last executing test programs:

8.294143807s ago: executing program 3 (id=5963):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2000})
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'netpci0\x00'}, 0x3ff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4480, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4d2901, 0x0)
unshare(0x6a040000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b)
sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000020000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c04000500020000000500010006000000"], 0x6c}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r7, 0x0, 0xfdef)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x5, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x200, 0x6, 0x424f, 0x3}})
mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x3000004, 0x12, 0xffffffffffffffff, 0x0)

4.52091515s ago: executing program 3 (id=5985):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffc, @empty, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r6, 0x24, 0x0, 0xd8, &(0x7f0000000000), 0x40000016, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40004)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1, 0x6, 0xa00, 0x13, 0x987, 0xff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}]}}}]}, 0x70}}, 0x4000080)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r10)
sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000022b740000000000000000400000008000700ac1414aa0800020005"], 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x40844)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(0xffffffffffffffff, 0x0)

3.661228751s ago: executing program 3 (id=5995):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44c", 0x9b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000200)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x4}, 0x2}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2004c800)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x800)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x110, 0x2, 0x4}}], 0x18}, 0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x1, 0x2716, 0x0, &(0x7f0000000040))
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r9 = accept$alg(r8, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="17f2b2de5c6b0db5d25446463f74d3740a70f6e0249ca79ea3579bc57df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070040000003d478881c92de1d95dcc82811ba3e4d049aa7057", 0x50}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0xc48d4)
readv(r9, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x10}, 0x94)
socket$inet_sctp(0x2, 0x0, 0x84)

2.870643881s ago: executing program 2 (id=6008):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {0x0}], 0x2}}], 0x1, 0x20000044)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0512560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2.647949927s ago: executing program 3 (id=6013):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240), 0x10)
sendto$inet6(r4, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x8050, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x0, 0x1, 0x400)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0)
setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000010000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
sendmmsg$alg(r3, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac", 0xb2}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
read(r7, &(0x7f0000000040)=""/64, 0x40)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000041a0023da"], 0x4e}}, 0x20008000)
listen(r1, 0x5)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'})

2.616645839s ago: executing program 0 (id=6015):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)}], 0x6, 0x0, 0xfffffffffffffcad}}, {{&(0x7f0000000a40)=@isdn={0x22, 0x3, 0xa, 0x5, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0xfffffffffffffff0, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c6134cae", 0x6}], 0x1}}], 0x3, 0x24004844)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffc, @empty, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r8, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000280)={0x406, 0x21, 0xc, 0x44, 0x10, 0xc, 0x1ffe}, 0xc)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.448276885s ago: executing program 2 (id=6016):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000002c0)=0x2000041)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}, 0x1400a044)
close(r6)
r7 = socket(0x10, 0x809, 0x8)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r8, 0x104, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3)
sendmmsg$inet6(r9, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0)

2.329593963s ago: executing program 0 (id=6017):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x6, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$bt_hci(r8, &(0x7f0000000040), 0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(r5, 0x3)
sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
sendfile(r0, r3, 0x0, 0x20000000002)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.985940492s ago: executing program 4 (id=6020):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', <r1=>0x0, 0x7800, 0x7, 0x0, 0x6, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x65, 0x0, 0x7, 0x4, 0x0, @loopback, @local, {[@noop, @cipso={0x86, 0x3c, 0x3, [{0x2, 0x5, "88927a"}, {0x0, 0xe, "22ec6859f260751d3e09f434"}, {0x2, 0xd, "d98a014149040d20ab6894"}, {0x5, 0x10, "0802c6d4c057de4ffb9d89f4152a"}, {0x1, 0x6, "7d6dd1ac"}]}, @cipso={0x86, 0x9, 0x3, [{0x6, 0x3, "bf"}]}, @timestamp={0x44, 0x8, 0x20, 0x0, 0x5, [0x101]}, @rr={0x7, 0xf, 0x59, [@multicast1, @private=0xa010101, @broadcast]}, @end]}}}}})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x115}, [@IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x2c}}, 0x0)

1.788689046s ago: executing program 4 (id=6022):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100080000008510000001000000950000000000000018400000ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x11, 0x3, 0x101)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x8000, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r9, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/4112, 0x1010}], 0x4}, 0xd}], 0x1, 0x10022, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r10 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf13d2630d10891cf0c8217c513384b8536012741f439818fa067448222aaea07d32f28b9996b4eecdd89a758e65e16199eff18b7b8732f6a1275b645df31f0e794aa8d0106dd3cf61ae3c1b470de91fa052ff09498a392a89fdd28053cf1f5b807e57ad37568fbdca440c8b3765a299736605cd0f5849d78926973e1f69028c65c2d268", 0x94}], 0x1}], 0x1, 0x0)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000002280)=@req={0x4, 0x100, 0x8, 0xffff70c1}, 0x10)
recvmmsg(r10, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)}}], 0x2, 0x140, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)

1.71552586s ago: executing program 2 (id=6024):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1b", 0x7a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000080), 0xfe41)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1400}, 0x40002000)
sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x20000084}, 0x40880)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.704365892s ago: executing program 3 (id=6025):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

1.454449594s ago: executing program 3 (id=6026):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r5, 0x0, 0x0)

1.332946489s ago: executing program 2 (id=6027):
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.077528388s ago: executing program 0 (id=6030):
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket(0x1, 0x803, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf25000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2)

1.051547751s ago: executing program 2 (id=6031):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_80211_inject_frame(&(0x7f0000000600), &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x558)
sendto$packet(r0, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x8, 0x40, 0x1800000, 0x3, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x64, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@noop, @generic={0x82, 0x3, "95"}, @noop, @timestamp_prespec={0x44, 0xc, 0x94, 0x3, 0x5, [{@local}]}, @timestamp_addr={0x44, 0x14, 0x2f, 0x1, 0x3, [{@multicast2, 0x9f37}, {@broadcast, 0xfffffff7}]}, @generic={0x83, 0x4, "be68"}]}}}}})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000680)={'syztnl0\x00', <r8=>0x0, 0x700, 0x7800, 0x8, 0x521, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x67, 0x0, 0xac, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@lsrr={0x83, 0x23, 0xde, [@multicast2, @rand_addr=0x64010100, @loopback, @remote, @remote, @multicast2, @broadcast, @broadcast]}, @noop, @timestamp={0x44, 0x8, 0xd9, 0x0, 0x0, [0xfc0]}, @ssrr={0x89, 0x27, 0x70, [@rand_addr=0x64010101, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote, @remote, @local]}, @end]}}}}})
r9 = socket$netlink(0x10, 0x3, 0x15)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r10=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYBLOB="0b000280976b640868603000160001da299d0afdead9d115808800000000"], 0x3c}], 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a0000000000001a00000000000000000014000000000000551d729cdd56117aa9d10000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r12 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r12, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r12}, 0x20)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r9)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="20002dbd7000fddbdf250800000034000680080006000800000006000100020000000600010002000000050002001000000008000700", @ANYRES32=r8, @ANYBLOB="050002000a000000080004000800000b080002000600000008000400bf160035"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@empty, 0x4e22, 0x70e, 0x4e20, 0x9, 0x2, 0x10, 0xa0, 0x8, r8, r10}, {0x0, 0x4fa1, 0xffffffffffff0001, 0x45, 0x4a, 0x7, 0x5, 0x6}, {0x1, 0xe0a, 0x72c, 0xe16a}, 0x2, 0x6e6bb2, 0x73e4735fefb7cabf, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0xa, @in6=@private1, 0x34ff, 0x1, 0x3, 0x8, 0xae8e, 0x6, 0x8}}, 0xe8)

985.360959ms ago: executing program 1 (id=6032):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xe6890000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e9967", 0x72}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x12, 0x102, 0x79}, 0x2c)
setsockopt$packet_int(r3, 0x107, 0xd, &(0x7f0000000680)=0x8001, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f6e8005b0ecd8c8f403e5f7fdc3300", @ANYRES16=r8, @ANYBLOB="0100000000040000000005000000180001801400020074756e6c3000000000000000000000000800090003000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

886.754075ms ago: executing program 1 (id=6033):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc8", 0x9a}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db554", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000f40)="f560d87aa0b185c9916a9f10a6d2495558527461cb8489700a69fe9f24f2b5d21536013aae19f5bbc17475d2c8337a140393b2029bc1ff0220267b088197ba263535d77dda1f51dda740f20d900bbe26cc5aba8e2c19629a5aa53607b7def84da3c097def4a583cf752013d277db635210e0ef323b2885b99acfb40ce8d34c3f637c48db70f6cf3e01", 0x89)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10000}, 0x1c)
setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0xff)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0x773, 0x4)
setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000680)=0x4, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'veth1_to_team\x00', @random="e80300000028"})
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="08040000180000042cbd7000fedbdf251700000008000200", @ANYRES32=r3, @ANYBLOB="46cb2bbf8a1825824975d53354ae83c1a472e3d2c509ddc970", @ANYRES32=r9, @ANYBLOB="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"], 0x408}, 0x1, 0x0, 0x0, 0x4c000}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r3)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002cbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c000300f6ff0d0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r8, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4040800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000fa03"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

773.034453ms ago: executing program 0 (id=6034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000024000101255eaef0473eee871f0000005beec176a892044414b4ca39af1593a9416f44411e0588bd551e7c82d1878109043a503a5200c0ae95500500000000000000f7a60d1b11830a8e48213b188c56304e0dbb1dbeb0e54bccb5334b43f98ee94e87cb52031c"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000024000101255eaef0473eee871f0000005beec176a892044414b4ca39af1593a9416f44411e0588bd551e7c82d1878109043a503a5200c0ae95500500000000000000f7a60d1b11830a8e48213b188c56304e0dbb1dbeb0e54bccb5334b43f98ee94e87cb52031c"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f00000001c0)=0xec)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
r6 = socket(0x200000000000011, 0x2, 0xd)
bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r7) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x40, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0xfe47, 0x3, 0x5f43, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @loopback, @loopback}}}}}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)

665.152408ms ago: executing program 4 (id=6035):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000001c0)=0x6, 0x4)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
shutdown(r0, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'macvlan1\x00', {0x8}, 0x1000})

610.45567ms ago: executing program 4 (id=6036):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

557.95161ms ago: executing program 1 (id=6037):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1b", 0x7a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a", 0x7d}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

507.13031ms ago: executing program 4 (id=6038):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d880cdd9d47e186243022c1be9fd662325c023ac48018ae996c41561bb7e9903c408613b4d29da039d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e00"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f", 0x18}], 0x4}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1, 0x0, 0x1f}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x47}}], 0x4, 0x880)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ec0)={'vlan1\x00', <r1=>0x0})
sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000680)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f00000006c0)="4e81ad500eb4b744a8a31c22b2b9653bff530d0a17c4db538952c13231a680f9c431985159d37bb7b4da747371aa0762a2683423c20847dd8ab00aa9b9fc9dc260d9979faba4cf59b70904c2c8af9b7bef0f2cd1517129fc1a622a3c7bd073d891574bd0324e5d80179b256f36ca28d4eb791e02db2a5221c2bce13ef0524417edd6d4ab38481f01cd2dc284a5f042", 0x8f}, {&(0x7f0000000b40)="fb49825341e135d4fb76e595af66454a5f5b38d2a5ea368b21013f945b98505b51dcaf1e4de72ec6a2939a1c2caeffe518b065f17c2b076548033f0bc37c52711af5d6fd489f6eb191ccd81b1479686aa24134c9ca0b06d8b1e29200cf3f", 0x5e}, {&(0x7f0000000e40)="b438cb8ca13c7033e81567305ec310dfeba506da8f81e49597644bf583c66884772801", 0x23}], 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="ac1414bbac1e01010000000011000000000000000000000001000000090000000000000011000000000000000000000001000000ff00000000000000110000000000000000000000010000000400000000000000"], 0x170}, 0x804)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x3, 0xfffff038}, {0x6, 0x2, 0x0, 0x5}]}, 0x10)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001100))
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYRES16=r5, @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffe2ff080211000001"], 0x6f4}}, 0x0)

378.501734ms ago: executing program 0 (id=6039):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000ac0)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d63320fa53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@iv={0x98, 0x117, 0x2, 0x81, "369e307478f844a3545b605e2252f1f72a795f6a5f451c719e5d20a3e93b20d8e05acf4ee89c3ab8969fa9871e67decb07652b1b0574a933e37bd1a08a34ae2f3194079ae6a702ec2efbff6aff315f8b3244ec54e69c60efa5f8b321a2e0ee352a7c5ab2a79cdb17ed14497816ca62ec9ad11e640f97f5dda2962fdcc0fbdac2ee"}], 0x98}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2c, r2, 0x701, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x15}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340))
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000300)=0x4, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvfrom(r1, &(0x7f00000006c0)=""/111, 0x6f, 0x2, &(0x7f00000008c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

259.9657ms ago: executing program 1 (id=6040):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

242.986223ms ago: executing program 4 (id=6041):
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

107.523793ms ago: executing program 2 (id=6042):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000000000004"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d0005", 0x26}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r4, 0x0, 0x100)
r5 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
socket$inet6(0xa, 0x3, 0xff)
close(0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10)

87.153407ms ago: executing program 1 (id=6043):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r0)

59.06124ms ago: executing program 0 (id=6044):
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket(0x1, 0x803, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf25000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2)

0s ago: executing program 1 (id=6045):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884", 0x2c}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4cae", 0x6}], 0x1}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x212040, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r4, 0x9}, 0x8)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

