]  ? do_raw_spin_unlock+0x122/0x240
[  394.070076][ T6498]  cleanup_net+0x4c5/0x800
[  394.074502][ T6498]  ? __pfx_cleanup_net+0x10/0x10
[  394.079493][ T6498]  ? _raw_spin_unlock_irq+0x23/0x50
[  394.084705][ T6498]  ? process_scheduled_works+0x9ef/0x17b0
[  394.090432][ T6498]  ? process_scheduled_works+0x9ef/0x17b0
[  394.096151][ T6498]  process_scheduled_works+0xae1/0x17b0
[  394.101700][ T6498]  ? __pfx_process_scheduled_works+0x10/0x10
[  394.107686][ T6498]  worker_thread+0x8a0/0xda0
[  394.112286][ T6498]  kthread+0x70e/0x8a0
[  394.116371][ T6498]  ? __pfx_worker_thread+0x10/0x10
[  394.121573][ T6498]  ? __pfx_kthread+0x10/0x10
[  394.126169][ T6498]  ? _raw_spin_unlock_irq+0x23/0x50
[  394.131371][ T6498]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.136565][ T6498]  ? __pfx_kthread+0x10/0x10
[  394.141162][ T6498]  ret_from_fork+0x439/0x7d0
[  394.145846][ T6498]  ? __pfx_ret_from_fork+0x10/0x10
[  394.150963][ T6498]  ? __switch_to_asm+0x39/0x70
[  394.155737][ T6498]  ? __switch_to_asm+0x33/0x70
[  394.160509][ T6498]  ? __pfx_kthread+0x10/0x10
[  394.165112][ T6498]  ret_from_fork_asm+0x1a/0x30
[  394.169895][ T6498]  </TASK>
[  394.173055][ T6498] Kernel Offset: disabled
[  394.177359][ T6498] Rebooting in 86400 seconds..