1': attribute type 10 has an invalid length.
[  639.765293][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'.
[  639.873557][T22594] tipc: Failed to remove unknown binding: 66,0,0/4095:1575312394/1575312396
[  639.911445][T22594] tipc: Failed to remove unknown binding: 66,0,0/4095:1575312394/1575312395
[  639.921478][T22594] tipc: Failed to remove unknown binding: 66,0,0/4095:1575312394/1575312396
[  639.930620][T22594] tipc: Failed to remove unknown binding: 66,0,0/4095:1575312394/1575312395
[  640.258509][T22616] netlink: 'syz.2.5012': attribute type 10 has an invalid length.
[  640.299656][T22618] macvlan5: entered allmulticast mode
[  640.429550][T22622] xt_hashlimit: size too large, truncated to 1048576
[  640.610291][   T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  640.616768][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[  640.866706][T22639] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  641.942583][T22665] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5022'.
[  641.964386][T22665] netlink: 'syz.3.5022': attribute type 2 has an invalid length.
[  642.571011][T22650] lo speed is unknown, defaulting to 1000
[  643.084313][T22713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5030'.
[  643.162574][T22717] xt_hashlimit: size too large, truncated to 1048576
[  643.274410][T22713] 8021q: adding VLAN 0 to HW filter on device bond6
[  643.344391][T22725] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5033'.
[  643.367072][T22718] bond6 (unregistering): Released all slaves
[  643.389833][T22725] netlink: 'syz.3.5033': attribute type 2 has an invalid length.
[  643.478119][T22722] netlink: 'syz.1.5032': attribute type 11 has an invalid length.
[  643.538284][T22728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5032'.
[  643.619413][T22728] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5032'.
[  643.632272][T22728] netlink: 'syz.1.5032': attribute type 5 has an invalid length.
[  643.647026][T22728] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5032'.
[  643.827204][T22742] netlink: 'syz.4.5036': attribute type 5 has an invalid length.
[  643.872407][T22742] netlink: 'syz.4.5036': attribute type 18 has an invalid length.
[  643.883795][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5036'.
[  643.905498][T22742] netlink: 'syz.4.5036': attribute type 18 has an invalid length.
[  643.905782][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  643.913549][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5036'.
[  643.951224][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  643.969587][T22745] bpq0: entered promiscuous mode
[  643.977192][T22745] bpq0: entered allmulticast mode
[  643.991857][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  644.012106][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  644.055557][T22745] dummy0: entered promiscuous mode
[  644.073165][T22745] dummy0: left promiscuous mode
[  644.298599][T22769] netlink: 'syz.4.5046': attribute type 29 has an invalid length.
[  644.308339][T22769] netlink: 'syz.4.5046': attribute type 29 has an invalid length.
[  644.324017][T22769] xt_hashlimit: size too large, truncated to 1048576
[  644.324962][T22764] sctp: [Deprecated]: syz.1.5045 (pid 22764) Use of int in max_burst socket option.
[  644.324962][T22764] Use struct sctp_assoc_value instead
[  644.845665][T22789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.043515][T22770] lo speed is unknown, defaulting to 1000
[  645.441881][T22800] FAULT_INJECTION: forcing a failure.
[  645.441881][T22800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  645.471880][T22800] CPU: 1 UID: 0 PID: 22800 Comm: syz.1.5053 Not tainted syzkaller #0 PREEMPT(full) 
[  645.471906][T22800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  645.471917][T22800] Call Trace:
[  645.471925][T22800]  <TASK>
[  645.471934][T22800]  dump_stack_lvl+0xe8/0x150
[  645.471964][T22800]  should_fail_ex+0x412/0x560
[  645.472045][T22800]  _copy_to_user+0x31/0xb0
[  645.472067][T22800]  bpf_test_finish+0x22c/0x6b0
[  645.472094][T22800]  ? trace_kmem_cache_alloc+0x29/0xe0
[  645.472118][T22800]  ? slab_build_skb+0x52/0x410
[  645.472143][T22800]  ? __pfx_bpf_test_finish+0x10/0x10
[  645.472179][T22800]  bpf_prog_test_run_skb+0x1250/0x2350
[  645.472221][T22800]  ? __fget_files+0x2a/0x420
[  645.472240][T22800]  ? __fget_files+0x3a0/0x420
[  645.472259][T22800]  ? __fget_files+0x2a/0x420
[  645.472284][T22800]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  645.472309][T22800]  bpf_prog_test_run+0x2c7/0x340
[  645.472333][T22800]  __sys_bpf+0x643/0x950
[  645.472354][T22800]  ? __pfx___sys_bpf+0x10/0x10
[  645.472387][T22800]  ? ksys_write+0x242/0x270
[  645.472413][T22800]  ? __pfx_ksys_write+0x10/0x10
[  645.472441][T22800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.472460][T22800]  __x64_sys_bpf+0x7c/0x90
[  645.472477][T22800]  do_syscall_64+0x15f/0xf80
[  645.472498][T22800]  ? trace_irq_disable+0x3b/0x140
[  645.472516][T22800]  ? clear_bhb_loop+0x40/0x90
[  645.472538][T22800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.472555][T22800] RIP: 0033:0x7fa53dd9c819
[  645.472572][T22800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.472586][T22800] RSP: 002b:00007fa53bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  645.472605][T22800] RAX: ffffffffffffffda RBX: 00007fa53e015fa0 RCX: 00007fa53dd9c819
[  645.472618][T22800] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a
[  645.472630][T22800] RBP: 00007fa53bff6090 R08: 0000000000000000 R09: 0000000000000000
[  645.472642][T22800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.472653][T22800] R13: 00007fa53e016038 R14: 00007fa53e015fa0 R15: 00007fff4bfd3d78
[  645.472682][T22800]  </TASK>
[  646.342648][T22827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5061'.
[  646.391572][T22827] 8021q: adding VLAN 0 to HW filter on device bond5
[  646.426328][T22830] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  646.454273][T22827] bond5 (unregistering): Released all slaves
[  646.458430][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5063'.
[  646.545533][T22832] 8021q: adding VLAN 0 to HW filter on device bond7
[  646.569597][T22836] bond7 (unregistering): Released all slaves
[  646.606646][T22830] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode
[  646.637930][T22830] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode
[  646.993875][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5073'.
[  647.018216][T22865] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  647.037638][T22864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  647.045192][T22868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5074'.
[  647.068434][T22868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5074'.
[  647.078990][T22868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5074'.
[  647.100749][T22868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5074'.
[  647.195660][ T5832] block nbd3: Receive control failed (result -1)
[  647.197719][T22876] netlink: 'syz.1.5076': attribute type 1 has an invalid length.
[  647.232857][T22876] netlink: 'syz.1.5076': attribute type 16 has an invalid length.
[  647.255916][T22876] 8021q: adding VLAN 0 to HW filter on device bond0
[  647.771672][T22896] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.884860][T22896] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.007290][T22896] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.117131][T22896] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.176417][T22914] FAULT_INJECTION: forcing a failure.
[  648.176417][T22914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  648.192335][T22914] CPU: 1 UID: 0 PID: 22914 Comm: syz.4.5088 Not tainted syzkaller #0 PREEMPT(full) 
[  648.192358][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  648.192369][T22914] Call Trace:
[  648.192376][T22914]  <TASK>
[  648.192384][T22914]  dump_stack_lvl+0xe8/0x150
[  648.192413][T22914]  should_fail_ex+0x412/0x560
[  648.192441][T22914]  _copy_to_user+0x31/0xb0
[  648.192462][T22914]  simple_read_from_buffer+0xe1/0x170
[  648.192488][T22914]  proc_fail_nth_read+0x1bb/0x230
[  648.192515][T22914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  648.192538][T22914]  ? rw_verify_area+0x2a6/0x4d0
[  648.192564][T22914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  648.192589][T22914]  vfs_read+0x20c/0xa70
[  648.192617][T22914]  ? __pfx___mutex_lock+0x10/0x10
[  648.192659][T22914]  ? __pfx_vfs_read+0x10/0x10
[  648.192684][T22914]  ? __fget_files+0x2a/0x420
[  648.192709][T22914]  ? __fget_files+0x3a0/0x420
[  648.192727][T22914]  ? __fget_files+0x2a/0x420
[  648.192753][T22914]  ksys_read+0x150/0x270
[  648.192776][T22914]  ? __pfx_ksys_read+0x10/0x10
[  648.192808][T22914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.192827][T22914]  do_syscall_64+0x15f/0xf80
[  648.192846][T22914]  ? trace_irq_disable+0x3b/0x140
[  648.192864][T22914]  ? clear_bhb_loop+0x40/0x90
[  648.192885][T22914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.192901][T22914] RIP: 0033:0x7fb299b5d04e
[  648.192924][T22914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  648.192938][T22914] RSP: 002b:00007fb29aac7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  648.192958][T22914] RAX: ffffffffffffffda RBX: 00007fb29aac86c0 RCX: 00007fb299b5d04e
[  648.192972][T22914] RDX: 000000000000000f RSI: 00007fb29aac80a0 RDI: 0000000000000004
[  648.192984][T22914] RBP: 00007fb29aac8090 R08: 0000000000000000 R09: 0000000000000000
[  648.192995][T22914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.193006][T22914] R13: 00007fb299e16038 R14: 00007fb299e15fa0 R15: 00007ffea6253128
[  648.193036][T22914]  </TASK>
[  648.489360][ T7244] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.498092][ T7244] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.520798][ T7244] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.599478][ T7244] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.682797][T22928] __nla_validate_parse: 5 callbacks suppressed
[  648.682820][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5095'.
[  648.730865][T22928] 8021q: adding VLAN 0 to HW filter on device bond6
[  648.745872][T22928] bond6 (unregistering): Released all slaves
[  648.890336][T22939] netlink: 'syz.2.5100': attribute type 1 has an invalid length.
[  648.898291][T22939] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5100'.
[  648.929655][T22939] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5100'.
[  648.940392][T22939] netlink: 'syz.2.5100': attribute type 1 has an invalid length.
[  648.948784][T22939] netlink: 'syz.2.5100': attribute type 8 has an invalid length.
[  648.957871][T22939] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5100'.
[  649.119421][T22952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5104'.
[  649.130595][T22952] FAULT_INJECTION: forcing a failure.
[  649.130595][T22952] name failslab, interval 1, probability 0, space 0, times 0
[  649.144123][T22952] CPU: 1 UID: 0 PID: 22952 Comm: syz.2.5104 Not tainted syzkaller #0 PREEMPT(full) 
[  649.144148][T22952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  649.144159][T22952] Call Trace:
[  649.144167][T22952]  <TASK>
[  649.144175][T22952]  dump_stack_lvl+0xe8/0x150
[  649.144206][T22952]  should_fail_ex+0x412/0x560
[  649.144237][T22952]  should_failslab+0xa8/0x100
[  649.144257][T22952]  __kmalloc_cache_noprof+0x88/0x660
[  649.144284][T22952]  ? ipv6_add_addr+0x55e/0x1100
[  649.144309][T22952]  ipv6_add_addr+0x55e/0x1100
[  649.144334][T22952]  ? __pfx_ipv6_add_addr+0x10/0x10
[  649.144355][T22952]  ? inet6_addr_add+0x3d9/0xb20
[  649.144384][T22952]  inet6_addr_add+0x454/0xb20
[  649.144414][T22952]  inet6_rtm_newaddr+0xa17/0xe30
[  649.144449][T22952]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  649.144483][T22952]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  649.144527][T22952]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  649.144560][T22952]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  649.144582][T22952]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  649.144605][T22952]  ? netlink_sendmsg+0x5d4/0xb40
[  649.144631][T22952]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  649.144653][T22952]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  649.144676][T22952]  ? __lock_acquire+0x6b5/0x2cf0
[  649.144712][T22952]  netlink_rcv_skb+0x232/0x4b0
[  649.144738][T22952]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  649.144762][T22952]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  649.144798][T22952]  ? netlink_deliver_tap+0x2e/0x1b0
[  649.144821][T22952]  ? netlink_deliver_tap+0x2e/0x1b0
[  649.144850][T22952]  netlink_unicast+0x75c/0x8e0
[  649.144884][T22952]  netlink_sendmsg+0x813/0xb40
[  649.144918][T22952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  649.144946][T22952]  ? aa_sock_msg_perm+0xf1/0x1b0
[  649.144971][T22952]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  649.144999][T22952]  ____sys_sendmsg+0x972/0x9f0
[  649.145023][T22952]  ? __might_fault+0xaf/0x130
[  649.145052][T22952]  ? __pfx_____sys_sendmsg+0x10/0x10
[  649.145086][T22952]  ? import_iovec+0x73/0xa0
[  649.145108][T22952]  ___sys_sendmsg+0x2a5/0x360
[  649.145133][T22952]  ? __lock_acquire+0x6b5/0x2cf0
[  649.145159][T22952]  ? __pfx____sys_sendmsg+0x10/0x10
[  649.145220][T22952]  ? __fget_files+0x2a/0x420
[  649.145242][T22952]  ? __fget_files+0x3a0/0x420
[  649.145274][T22952]  __x64_sys_sendmsg+0x1bd/0x2a0
[  649.145303][T22952]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  649.145338][T22952]  ? __pfx_ksys_write+0x10/0x10
[  649.145371][T22952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.145391][T22952]  do_syscall_64+0x15f/0xf80
[  649.145412][T22952]  ? trace_irq_disable+0x3b/0x140
[  649.145431][T22952]  ? clear_bhb_loop+0x40/0x90
[  649.145453][T22952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.145472][T22952] RIP: 0033:0x7f403039c819
[  649.145495][T22952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  649.145509][T22952] RSP: 002b:00007f40312d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  649.145530][T22952] RAX: ffffffffffffffda RBX: 00007f4030615fa0 RCX: 00007f403039c819
[  649.145542][T22952] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  649.145559][T22952] RBP: 00007f40312d8090 R08: 0000000000000000 R09: 0000000000000000
[  649.145570][T22952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.145581][T22952] R13: 00007f4030616038 R14: 00007f4030615fa0 R15: 00007ffcba9b1c88
[  649.145611][T22952]  </TASK>
[  649.277127][T22945] lo speed is unknown, defaulting to 1000
[  649.758455][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5109'.
[  650.330572][T22995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5118'.
[  650.409288][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5120'.
[  650.847909][T23014] syzkaller1: entered promiscuous mode
[  650.865774][T23014] syzkaller1: entered allmulticast mode
[  650.995062][T22974] lo speed is unknown, defaulting to 1000
[  651.022078][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5127'.
[  651.099136][ T5832] block nbd4: Receive control failed (result -1)
[  652.022707][T23049] netlink: 'syz.3.5135': attribute type 10 has an invalid length.
[  652.070182][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5139'.
[  652.148079][T23049] team0 (unregistering): Port device team_slave_0 removed
[  652.177836][T23049] team0 (unregistering): Port device team_slave_1 removed
[  652.944062][T23077] lo speed is unknown, defaulting to 1000
[  653.363828][T23095] mac80211_hwsim hwsim32 syzkaller0: Caught tx_queue_len zero misconfig
[  653.396367][T23115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.415537][T23115] netlink: 'syz.2.5156': attribute type 1 has an invalid length.
[  653.505214][T23115] bond6: entered promiscuous mode
[  653.519397][T23115] bond6: entered allmulticast mode
[  653.539301][T23115] 8021q: adding VLAN 0 to HW filter on device bond6
[  653.942465][T23142] __nla_validate_parse: 4 callbacks suppressed
[  653.942488][T23142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5162'.
[  654.298936][T23131] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.510412][T23131] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.619564][T23151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5165'.
[  654.631164][T23151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5165'.
[  654.658440][T23131] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.735602][T23131] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.817582][T23158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5168'.
[  654.924804][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.988578][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.032851][T23166] tipc: Cannot configure node identity twice
[  655.039826][T23166] tipc: Cannot configure node identity twice
[  655.056853][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.104733][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.193997][T23144] lo speed is unknown, defaulting to 1000
[  655.269012][T23176] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5175'.
[  655.578494][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5182'.
[  655.761496][T23198] 8021q: adding VLAN 0 to HW filter on device bond3
[  655.795637][T23206] bond3 (unregistering): Released all slaves
[  655.911577][T23210] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  655.928443][T23210] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.083020][T23210] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.107194][T23210] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.208689][T23210] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.230772][T23210] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.309500][T23210] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  656.332726][T23210] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.491840][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  656.506563][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.568447][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  656.579857][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.629176][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  656.665294][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.710808][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  656.720169][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.809313][T23243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5192'.
[  656.884596][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5192'.
[  656.923304][T23250] netlink: 'syz.2.5194': attribute type 29 has an invalid length.
[  656.942460][T23250] netlink: 'syz.2.5194': attribute type 29 has an invalid length.
[  656.943693][T23249] netlink: 'syz.4.5193': attribute type 10 has an invalid length.
[  656.959292][T23250] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5194'.
[  656.998617][T23224] lo speed is unknown, defaulting to 1000
[  657.190176][T23262] netlink: zone id is out of range
[  657.221474][T23262] netlink: zone id is out of range
[  657.262300][T23262] netlink: zone id is out of range
[  657.324220][T23262] netlink: zone id is out of range
[  657.336386][T23262] netlink: zone id is out of range
[  657.346660][T23262] netlink: zone id is out of range
[  657.378382][T23262] netlink: zone id is out of range
[  657.391914][T23262] netlink: zone id is out of range
[  657.401420][T23262] netlink: zone id is out of range
[  657.406713][T23262] netlink: zone id is out of range
[  657.628246][T23276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.653709][T23276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  657.780977][T23276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.791727][T23276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  657.857654][T23283] netlink: 212332 bytes leftover after parsing attributes in process `syz.3.5205'.
[  657.868002][T23281] netlink: 'syz.4.5206': attribute type 10 has an invalid length.
[  657.904073][T23276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.918907][T23276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  657.975462][T23276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.988026][T23276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  658.129412][ T9108] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  658.151427][ T9108] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  658.183128][ T7244] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  658.213692][ T7244] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  658.238216][ T7244] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  658.248315][ T7244] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  658.283013][ T7244] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  658.300341][ T7244] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  658.537138][T23307] xt_CT: You must specify a L4 protocol and not use inversions on it
[  658.592494][T23317] netlink: 'syz.2.5218': attribute type 10 has an invalid length.
[  658.759127][T23330] FAULT_INJECTION: forcing a failure.
[  658.759127][T23330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  658.844870][T23330] CPU: 0 UID: 0 PID: 23330 Comm: syz.1.5223 Not tainted syzkaller #0 PREEMPT(full) 
[  658.844896][T23330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  658.844905][T23330] Call Trace:
[  658.844913][T23330]  <TASK>
[  658.844921][T23330]  dump_stack_lvl+0xe8/0x150
[  658.844952][T23330]  should_fail_ex+0x412/0x560
[  658.844982][T23330]  _copy_from_iter+0x1d3/0x1670
[  658.845018][T23330]  ? __pfx__copy_from_iter+0x10/0x10
[  658.845046][T23330]  ? raw_sendmsg+0x187/0x9a0
[  658.845072][T23330]  ? raw_sendmsg+0x187/0x9a0
[  658.845094][T23330]  ? skb_put+0x11b/0x210
[  658.845121][T23330]  raw_sendmsg+0x43d/0x9a0
[  658.845148][T23330]  ? __pfx_raw_sendmsg+0x10/0x10
[  658.845170][T23330]  ? aa_sock_msg_perm+0xf1/0x1b0
[  658.845193][T23330]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  658.845219][T23330]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  658.845242][T23330]  sock_write_iter+0x49b/0x4f0
[  658.845262][T23330]  ? __pfx_sock_write_iter+0x10/0x10
[  658.845298][T23330]  do_iter_readv_writev+0x619/0x8c0
[  658.845325][T23330]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  658.845353][T23330]  ? bpf_lsm_file_permission+0x9/0x20
[  658.845369][T23330]  ? security_file_permission+0x75/0x260
[  658.845389][T23330]  ? rw_verify_area+0x255/0x4d0
[  658.845417][T23330]  vfs_writev+0x33c/0x990
[  658.845444][T23330]  ? __pfx_vfs_writev+0x10/0x10
[  658.845475][T23330]  ? __fget_files+0x2a/0x420
[  658.845501][T23330]  ? __fget_files+0x3a0/0x420
[  658.845518][T23330]  ? __fget_files+0x2a/0x420
[  658.845547][T23330]  do_writev+0x154/0x2e0
[  658.845568][T23330]  ? __pfx_do_writev+0x10/0x10
[  658.845593][T23330]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.845612][T23330]  do_syscall_64+0x15f/0xf80
[  658.845632][T23330]  ? trace_irq_disable+0x3b/0x140
[  658.845650][T23330]  ? clear_bhb_loop+0x40/0x90
[  658.845672][T23330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.845689][T23330] RIP: 0033:0x7fa53dd9c819
[  658.845706][T23330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  658.845721][T23330] RSP: 002b:00007fa53bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  658.845741][T23330] RAX: ffffffffffffffda RBX: 00007fa53e015fa0 RCX: 00007fa53dd9c819
[  658.845827][T23330] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004
[  658.845837][T23330] RBP: 00007fa53bff6090 R08: 0000000000000000 R09: 0000000000000000
[  658.845847][T23330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  658.845856][T23330] R13: 00007fa53e016038 R14: 00007fa53e015fa0 R15: 00007fff4bfd3d78
[  658.845882][T23330]  </TASK>
[  659.185594][T23337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  659.206204][T23337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  659.363768][T23348] __nla_validate_parse: 3 callbacks suppressed
[  659.363787][T23348] netlink: 212332 bytes leftover after parsing attributes in process `syz.1.5230'.
[  659.397598][T23350] netlink: 'syz.4.5231': attribute type 10 has an invalid length.
[  659.487331][T23337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  659.501033][T23337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  659.620825][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5234'.
[  659.705514][T23356] bond2: left promiscuous mode
[  659.711846][T23356] bond2: left allmulticast mode
[  659.717986][T23356] hsr1: left promiscuous mode
[  659.736250][   T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  659.746854][   T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  659.770005][   T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  659.790190][   T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  659.826203][T23337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  659.853326][T23337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  659.875133][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5237'.
[  659.893963][   T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  659.914330][   T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  659.929538][   T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  659.938278][   T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  659.994088][T23337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  660.040640][T23337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  660.187915][T23374] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.267477][T23393] netlink: 181284 bytes leftover after parsing attributes in process `syz.1.5243'.
[  660.342345][T23374] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.468430][T23374] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.546537][T23374] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.746672][ T9107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.852524][ T7244] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.946391][ T9107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.984773][ T9107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  661.304121][T23437] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.5255'.
[  661.594189][T23413] lo speed is unknown, defaulting to 1000
[  661.850950][T23465] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode
[  661.882449][T23465] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[  661.897811][T23458] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  662.288287][T23483] 5Ò: entered promiscuous mode
[  662.411581][T23488] netlink: 181284 bytes leftover after parsing attributes in process `syz.3.5268'.
[  662.534939][T23490] netlink: 'syz.1.5269': attribute type 10 has an invalid length.
[  662.539487][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5271'.
[  662.553617][ T9107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  662.563522][ T9107] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  662.573206][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'.
[  662.585893][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5271'.
[  662.619804][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5271'.
[  662.629710][T23493] FAULT_INJECTION: forcing a failure.
[  662.629710][T23493] name failslab, interval 1, probability 0, space 0, times 0
[  662.643709][T23493] CPU: 1 UID: 0 PID: 23493 Comm: syz.2.5271 Not tainted syzkaller #0 PREEMPT(full) 
[  662.643736][T23493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  662.643748][T23493] Call Trace:
[  662.643755][T23493]  <TASK>
[  662.643764][T23493]  dump_stack_lvl+0xe8/0x150
[  662.643793][T23493]  should_fail_ex+0x412/0x560
[  662.643826][T23493]  should_failslab+0xa8/0x100
[  662.643846][T23493]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  662.643871][T23493]  ? __alloc_skb+0x186/0x7d0
[  662.643892][T23493]  ? __alloc_skb+0x1d0/0x7d0
[  662.643911][T23493]  ? __local_bh_enable_ip+0xd0/0x130
[  662.643939][T23493]  __alloc_skb+0x1d0/0x7d0
[  662.643962][T23493]  ? netlink_ack_tlv_len+0x6c/0x210
[  662.643988][T23493]  netlink_ack+0x146/0xa50
[  662.644009][T23493]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  662.644033][T23493]  ? __lock_acquire+0x6b5/0x2cf0
[  662.644067][T23493]  netlink_rcv_skb+0x2b6/0x4b0
[  662.644092][T23493]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  662.644114][T23493]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  662.644148][T23493]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.644170][T23493]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.644197][T23493]  netlink_unicast+0x75c/0x8e0
[  662.644230][T23493]  netlink_sendmsg+0x813/0xb40
[  662.644263][T23493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.644290][T23493]  ? aa_sock_msg_perm+0xf1/0x1b0
[  662.644313][T23493]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  662.644349][T23493]  ____sys_sendmsg+0x972/0x9f0
[  662.644371][T23493]  ? __might_fault+0xaf/0x130
[  662.644399][T23493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  662.644432][T23493]  ? import_iovec+0x73/0xa0
[  662.644454][T23493]  ___sys_sendmsg+0x2a5/0x360
[  662.644478][T23493]  ? __lock_acquire+0x6b5/0x2cf0
[  662.644505][T23493]  ? __pfx____sys_sendmsg+0x10/0x10
[  662.644528][T23493]  ? __lock_acquire+0x6b5/0x2cf0
[  662.644554][T23493]  ? kstrtouint+0x6e/0xe0
[  662.644614][T23493]  __sys_sendmmsg+0x27c/0x4e0
[  662.644646][T23493]  ? __pfx___sys_sendmmsg+0x10/0x10
[  662.644670][T23493]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  662.644715][T23493]  ? ksys_write+0x242/0x270
[  662.644740][T23493]  ? __pfx_ksys_write+0x10/0x10
[  662.644770][T23493]  __x64_sys_sendmmsg+0xa0/0xc0
[  662.644795][T23493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.644814][T23493]  do_syscall_64+0x15f/0xf80
[  662.644835][T23493]  ? trace_irq_disable+0x3b/0x140
[  662.644854][T23493]  ? clear_bhb_loop+0x40/0x90
[  662.644877][T23493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.644895][T23493] RIP: 0033:0x7f403039c819
[  662.644912][T23493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.644928][T23493] RSP: 002b:00007f40312d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  662.644948][T23493] RAX: ffffffffffffffda RBX: 00007f4030615fa0 RCX: 00007f403039c819
[  662.644961][T23493] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  662.644974][T23493] RBP: 00007f40312d8090 R08: 0000000000000000 R09: 0000000000000000
[  662.644985][T23493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  662.644996][T23493] R13: 00007f4030616038 R14: 00007f4030615fa0 R15: 00007ffcba9b1c88
[  662.645026][T23493]  </TASK>
[  663.025815][T23499] FAULT_INJECTION: forcing a failure.
[  663.025815][T23499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  663.042906][T23499] CPU: 1 UID: 0 PID: 23499 Comm: syz.2.5272 Not tainted syzkaller #0 PREEMPT(full) 
[  663.042931][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  663.042942][T23499] Call Trace:
[  663.042949][T23499]  <TASK>
[  663.042956][T23499]  dump_stack_lvl+0xe8/0x150
[  663.042985][T23499]  should_fail_ex+0x412/0x560
[  663.043012][T23499]  _copy_from_user+0x2d/0xb0
[  663.043030][T23499]  ___sys_recvmsg+0x175/0x590
[  663.043051][T23499]  ? __pfx____sys_recvmsg+0x10/0x10
[  663.043100][T23499]  do_recvmmsg+0x334/0x800
[  663.043121][T23499]  ? vfs_write+0x9bc/0xb90
[  663.043144][T23499]  ? __pfx_do_recvmmsg+0x10/0x10
[  663.043172][T23499]  ? do_sys_openat2+0x14c/0x200
[  663.043191][T23499]  ? kmem_cache_free+0x180/0x630
[  663.043214][T23499]  ? fd_install+0x94/0x3d0
[  663.043247][T23499]  __x64_sys_recvmmsg+0x198/0x250
[  663.043268][T23499]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  663.043293][T23499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.043323][T23499]  do_syscall_64+0x15f/0xf80
[  663.043341][T23499]  ? trace_irq_disable+0x3b/0x140
[  663.043360][T23499]  ? clear_bhb_loop+0x40/0x90
[  663.043381][T23499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.043397][T23499] RIP: 0033:0x7f403039c819
[  663.043414][T23499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.043428][T23499] RSP: 002b:00007f40312d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  663.043448][T23499] RAX: ffffffffffffffda RBX: 00007f4030615fa0 RCX: 00007f403039c819
[  663.043460][T23499] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004
[  663.043472][T23499] RBP: 00007f40312d8090 R08: 0000000000000000 R09: 0000000000000000
[  663.043482][T23499] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002
[  663.043493][T23499] R13: 00007f4030616038 R14: 00007f4030615fa0 R15: 00007ffcba9b1c88
[  663.043522][T23499]  </TASK>
[  663.068323][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  663.324916][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  663.343941][ T9108] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  663.353598][ T9108] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  663.465118][ T9107] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  663.486362][ T9107] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  663.886750][T23533] netlink: 'syz.2.5283': attribute type 10 has an invalid length.
[  664.004265][T23517] lo speed is unknown, defaulting to 1000
[  664.507171][T23557] __nla_validate_parse: 3 callbacks suppressed
[  664.507192][T23557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5292'.
[  664.544180][T23559] netlink: 181284 bytes leftover after parsing attributes in process `syz.2.5293'.
[  664.623401][T23562] netlink: 'syz.2.5294': attribute type 1 has an invalid length.
[  664.633690][T23530] lo speed is unknown, defaulting to 1000
[  664.635563][T23562] netlink: 1820 bytes leftover after parsing attributes in process `syz.2.5294'.
[  664.721923][T23564] netlink: 'syz.0.5295': attribute type 10 has an invalid length.
[  665.336472][T23598] x_tables: duplicate underflow at hook 2
[  665.348262][T23597] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.5304'.
[  665.526721][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5305'.
[  666.972398][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5313'.
[  666.977788][T23644] syzkaller0: entered promiscuous mode
[  666.999496][T23644] syzkaller0: entered allmulticast mode
[  667.012108][T23644] net_ratelimit: 22 callbacks suppressed
[  667.012126][T23644] TC_ACT_REPEAT abuse ?
[  667.048074][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'.
[  667.069257][T23644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5312'.
[  667.084388][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'.
[  667.106495][T23644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5312'.
[  667.201307][T23592] lo speed is unknown, defaulting to 1000
[  667.522468][T23639] lo speed is unknown, defaulting to 1000
[  667.530694][T23645] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  667.739630][T23664] netlink: 'syz.0.5316': attribute type 1 has an invalid length.
[  667.889949][ T5832] block nbd5: Receive control failed (result -1)
[  669.202373][T23675] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  669.209561][T23688] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  669.316683][T23695] 8021q: adding VLAN 0 to HW filter on device bond7
[  669.320685][T23701] netlink: 'syz.4.5324': attribute type 2 has an invalid length.
[  669.356385][T23699] bond7: (slave macvlan1): Enslaving as an active interface with an up link
[  669.641522][T23722] bond4: left promiscuous mode
[  669.657306][T23722] veth5: left promiscuous mode
[  669.694702][T23722] bond6: left promiscuous mode
[  669.707956][T23722] bond6: left allmulticast mode
[  669.739173][   T56] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  669.748683][   T56] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  669.758753][T23727] netlink: 'syz.1.5329': attribute type 11 has an invalid length.
[  669.767404][   T56] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  669.778629][   T56] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  669.797200][   T56] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  669.822831][   T56] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  669.852793][   T56] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  669.887975][   T56] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  669.936298][T23728] netlink: 'syz.0.5330': attribute type 4 has an invalid length.
[  669.945107][T23730] lo speed is unknown, defaulting to 1000
[  669.987847][T23728] netlink: 'syz.0.5330': attribute type 4 has an invalid length.
[  670.370072][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[  672.480859][T23711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  672.694705][T23760] __nla_validate_parse: 6 callbacks suppressed
[  672.694727][T23760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5337'.
[  672.792770][T23760] 8021q: adding VLAN 0 to HW filter on device bond6
[  672.863755][T23768] bond6: (slave macvlan1): Enslaving as an active interface with an up link
[  672.905406][T23763] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5338'.
[  672.949419][T23771] netlink: 'syz.3.5340': attribute type 10 has an invalid length.
[  673.181698][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5347'.
[  673.245281][ T5832] block nbd6: Receive control failed (result -1)
[  673.553834][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5350'.
[  673.689140][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5353'.
[  673.716591][T23818] netlink: 'syz.3.5352': attribute type 10 has an invalid length.
[  673.767426][T23816] 8021q: adding VLAN 0 to HW filter on device bond7
[  673.810822][T23820] bond7: (slave macvlan1): Enslaving as an active interface with an up link
[  673.959993][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5355'.
[  673.970540][T23824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5355'.
[  674.217321][T23831] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5358'.
[  674.230539][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5357'.
[  674.318334][T23838] netlink: 'syz.4.5358': attribute type 11 has an invalid length.
[  674.341886][T23838] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5358'.
[  674.365909][ T5832] block nbd7: Receive control failed (result -1)
[  674.882706][T23866] netlink: 'syz.0.5367': attribute type 2 has an invalid length.
[  675.085110][T23866] l2: entered promiscuous mode
[  675.346710][T20451] IPVS: starting estimator thread 0...
[  675.439823][T23886] IPVS: using max 28 ests per chain, 67200 per kthread
[  675.713006][T23899] netlink: 'syz.3.5381': attribute type 10 has an invalid length.
[  675.783421][T23903] netlink: 'syz.3.5382': attribute type 10 has an invalid length.
[  676.115623][T23912] netlink: 'syz.3.5383': attribute type 5 has an invalid length.
[  676.258644][T23925] netlink: 'syz.1.5392': attribute type 10 has an invalid length.
[  676.354826][T23931] xt_TCPMSS: Only works on TCP SYN packets
[  676.455826][T23938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  676.689045][T23948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.937175][T23959] netlink: 'syz.1.5405': attribute type 10 has an invalid length.
[  677.069075][T23931] lo speed is unknown, defaulting to 1000
[  677.513844][ T5832] block nbd8: Receive control failed (result -1)
[  677.530564][T23988] A link change request failed with some changes committed already. Interface – may have been left with an inconsistent configuration, please check.
[  678.472129][T24024] __nla_validate_parse: 18 callbacks suppressed
[  678.472151][T24024] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5421'.
[  678.492718][T24023] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5422'.
[  678.525757][T24023] netlink: 'syz.3.5422': attribute type 2 has an invalid length.
[  678.766013][T24030] netlink: 'syz.3.5426': attribute type 1 has an invalid length.
[  679.002244][T24036] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  679.025427][T24038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5430'.
[  679.211651][T24045] ieee802154 phy0 wpan0: encryption failed: -22
[  679.308704][T24049] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5435'.
[  679.344822][T24049] netlink: 'syz.3.5435': attribute type 2 has an invalid length.
[  679.395026][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'.
[  679.414356][T24055] openvswitch: netlink: EtherType 50a is less than min 600
[  679.423727][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5438'.
[  679.775333][T24085] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5448'.
[  679.800854][ T9107] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  679.813690][ T9107] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  679.843102][ T9107] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  679.858423][ T9107] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  680.078085][T24097] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5451'.
[  680.101646][T24097] netlink: 'syz.0.5451': attribute type 2 has an invalid length.
[  680.493087][T24093] lo speed is unknown, defaulting to 1000
[  680.770429][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  680.925149][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5455'.
[  681.225457][T24135] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5462'.
[  681.242684][T24135] netlink: 'syz.3.5462': attribute type 2 has an invalid length.
[  681.326459][T24141] dummy0: entered promiscuous mode
[  681.353109][T24141] dummy0: entered allmulticast mode
[  681.556906][T24154] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.568571][T24154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  681.589443][T24154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  681.632393][T24114] lo speed is unknown, defaulting to 1000
[  681.717633][T24154] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.746621][T24154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  681.757673][T24154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  681.838635][T24154] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.856597][T24154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  681.868133][T24154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  681.925859][T24154] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.936720][T24154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  681.954124][T24154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  682.133700][   T56] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  682.150009][   T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  682.172284][   T56] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  685.618782][ T7244] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  685.636166][ T7244] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  685.645163][ T7244] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  685.670295][ T7244] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  685.680658][ T7244] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  685.689005][ T7244] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  685.743544][ T7244] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  685.753234][ T7244] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  685.762505][ T7244] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  685.816612][T24185] __nla_validate_parse: 3 callbacks suppressed
[  685.816633][T24185] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5476'.
[  685.855303][T24185] netlink: 'syz.2.5476': attribute type 2 has an invalid length.
[  685.878545][T24187] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  685.895331][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  685.926922][T24187] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  685.945330][T24187] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  685.981302][T24194] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5477'.
[  685.993549][T24193] IPVS: set_ctl: invalid protocol: 121 172.20.20.45:20003
[  686.013347][T24194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5477'.
[  686.057167][T24187] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  686.070694][T24187] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  686.082181][T24187] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  686.152085][T24187] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  686.155578][T24202] netlink: 'syz.4.5483': attribute type 2 has an invalid length.
[  686.172002][T24187] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  686.187643][T24202] netlink: 'syz.4.5483': attribute type 2 has an invalid length.
[  686.195710][T24187] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  686.270007][T24207] x_tables: duplicate underflow at hook 2
[  686.308906][T24187] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  686.343542][T24187] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  686.380240][T24187] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  686.555921][T24207] syzkaller0: entered promiscuous mode
[  686.580085][T24207] syzkaller0: entered allmulticast mode
[  686.600794][T24219] bond0: Device is already in use.
[  686.883097][T24222] netlink: 'syz.3.5484': attribute type 4 has an invalid length.
[  687.042040][T24229] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5490'.
[  687.051853][T24229] netlink: 'syz.1.5490': attribute type 2 has an invalid length.
[  690.319833][T24205] lo speed is unknown, defaulting to 1000
[  690.461780][ T9107] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  690.472376][ T9107] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  690.491646][ T9107] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  690.528887][   T47] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  690.538696][   T47] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  690.547746][   T47] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  690.574922][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'.
[  690.595063][   T56] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  690.604603][   T56] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  690.613196][   T56] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  690.638849][   T47] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  690.651201][   T47] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  690.670524][   T47] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  690.807954][T24258] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5501'.
[  690.818739][T24258] netlink: 'syz.1.5501': attribute type 2 has an invalid length.
[  690.885438][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5500'.
[  690.912010][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5502'.
[  691.027068][ T5832] block nbd9: Receive control failed (result -1)
[  691.443119][T24277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5506'.
[  691.575614][ T5832] block nbd10: Receive control failed (result -1)
[  692.119068][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5509'.
[  692.189421][T24293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5509'.
[  692.227112][T24274] lo speed is unknown, defaulting to 1000
[  692.714217][T24306] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5513'.
[  692.750549][T24306] netlink: 'syz.3.5513': attribute type 2 has an invalid length.
[  692.996098][T24318] netlink: 'syz.1.5516': attribute type 1 has an invalid length.
[  693.038527][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5515'.
[  693.090976][T24318] 8021q: adding VLAN 0 to HW filter on device bond3
[  693.101549][T24320] syz_tun: left allmulticast mode
[  693.117979][T24320] syz_tun: left promiscuous mode
[  693.126880][T24320] bridge0: port 3(syz_tun) entered disabled state
[  693.152262][T24320] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[  693.231315][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'.
[  693.241966][T24323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5517'.
[  693.253007][T24323] netlink: 'syz.1.5517': attribute type 11 has an invalid length.
[  693.282476][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'.
[  693.282566][   T47] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  693.321447][   T47] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  693.333486][T24323] netlink: 'syz.1.5517': attribute type 11 has an invalid length.
[  693.349508][   T47] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  693.401122][   T47] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  693.727558][T24346] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.815426][T24352] IPVS: ip_vs_add_dest(): server weight less than zero
[  693.817765][T24346] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.825532][T24352] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  693.883675][T24352] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  693.911058][T24346] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.972745][T24346] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.044401][T24360] xt_hashlimit: max too large, truncated to 1048576
[  694.058341][T24360] xt_hashlimit: overflow, try lower: 2/0
[  694.125650][   T47] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  694.145386][   T47] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  694.155338][T24370] netlink: 'syz.2.5533': attribute type 1 has an invalid length.
[  694.180921][T24370] netlink: 'syz.2.5533': attribute type 1 has an invalid length.
[  694.188973][T24370] netlink: 'syz.2.5533': attribute type 8 has an invalid length.
[  694.236215][   T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  694.302449][ T7244] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  694.392106][T24380] netlink: 'syz.1.5534': attribute type 1 has an invalid length.
[  694.438075][T24383] netlink: 'syz.2.5537': attribute type 1 has an invalid length.
[  694.477502][T24383] netlink: 'syz.2.5537': attribute type 1 has an invalid length.
[  694.538282][T24380] 8021q: adding VLAN 0 to HW filter on device bond4
[  694.617176][T24384] vlan3: entered allmulticast mode
[  694.631889][T24384] bond4: entered allmulticast mode
[  694.637457][T24380] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  694.688413][T24380] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  694.860886][T24393] bond4: (slave geneve3): making interface the new active one
[  694.879883][T24393] geneve3: entered allmulticast mode
[  694.908991][T24393] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  697.550949][T24408] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode
[  697.559065][T24408] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode
[  697.577956][T24372] lo speed is unknown, defaulting to 1000
[  698.031299][T24425] syzkaller1: entered promiscuous mode
[  698.052408][T24425] syzkaller1: entered allmulticast mode
[  698.605326][T24452] macvtap1: entered promiscuous mode
[  698.612422][T24452] macvtap1: entered allmulticast mode
[  698.636607][T24455] validate_nla: 1 callbacks suppressed
[  698.636627][T24455] netlink: 'syz.0.5557': attribute type 10 has an invalid length.
[  698.693798][T24458] __nla_validate_parse: 11 callbacks suppressed
[  698.693816][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5558'.
[  698.846587][T24462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5560'.
[  698.852191][T24464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5561'.
[  698.915812][ T5832] block nbd11: Receive control failed (result -1)
[  734.224475][T24485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5566'.
[  734.348262][ T5832] block nbd12: Receive control failed (result -1)
[  734.371477][T24490] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5567'.
[  734.698927][T24502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5569'.
[  734.822005][ T5832] block nbd13: Receive control failed (result -1)
[  734.974989][T24478] lo speed is unknown, defaulting to 1000
[  735.506761][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5571'.
[  735.592398][ T5832] block nbd14: Receive control failed (result -1)
[  736.155892][T24499] lo speed is unknown, defaulting to 1000
[  736.211810][T24510] lo speed is unknown, defaulting to 1000
[  736.620629][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5574'.
[  736.709340][ T5832] block nbd15: Receive control failed (result -1)
[  737.148539][T24527] lo speed is unknown, defaulting to 1000
[  737.503560][T24545] veth1_to_bond: entered promiscuous mode
[  737.521193][T24545] veth1_to_bond: entered allmulticast mode
[  737.532169][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5577'.
[  737.556447][T24545] veth1_to_bond (unregistering): left promiscuous mode
[  737.569881][T24545] veth1_to_bond (unregistering): left allmulticast mode
[  737.588080][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5577'.
[  737.636256][T24545] bond0: (slave bond_slave_1): Releasing backup interface
[  738.542434][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5579'.
[  738.757154][ T5832] block nbd0: Receive control failed (result -1)
[  739.101220][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5584'.
[  739.337768][ T5832] block nbd16: Receive control failed (result -1)
[  739.520807][T24606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  739.562776][T24606] netlink: 'syz.2.5588': attribute type 1 has an invalid length.
[  739.613234][T24606] bond8: entered promiscuous mode
[  739.619284][T24606] bond8: entered allmulticast mode
[  739.625427][T24606] 8021q: adding VLAN 0 to HW filter on device bond8
[  739.654106][T24608] netlink: 'syz.3.5587': attribute type 21 has an invalid length.
[  739.682872][T24610] erspan1: entered allmulticast mode
[  739.742140][T24610] bond8: (slave erspan1): making interface the new active one
[  739.750421][T24610] erspan1: entered promiscuous mode
[  739.761465][T24610] bond8: (slave erspan1): Enslaving as an active interface with an up link
[  739.770435][T24608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5587'.
[  739.810674][T24608] netlink: 'syz.3.5587': attribute type 1 has an invalid length.
[  739.955184][T24622] netlink: 'syz.4.5590': attribute type 3 has an invalid length.
[  740.000499][T24612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5589'.
[  740.067463][ T5832] block nbd17: Receive control failed (result -1)
[  740.122753][T24623] nbd: nbd4 already in use
[  740.138846][T24622] block nbd4: NBD_DISCONNECT
[  740.144513][T24622] block nbd4: Send disconnect failed -32
[  740.161440][T24622] block nbd4: shutting down sockets
[  740.337337][T24623] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.351769][T24628] IPVS: nq: FWM 3 0x00000003 - no destination available
[  740.371327][T24623] 8021q: adding VLAN 0 to HW filter on device team0
[  740.394351][T24623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  740.466265][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5593'.
[  740.521365][ T5832] block nbd4: Receive control failed (result -1)
[  740.571397][T24635] FAULT_INJECTION: forcing a failure.
[  740.571397][T24635] name failslab, interval 1, probability 0, space 0, times 0
[  740.650224][T24635] CPU: 0 UID: 0 PID: 24635 Comm: syz.0.5594 Not tainted syzkaller #0 PREEMPT(full) 
[  740.650251][T24635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  740.650263][T24635] Call Trace:
[  740.650271][T24635]  <TASK>
[  740.650278][T24635]  dump_stack_lvl+0xe8/0x150
[  740.650311][T24635]  should_fail_ex+0x412/0x560
[  740.650341][T24635]  should_failslab+0xa8/0x100
[  740.650363][T24635]  __kmalloc_cache_noprof+0x88/0x660
[  740.650390][T24635]  ? nft_netdev_hook_alloc+0x220/0x570
[  740.650420][T24635]  nft_netdev_hook_alloc+0x220/0x570
[  740.650450][T24635]  nf_tables_parse_netdev_hooks+0x138/0x950
[  740.650484][T24635]  nft_flowtable_parse_hook+0x46a/0x920
[  740.650519][T24635]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[  740.650547][T24635]  ? nft_pernet+0x23/0x240
[  740.650577][T24635]  nf_tables_newflowtable+0xc22/0x23d0
[  740.650615][T24635]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  740.650638][T24635]  ? nfnl_pernet+0x23/0x240
[  740.650676][T24635]  ? __nla_parse+0x40/0x60
[  740.650699][T24635]  nfnetlink_rcv+0x123e/0x27b0
[  740.650756][T24635]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  740.650795][T24635]  ? ref_tracker_free+0x693/0x840
[  740.650848][T24635]  ? __netlink_deliver_tap+0x807/0x850
[  740.650882][T24635]  ? netlink_deliver_tap+0x2e/0x1b0
[  740.650905][T24635]  ? netlink_deliver_tap+0x2e/0x1b0
[  740.650935][T24635]  netlink_unicast+0x75c/0x8e0
[  740.650968][T24635]  netlink_sendmsg+0x813/0xb40
[  740.651002][T24635]  ? __pfx_netlink_sendmsg+0x10/0x10
[  740.651030][T24635]  ? aa_sock_msg_perm+0xf1/0x1b0
[  740.651055][T24635]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  740.651085][T24635]  ____sys_sendmsg+0x972/0x9f0
[  740.651111][T24635]  ? __might_fault+0xaf/0x130
[  740.651140][T24635]  ? __pfx_____sys_sendmsg+0x10/0x10
[  740.651175][T24635]  ? import_iovec+0x73/0xa0
[  740.651204][T24635]  ___sys_sendmsg+0x2a5/0x360
[  740.651228][T24635]  ? __lock_acquire+0x6b5/0x2cf0
[  740.651255][T24635]  ? __pfx____sys_sendmsg+0x10/0x10
[  740.651315][T24635]  ? __fget_files+0x2a/0x420
[  740.651336][T24635]  ? __fget_files+0x3a0/0x420
[  740.651368][T24635]  __x64_sys_sendmsg+0x1bd/0x2a0
[  740.651396][T24635]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  740.651431][T24635]  ? __pfx_ksys_write+0x10/0x10
[  740.651464][T24635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.651484][T24635]  do_syscall_64+0x15f/0xf80
[  740.651506][T24635]  ? trace_irq_disable+0x3b/0x140
[  740.651526][T24635]  ? clear_bhb_loop+0x40/0x90
[  740.651548][T24635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.651566][T24635] RIP: 0033:0x7f90e2d9c819
[  740.651583][T24635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.651598][T24635] RSP: 002b:00007f90e3cc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  740.651618][T24635] RAX: ffffffffffffffda RBX: 00007f90e3015fa0 RCX: 00007f90e2d9c819
[  740.651630][T24635] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  740.651642][T24635] RBP: 00007f90e3cc3090 R08: 0000000000000000 R09: 0000000000000000
[  740.651653][T24635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  740.651664][T24635] R13: 00007f90e3016038 R14: 00007f90e3015fa0 R15: 00007fff3064cf08
[  740.651691][T24635]  </TASK>
[  741.420511][T24653] bridge_slave_1: left allmulticast mode
[  741.438504][T24653] bridge_slave_1: left promiscuous mode
[  741.454179][T24653] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.501570][T24653] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  741.542821][T24626] lo speed is unknown, defaulting to 1000
[  741.682137][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5601'.
[  741.710107][T24656] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5601'.
[  741.741520][T24656] netlink: 'syz.1.5601': attribute type 1 has an invalid length.
[  741.847790][T24656] bond5: entered promiscuous mode
[  741.853848][T24656] 8021q: adding VLAN 0 to HW filter on device bond5
[  741.898518][T24657] 8021q: adding VLAN 0 to HW filter on device bond6
[  741.914187][T24657] bond5: (slave bond6): making interface the new active one
[  741.921954][T24657] bond6: entered promiscuous mode
[  741.927987][T24657] bond5: (slave bond6): Enslaving as an active interface with an up link
[  742.087996][T24668] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5603'.
[  742.124485][T24668] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5603'.
[  742.257549][T24668] 8021q: adding VLAN 0 to HW filter on device bond7
[  742.293617][T24676] netlink: 'syz.0.5606': attribute type 72 has an invalid length.
[  742.306079][T24676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5606'.
[  742.355048][T24676] netlink: 'syz.0.5606': attribute type 10 has an invalid length.
[  742.388148][T24679] netlink: 'syz.1.5607': attribute type 72 has an invalid length.
[  742.407594][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5607'.
[  742.418887][T24679] netlink: 'syz.1.5607': attribute type 10 has an invalid length.
[  742.481905][T24681] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5608'.
[  742.574615][T24685] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.597686][T24685] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.675623][T24685] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.699591][T24685] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.775779][T24685] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.800997][T24685] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.888549][T24685] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  742.900423][T24685] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.966710][   T47] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  742.976422][   T47] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.001845][   T47] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  743.010718][   T47] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.028798][   T47] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  743.037329][   T47] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.074836][   T47] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  743.086973][   T47] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.271665][T24716] netlink: 'syz.1.5620': attribute type 72 has an invalid length.
[  743.367108][T24718] 8021q: adding VLAN 0 to HW filter on device bond8
[  743.785018][T24746] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode
[  743.803957][T24746] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode
[  743.934236][T24740] 8021q: adding VLAN 0 to HW filter on device bond9
[  744.047618][T24749] 8021q: adding VLAN 0 to HW filter on device bond10
[  744.059223][T24749] bond9: (slave bond10): Enslaving as an active interface with an up link
[  744.138844][T24755] bond9 (unregistering): (slave bond10): Releasing backup interface
[  744.183200][T24755] bond9 (unregistering): Released all slaves
[  744.358152][T24772] netem: unknown loss type 11
[  744.369612][T24772] netem: change failed
[  744.495786][ T5832] block nbd18: Receive control failed (result -1)
[  744.631535][T24785] validate_nla: 2 callbacks suppressed
[  744.631554][T24785] netlink: 'syz.2.5637': attribute type 1 has an invalid length.
[  744.646357][T24785] netlink: 'syz.2.5637': attribute type 1 has an invalid length.
[  744.654451][T24785] netlink: 'syz.2.5637': attribute type 8 has an invalid length.
[  744.826861][T24793] __nla_validate_parse: 11 callbacks suppressed
[  744.826883][T24793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5642'.
[  745.206062][T24819] netlink: 'syz.3.5646': attribute type 4 has an invalid length.
[  745.298622][T24823] netlink: 'syz.3.5646': attribute type 4 has an invalid length.
[  745.328328][T24825] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5649'.
[  745.340353][T24825] netlink: 'syz.0.5649': attribute type 2 has an invalid length.
[  745.363857][T24819] netlink: 'syz.3.5646': attribute type 25 has an invalid length.
[  745.379529][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5646'.
[  745.623375][ T5832] Bluetooth: hci2: link tx timeout
[  745.648932][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  745.673193][T24838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'.
[  745.745117][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'.
[  746.132910][T24859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.144710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.197597][T24859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5658'.
[  746.423010][T24818] lo speed is unknown, defaulting to 1000
[  746.846170][T24891] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode
[  746.873720][T24891] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode
[  746.978525][T24893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5666'.
[  746.999940][T24893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5666'.
[  747.335903][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  747.422389][T24905] netlink: 'syz.4.5670': attribute type 13 has an invalid length.
[  747.452368][T24905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5670'.
[  747.512870][   T12] bond3: (slave syz_tun): link status definitely down, disabling slave
[  747.645474][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.678297][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.700057][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.724205][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.739979][T24837] Bluetooth: hci2: command 0x0406 tx timeout
[  747.751504][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.791877][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.806682][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.818528][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.843826][T24910] netlink: 'syz.4.5673': attribute type 13 has an invalid length.
[  747.858486][T24910] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5673'.
[  747.876640][T24837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  747.890427][T24837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  747.902968][T24837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  747.920795][T24837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  747.933888][T24837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  748.381466][T15336] syz_tun (unregistering): left allmulticast mode
[  748.406681][T15336] syz_tun (unregistering): left promiscuous mode
[  748.425984][T15336] bridge0: port 3(syz_tun) entered disabled state
[  748.637781][T24922] lo speed is unknown, defaulting to 1000
[  748.747773][T24949] netlink: 'syz.2.5681': attribute type 2 has an invalid length.
[  749.003487][T24922] chnl_net:caif_netlink_parms(): no params data found
[  749.186244][T24976] FAULT_INJECTION: forcing a failure.
[  749.186244][T24976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.199567][T24976] CPU: 0 UID: 0 PID: 24976 Comm: syz.1.5688 Not tainted syzkaller #0 PREEMPT(full) 
[  749.199602][T24976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  749.199622][T24976] Call Trace:
[  749.199630][T24976]  <TASK>
[  749.199638][T24976]  dump_stack_lvl+0xe8/0x150
[  749.199677][T24976]  should_fail_ex+0x412/0x560
[  749.199706][T24976]  _copy_from_user+0x2d/0xb0
[  749.199726][T24976]  bpf_test_init+0xd8/0x150
[  749.199753][T24976]  bpf_prog_test_run_skb+0x392/0x2350
[  749.199776][T24976]  ? __fget_files+0x2a/0x420
[  749.199801][T24976]  ? bpf_prog_test_run_skb+0x1d1/0x2350
[  749.199829][T24976]  ? __fget_files+0x2a/0x420
[  749.199852][T24976]  ? __fget_files+0x2a/0x420
[  749.199872][T24976]  ? __fget_files+0x3a0/0x420
[  749.199891][T24976]  ? __fget_files+0x2a/0x420
[  749.199917][T24976]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  749.199939][T24976]  bpf_prog_test_run+0x2c7/0x340
[  749.199963][T24976]  __sys_bpf+0x643/0x950
[  749.199983][T24976]  ? __pfx___sys_bpf+0x10/0x10
[  749.200012][T24976]  ? ksys_write+0x242/0x270
[  749.200036][T24976]  ? __pfx_ksys_write+0x10/0x10
[  749.200058][T24976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.200073][T24976]  __x64_sys_bpf+0x7c/0x90
[  749.200086][T24976]  do_syscall_64+0x15f/0xf80
[  749.200102][T24976]  ? trace_irq_disable+0x3b/0x140
[  749.200119][T24976]  ? clear_bhb_loop+0x40/0x90
[  749.200140][T24976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.200155][T24976] RIP: 0033:0x7fa53dd9c819
[  749.200171][T24976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.200185][T24976] RSP: 002b:00007fa53bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  749.200205][T24976] RAX: ffffffffffffffda RBX: 00007fa53e015fa0 RCX: 00007fa53dd9c819
[  749.200218][T24976] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a
[  749.200228][T24976] RBP: 00007fa53bff6090 R08: 0000000000000000 R09: 0000000000000000
[  749.200239][T24976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.200250][T24976] R13: 00007fa53e016038 R14: 00007fa53e015fa0 R15: 00007fff4bfd3d78
[  749.200279][T24976]  </TASK>
[  749.435204][T24922] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.448878][T24922] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.456351][T24922] bridge_slave_0: entered allmulticast mode
[  749.464521][T24922] bridge_slave_0: entered promiscuous mode
[  749.473394][T24922] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.481500][T24922] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.489356][T24922] bridge_slave_1: entered allmulticast mode
[  749.507163][T24922] bridge_slave_1: entered promiscuous mode
[  749.655255][T24922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  749.727452][T24989] FAULT_INJECTION: forcing a failure.
[  749.727452][T24989] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.744542][T24922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  749.758087][T24989] CPU: 0 UID: 0 PID: 24989 Comm: syz.2.5693 Not tainted syzkaller #0 PREEMPT(full) 
[  749.758112][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  749.758123][T24989] Call Trace:
[  749.758129][T24989]  <TASK>
[  749.758136][T24989]  dump_stack_lvl+0xe8/0x150
[  749.758166][T24989]  should_fail_ex+0x412/0x560
[  749.758196][T24989]  _copy_from_user+0x2d/0xb0
[  749.758216][T24989]  kstrtouint_from_user+0xd6/0x180
[  749.758241][T24989]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  749.758282][T24989]  proc_fail_nth_write+0x8e/0x210
[  749.758306][T24989]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  749.758335][T24989]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  749.758359][T24989]  vfs_write+0x29a/0xb90
[  749.758390][T24989]  ? __pfx_vfs_write+0x10/0x10
[  749.758417][T24989]  ? __fget_files+0x2a/0x420
[  749.758443][T24989]  ? __fget_files+0x3a0/0x420
[  749.758463][T24989]  ? __fget_files+0x2a/0x420
[  749.758494][T24989]  ksys_write+0x150/0x270
[  749.758525][T24989]  ? __pfx_ksys_write+0x10/0x10
[  749.758558][T24989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.758578][T24989]  do_syscall_64+0x15f/0xf80
[  749.758606][T24989]  ? trace_irq_disable+0x3b/0x140
[  749.758626][T24989]  ? clear_bhb_loop+0x40/0x90
[  749.758648][T24989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.758666][T24989] RIP: 0033:0x7f403035d04e
[  749.758684][T24989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  749.758698][T24989] RSP: 002b:00007f40312d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  749.758719][T24989] RAX: ffffffffffffffda RBX: 00007f40312d86c0 RCX: 00007f403035d04e
[  749.758732][T24989] RDX: 0000000000000001 RSI: 00007f40312d80a0 RDI: 0000000000000004
[  749.758743][T24989] RBP: 00007f40312d8090 R08: 0000000000000000 R09: 0000000000000000
[  749.758754][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.758765][T24989] R13: 00007f4030616038 R14: 00007f4030615fa0 R15: 00007ffcba9b1c88
[  749.758796][T24989]  </TASK>
[  749.996173][T24922] team0: Port device team_slave_0 added
[  750.010799][T24922] team0: Port device team_slave_1 added
[  750.050277][T24837] Bluetooth: hci4: command tx timeout
[  750.115114][T24922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  750.136707][T24922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  750.218248][T24922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  750.231743][T24922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  750.238843][T24922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  750.265837][T24922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  750.326170][T24922] hsr_slave_0: entered promiscuous mode
[  750.334228][T24922] hsr_slave_1: entered promiscuous mode
[  750.344254][T24922] debugfs: 'hsr0' already exists in 'hsr'
[  750.359863][T24922] Cannot create hsr debugfs directory
[  750.394357][T24997] netlink: 'syz.2.5695': attribute type 1 has an invalid length.
[  750.560674][T25008] __nla_validate_parse: 4 callbacks suppressed
[  750.560693][T25008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5695'.
[  750.592575][T24997] 8021q: adding VLAN 0 to HW filter on device bond9
[  750.645632][T25001] bond9: (slave veth9): Enslaving as an active interface with a down link
[  750.686327][T25003] dummy0: left promiscuous mode
[  750.696397][T25003] dummy0: left allmulticast mode
[  750.735064][T25003] bond9: (slave dummy0): making interface the new active one
[  750.747326][T25003] dummy0: entered promiscuous mode
[  750.753821][T25003] bond9: (slave dummy0): Enslaving as an active interface with an up link
[  750.781594][T25008] bond9: (slave dummy0): Releasing active interface
[  750.788735][T25008] dummy0 (unregistering): left promiscuous mode
[  750.817003][T25006] syzkaller1: entered promiscuous mode
[  750.830229][T25006] syzkaller1: entered allmulticast mode
[  751.010860][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5700'.
[  751.045824][T25021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5699'.
[  751.093845][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5700'.
[  751.140024][T25025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5701'.
[  751.151324][T25025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5701'.
[  751.337778][T25031] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5702'.
[  751.347928][T24922] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.462281][T25031] 8021q: adding VLAN 0 to HW filter on device bond9
[  751.477999][T24922] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.526557][T25031] ieee802154 phy0 wpan0: encryption failed: -22
[  751.533247][T25045] netlink: 'syz.2.5707': attribute type 3 has an invalid length.
[  751.555272][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5707'.
[  751.578556][T24922] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.628771][T25045] netlink: 'syz.2.5707': attribute type 4 has an invalid length.
[  751.638085][T25045] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5707'.
[  751.695322][T24922] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  751.861777][T25061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5713'.
[  751.944347][T25066] FAULT_INJECTION: forcing a failure.
[  751.944347][T25066] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  751.974011][T25066] CPU: 0 UID: 0 PID: 25066 Comm: syz.2.5715 Not tainted syzkaller #0 PREEMPT(full) 
[  751.974037][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  751.974048][T25066] Call Trace:
[  751.974056][T25066]  <TASK>
[  751.974065][T25066]  dump_stack_lvl+0xe8/0x150
[  751.974096][T25066]  should_fail_ex+0x412/0x560
[  751.974125][T25066]  prepare_alloc_pages+0x22a/0x650
[  751.974151][T25066]  __alloc_frozen_pages_noprof+0x12f/0x380
[  751.974182][T25066]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  751.974204][T25066]  ? __pfx_policy_nodemask+0x10/0x10
[  751.974226][T25066]  ? pfn_valid+0xba/0x480
[  751.974254][T25066]  alloc_pages_mpol+0x232/0x4a0
[  751.974278][T25066]  vma_alloc_folio_noprof+0xea/0x210
[  751.974300][T25066]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  751.974327][T25066]  do_wp_page+0x1204/0x5a00
[  751.974357][T25066]  ? __pte_offset_map+0x29/0x240
[  751.974388][T25066]  ? __pfx_do_wp_page+0x10/0x10
[  751.974406][T25066]  ? do_raw_spin_lock+0x12b/0x2f0
[  751.974428][T25066]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  751.974456][T25066]  handle_mm_fault+0x1520/0x3310
[  751.974489][T25066]  ? handle_mm_fault+0xee/0x3310
[  751.974519][T25066]  ? __pfx_handle_mm_fault+0x10/0x10
[  751.974539][T25066]  ? follow_page_pte+0xd7f/0x1450
[  751.974569][T25066]  ? __pfx_follow_page_pte+0x10/0x10
[  751.974602][T25066]  __get_user_pages+0x165b/0x29d0
[  751.974656][T25066]  __gup_longterm_locked+0xdcf/0x1630
[  751.974691][T25066]  ? sanity_check_pinned_pages+0x1219/0x12d0
[  751.974719][T25066]  gup_fast_fallback+0x1d82/0x22e0
[  751.974768][T25066]  ? __pfx_gup_fast_fallback+0x10/0x10
[  751.974787][T25066]  ? ____sys_recvmsg+0x1e6/0x4a0
[  751.974811][T25066]  ? __x64_sys_recvmsg+0x1ba/0x2a0
[  751.974825][T25066]  ? do_syscall_64+0x15f/0xf80
[  751.974844][T25066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.974867][T25066]  ? pin_user_pages_fast+0x4d/0xb0
[  751.974890][T25066]  iov_iter_extract_pages+0x37b/0x5f0
[  751.974916][T25066]  extract_iter_to_sg+0xe62/0x2520
[  751.974954][T25066]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  751.974976][T25066]  ? rcu_is_watching+0x15/0xb0
[  751.975002][T25066]  ? trace_kmalloc+0x2a/0xf0
[  751.975031][T25066]  ? __kmalloc_noprof+0x1b8/0x760
[  751.975056][T25066]  ? __asan_memset+0x22/0x50
[  751.975080][T25066]  af_alg_get_rsgl+0x4b6/0x8e0
[  751.975119][T25066]  skcipher_recvmsg+0x392/0x1140
[  751.975165][T25066]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  751.975187][T25066]  ? __lock_acquire+0x6b5/0x2cf0
[  751.975209][T25066]  ? aa_sock_msg_perm+0xf1/0x1b0
[  751.975231][T25066]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  751.975255][T25066]  ? security_socket_recvmsg+0x7e/0x2c0
[  751.975281][T25066]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  751.975307][T25066]  sock_recvmsg+0x172/0x1b0
[  751.975331][T25066]  ____sys_recvmsg+0x1e6/0x4a0
[  751.975365][T25066]  ? __pfx_____sys_recvmsg+0x10/0x10
[  751.975405][T25066]  ? import_iovec+0x73/0xa0
[  751.975424][T25066]  ___sys_recvmsg+0x215/0x590
[  751.975439][T25066]  ? get_pid_task+0x20/0x1f0
[  751.975457][T25066]  ? __pfx____sys_recvmsg+0x10/0x10
[  751.975478][T25066]  ? __fget_files+0x2a/0x420
[  751.975515][T25066]  ? __fget_files+0x3a0/0x420
[  751.975546][T25066]  __x64_sys_recvmsg+0x1ba/0x2a0
[  751.975568][T25066]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  751.975595][T25066]  ? __pfx_ksys_write+0x10/0x10
[  751.975630][T25066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.975648][T25066]  do_syscall_64+0x15f/0xf80
[  751.975668][T25066]  ? trace_irq_disable+0x3b/0x140
[  751.975686][T25066]  ? clear_bhb_loop+0x40/0x90
[  751.975708][T25066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.975724][T25066] RIP: 0033:0x7f403039c819
[  751.975741][T25066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.975756][T25066] RSP: 002b:00007f40312d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  751.975774][T25066] RAX: ffffffffffffffda RBX: 00007f4030615fa0 RCX: 00007f403039c819
[  751.975787][T25066] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005
[  751.975798][T25066] RBP: 00007f40312d8090 R08: 0000000000000000 R09: 0000000000000000
[  751.975808][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  751.975828][T25066] R13: 00007f4030616038 R14: 00007f4030615fa0 R15: 00007ffcba9b1c88
[  751.975857][T25066]  </TASK>
[  752.442320][T24837] Bluetooth: hci4: command tx timeout
[  752.463686][T24922] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  752.526493][T24922] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  752.539020][T24922] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  752.556760][T24922] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  752.569156][T24922] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  752.584137][T24922] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  752.592615][T24922] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  752.606435][T24922] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  752.714129][T24922] 8021q: adding VLAN 0 to HW filter on device bond0
[  752.739078][T24922] 8021q: adding VLAN 0 to HW filter on device team0
[  752.765635][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.772971][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  752.804281][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.811502][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  752.828592][T25083] netlink: 'syz.2.5717': attribute type 10 has an invalid length.
[  752.846420][T24922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  752.857914][T24922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  753.011713][T25096] net_ratelimit: 30 callbacks suppressed
[  753.011731][T25096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  753.332619][T24922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.489457][T24922] veth0_vlan: entered promiscuous mode
[  753.537921][T24922] veth1_vlan: entered promiscuous mode
[  753.578028][T25128] netlink: 'syz.1.5733': attribute type 10 has an invalid length.
[  753.642489][T24922] veth0_macvtap: entered promiscuous mode
[  753.672157][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880548b9400: rx timeout, send abort
[  753.687691][T24922] veth1_macvtap: entered promiscuous mode
[  753.757361][T24922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  753.804027][T24922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  753.837509][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.854707][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.878341][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.895646][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.158150][T25152] netlink: 'syz.2.5741': attribute type 6 has an invalid length.
[  754.174100][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880548b8c00: rx timeout, send abort
[  754.183496][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880548b9400: abort rx timeout. Force session deactivation
[  754.197265][T25149] ip6tnl3: entered allmulticast mode
[  754.276631][T25151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  754.302916][T25151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.316661][T25151] batman_adv: batadv0: Removing interface: dummy0
[  754.503522][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.523910][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.541159][T24837] Bluetooth: hci4: command tx timeout
[  754.631943][T25169] netlink: 'syz.0.5745': attribute type 10 has an invalid length.
[  754.682435][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880548b8c00: abort rx timeout. Force session deactivation
[  754.697070][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.724357][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.865158][T25176] vlan4: entered allmulticast mode
[  754.886425][T25176] bond0: entered allmulticast mode
[  754.900036][T25176] bond_slave_0: entered allmulticast mode
[  754.924945][T25176] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  754.955276][T25185] FAULT_INJECTION: forcing a failure.
[  754.955276][T25185] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.969159][T25185] CPU: 1 UID: 0 PID: 25185 Comm: syz.0.5752 Not tainted syzkaller #0 PREEMPT(full) 
[  754.969184][T25185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  754.969195][T25185] Call Trace:
[  754.969202][T25185]  <TASK>
[  754.969209][T25185]  dump_stack_lvl+0xe8/0x150
[  754.969240][T25185]  should_fail_ex+0x412/0x560
[  754.969270][T25185]  _copy_from_user+0x2d/0xb0
[  754.969289][T25185]  ___sys_sendmsg+0x1c6/0x360
[  754.969313][T25185]  ? __lock_acquire+0x6b5/0x2cf0
[  754.969339][T25185]  ? __pfx____sys_sendmsg+0x10/0x10
[  754.969368][T25185]  ? kstrtouint+0x6e/0xe0
[  754.969411][T25185]  ? __fget_files+0x2a/0x420
[  754.969430][T25185]  ? __fget_files+0x3a0/0x420
[  754.969455][T25185]  __sys_sendmmsg+0x27c/0x4e0
[  754.969481][T25185]  ? __pfx___sys_sendmmsg+0x10/0x10
[  754.969503][T25185]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  754.969545][T25185]  ? ksys_write+0x242/0x270
[  754.969572][T25185]  ? __pfx_ksys_write+0x10/0x10
[  754.969603][T25185]  __x64_sys_sendmmsg+0xa0/0xc0
[  754.969630][T25185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.969648][T25185]  do_syscall_64+0x15f/0xf80
[  754.969666][T25185]  ? trace_irq_disable+0x3b/0x140
[  754.969685][T25185]  ? clear_bhb_loop+0x40/0x90
[  754.969705][T25185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.969721][T25185] RIP: 0033:0x7f90e2d9c819
[  754.969738][T25185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.969753][T25185] RSP: 002b:00007f90e3cc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  754.969774][T25185] RAX: ffffffffffffffda RBX: 00007f90e3015fa0 RCX: 00007f90e2d9c819
[  754.969786][T25185] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[  754.969797][T25185] RBP: 00007f90e3cc3090 R08: 0000000000000000 R09: 0000000000000000
[  754.969808][T25185] R10: 000000000000ff14 R11: 0000000000000246 R12: 0000000000000001
[  754.969819][T25185] R13: 00007f90e3016038 R14: 00007f90e3015fa0 R15: 00007fff3064cf08
[  754.969848][T25185]  </TASK>
[  755.180342][T25181] dummy0: entered promiscuous mode
[  755.192860][T25181] dummy0: left promiscuous mode
[  755.407271][T25190] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  755.418636][T25190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  755.437514][T25190] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  755.507279][T25190] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  755.507941][T25197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  755.519129][T25190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  755.538722][T25190] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  755.627255][T25190] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  755.660681][T25190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  755.674797][T25190] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  755.771563][T25190] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  755.790713][T25190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  755.803704][T25190] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  756.066357][T25216] bond3: (slave syz_tun): Releasing backup interface
[  756.118974][T25216] bridge_slave_0: left allmulticast mode
[  756.149856][T25216] bridge_slave_0: left promiscuous mode
[  756.163957][T25216] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.239080][T25216] bond0: (slave bond_slave_0): Releasing backup interface
[  756.264135][T25216] bond_slave_0: left allmulticast mode
[  756.281804][T25216] team0: Port device team_slave_0 removed
[  756.290019][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.300854][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.339366][T25216] team0: Port device team_slave_1 removed
[  756.361414][T25216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  756.452733][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  756.479921][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  756.502377][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  756.586186][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  756.601670][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  756.612388][T24837] Bluetooth: hci4: command tx timeout
[  756.637026][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  756.656996][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  756.666237][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  756.674962][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  756.707086][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  756.716985][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  756.730970][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  756.742264][T25223] __nla_validate_parse: 16 callbacks suppressed
[  756.742285][T25223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5762'.
[  756.853496][T25227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5762'.
[  756.893291][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5762'.
[  757.141498][T25237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5765'.
[  757.314376][T25246] openvswitch: netlink: IP tunnel dst address not specified
[  757.521263][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5772'.
[  757.568491][T24837] block nbd19: Receive control failed (result -1)
[  758.493118][T25284] netlink: 'syz.3.5776': attribute type 62 has an invalid length.
[  758.847289][T25287] tipc: Failed to remove unknown binding: 66,0,0/4095:3507342692/3507342694
[  758.868837][T25287] tipc: Failed to remove unknown binding: 66,0,0/4095:3507342692/3507342693
[  758.889526][T25287] tipc: Failed to remove unknown binding: 66,0,0/4095:3507342692/3507342694
[  758.913019][T25287] tipc: Failed to remove unknown binding: 66,0,0/4095:3507342692/3507342693
[  759.699416][T25326] netlink: 'syz.3.5790': attribute type 83 has an invalid length.
[  759.841611][T25333] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  759.851434][T25333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  760.105736][T25353] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5798'.
[  760.141945][T25353] netlink: 'syz.1.5798': attribute type 2 has an invalid length.
[  760.212023][T25359] netlink: 'syz.3.5802': attribute type 10 has an invalid length.
[  760.300976][T25362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5803'.
[  760.309726][T25359] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  760.437135][T25366] netlink: 'syz.2.5806': attribute type 1 has an invalid length.
[  760.445842][T25366] netlink: 1820 bytes leftover after parsing attributes in process `syz.2.5806'.
[  760.485679][T25366] x_tables: duplicate underflow at hook 3
[  760.589223][T25370] syzkaller1: entered promiscuous mode
[  760.605941][T25370] syzkaller1: entered allmulticast mode
[  760.719551][T25378] netlink: 'syz.4.5810': attribute type 2 has an invalid length.
[  760.734659][T25376] syzkaller1: entered promiscuous mode
[  760.752390][T25376] syzkaller1: entered allmulticast mode
[  760.769358][T25378] sit1: entered promiscuous mode
[  760.898716][T25384] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5813'.
[  760.910463][T25384] netlink: 'syz.3.5813': attribute type 2 has an invalid length.
[  761.019296][T25390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  761.031659][T25391] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  761.047034][T25391] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  761.085699][T25392] tipc: Resetting bearer <eth:syzkaller0>
[  761.569526][T25422] bridge0: port 1(syz_tun) entered blocking state
[  761.593756][T25422] bridge0: port 1(syz_tun) entered disabled state
[  761.618911][T25422] syz_tun: entered allmulticast mode
[  761.645055][T25422] syz_tun: entered promiscuous mode
[  761.658704][T25424] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5827'.
[  761.681996][T25424] netlink: 'syz.3.5827': attribute type 2 has an invalid length.
[  761.790974][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5828'.
[  761.844454][T25435] syzkaller0: entered promiscuous mode
[  761.870603][T25435] syzkaller0: entered allmulticast mode
[  761.924902][T25435] tcf_pedit_act: 7 callbacks suppressed
[  761.924920][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.939299][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.946123][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.953041][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.959948][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.966727][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.973772][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.980599][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.987420][T25435] tc action pedit offset must be on 32 bit boundaries
[  761.994354][T25435] tc action pedit offset must be on 32 bit boundaries
[  762.001369][T25435] 0: reclassify loop, rule prio 0, protocol 800
[  762.155125][T20435] tipc: Node number set to 1002380687
[  762.413080][T25464] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5840'.
[  762.424849][T25464] netlink: 'syz.3.5840': attribute type 2 has an invalid length.
[  762.463048][T25468] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  762.530292][T25471] syzkaller0: entered promiscuous mode
[  762.535926][T25471] syzkaller0: entered allmulticast mode
[  762.628490][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5845'.
[  762.686884][T25479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5846'.
[  762.698177][T25479] openvswitch: netlink: Flow actions attr not present in new flow.
[  763.013335][T25499] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5854'.
[  763.022819][T25499] netlink: 'syz.1.5854': attribute type 2 has an invalid length.
[  763.168932][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5856'.
[  763.272476][T25511] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5858'.
[  763.397657][T25513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5859'.
[  763.421384][T25513] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  763.422318][T20435] IPVS: starting estimator thread 0...
[  763.570822][T25517] IPVS: using max 33 ests per chain, 79200 per kthread
[  763.719314][T25522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5861'.
[  763.832478][T24837] block nbd20: Receive control failed (result -1)
[  764.111806][T25539] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5865'.
[  764.133908][T25539] validate_nla: 2 callbacks suppressed
[  764.133929][T25539] netlink: 'syz.4.5865': attribute type 2 has an invalid length.
[  764.178264][T25543] netlink: 'syz.1.5867': attribute type 10 has an invalid length.
[  764.489287][T25555] netlink: 'syz.4.5872': attribute type 11 has an invalid length.
[  764.520351][T25555] netlink: 'syz.4.5872': attribute type 23 has an invalid length.
[  764.616842][T25561] netlink: 'syz.3.5871': attribute type 1 has an invalid length.
[  764.894329][T25575] netlink: 'syz.2.5879': attribute type 2 has an invalid length.
[  765.043833][T25583] netlink: 'syz.2.5880': attribute type 10 has an invalid length.
[  765.276374][T25590] netlink: 'syz.4.5882': attribute type 11 has an invalid length.
[  765.775508][T25611] netlink: 'syz.2.5890': attribute type 2 has an invalid length.
[  765.835901][T25613] netlink: 'syz.3.5891': attribute type 10 has an invalid length.
[  766.228787][T24837] block nbd21: Receive control failed (result -1)
[  767.214398][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.225042][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.237005][T25663] wg1: entered allmulticast mode
[  767.240392][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.254967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.385911][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  767.402386][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  767.414129][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  767.422792][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  767.434695][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  767.478053][T25668] __nla_validate_parse: 10 callbacks suppressed
[  767.478072][T25668] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5902'.
[  767.574183][T25668] netlink: 'syz.3.5902': attribute type 2 has an invalid length.
[  767.656666][T25677] netlink: 'syz.0.5906': attribute type 1 has an invalid length.
[  767.784689][T25677] 8021q: adding VLAN 0 to HW filter on device bond7
[  767.810327][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  767.836879][T25689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5908'.
[  767.855172][T25689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5908'.
[  767.893785][T25689] hsr_slave_1 (unregistering): left promiscuous mode
[  768.015622][T15626] syz_tun (unregistering): left allmulticast mode
[  768.029889][T15626] syz_tun (unregistering): left promiscuous mode
[  768.048040][T15626] bridge0: port 1(syz_tun) entered disabled state
[  768.071098][T25695] openvswitch: netlink: IP tunnel dst address not specified
[  768.146307][T25696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5909'.
[  768.260052][T25702] syzkaller0: entered promiscuous mode
[  768.279093][T25702] syzkaller0: entered allmulticast mode
[  768.321606][T24837] block nbd22: Receive control failed (result -1)
[  768.426872][T25664] lo speed is unknown, defaulting to 1000
[  768.796602][T25664] chnl_net:caif_netlink_parms(): no params data found
[  768.948481][T25664] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.956502][T25664] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.964504][T25664] bridge_slave_0: entered allmulticast mode
[  768.973688][T25664] bridge_slave_0: entered promiscuous mode
[  768.984033][T25664] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.991947][T25664] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.994801][T25731] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5917'.
[  768.999495][T25664] bridge_slave_1: entered allmulticast mode
[  769.019120][T25664] bridge_slave_1: entered promiscuous mode
[  769.057873][T25664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.071889][T25664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.123123][T25664] team0: Port device team_slave_0 added
[  769.134240][T25664] team0: Port device team_slave_1 added
[  769.137920][T25733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  769.177965][T25664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  769.185456][T25664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  769.226620][T25664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  769.254440][T25664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  769.262169][T25664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  769.290264][T25664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  769.350384][T25743] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  769.491244][T24837] Bluetooth: hci5: command tx timeout
[  769.509197][T25664] hsr_slave_0: entered promiscuous mode
[  769.527686][T25664] hsr_slave_1: entered promiscuous mode
[  769.545557][T25664] debugfs: 'hsr0' already exists in 'hsr'
[  769.554466][T25664] Cannot create hsr debugfs directory
[  769.717480][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5925'.
[  769.773051][T25758] validate_nla: 1 callbacks suppressed
[  769.773070][T25758] netlink: 'syz.0.5924': attribute type 4 has an invalid length.
[  769.792563][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5925'.
[  769.824288][   T56] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  769.834033][T25758] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5924'.
[  769.846280][   T56] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  769.870938][T25766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5927'.
[  769.961126][T24837] block nbd23: Receive control failed (result -1)
[  769.965206][T25763] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  769.987150][T25763] bond1 (unregistering): Released all slaves
[  770.011639][T25777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.022535][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.060481][T25776] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5928'.
[  770.081876][T25776] netlink: 'syz.2.5928': attribute type 2 has an invalid length.
[  770.100590][   T56] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  770.112619][   T56] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  770.305288][T25782] netlink: 'syz.2.5929': attribute type 3 has an invalid length.
[  770.313982][T25789] IPVS: set_ctl: invalid protocol: 59 172.20.20.33:20004
[  770.560962][T25664] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  770.593270][T25664] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.659249][T25801] netem: change failed
[  770.757583][T25805] FAULT_INJECTION: forcing a failure.
[  770.757583][T25805] name failslab, interval 1, probability 0, space 0, times 0
[  770.772061][T25805] CPU: 0 UID: 0 PID: 25805 Comm: syz.2.5936 Not tainted syzkaller #0 PREEMPT(full) 
[  770.772089][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  770.772101][T25805] Call Trace:
[  770.772109][T25805]  <TASK>
[  770.772117][T25805]  dump_stack_lvl+0xe8/0x150
[  770.772148][T25805]  should_fail_ex+0x412/0x560
[  770.772177][T25805]  should_failslab+0xa8/0x100
[  770.772199][T25805]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  770.772225][T25805]  ? __alloc_skb+0x186/0x7d0
[  770.772248][T25805]  ? __alloc_skb+0x1d0/0x7d0
[  770.772269][T25805]  ? __local_bh_enable_ip+0xd0/0x130
[  770.772301][T25805]  __alloc_skb+0x1d0/0x7d0
[  770.772322][T25805]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  770.772353][T25805]  netlink_sendmsg+0x5d4/0xb40
[  770.772386][T25805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  770.772414][T25805]  ? aa_sock_msg_perm+0xf1/0x1b0
[  770.772438][T25805]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  770.772472][T25805]  ____sys_sendmsg+0x972/0x9f0
[  770.772498][T25805]  ? __might_fault+0xaf/0x130
[  770.772526][T25805]  ? __pfx_____sys_sendmsg+0x10/0x10
[  770.772559][T25805]  ? import_iovec+0x73/0xa0
[  770.772591][T25805]  ___sys_sendmsg+0x2a5/0x360
[  770.772615][T25805]  ? __lock_acquire+0x6b5/0x2cf0
[  770.772642][T25805]  ? __pfx____sys_sendmsg+0x10/0x10
[  770.772700][T25805]  ? __fget_files+0x2a/0x420
[  770.772718][T25805]  ? __fget_files+0x3a0/0x420
[  770.772745][T25805]  __x64_sys_sendmsg+0x1bd/0x2a0
[  770.772772][T25805]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  770.772807][T25805]  ? __pfx_ksys_write+0x10/0x10
[  770.772836][T25805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.772855][T25805]  do_syscall_64+0x15f/0xf80
[  770.772877][T25805]  ? trace_irq_disable+0x3b/0x140
[  770.772896][T25805]  ? clear_bhb_loop+0x40/0x90
[  770.772918][T25805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.772936][T25805] RIP: 0033:0x7f403039c819
[  770.772954][T25805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.772970][T25805] RSP: 002b:00007f40312d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  770.772990][T25805] RAX: ffffffffffffffda RBX: 00007f4030615fa0 RCX: 00007f403039c819
[  770.773003][T25805] RDX: 0000000020000080 RSI: 0000200000000b00 RDI: 0000000000000004
[  770.773015][T25805] RBP: 00007f40312d8090 R08: 0000000000000000 R09: 0000000000000000
[  770.773026][T25805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  770.773037][T25805] R13: 00007f4030616038 R14: 00007f4030615fa0 R15: 00007ffcba9b1c88
[  770.773066][T25805]  </TASK>
[  771.092431][T25664] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.102572][T25664] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.238334][T25812] syzkaller0: entered promiscuous mode
[  771.244127][T25812] syzkaller0: entered allmulticast mode
[  771.245229][T25809] netlink: 'syz.2.5938': attribute type 2 has an invalid length.
[  771.278439][T25664] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  771.288612][T25664] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.497772][T25833] sctp: [Deprecated]: syz.4.5942 (pid 25833) Use of struct sctp_assoc_value in delayed_ack socket option.
[  771.497772][T25833] Use struct sctp_sack_info instead
[  771.589858][T24837] Bluetooth: hci5: command tx timeout
[  772.929930][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.939778][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.962977][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.972137][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.980308][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.988748][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.011689][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.020576][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.658850][T24837] Bluetooth: hci5: command tx timeout
[  775.423746][T25664] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  775.434064][T25664] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.615713][T25843] __nla_validate_parse: 4 callbacks suppressed
[  775.615731][T25843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5946'.
[  775.729855][T24837] Bluetooth: hci5: command tx timeout
[  775.753553][T24837] block nbd24: Receive control failed (result -1)
[  776.201526][T25664] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  776.232443][T25664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  776.262353][T25664] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  776.300750][T25664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  776.309164][T25859] syzkaller0: entered promiscuous mode
[  776.316599][T25859] syzkaller0: entered allmulticast mode
[  776.324516][T25664] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  776.341216][T25664] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  776.415239][T25664] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  776.446253][T25664] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  776.830862][T25664] 8021q: adding VLAN 0 to HW filter on device bond0
[  776.885657][T25664] 8021q: adding VLAN 0 to HW filter on device team0
[  776.922486][ T7244] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.931445][ T7244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  776.968202][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.975544][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  777.221665][T25891] netlink: 'syz.3.5955': attribute type 22 has an invalid length.
[  777.262336][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5955'.
[  777.285515][T25891] netlink: 'syz.3.5955': attribute type 22 has an invalid length.
[  777.335650][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5955'.
[  777.657724][T25909] netlink: 'syz.2.5958': attribute type 1 has an invalid length.
[  777.685337][T25664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.741984][T25909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5958'.
[  777.836036][T25664] veth0_vlan: entered promiscuous mode
[  777.901713][T25664] veth1_vlan: entered promiscuous mode
[  777.917916][T25917] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  778.002974][T25923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.008718][T25912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5959'.
[  778.013556][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.092231][T25664] veth0_macvtap: entered promiscuous mode
[  778.133983][T25664] veth1_macvtap: entered promiscuous mode
[  778.186929][T25664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  778.207564][T24837] block nbd25: Receive control failed (result -1)
[  778.209476][T25664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  778.286202][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5964'.
[  778.325329][ T9107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  778.344827][T25932] netlink: 'syz.3.5963': attribute type 5 has an invalid length.
[  778.354717][ T9107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  778.404100][ T9107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  778.496894][ T9107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  778.694230][ T7244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.702857][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.711976][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.721153][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.834994][T25938] tipc: Resetting bearer <eth:syzkaller0>
[  779.033365][T25938] tipc: Resetting bearer <eth:syzkaller0>
[  779.523222][T25931] lo speed is unknown, defaulting to 1000
[  779.561230][T25969] netlink: 'syz.4.5970': attribute type 21 has an invalid length.
[  779.594904][T25969] netlink: 'syz.4.5970': attribute type 6 has an invalid length.
[  779.621919][T25969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5970'.
[  779.677104][ T9107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.705221][ T9107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.996982][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  780.020948][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  780.245934][T25993] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  780.347632][T25978] netlink: 'syz.0.5971': attribute type 4 has an invalid length.
[  780.651467][T26005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5976'.
[  780.847629][T24837] block nbd26: Receive control failed (result -1)
[  780.942649][T25971] lo speed is unknown, defaulting to 1000
[  780.948691][T26027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5979'.
[  780.990563][T26027] netlink: 'syz.4.5979': attribute type 10 has an invalid length.
[  781.004106][T26031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5980'.
[  781.250791][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.259957][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.433215][T26042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5981'.
[  781.557098][T26041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5981'.
[  781.624574][T26051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'.
[  781.670679][T26051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'.
[  781.751026][T26051] macvlan2: entered promiscuous mode
[  781.782534][T26051] macvlan2: entered allmulticast mode
[  781.813759][T26051] veth1_to_batadv: entered allmulticast mode
[  781.923511][T26062] netlink: 'syz.2.5984': attribute type 3 has an invalid length.
[  781.956646][T26062] netlink: 'syz.2.5984': attribute type 1 has an invalid length.
[  782.005620][T26062] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5984'.
[  782.044173][T26064] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5984'.
[  782.128368][T20438] IPVS: starting estimator thread 0...
[  782.251721][T26071] IPVS: using max 27 ests per chain, 64800 per kthread
[  782.395419][T26079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5985'.
[  782.406577][T26081] bridge0: port 3(syz_tun) entered blocking state
[  782.421921][T26081] bridge0: port 3(syz_tun) entered disabled state
[  782.440152][T26081] syz_tun: entered allmulticast mode
[  782.463407][T26081] syz_tun: entered promiscuous mode
[  782.486227][T26081] bridge0: port 3(syz_tun) entered blocking state
[  782.492866][T26081] bridge0: port 3(syz_tun) entered forwarding state
[  782.823987][T26100] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  782.889064][T26100] netlink: 'syz.2.5993': attribute type 64 has an invalid length.
[  782.904891][T26110] delete_channel: no stack
[  783.222157][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.255287][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.276801][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.291764][T26129] bond0: ARP target 170.170.170.170 is already present
[  783.304314][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.304788][T26129] bond0: option arp_ip_target: invalid value (2863311530)
[  783.331469][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.354667][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.377827][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.413470][T26126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.422382][T26137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.459017][T26139] netlink: 'syz.2.6005': attribute type 1 has an invalid length.
[  783.461983][T26137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.481689][T26139] netlink: 'syz.2.6005': attribute type 1 has an invalid length.
[  783.509538][T26123] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  783.698262][T26147] syzkaller1: entered promiscuous mode
[  783.705257][T26147] syzkaller1: entered allmulticast mode
[  783.716403][T26153] nbd: must specify at least one socket
[  783.993085][   T56] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  784.015265][   T56] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  784.034844][   T56] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  784.044537][ T9107] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  784.345100][T24837] block nbd27: Receive control failed (result -1)
[  784.596832][T26192] xt_hashlimit: max too large, truncated to 1048576
[  784.863854][T26206] nbd: must specify at least one socket
[  785.241154][T26215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.254092][T26215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.463870][T26229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  785.504440][T26215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.515240][T26215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.532048][T26229] netlink: 'syz.2.6031': attribute type 1 has an invalid length.
[  785.606429][T26229] bond10: entered promiscuous mode
[  785.612485][T26229] bond10: entered allmulticast mode
[  785.618493][T26229] 8021q: adding VLAN 0 to HW filter on device bond10
[  785.716026][T26241] netlink: 'syz.0.6034': attribute type 10 has an invalid length.
[  785.736138][T26215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  785.749539][T26241] __nla_validate_parse: 20 callbacks suppressed
[  785.749551][T26241] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6034'.
[  785.770736][T26215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.791650][T26241] hsr0: entered promiscuous mode
[  785.797171][T26241] bridge0: port 3(hsr0) entered blocking state
[  785.816114][T26241] bridge0: port 3(hsr0) entered disabled state
[  785.853917][T26241] hsr0: entered allmulticast mode
[  785.863506][T26241] hsr_slave_0: entered allmulticast mode
[  785.871528][T26247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6036'.
[  785.883632][T26247] nbd: must specify at least one socket
[  785.888167][T26241] bridge0: port 3(hsr0) entered blocking state
[  785.895743][T26241] bridge0: port 3(hsr0) entered forwarding state
[  786.001737][T26252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  786.009129][T26252] IPv6: NLM_F_CREATE should be set when creating new route
[  786.070896][T26215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  786.093892][T26215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.370321][    C1] 
[  786.372709][    C1] ============================================
[  786.379046][    C1] WARNING: possible recursive locking detected
[  786.385562][    C1] syzkaller #0 Not tainted
[  786.390074][    C1] --------------------------------------------
[  786.396234][    C1] syz-executor/15876 is trying to acquire lock:
[  786.402484][    C1] ffff888057e2cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  786.411749][    C1] 
[  786.411749][    C1] but task is already holding lock:
[  786.419209][    C1] ffff88805575cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  786.429868][    C1] 
[  786.429868][    C1] other info that might help us debug this:
[  786.438002][    C1]  Possible unsafe locking scenario:
[  786.438002][    C1] 
[  786.445813][    C1]        CPU0
[  786.446735][ T9107] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  786.449224][    C1]        ----
[  786.449231][    C1]   lock(&hsr->seqnr_lock);
[  786.449251][    C1]   lock(&hsr->seqnr_lock
[  786.459379][ T9107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  786.460844][    C1] );
[  786.460852][    C1] 
[  786.460852][    C1]  *** DEADLOCK ***
[  786.460852][    C1] 
[  786.460858][    C1]  May be due to missing lock nesting notation
[  786.460858][    C1] 
[  786.460864][    C1] 8 locks held by syz-executor/15876:
[  786.460876][    C1]  #0: ffffc90000a08cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0
[  786.460935][    C1]  #1: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370
[  786.521939][    C1]  #2: ffff88805575cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0
[  786.532765][    C1]  #3: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80
[  786.542339][    C1]  #4: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  786.552258][    C1]  #5: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990
[  786.561912][    C1]  #6: ffffffff8e95d080 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  786.571834][    C1]  #7: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  786.581077][    C1] 
[  786.581077][    C1] stack backtrace:
[  786.587053][    C1] CPU: 1 UID: 0 PID: 15876 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  786.587073][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  786.587083][    C1] Call Trace:
[  786.587092][    C1]  <IRQ>
[  786.587100][    C1]  dump_stack_lvl+0xe8/0x150
[  786.587125][    C1]  print_deadlock_bug+0x279/0x290
[  786.587150][    C1]  __lock_acquire+0x253f/0x2cf0
[  786.587173][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  786.587193][    C1]  ? skb_network_protocol+0x234/0x400
[  786.587220][    C1]  ? hsr_dev_xmit+0x237/0x360
[  786.587241][    C1]  lock_acquire+0x106/0x350
[  786.587260][    C1]  ? hsr_dev_xmit+0x237/0x360
[  786.587283][    C1]  ? __pfx_netif_skb_features+0x10/0x10
[  786.587297][    C1]  ? lock_acquire+0x106/0x350
[  786.587315][    C1]  ? hsr_dev_xmit+0x237/0x360
[  786.587335][    C1]  _raw_spin_lock_bh+0x36/0x50
[  786.587351][    C1]  ? hsr_dev_xmit+0x237/0x360
[  786.587372][    C1]  hsr_dev_xmit+0x237/0x360
[  786.587392][    C1]  ? hsr_dev_xmit+0x2d/0x360
[  786.587413][    C1]  dev_hard_start_xmit+0x2cd/0x830
[  786.587433][    C1]  __dev_queue_xmit+0x14d9/0x3950
[  786.587450][    C1]  ? __dev_queue_xmit+0x2b6/0x3950
[  786.587466][    C1]  ? ebt_do_table+0x2665/0x2830
[  786.587482][    C1]  ? ebt_do_table+0x2665/0x2830
[  786.587499][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  786.587522][    C1]  ? br_nf_post_routing+0x219/0xfe0
[  786.587544][    C1]  ? lock_acquire+0x106/0x350
[  786.587567][    C1]  br_dev_queue_push_xmit+0x370/0x4b0
[  786.587588][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  786.587610][    C1]  NF_HOOK+0x360/0x3f0
[  786.587632][    C1]  ? NF_HOOK+0xa2/0x3f0
[  786.587651][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  786.587672][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  786.587692][    C1]  ? lock_acquire+0x106/0x350
[  786.587714][    C1]  br_forward_finish+0xd3/0x130
[  786.587734][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  786.587755][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  786.587775][    C1]  NF_HOOK+0x360/0x3f0
[  786.587797][    C1]  ? NF_HOOK+0xa2/0x3f0
[  786.587816][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  786.587837][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  786.587860][    C1]  ? __skb_clone+0x483/0x7a0
[  786.587881][    C1]  ? br_handle_vlan+0x61/0x530
[  786.587900][    C1]  __br_forward+0x397/0x540
[  786.587920][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  786.587942][    C1]  br_flood+0x6ee/0xb80
[  786.587973][    C1]  ? br_dev_xmit+0x193/0x1990
[  786.587988][    C1]  br_dev_xmit+0x12bd/0x1990
[  786.588004][    C1]  ? br_dev_xmit+0x193/0x1990
[  786.588022][    C1]  ? __pfx_br_dev_xmit+0x10/0x10
[  786.588041][    C1]  ? is_skb_forwardable+0xb0/0x200
[  786.588066][    C1]  dev_hard_start_xmit+0x2cd/0x830
[  786.588090][    C1]  __dev_queue_xmit+0x14d9/0x3950
[  786.588105][    C1]  ? handle_softirqs+0x22a/0x840
[  786.588126][    C1]  ? __might_resched+0x86/0x4d0
[  786.588149][    C1]  ? __dev_queue_xmit+0x2b6/0x3950
[  786.588168][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  786.588186][    C1]  ? __copy_skb_header+0xa3/0x4a0
[  786.588216][    C1]  ? hsr_addr_subst_dest+0x30d/0xa90
[  786.588240][    C1]  ? skb_clone+0x246/0x3a0
[  786.588254][    C1]  hsr_forward_skb+0x167e/0x2a80
[  786.588273][    C1]  ? hsr_forward_skb+0xbb/0x2a80
[  786.588289][    C1]  ? __pfx_hsr_forward_skb+0x10/0x10
[  786.588304][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  786.588321][    C1]  ? __asan_memset+0x22/0x50
[  786.588340][    C1]  ? __skb_pad+0x405/0x610
[  786.588356][    C1]  send_hsr_supervision_frame+0x731/0xcb0
[  786.588382][    C1]  ? __pfx_send_hsr_supervision_frame+0x10/0x10
[  786.588406][    C1]  hsr_announce+0x1db/0x370
[  786.588428][    C1]  ? hsr_announce+0x89/0x370
[  786.588449][    C1]  ? __pfx_hsr_announce+0x10/0x10
[  786.588476][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  786.588494][    C1]  call_timer_fn+0x192/0x5e0
[  786.588515][    C1]  ? __pfx_hsr_announce+0x10/0x10
[  786.588537][    C1]  ? call_timer_fn+0xd4/0x5e0
[  786.588557][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  786.588580][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  786.588595][    C1]  ? __pfx_hsr_announce+0x10/0x10
[  786.588617][    C1]  __run_timer_base+0x652/0x8b0
[  786.588636][    C1]  ? ktime_get+0x45/0x220
[  786.588656][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  786.588679][    C1]  run_timer_softirq+0xb7/0x170
[  786.588697][    C1]  handle_softirqs+0x22a/0x840
[  786.588720][    C1]  ? __irq_exit_rcu+0xca/0x220
[  786.588743][    C1]  __irq_exit_rcu+0xca/0x220
[  786.588762][    C1]  irq_exit_rcu+0x9/0x30
[  786.588780][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  786.588799][    C1]  </IRQ>
[  786.588804][    C1]  <TASK>
[  786.588810][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  786.588827][    C1] RIP: 0010:lock_is_held_type+0x0/0x150
[  786.588847][    C1] Code: 3d 55 51 82 04 48 c7 c6 98 65 1a 8e 67 48 0f b9 3a 90 eb ce 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d 16
[  786.588860][    C1] RSP: 0018:ffffc90003447b68 EFLAGS: 00000202
[  786.588876][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888027b1bd80
[  786.588887][    C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e95d0e0
[  786.588898][    C1] RBP: 00000000000006ee R08: ffffffff903215b7 R09: 1ffffffff20642b6
[  786.588909][    C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: dffffc0000000000
[  786.588920][    C1] R13: 00000000ffffff6c R14: ffffffff8ce84ba0 R15: 0000000000000000
[  786.588938][    C1]  __might_resched+0x86/0x4d0
[  786.588959][    C1]  ? __might_fault+0x52/0x130
[  786.588985][    C1]  __might_fault+0x76/0x130
[  786.589005][    C1]  ip_getsockopt+0x13b/0x230
[  786.589033][    C1]  ? __pfx_ip_getsockopt+0x10/0x10
[  786.589053][    C1]  ? sock_common_getsockopt+0x2d/0xb0
[  786.589071][    C1]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  786.589090][    C1]  do_sock_getsockopt+0x51d/0x7e0
[  786.589111][    C1]  ? __asan_memcpy+0x40/0x70
[  786.589132][    C1]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  786.589154][    C1]  ? fd_install+0x94/0x3d0
[  786.589179][    C1]  __x64_sys_getsockopt+0x1a4/0x240
[  786.589203][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.589219][    C1]  do_syscall_64+0x15f/0xf80
[  786.589237][    C1]  ? trace_irq_disable+0x3b/0x140
[  786.589253][    C1]  ? clear_bhb_loop+0x40/0x90
[  786.589269][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.589285][    C1] RIP: 0033:0x7f90e2d9dfea
[  786.589300][    C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7
[  786.589312][    C1] RSP: 002b:00007fff3064cb78 EFLAGS: 00000202 ORIG_RAX: 0000000000000037
[  786.589327][    C1] RAX: ffffffffffffffda RBX: 00007fff3064cc00 RCX: 00007f90e2d9dfea
[  786.589338][    C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  786.589348][    C1] RBP: 0000000000000003 R08: 00007fff3064cb9c R09: 0000000000000000
[  786.589358][    C1] R10: 00007fff3064cc00 R11: 0000000000000202 R12: 00007f90e2feb400
[  786.589374][    C1] R13: 00007fff3064cb9c R14: 0000000000000000 R15: 00007f90e2fec180
[  786.589391][    C1]  </TASK>
[  786.599729][ T9107] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  786.708274][T26275] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6044'.
[  786.757676][ T9107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  786.791644][ T9107] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  787.334359][ T9107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  787.342730][ T9107] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  787.351020][ T9107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  788.290372][    C1] net_ratelimit: 23 callbacks suppressed
[  788.290392][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.304967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.570844][ T9107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.579296][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.211665][ T9107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.220084][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.330465][   T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.338859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.970582][ T9106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.979364][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog