last executing test programs:

10.496600532s ago: executing program 4 (id=5641):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
listen(r2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)='j', 0x1}], 0x1}}], 0x1, 0x20044182)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4)

9.567931479s ago: executing program 4 (id=5654):
r0 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

9.468339371s ago: executing program 4 (id=5656):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x3, 0x4)
sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}], 0x1, 0x201)

9.352233992s ago: executing program 4 (id=5659):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r0)
syz_emit_ethernet(0x256, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0)

9.267721361s ago: executing program 4 (id=5662):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x440b0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async)
socket$inet(0x2, 0x3, 0x2) (async)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async)
socket$inet(0x2, 0x3, 0x2) (async)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x440b0) (async)

8.963390061s ago: executing program 4 (id=5667):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010800000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000000000000000000000a00000000000000000000008040000000000000000008000000400000000000000000000000004400050000000000000000000000000000000000000004d53c"], 0xfc}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x9, r2, 0xf}, 0x10)

5.191830976s ago: executing program 2 (id=5727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2e0, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5762}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x21d3}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3cc5}, @TIPC_NLA_NODE_ID={0x10, 0x3, "3d7185ccffd23338e83b4b7c"}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x11, 0x3, "f7e9a7b63e3cb0e7353b90b9b8"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x88, 0x3, "0a018771d7edd350f143e6ec25b413171acd2c1123ff3e790fdacfcaced1e87e5ad5515a2c07326fb668fc68e1438e4df7c411b06281437c3f1782f38ad718219191f98ad81c3282ab85509d7470435e4d5eb4bb94a6d8958fd88c18c4d4f069b335529cd1b9b4e04b395f1dcbe8df66fd00a19e4d3d732c6705ec3fd806b57044a5319a"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5d77a97c03f5e013caa37c37a370e2eb3700eb3b732fd917f16b7a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb60}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x734e8c86}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}}}}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf690}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000040}, 0x200000c0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

4.856455223s ago: executing program 2 (id=5733):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x80000003, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r3, r2, 0x0, 0xfffbffff)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3)
getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) (async)
getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

3.60749429s ago: executing program 2 (id=5738):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
sendmmsg$inet6(r5, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="c364d4545db94c8681c46eef4fb158d73ecdc0da8720b47d8e1b6535e0749cfb82b36440d89a39f6111ba8998c9a8213962b94e2e5ed83b4c9ab54710a7705ce6486df854e1bec1916102401a1482afbcfbf44a874360856db2ed2607ea082f0dae092b86f", 0x65}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000005c0)="aa1d1e207312ecc6a9d61f3c0d604ba54482666ac89a80b86f471bea2eb312eaa2361a554e486c3c21f5fb10b3bf8349cb7130f8a2921e02e3e5de8a71150984e38e7800caa417ad5fec1fd7c8a65bc284c542cd1cf15fdd9aa0b2d399ae3a02196b6ab067d0d01c3b0b294c53ac765bde928e8775307559612ac67083bec3d0852d1e9f1645b8fc0a79d7897038ccdb6dcbc6efed99ab2b5c1606aedcd49044a729422383aa147094fbb338c990df5c1d213ebb1f9847e0418922cf31076eb9ed74054fe01104b30a6330a15cd97fdaba88a80886", 0xd5}, {&(0x7f00000006c0)="300007acea054ab5bf575df83459250d7f4ea52e44beab7c863aabe50b3257d10e7d8b45e768bf59ac9ff8da0ee5db4dfe26fc1e966bff1e1901f2bf70f77fda89968055d16cc7", 0x47}], 0x2}}], 0x2, 0x4c800) (async)
connect$unix(r4, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x46, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000009500"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x1, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

3.072351053s ago: executing program 2 (id=5744):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 64)
close(0x4)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRES64=r0, @ANYRESOCT=r3, @ANYRESDEC=r0], 0xfc}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) (async, rerun: 64)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYRES64=0x0, @ANYBLOB="26efea7dcf33cd78cc610cea1d8e039e13ce8e6f70a58a90a3e6c8734cdc996970dd0b6edad48400"/50], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x610, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, 0x6e6bc0}}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) (rerun: 64)
r8 = socket(0x21, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x8040)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x20000000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.667011484s ago: executing program 3 (id=5747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x37}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x26, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd7000004000000201"], 0x1c}}, 0x4040080)

2.37112937s ago: executing program 3 (id=5749):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x2, 0x1000, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000c80)={0x0, 0x44, &(0x7f0000000640)={&(0x7f0000000900)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x24000000)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xffffffed, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000340))
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0xfffffeb7, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c000180060001000d00000008000340000033"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18)
r10 = socket$inet6(0xa, 0x4, 0x4)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r12, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x18, 0x40d, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", ""]}, 0x38}}, 0x20000880)
listen(r10, 0xb)

1.751202286s ago: executing program 2 (id=5752):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x120, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @local}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xe}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8914}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}, @filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_EMATCHES={0x68, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_VAR="a4393783", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR='#', @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_ACT={0x4}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x400, 0x8, 0x5, 0xfb, 0x3, 0x5, 0x3}, 0xc) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x400, 0x8, 0x5, 0xfb, 0x3, 0x5, 0x3}, 0xc)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb3", 0x601}], 0x1}, 0x9fc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, 0x0, 0x0)
r7 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)

1.739636646s ago: executing program 3 (id=5753):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x4)
r3 = socket(0x2a, 0x2, 0x0)
r4 = socket(0x14, 0x2, 0x4)
sendmsg$NFT_BATCH(r4, 0x0, 0x801)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x2c, 0x1, 0x1000000, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.663997153s ago: executing program 0 (id=5754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000740)={{<r3=>r2, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@align=0x772b, {0x2, 0x8, 0xf686, 0x5}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x7}, 0x5, &(0x7f0000000680)=[{0x3, 0x46, &(0x7f0000000280)='\xe1*f[}\'/-#\x13,.\x00', &(0x7f00000002c0)="5e9d64721bfa34737de0cebf9c4a2aaa2e2dde5edec6725477ad01a217719cf38805c23227fddc", 0x27, 0x22}, {0x2, 0x1, &(0x7f0000000300)='--,{!\x00', &(0x7f0000000340)="51455b45a388e9f341a20e1b0499abf5e6ff9f20b817f7d6aa484fa913ff2fe0f3a010ec49c4adbbd2a99cb6a8eef55c4fc38cf3c13030a48226a21138eb73f3c47d380ef0291b0fc20da688e9f991c36bb4d47a284b6341cb724b0ccc146fea706f538e89a9455a53409a0d9b9c02aec21c387f8279ed8bc27948c62f59bb1a7efa2be6c8d704b5dbe0fae0b459895aaaf99fdf011ae442355dd5efb853422cf4ec261014236daffd96be8038c3e7ec2f68af7476614c8bfd18bab7706150a3", 0xc0, 0x10}, {0x3, 0x2, &(0x7f0000000400)='\x00', &(0x7f0000000440)="a0ca8be55052c6b29d05d4591df40a6d090be00319cf5345dccbbc4bc6d1f5d87fc07b2e7d0448c8321b9c9442f630e6fc3b7531586f0a380584b2ecd0705a3384a5a8a3a408a5fab0f4fad81affc8718a28bbfe6146", 0x56, 0x28}, {0x2, 0x9, &(0x7f00000004c0)='-\\\\\\\x00', &(0x7f0000000500)="b783d845ebe41dd4b2924d1a731419d6806870f14a50000fa9f3b25b244a84c358620287615c04119743f901e5afc2c780bbaaf3769160d160a1ead899d27b98cbc864a04a1444938d7a187d4960602ba1b409f88a39486fd147a46f439181cb0c65fa5f0365000a2e42e29a3280989830d024e17e5d0eb47cd0c0600b3046a692dca8ebb8a8cbab7b9bde3a33f9a2b686be07776bafdc55818bb4ad79d41b973bdb3dc65b50721fc89d3879504ee5dc767dac76226f1558b1bb075c7874e94181e80502e2", 0xc5, 0xa}, {0x3, 0x8cac000, &(0x7f0000000600)='%\x00', &(0x7f0000000640)="3a0d7db0c1c1946e6abaaec8516cf35407f9449a5f0c", 0x16, 0x10}]})
accept4$alg(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYRES64=r0], 0x44}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005000000480311"], 0x35c}}, 0x4000000)

1.523955958s ago: executing program 0 (id=5755):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10)
syz_emit_ethernet(0xfc8, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000fba0000000000849078ac1414bbffffffffdd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc65b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324dde85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b6805913e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f3d72db434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc368ef4ac3dcc9c3273b39a1"], 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000d0a050000000000000000020000070900020073797a32000000000900020073797a310000000028000380200000801c000a801800028008000340000000010900020073797a320000000004000080"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4004080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000001040)={'nat\x00', 0x0, [0x0, 0x66d8219f, 0x9, 0xffff, 0x8]}, &(0x7f00000010c0)=0x54)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44000414}, 0x1)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet_sctp(0x2, 0x5, 0x84)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001340)="c99bbdbd93cd4ce4f2ac01bfdc00d1fdf85dbc35c4835a3eada78a470aa227652fb1ac95e7680dc6dacc3e7f028058f0797a2edeb45b6d2e74f05797", 0x3c)
syz_emit_ethernet(0x16, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x21, 0x3, 0x2d8, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0xff000000, 0xff], 'bridge_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x3b, 0x4, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth1_to_team\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'ip6erspan0\x00', {0xffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000001500)={'nat\x00', 0x0, [0x6, 0x4a3, 0x80000001, 0x40006, 0xffdefffd]}, &(0x7f0000000240)=0x54)
socket$netlink(0x10, 0x3, 0x0)

1.468466247s ago: executing program 1 (id=5756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010105fc0000000000000000000000000600124000000000"], 0x1c}}, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000080)}, 0x20) (async)
r5 = socket$packet(0x11, 0x3, 0x300) (async)
r6 = socket(0x840000000002, 0x3, 0x100)
setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) (async)
getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f0000000300)) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async)
setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
socket$kcm(0xa, 0x3, 0x87) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async)
sendmsg$tipc(r1, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800)

1.440907071s ago: executing program 3 (id=5757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000010000000c0000000700000002210000", @ANYRES32, @ANYBLOB="ff0700000040000000000000000000a1007f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000400"/28], 0x50)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x45, &(0x7f0000000100)=""/69, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, r0], &(0x7f00000002c0)=[{0x5, 0x2, 0x6, 0x4}, {0xffffffff, 0x5, 0x2, 0xa}, {0x1, 0x5, 0x10, 0x7}, {0x4, 0x2, 0xf, 0x9}], 0x10, 0x4}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94)

1.311422242s ago: executing program 2 (id=5758):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r3, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa4cc6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x12)
r5 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r6}, 0x14)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@getlink={0x84, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x40062, 0x20000}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0xe3}, @IFLA_PHYS_SWITCH_ID={0x17, 0x24, "84f484f9280a44005c1037a4b793149762d050"}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_OPERSTATE={0x5, 0x10, 0x14}, @IFLA_OPERSTATE={0x5}, @IFLA_GROUP={0x8, 0x1b, 0xc}]}, 0x84}}, 0x4044081)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r8, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x4c, 0x4000800)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)=<r9=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000800)={{r8}, r9, 0xd, @inherit={0x88, &(0x7f0000000180)={0x1, 0x8, 0x7ff, 0x9, {0x10, 0x10001, 0x80b, 0x3, 0xffff}, [0x5, 0xb, 0xffffffffffffff14, 0xe, 0x3, 0x3ff, 0x1ff, 0x8]}}, @subvolid=0xfffffffffffffbff})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0)="fa", 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="070000000400000000050000feffffff20000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000500000000003f766421121b887e4ede519e3f18fd5c885e8f306340501893d4c0749a89671d60b52e0ce9dcf4c1b4d1d33ba19532b7bd56d116806a12e2be"], 0x48)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xd, 0x4}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000)

1.276145042s ago: executing program 3 (id=5759):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa8000000001400078008fb124000000000050015000100000005040100060000000500050002000000050004000006000009a9ed007379ac797a31612f358b12000300686173683a6e65742c706f"], 0x60}}, 0xc814)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)

1.211228414s ago: executing program 1 (id=5760):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x80000001, 0x18}, 0xc)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r2, 0xd371f000)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xc0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100001042cbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0900000000000000140075006e657464657673696d3000000000000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x240088c4}, 0x4000054)
connect$netrom(r5, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
connect$netrom(r5, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x2d, 'rlimit'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x7b, 'cpuset'}, {0x2d, 'pids'}, {0x2d, 'io'}]}, 0x2e)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)

1.0432537s ago: executing program 3 (id=5761):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0xc, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], <r4=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='net_prio.prioidx\x00', 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex=r5, r3, 0x2d, 0x2000, 0x0, @value=r6, @void, @void, @void, r4}, 0x20)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@newtfilter={0xa4, 0x2c, 0x20, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xb}, {0xe, 0x4}, {0x1, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xeb6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x15)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}, @in={0x2, 0x4e1e, @empty}], 0x2c)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r13, &(0x7f0000000000)={0x1f, 0x800, @any, 0x0, 0x1}, 0xe)
r14 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r14, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)

756.137103ms ago: executing program 1 (id=5762):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
close(0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f00000000c0)="d9d5753a3dea7ee069a432391068f870f57865ead1d68f077cfa150100f6772f8488390dd75b33d3c135b95179f0a0", 0x2f, 0x3b00, 0x0, 0x0)

514.116554ms ago: executing program 1 (id=5763):
syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000280)=0xfffffffb, 0x4)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000001b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1e0, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb8, 0xa8, @random="a8c64fb43a5eed4e9233e8b2d954a68c12530530c9d307f60c76ddac7e07bcdc2c8d5125d414f0d2b3082649da80e1be46e267eeaf8d824494aa68e372b0f2bc973f7e59f9b90eb54727a3e85677f9d45149232431073fde7dfc120ba664bcb0a772e1cf32be63506c0f5e904f56277bcff739e2e85d13543005bf6512e0f644bc48670089421ef4958f3a01a2d98d23fed4c965de53e00726a2f6b82b63c726b12dfaacb2f89e18d0100e42e76807d6cbc66af4"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xec, 0xa8, @random="012e25ada9a6c7ef8b358bcc3c5e408732f46df5037a5583727e9cc70359145e83fc269226d52e0fe88004fd349c54dcd1a15bcd8960f19258d83a1cea96167dd1e747d5181bc1e711ba0d172bc05510ecd1f9af38ed639d537451a0cb18c96136e2a78f85caad13e2b1e1cf570ff6a5260a069e56048059b72e5b0c86bdba43c50eb61919d069c8254d1b90a8185f7763e070babf8ed01638075da7f8b9aeb20aa25642a6649fb61f8d157c5b0559d99db3b358b238516271aaa8bfeed39ae7bdb7c0a64798500297fbe3e67a20dc5c7cacf8244afab8b0177f2e9aef4255d7e65815f6a930bbee"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x40488d1)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="c5f5e0e50d7f5eadd329800337b2ce844ad51bba5faf76c32777d30b4ee3aa2d26586fd9722442ea704144f9db95b075e6df7b27ba401c988134e20b2e656f7759ed38ed326c66af79d7674e152b4538d9a6f4f416aa58009c143b684acd0ff989a791ab641489844563ea669fd9b3081cfb372647c89ee631dec1aa581320c31205d6d9d096bd8ff15f5375227c0d4536c51a39639a38e8bdcd03d8fa44eff3f2f81705caa1796b023a906756912750f06bc637d19e6eab77ec04924c55e67b44dd51110cc8b30ded9af2b9dc5f3213afcb7422f2143fd60720a639", 0xdc}, {&(0x7f0000000100)="d20bb2b3415e2235752d21b48e512407197236c69b4883b5dc0d5dccf49c4968a9bd650a91e2f6dd57736c0390e1ebae773437ca7ae8111e5ca4c0a971223c94d45adbf3318275bc8c4047b777b546a624ffe90052164f860783cef00c90aa19", 0x60}, {&(0x7f0000000180)="a2d4fba76dd10c961919588e5b24d1e777fceb9aa05fc7557c9348a28786b37cdca3244369ad2ec56bc5cc62854e5cc53771f45bd1dfd7af295eeeaac76923bbc11139b1733d65c184b7019aa2fc4ce0ad28f475d79deabf052b64e384be1a88148f9bcfaf84d2098b54656686c282f8892b3fc131e6682df5b64d80e9ccd1f1e5944a942bea1a9673fc41af7d288a45f8ae5acb42e483a17e2c123723b28d8c8a601435eac881eaa86eff06e74a9956b14369feaa70615ae29dc9257bd4069a7e7d7d8b05039bb9e537a721a5f76ae53876cfa82ceae97c7a69d2205742088f91c8838661c841b07473e3c7c9711f00a7f6c8ed3b", 0xf5}, {&(0x7f0000000280)="b2821024a6da2b177d7ac339b279e0e07d75f564b8a3ff03666d53fee596f9efecbc7e1b6b211ab2cc847b494874894758b4451727d25bce373c539a07912401d1baa97690aca7cc9eaa95364541211ca804f39f20ad489ee27c51564af57147ccb31c7011fcea84cee0945b", 0x6c}], 0x4, &(0x7f0000000640)=[{0x108, 0x118, 0x1, "d04b990e72d6227560106a13a3ee3fc845764a53939490018806c709182d5ce97b5cc8db41cb0f62738f2e611fc945185b3444d617a1a9207d5978a7c5edfb4d1da89684c2a3b3eefada43b05c7be5e26aadaaf2c2382ef1756c40ccd24f1beb367defa04c328c8e9ce9d5bbf7443f82b51a84dc3557c80434070d7cb283dcc35d68e9e7eaaf414399d524d2420518fe636986cefb04a7173e1811f2b3c5fd7916c0d6acd51abe5e0e75090a94486330565803fc80cda82d92a058e42db5959aa6ec3432b97bf0d9eb82ae4effb9b20f2647d8db7886004f9b8f95a71fb4f91b3ec910122839af0da40aa3eb73dd23be28578c"}, {0x90, 0x10a, 0x6, "b97a35baeca6f2e557bcde2fcfda41b3a16ea3a1ff1104d43e38a8c3bcd5a185984911a81c2673b1823f576aabc1891a52ded026e01d4c934265b25fbf70db89133f1cb645f349017c842dde97e18d3761bdaad1efb221d9280939b17cd2ccdc9b3c16c9d3da9fa810b918bd475e26601de447d55013629c8ee10ab6272fcd6a"}, {0x1010, 0x11, 0xfffffeff, "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"}, {0xc0, 0x104, 0x7, "5cdf92ebb606ad6c41d80f5dc736b1b58c02fadf8e65d25347dba0215bc5d11efb8caa6f3cfbb2c82890ae4ed57b4b3bf06022f44d48406464c12f3940ee93aa1892aaaab1cabb6e1a87f3f32015dd4f067bcd07833b0e4ff973b4b6755ca524dee838d97137e5fb4c40341ad5b1f0f294bd0c9685156f7c9a890da25533ef32f37ad1c0e82aa6f09a933f5b0e2efcd3caad1f1ef7ac6947afccd2dde8a667a159048a9cd49570db0ee5"}, {0x50, 0x1, 0x5, "a96d3c7d82b2c5efa406c115b69ef97d7b62a43feba44ae44c4eedeb8c47a676e35cd79f12965ab7d1a17c14ce3898c87be484145db37da31a0221bb4df6c14a"}, {0xe8, 0x11, 0xee6, "54ebc75e91098f10f05655280ecba361342d16681650372c4076443de17cec2e0de4c6103a4f2814782fe4300ea49e7682e3ac0cecbbc51d068315f2e7b5c5e935743590384bb01b282e38bec9c03c7ad164af5b45fbadbe70fdb01ecc0d8b20df690967e8ac04d93ee5edb6e65187e266c0a69b6e00f1fb2456aee51f97730f7b04ae2e74089fd209982bbdff15dd6f5fe78c78da9a1d52a73f405eb6ca48233d46118cee98b76dd58cbadacf851d8b7f556c93b0d845050139dd49a7960535c63a6dbdedba1d4ed29f24286226f32539bbd603c017"}, {0x10, 0x0, 0x1}, {0x100, 0x10c, 0xd, "2e485d87979a2853cc660987f796eb063a9ec5dc99371223e6be5f6c0226d4cbccfbfdfd09cdd139d7b9ad63ede904668a67baffcaac8f4d6cfc68e4751b26dbdc8ba70df3f588a9f08fdb75008a832ed75e26704f201c810a5d19fb8867ccac56bd46e54354b6fb68af7fa457d04ebf47ab56731c1c0cbc1ab608b23d85cdcdc5e7d0819a8d1bbff86f3a3cf3e07a6041b288044d148dd6fca24d362981a9732b2a315a87d4326f51f76ed96d610243d91950a92d6f190a98573348b5a4459a5f553c05d1c3f045c94c9a3e922a218b011680f36406c358c7a478ab2586391b0f8e39992bc3415dc082"}], 0x14b0}, 0x4000000)

456.322601ms ago: executing program 0 (id=5764):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x43, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

379.470633ms ago: executing program 0 (id=5765):
r0 = socket$netlink(0x10, 0x3, 0xb)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="89229bfac4cf5421b0"], &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
close(r0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
bind$x25(r2, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0a, 0xfac09, 0xfac00, 0xfac01]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x33, 0xfe, "11ab44c18ba91f88b01683a510e5bd570905a8c8431812838a75ea8a2af4d8751beada358ac4388c7ccce17e7d6b64"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac0d, 0xfac04, 0xfac01, 0xfac08, 0xd]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x2a, 0x115, "39477c3e1decdf1dec9ce1a694176443127f22d7922aea5abbf77ccbdb68ef59d6c049e32c4f"}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040004)

352.377305ms ago: executing program 1 (id=5766):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000640)="c863b1079dccd4e78e59b6d41ecad6149837ffc7418236d295f111cd201ad565c1587e96c6700ffe241eb99fd1af3003bc2f062decdb0287a7c4fd229cbcb05974038659", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="85116b7c5c", 0x5}, {0x0, 0x64}], 0x2}}], 0x3, 0x4048800)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, &(0x7f00000000c0)='GPL\x00', 0x60000, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x5]}, {0x1, 0x8001, 0x1, 0x8000}}, 0x10, &(0x7f0000000140), &(0x7f0000000180)})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x8, &(0x7f0000000200)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xe}, 0x10}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={<r2=>0x0, 0xb}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000400)={r2}, &(0x7f0000000440)=0x8)

163.868779ms ago: executing program 1 (id=5767):
r0 = socket$inet6(0xa, 0x80000, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0x0, @empty, @local, {[@dstopts={0x8, 0x3, '\x00', [@ra={0x5, 0x2, 0xffc0}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}}}}}, 0x0)

138.062859ms ago: executing program 0 (id=5768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)="e846ab8e", 0x4}, 0x1, 0x0, 0x0, 0x80}, 0x14000000)

0s ago: executing program 0 (id=5769):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async)
shutdown(r1, 0x1) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

s_sendmmsg+0x10/0x10
[  433.091278][T21063]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  433.091321][T21063]  ? ksys_write+0x242/0x270
[  433.091340][T21063]  ? __pfx_ksys_write+0x10/0x10
[  433.091363][T21063]  __x64_sys_sendmmsg+0xa0/0xc0
[  433.091383][T21063]  do_syscall_64+0x14d/0xf80
[  433.091402][T21063]  ? trace_irq_disable+0x3b/0x150
[  433.091414][T21063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.091430][T21063]  ? clear_bhb_loop+0x40/0x90
[  433.091448][T21063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.091463][T21063] RIP: 0033:0x7fdec0d9c819
[  433.091478][T21063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.091491][T21063] RSP: 002b:00007fdec1ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  433.091508][T21063] RAX: ffffffffffffffda RBX: 00007fdec1015fa0 RCX: 00007fdec0d9c819
[  433.091519][T21063] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  433.091528][T21063] RBP: 00007fdec1ba3090 R08: 0000000000000000 R09: 0000000000000000
[  433.091537][T21063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  433.091546][T21063] R13: 00007fdec1016038 R14: 00007fdec1015fa0 R15: 00007ffc7a497d78
[  433.091572][T21063]  </TASK>
[  433.433146][    C0] net_ratelimit: 7 callbacks suppressed
[  433.433169][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.524121][T21067] syzkaller0: entered promiscuous mode
[  433.529649][T21067] syzkaller0: entered allmulticast mode
[  433.548100][T21069] tc action pedit offset must be on 32 bit boundaries
[  433.556304][T21071] __nla_validate_parse: 8 callbacks suppressed
[  433.556322][T21071] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4043'.
[  433.575641][T21067] tc action pedit offset must be on 32 bit boundaries
[  433.606388][T21071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4043'.
[  433.878967][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4044'.
[  433.889466][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.988951][T21096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  434.194545][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'.
[  434.326794][T21112] FAULT_INJECTION: forcing a failure.
[  434.326794][T21112] name failslab, interval 1, probability 0, space 0, times 0
[  434.340002][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.0.4053 Not tainted syzkaller #0 PREEMPT(full) 
[  434.340029][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.340040][T21112] Call Trace:
[  434.340048][T21112]  <TASK>
[  434.340055][T21112]  dump_stack_lvl+0xe8/0x150
[  434.340086][T21112]  should_fail_ex+0x412/0x560
[  434.340120][T21112]  should_failslab+0xa8/0x100
[  434.340147][T21112]  __kmalloc_cache_noprof+0x88/0x660
[  434.340171][T21112]  ? sctp_add_bind_addr+0x8c/0x370
[  434.340197][T21112]  sctp_add_bind_addr+0x8c/0x370
[  434.340221][T21112]  sctp_copy_local_addr_list+0x314/0x4f0
[  434.340245][T21112]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  434.340266][T21112]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  434.340292][T21112]  ? sctp_v4_is_any+0x35/0x60
[  434.340313][T21112]  ? sctp_copy_one_addr+0x93/0x360
[  434.340337][T21112]  sctp_bind_addr_copy+0xb3/0x3c0
[  434.340357][T21112]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  434.340388][T21112]  sctp_connect_new_asoc+0x2ff/0x6b0
[  434.340417][T21112]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  434.340449][T21112]  ? __local_bh_enable_ip+0xd0/0x130
[  434.340473][T21112]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  434.340496][T21112]  ? security_sctp_bind_connect+0x7e/0x2c0
[  434.340527][T21112]  sctp_sendmsg+0x1528/0x2c10
[  434.340566][T21112]  ? __pfx_sctp_sendmsg+0x10/0x10
[  434.340594][T21112]  ? aa_sk_perm+0x6d5/0x900
[  434.340631][T21112]  ? __pfx_aa_sk_perm+0x10/0x10
[  434.340660][T21112]  ? sock_rps_record_flow+0x19/0x400
[  434.340689][T21112]  ? inet_sendmsg+0x2f4/0x370
[  434.340716][T21112]  ____sys_sendmsg+0x80a/0x9f0
[  434.340750][T21112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  434.340795][T21112]  ? import_iovec+0x73/0xa0
[  434.340822][T21112]  ___sys_sendmsg+0x2a5/0x360
[  434.340854][T21112]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.340885][T21112]  ? kstrtouint+0x6e/0xe0
[  434.340948][T21112]  ? __fget_files+0x2a/0x420
[  434.340965][T21112]  ? __fget_files+0x3a0/0x420
[  434.340995][T21112]  __sys_sendmmsg+0x27c/0x4e0
[  434.341024][T21112]  ? __pfx___sys_sendmmsg+0x10/0x10
[  434.341046][T21112]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  434.341099][T21112]  ? ksys_write+0x242/0x270
[  434.341124][T21112]  ? __pfx_ksys_write+0x10/0x10
[  434.341154][T21112]  __x64_sys_sendmmsg+0xa0/0xc0
[  434.341182][T21112]  do_syscall_64+0x14d/0xf80
[  434.341205][T21112]  ? trace_irq_disable+0x3b/0x150
[  434.341221][T21112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.341242][T21112]  ? clear_bhb_loop+0x40/0x90
[  434.341266][T21112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.341285][T21112] RIP: 0033:0x7f3f4b19c819
[  434.341304][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.341321][T21112] RSP: 002b:00007f3f4c0b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  434.341342][T21112] RAX: ffffffffffffffda RBX: 00007f3f4b415fa0 RCX: 00007f3f4b19c819
[  434.341355][T21112] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  434.341367][T21112] RBP: 00007f3f4c0b7090 R08: 0000000000000000 R09: 0000000000000000
[  434.341379][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  434.341390][T21112] R13: 00007f3f4b416038 R14: 00007f3f4b415fa0 R15: 00007ffe85a0d918
[  434.341424][T21112]  </TASK>
[  434.453407][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.672391][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.716781][T21116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.741493][T21116] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4054'.
[  434.856741][T21126] validate_nla: 6 callbacks suppressed
[  434.856763][T21126] netlink: 'syz.1.4059': attribute type 4 has an invalid length.
[  434.923195][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.259409][T21153] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20002
[  435.406507][T21171] FAULT_INJECTION: forcing a failure.
[  435.406507][T21171] name failslab, interval 1, probability 0, space 0, times 0
[  435.448441][T21171] CPU: 1 UID: 0 PID: 21171 Comm: syz.3.4068 Not tainted syzkaller #0 PREEMPT(full) 
[  435.448471][T21171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  435.448482][T21171] Call Trace:
[  435.448490][T21171]  <TASK>
[  435.448498][T21171]  dump_stack_lvl+0xe8/0x150
[  435.448530][T21171]  should_fail_ex+0x412/0x560
[  435.448568][T21171]  should_failslab+0xa8/0x100
[  435.448595][T21171]  __kmalloc_cache_noprof+0x88/0x660
[  435.448619][T21171]  ? sctp_add_bind_addr+0x8c/0x370
[  435.448644][T21171]  sctp_add_bind_addr+0x8c/0x370
[  435.448668][T21171]  sctp_copy_local_addr_list+0x314/0x4f0
[  435.448692][T21171]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  435.448712][T21171]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  435.448736][T21171]  ? sctp_v4_is_any+0x35/0x60
[  435.448756][T21171]  ? sctp_copy_one_addr+0x93/0x360
[  435.448779][T21171]  sctp_bind_addr_copy+0xb3/0x3c0
[  435.448801][T21171]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  435.448833][T21171]  sctp_connect_new_asoc+0x2ff/0x6b0
[  435.448873][T21171]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  435.448905][T21171]  ? __local_bh_enable_ip+0xd0/0x130
[  435.448929][T21171]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  435.448954][T21171]  ? security_sctp_bind_connect+0x7e/0x2c0
[  435.448984][T21171]  sctp_sendmsg+0x1528/0x2c10
[  435.449026][T21171]  ? __pfx_sctp_sendmsg+0x10/0x10
[  435.449054][T21171]  ? aa_sk_perm+0x6d5/0x900
[  435.449093][T21171]  ? __pfx_aa_sk_perm+0x10/0x10
[  435.449124][T21171]  ? sock_rps_record_flow+0x19/0x400
[  435.449154][T21171]  ? inet_sendmsg+0x2f4/0x370
[  435.449184][T21171]  ____sys_sendmsg+0x80a/0x9f0
[  435.449220][T21171]  ? __pfx_____sys_sendmsg+0x10/0x10
[  435.449254][T21171]  ? import_iovec+0x73/0xa0
[  435.449279][T21171]  ___sys_sendmsg+0x2a5/0x360
[  435.449309][T21171]  ? __pfx____sys_sendmsg+0x10/0x10
[  435.449339][T21171]  ? kstrtouint+0x6e/0xe0
[  435.449396][T21171]  ? __fget_files+0x2a/0x420
[  435.449414][T21171]  ? __fget_files+0x3a0/0x420
[  435.449443][T21171]  __sys_sendmmsg+0x27c/0x4e0
[  435.449473][T21171]  ? __pfx___sys_sendmmsg+0x10/0x10
[  435.449495][T21171]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  435.449548][T21171]  ? ksys_write+0x242/0x270
[  435.449574][T21171]  ? __pfx_ksys_write+0x10/0x10
[  435.449603][T21171]  __x64_sys_sendmmsg+0xa0/0xc0
[  435.449630][T21171]  do_syscall_64+0x14d/0xf80
[  435.449653][T21171]  ? trace_irq_disable+0x3b/0x150
[  435.449670][T21171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.449689][T21171]  ? clear_bhb_loop+0x40/0x90
[  435.449712][T21171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.449732][T21171] RIP: 0033:0x7fdec0d9c819
[  435.449750][T21171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.449767][T21171] RSP: 002b:00007fdec1ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  435.449789][T21171] RAX: ffffffffffffffda RBX: 00007fdec1015fa0 RCX: 00007fdec0d9c819
[  435.449802][T21171] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  435.449814][T21171] RBP: 00007fdec1ba3090 R08: 0000000000000000 R09: 0000000000000000
[  435.449823][T21171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  435.449833][T21171] R13: 00007fdec1016038 R14: 00007fdec1015fa0 R15: 00007ffc7a497d78
[  435.449887][T21171]  </TASK>
[  435.513540][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.783045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.885636][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.172797][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  436.180907][    C0] lec:lec_tx_timeout: lec0
[  436.213679][T21201] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4078'.
[  436.233098][T21201] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.4078'.
[  436.350205][T21202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  436.357542][T21202] IPv6: NLM_F_CREATE should be set when creating new route
[  436.404846][T21202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4077'.
[  436.536290][T21217] FAULT_INJECTION: forcing a failure.
[  436.536290][T21217] name failslab, interval 1, probability 0, space 0, times 0
[  436.549784][T21217] CPU: 0 UID: 0 PID: 21217 Comm: syz.4.4082 Not tainted syzkaller #0 PREEMPT(full) 
[  436.549811][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  436.549822][T21217] Call Trace:
[  436.549829][T21217]  <TASK>
[  436.549836][T21217]  dump_stack_lvl+0xe8/0x150
[  436.549870][T21217]  should_fail_ex+0x412/0x560
[  436.549906][T21217]  should_failslab+0xa8/0x100
[  436.549934][T21217]  __kmalloc_cache_noprof+0x88/0x660
[  436.549955][T21217]  ? sctp_add_bind_addr+0x8c/0x370
[  436.549981][T21217]  sctp_add_bind_addr+0x8c/0x370
[  436.550003][T21217]  sctp_copy_local_addr_list+0x314/0x4f0
[  436.550025][T21217]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  436.550044][T21217]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  436.550068][T21217]  ? sctp_v4_is_any+0x35/0x60
[  436.550096][T21217]  ? sctp_copy_one_addr+0x93/0x360
[  436.550119][T21217]  sctp_bind_addr_copy+0xb3/0x3c0
[  436.550139][T21217]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  436.550167][T21217]  sctp_connect_new_asoc+0x2ff/0x6b0
[  436.550193][T21217]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  436.550224][T21217]  ? __local_bh_enable_ip+0xd0/0x130
[  436.550249][T21217]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  436.550275][T21217]  ? security_sctp_bind_connect+0x7e/0x2c0
[  436.550305][T21217]  sctp_sendmsg+0x1528/0x2c10
[  436.550346][T21217]  ? __pfx_sctp_sendmsg+0x10/0x10
[  436.550375][T21217]  ? aa_sk_perm+0x6d5/0x900
[  436.550413][T21217]  ? __pfx_aa_sk_perm+0x10/0x10
[  436.550445][T21217]  ? sock_rps_record_flow+0x19/0x400
[  436.550475][T21217]  ? inet_sendmsg+0x2f4/0x370
[  436.550506][T21217]  ____sys_sendmsg+0x80a/0x9f0
[  436.550542][T21217]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.550579][T21217]  ? import_iovec+0x73/0xa0
[  436.550607][T21217]  ___sys_sendmsg+0x2a5/0x360
[  436.550639][T21217]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.550671][T21217]  ? kstrtouint+0x6e/0xe0
[  436.550737][T21217]  ? __fget_files+0x2a/0x420
[  436.550753][T21217]  ? __fget_files+0x3a0/0x420
[  436.550783][T21217]  __sys_sendmmsg+0x27c/0x4e0
[  436.550815][T21217]  ? __pfx___sys_sendmmsg+0x10/0x10
[  436.550836][T21217]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  436.550894][T21217]  ? ksys_write+0x242/0x270
[  436.550919][T21217]  ? __pfx_ksys_write+0x10/0x10
[  436.550949][T21217]  __x64_sys_sendmmsg+0xa0/0xc0
[  436.550977][T21217]  do_syscall_64+0x14d/0xf80
[  436.551001][T21217]  ? trace_irq_disable+0x3b/0x150
[  436.551018][T21217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.551038][T21217]  ? clear_bhb_loop+0x40/0x90
[  436.551064][T21217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.551091][T21217] RIP: 0033:0x7f4ddeb9c819
[  436.551111][T21217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.551128][T21217] RSP: 002b:00007f4ddcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  436.551150][T21217] RAX: ffffffffffffffda RBX: 00007f4ddee15fa0 RCX: 00007f4ddeb9c819
[  436.551164][T21217] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  436.551177][T21217] RBP: 00007f4ddcdf6090 R08: 0000000000000000 R09: 0000000000000000
[  436.551189][T21217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  436.551200][T21217] R13: 00007f4ddee16038 R14: 00007f4ddee15fa0 R15: 00007ffc6be5c168
[  436.551235][T21217]  </TASK>
[  437.444347][T21251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4090'.
[  437.480033][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4090'.
[  437.780115][T21264] tipc: Started in network mode
[  437.803386][T21264] tipc: Node identity 2aa9f4b029af, cluster identity 4711
[  437.820935][T21264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.846388][T21271] FAULT_INJECTION: forcing a failure.
[  437.846388][T21271] name failslab, interval 1, probability 0, space 0, times 0
[  437.860649][T21272] syzkaller0: entered promiscuous mode
[  437.870149][T21272] syzkaller0: entered allmulticast mode
[  437.876974][T21271] CPU: 1 UID: 0 PID: 21271 Comm: syz.2.4097 Not tainted syzkaller #0 PREEMPT(full) 
[  437.876998][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  437.877008][T21271] Call Trace:
[  437.877015][T21271]  <TASK>
[  437.877022][T21271]  dump_stack_lvl+0xe8/0x150
[  437.877051][T21271]  should_fail_ex+0x412/0x560
[  437.877087][T21271]  should_failslab+0xa8/0x100
[  437.877124][T21271]  __kmalloc_cache_noprof+0x88/0x660
[  437.877149][T21271]  ? sctp_add_bind_addr+0x8c/0x370
[  437.877174][T21271]  sctp_add_bind_addr+0x8c/0x370
[  437.877198][T21271]  sctp_copy_local_addr_list+0x314/0x4f0
[  437.877227][T21271]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  437.877248][T21271]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  437.877273][T21271]  ? sctp_v4_is_any+0x35/0x60
[  437.877291][T21271]  ? sctp_copy_one_addr+0x93/0x360
[  437.877315][T21271]  sctp_bind_addr_copy+0xb3/0x3c0
[  437.877336][T21271]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  437.877367][T21271]  sctp_connect_new_asoc+0x2ff/0x6b0
[  437.877394][T21271]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  437.877424][T21271]  ? __local_bh_enable_ip+0xd0/0x130
[  437.877448][T21271]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  437.877471][T21271]  ? security_sctp_bind_connect+0x7e/0x2c0
[  437.877500][T21271]  sctp_sendmsg+0x1528/0x2c10
[  437.877541][T21271]  ? __pfx_sctp_sendmsg+0x10/0x10
[  437.877570][T21271]  ? aa_sk_perm+0x6d5/0x900
[  437.877607][T21271]  ? __pfx_aa_sk_perm+0x10/0x10
[  437.877638][T21271]  ? sock_rps_record_flow+0x19/0x400
[  437.877667][T21271]  ? inet_sendmsg+0x2f4/0x370
[  437.877696][T21271]  ____sys_sendmsg+0x80a/0x9f0
[  437.877731][T21271]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.877766][T21271]  ? import_iovec+0x73/0xa0
[  437.877794][T21271]  ___sys_sendmsg+0x2a5/0x360
[  437.877825][T21271]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.877854][T21271]  ? kstrtouint+0x6e/0xe0
[  437.877912][T21271]  ? __fget_files+0x2a/0x420
[  437.877929][T21271]  ? __fget_files+0x3a0/0x420
[  437.877958][T21271]  __sys_sendmmsg+0x27c/0x4e0
[  437.877989][T21271]  ? __pfx___sys_sendmmsg+0x10/0x10
[  437.878009][T21271]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  437.878061][T21271]  ? ksys_write+0x242/0x270
[  437.878088][T21271]  ? __pfx_ksys_write+0x10/0x10
[  437.878124][T21271]  __x64_sys_sendmmsg+0xa0/0xc0
[  437.878152][T21271]  do_syscall_64+0x14d/0xf80
[  437.878174][T21271]  ? trace_irq_disable+0x3b/0x150
[  437.878190][T21271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.878209][T21271]  ? clear_bhb_loop+0x40/0x90
[  437.878233][T21271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.878253][T21271] RIP: 0033:0x7fbb9eb9c819
[  437.878272][T21271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.878288][T21271] RSP: 002b:00007fbb9fa86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  437.878310][T21271] RAX: ffffffffffffffda RBX: 00007fbb9ee15fa0 RCX: 00007fbb9eb9c819
[  437.878324][T21271] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  437.878336][T21271] RBP: 00007fbb9fa86090 R08: 0000000000000000 R09: 0000000000000000
[  437.878347][T21271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  437.878358][T21271] R13: 00007fbb9ee16038 R14: 00007fbb9ee15fa0 R15: 00007fff006b82b8
[  437.878391][T21271]  </TASK>
[  438.274416][T21276] bond9 (unregistering): Released all slaves
[  438.363575][T21264] tipc: Resetting bearer <eth:syzkaller0>
[  438.420904][T21263] tipc: Resetting bearer <eth:syzkaller0>
[  438.462980][    C0] net_ratelimit: 6 callbacks suppressed
[  438.463002][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.570144][T21263] tipc: Disabling bearer <eth:syzkaller0>
[  438.801905][T21300] netlink: 'syz.4.4103': attribute type 2 has an invalid length.
[  438.830366][T21300] __nla_validate_parse: 2 callbacks suppressed
[  438.830387][T21300] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4103'.
[  438.844401][T21307] netlink: 'syz.0.4104': attribute type 2 has an invalid length.
[  438.864093][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.931469][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.085497][T21316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4106'.
[  439.101089][T21318] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4107'.
[  439.243795][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.483059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.705505][T21353] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  439.728746][T21353] netlink: 'syz.4.4116': attribute type 9 has an invalid length.
[  439.766360][T21353] netlink: 'syz.4.4116': attribute type 6 has an invalid length.
[  439.993151][   T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.096259][T21362] xt_l2tp: invalid flags combination: 8
[  440.097402][T21371] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4121'.
[  440.149705][T21372] xt_TPROXY: Can be used only with -p tcp or -p udp
[  440.218839][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.233697][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  440.240541][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4120'.
[  440.272395][T21378] ip6erspan0: entered allmulticast mode
[  440.289394][ T1539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.523095][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.531524][T21391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4127'.
[  440.580390][T21397] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0
[  441.145085][T17067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.161170][T21416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.341434][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.369097][T21416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.501357][T21416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.562257][T21447] netlink: 'syz.1.4141': attribute type 11 has an invalid length.
[  441.571510][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4139'.
[  441.581683][T21447] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4141'.
[  441.660626][T21416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.884159][T21468] FAULT_INJECTION: forcing a failure.
[  441.884159][T21468] name failslab, interval 1, probability 0, space 0, times 0
[  441.911520][T21468] CPU: 0 UID: 0 PID: 21468 Comm: syz.2.4147 Not tainted syzkaller #0 PREEMPT(full) 
[  441.911548][T21468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  441.911560][T21468] Call Trace:
[  441.911568][T21468]  <TASK>
[  441.911576][T21468]  dump_stack_lvl+0xe8/0x150
[  441.911610][T21468]  should_fail_ex+0x412/0x560
[  441.911647][T21468]  should_failslab+0xa8/0x100
[  441.911675][T21468]  __kmalloc_cache_noprof+0x88/0x660
[  441.911698][T21468]  ? sctp_add_bind_addr+0x8c/0x370
[  441.911725][T21468]  sctp_add_bind_addr+0x8c/0x370
[  441.911781][T21468]  sctp_copy_local_addr_list+0x314/0x4f0
[  441.911807][T21468]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  441.911828][T21468]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  441.911854][T21468]  ? sctp_v4_is_any+0x35/0x60
[  441.911874][T21468]  ? sctp_copy_one_addr+0x93/0x360
[  441.911899][T21468]  sctp_bind_addr_copy+0xb3/0x3c0
[  441.911921][T21468]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  441.911953][T21468]  sctp_connect_new_asoc+0x2ff/0x6b0
[  441.911982][T21468]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  441.912014][T21468]  ? __local_bh_enable_ip+0xd0/0x130
[  441.912038][T21468]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  441.912062][T21468]  ? security_sctp_bind_connect+0x7e/0x2c0
[  441.912092][T21468]  sctp_sendmsg+0x1528/0x2c10
[  441.912134][T21468]  ? __pfx_sctp_sendmsg+0x10/0x10
[  441.912162][T21468]  ? aa_sk_perm+0x6d5/0x900
[  441.912201][T21468]  ? __pfx_aa_sk_perm+0x10/0x10
[  441.912233][T21468]  ? sock_rps_record_flow+0x19/0x400
[  441.912263][T21468]  ? inet_sendmsg+0x2f4/0x370
[  441.912293][T21468]  ____sys_sendmsg+0x80a/0x9f0
[  441.912330][T21468]  ? __pfx_____sys_sendmsg+0x10/0x10
[  441.912366][T21468]  ? import_iovec+0x73/0xa0
[  441.912395][T21468]  ___sys_sendmsg+0x2a5/0x360
[  441.912427][T21468]  ? __pfx____sys_sendmsg+0x10/0x10
[  441.912458][T21468]  ? kstrtouint+0x6e/0xe0
[  441.912519][T21468]  ? __fget_files+0x2a/0x420
[  441.912537][T21468]  ? __fget_files+0x3a0/0x420
[  441.912567][T21468]  __sys_sendmmsg+0x27c/0x4e0
[  441.912599][T21468]  ? __pfx___sys_sendmmsg+0x10/0x10
[  441.912621][T21468]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  441.912679][T21468]  ? ksys_write+0x242/0x270
[  441.912704][T21468]  ? __pfx_ksys_write+0x10/0x10
[  441.912740][T21468]  __x64_sys_sendmmsg+0xa0/0xc0
[  441.912773][T21468]  do_syscall_64+0x14d/0xf80
[  441.912796][T21468]  ? trace_irq_disable+0x3b/0x150
[  441.912812][T21468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.912831][T21468]  ? clear_bhb_loop+0x40/0x90
[  441.912853][T21468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.912872][T21468] RIP: 0033:0x7fbb9eb9c819
[  441.912891][T21468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.912906][T21468] RSP: 002b:00007fbb9fa86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  441.912929][T21468] RAX: ffffffffffffffda RBX: 00007fbb9ee15fa0 RCX: 00007fbb9eb9c819
[  441.912944][T21468] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  441.912956][T21468] RBP: 00007fbb9fa86090 R08: 0000000000000000 R09: 0000000000000000
[  441.912967][T21468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  441.912979][T21468] R13: 00007fbb9ee16038 R14: 00007fbb9ee15fa0 R15: 00007fff006b82b8
[  441.913012][T21468]  </TASK>
[  441.992273][   T83] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.012846][T21475] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4148'.
[  442.287814][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  442.297405][T17067] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.315727][T21486] ip6tnl0: Caught tx_queue_len zero misconfig
[  442.373547][T17067] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.392158][T17067] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.565506][T21495] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4154'.
[  442.865456][T21513] xt_policy: too many policy elements
[  443.124961][T21536] xt_cluster: node mask cannot exceed total number of nodes
[  443.584686][T21550] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.750131][T21550] net_ratelimit: 11 callbacks suppressed
[  443.750148][T21550] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  443.819008][T21560] xt_connbytes: Forcing CT accounting to be enabled
[  443.852459][T21560] xt_CT: No such helper "netbios-ns"
[  445.252924][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  445.261039][    C0] lec:lec_tx_timeout: lec0
[  446.026801][T21522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  446.036642][T21529] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4164'.
[  446.405874][T21591] bridge_slave_0: invalid flags given to default FDB implementation
[  446.556382][T21593] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  446.621966][T21601] batadv_slave_0: entered promiscuous mode
[  446.639117][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4184'.
[  446.706471][T21600] batadv_slave_0: left promiscuous mode
[  447.025676][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4193'.
[  447.182324][T21651] xt_hashlimit: size too large, truncated to 1048576
[  447.391568][T21658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4197'.
[  447.599486][T21668] syzkaller0: entered promiscuous mode
[  447.605499][T21668] syzkaller0: entered allmulticast mode
[  448.410548][T21675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4202'.
[  448.441865][T21679] netlink: 'syz.3.4203': attribute type 10 has an invalid length.
[  448.488392][T21679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4203'.
[  448.513219][T21679] dummy0: entered promiscuous mode
[  448.518420][T21679] dummy0: left allmulticast mode
[  448.553911][T21683] netlink: 'syz.0.4204': attribute type 30 has an invalid length.
[  448.574597][T21679] bridge0: port 2(dummy0) entered blocking state
[  448.576218][T21685] netlink: 'syz.2.4205': attribute type 10 has an invalid length.
[  448.601681][T21679] bridge0: port 2(dummy0) entered disabled state
[  448.652073][T21679] dummy0: entered allmulticast mode
[  448.709800][T21683] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  448.710867][T21685] bond0: (slave wlan1): Opening slave failed
[  448.775713][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4208'.
[  448.813219][T21696] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4208'.
[  449.021391][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'.
[  449.143820][T21724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4215'.
[  449.199340][T21724] veth5: entered promiscuous mode
[  449.305815][T21735] x_tables: duplicate underflow at hook 2
[  449.413139][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  449.520970][T21744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.650670][T21739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.853610][T17068] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.862029][T17068] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  449.888315][T17068] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  449.897688][T17068] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.031148][T17068] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.049837][T21765] xt_hashlimit: size too large, truncated to 1048576
[  450.102865][T17068] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.120262][T17068] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.162066][T17068] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.349605][T21775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.522230][T21775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.621198][T21804] FAULT_INJECTION: forcing a failure.
[  450.621198][T21804] name failslab, interval 1, probability 0, space 0, times 0
[  450.635828][T21804] CPU: 0 UID: 0 PID: 21804 Comm: syz.4.4242 Not tainted syzkaller #0 PREEMPT(full) 
[  450.635857][T21804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  450.635869][T21804] Call Trace:
[  450.635877][T21804]  <TASK>
[  450.635886][T21804]  dump_stack_lvl+0xe8/0x150
[  450.635921][T21804]  should_fail_ex+0x412/0x560
[  450.635958][T21804]  should_failslab+0xa8/0x100
[  450.635985][T21804]  __kmalloc_cache_noprof+0x88/0x660
[  450.636011][T21804]  ? sctp_add_bind_addr+0x8c/0x370
[  450.636046][T21804]  sctp_add_bind_addr+0x8c/0x370
[  450.636071][T21804]  sctp_copy_local_addr_list+0x314/0x4f0
[  450.636095][T21804]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  450.636115][T21804]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  450.636139][T21804]  ? sctp_v4_is_any+0x35/0x60
[  450.636157][T21804]  ? sctp_copy_one_addr+0x93/0x360
[  450.636179][T21804]  sctp_bind_addr_copy+0xb3/0x3c0
[  450.636199][T21804]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  450.636229][T21804]  sctp_connect_new_asoc+0x2ff/0x6b0
[  450.636255][T21804]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  450.636285][T21804]  ? __local_bh_enable_ip+0xd0/0x130
[  450.636308][T21804]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  450.636331][T21804]  ? security_sctp_bind_connect+0x7e/0x2c0
[  450.636360][T21804]  sctp_sendmsg+0x1528/0x2c10
[  450.636401][T21804]  ? __pfx_sctp_sendmsg+0x10/0x10
[  450.636429][T21804]  ? aa_sk_perm+0x6d5/0x900
[  450.636467][T21804]  ? __pfx_aa_sk_perm+0x10/0x10
[  450.636505][T21804]  ? sock_rps_record_flow+0x19/0x400
[  450.636535][T21804]  ? inet_sendmsg+0x2f4/0x370
[  450.636565][T21804]  ____sys_sendmsg+0x80a/0x9f0
[  450.636602][T21804]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.636638][T21804]  ? import_iovec+0x73/0xa0
[  450.636666][T21804]  ___sys_sendmsg+0x2a5/0x360
[  450.636699][T21804]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.636730][T21804]  ? kstrtouint+0x6e/0xe0
[  450.636789][T21804]  ? __fget_files+0x2a/0x420
[  450.636806][T21804]  ? __fget_files+0x3a0/0x420
[  450.636837][T21804]  __sys_sendmmsg+0x27c/0x4e0
[  450.636869][T21804]  ? __pfx___sys_sendmmsg+0x10/0x10
[  450.636891][T21804]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  450.636948][T21804]  ? ksys_write+0x242/0x270
[  450.636973][T21804]  ? __pfx_ksys_write+0x10/0x10
[  450.637004][T21804]  __x64_sys_sendmmsg+0xa0/0xc0
[  450.637040][T21804]  do_syscall_64+0x14d/0xf80
[  450.637064][T21804]  ? trace_irq_disable+0x3b/0x150
[  450.637080][T21804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.637101][T21804]  ? clear_bhb_loop+0x40/0x90
[  450.637126][T21804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.637145][T21804] RIP: 0033:0x7f4ddeb9c819
[  450.637166][T21804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.637181][T21804] RSP: 002b:00007f4ddcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  450.637203][T21804] RAX: ffffffffffffffda RBX: 00007f4ddee15fa0 RCX: 00007f4ddeb9c819
[  450.637216][T21804] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  450.637228][T21804] RBP: 00007f4ddcdf6090 R08: 0000000000000000 R09: 0000000000000000
[  450.637240][T21804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  450.637251][T21804] R13: 00007f4ddee16038 R14: 00007f4ddee15fa0 R15: 00007ffc6be5c168
[  450.637285][T21804]  </TASK>
[  451.068741][T21775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.191366][T21818] __nla_validate_parse: 8 callbacks suppressed
[  451.191384][T21818] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4247'.
[  451.263351][T21775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.267869][T21823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4249'.
[  451.409658][T21834] netlink: 'syz.0.4250': attribute type 3 has an invalid length.
[  451.489664][T17068] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.522692][T21842] FAULT_INJECTION: forcing a failure.
[  451.522692][T21842] name failslab, interval 1, probability 0, space 0, times 0
[  451.536190][T21842] CPU: 0 UID: 0 PID: 21842 Comm: syz.2.4254 Not tainted syzkaller #0 PREEMPT(full) 
[  451.536218][T21842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  451.536229][T21842] Call Trace:
[  451.536238][T21842]  <TASK>
[  451.536247][T21842]  dump_stack_lvl+0xe8/0x150
[  451.536281][T21842]  should_fail_ex+0x412/0x560
[  451.536317][T21842]  should_failslab+0xa8/0x100
[  451.536344][T21842]  __kmalloc_cache_noprof+0x88/0x660
[  451.536384][T21842]  ? sctp_add_bind_addr+0x8c/0x370
[  451.536410][T21842]  sctp_add_bind_addr+0x8c/0x370
[  451.536432][T21842]  sctp_copy_local_addr_list+0x314/0x4f0
[  451.536456][T21842]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  451.536475][T21842]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  451.536500][T21842]  ? sctp_v4_is_any+0x35/0x60
[  451.536519][T21842]  ? sctp_copy_one_addr+0x93/0x360
[  451.536543][T21842]  sctp_bind_addr_copy+0xb3/0x3c0
[  451.536565][T21842]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  451.536597][T21842]  sctp_connect_new_asoc+0x2ff/0x6b0
[  451.536626][T21842]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  451.536655][T21842]  ? __local_bh_enable_ip+0xd0/0x130
[  451.536679][T21842]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  451.536702][T21842]  ? security_sctp_bind_connect+0x7e/0x2c0
[  451.536731][T21842]  sctp_sendmsg+0x1528/0x2c10
[  451.536768][T21842]  ? __pfx_sctp_sendmsg+0x10/0x10
[  451.536794][T21842]  ? aa_sk_perm+0x6d5/0x900
[  451.536839][T21842]  ? __pfx_aa_sk_perm+0x10/0x10
[  451.536871][T21842]  ? sock_rps_record_flow+0x19/0x400
[  451.536899][T21842]  ? inet_sendmsg+0x2f4/0x370
[  451.536928][T21842]  ____sys_sendmsg+0x80a/0x9f0
[  451.536964][T21842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.536999][T21842]  ? import_iovec+0x73/0xa0
[  451.537026][T21842]  ___sys_sendmsg+0x2a5/0x360
[  451.537058][T21842]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.537094][T21842]  ? kstrtouint+0x6e/0xe0
[  451.537152][T21842]  ? __fget_files+0x2a/0x420
[  451.537168][T21842]  ? __fget_files+0x3a0/0x420
[  451.537199][T21842]  __sys_sendmmsg+0x27c/0x4e0
[  451.537230][T21842]  ? __pfx___sys_sendmmsg+0x10/0x10
[  451.537252][T21842]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  451.537309][T21842]  ? ksys_write+0x242/0x270
[  451.537333][T21842]  ? __pfx_ksys_write+0x10/0x10
[  451.537457][T21842]  __x64_sys_sendmmsg+0xa0/0xc0
[  451.537488][T21842]  do_syscall_64+0x14d/0xf80
[  451.537513][T21842]  ? trace_irq_disable+0x3b/0x150
[  451.537529][T21842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.537551][T21842]  ? clear_bhb_loop+0x40/0x90
[  451.537582][T21842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.537605][T21842] RIP: 0033:0x7fbb9eb9c819
[  451.537626][T21842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.537642][T21842] RSP: 002b:00007fbb9fa86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  451.537664][T21842] RAX: ffffffffffffffda RBX: 00007fbb9ee15fa0 RCX: 00007fbb9eb9c819
[  451.537678][T21842] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  451.537689][T21842] RBP: 00007fbb9fa86090 R08: 0000000000000000 R09: 0000000000000000
[  451.537700][T21842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  451.537712][T21842] R13: 00007fbb9ee16038 R14: 00007fbb9ee15fa0 R15: 00007fff006b82b8
[  451.537747][T21842]  </TASK>
[  451.538687][ T5945] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.881988][T21851] syz_tun: entered allmulticast mode
[  451.897874][ T5945] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.909625][T21847] syz_tun: left allmulticast mode
[  451.931584][T21840] syzkaller0: entered promiscuous mode
[  451.938478][T21840] syzkaller0: entered allmulticast mode
[  451.966760][ T5945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.121225][T21860] xt_TCPMSS: Only works on TCP SYN packets
[  452.157785][T21862] netlink: 'syz.0.4260': attribute type 10 has an invalid length.
[  452.183037][T21862] netlink: 396 bytes leftover after parsing attributes in process `syz.0.4260'.
[  452.273504][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4261'.
[  452.325394][T21870] openvswitch: netlink: IP tunnel dst address not specified
[  452.355503][T21868] vlan4: entered promiscuous mode
[  452.381063][T21873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4265'.
[  452.384445][T21868] bridge0: entered promiscuous mode
[  452.629857][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4270'.
[  452.851369][T21914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4276'.
[  453.150841][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4280'.
[  453.167630][T21934] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4279'.
[  453.218281][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'.
[  453.338412][T21936] bridge4: port 1(veth7) entered blocking state
[  453.345824][T21936] bridge4: port 1(veth7) entered disabled state
[  453.363138][T21936] veth7: entered allmulticast mode
[  453.388802][T21936] veth7: entered promiscuous mode
[  453.427851][T21937] bridge4: port 2(veth9) entered blocking state
[  453.434597][T21937] bridge4: port 2(veth9) entered disabled state
[  453.441084][T21937] veth9: entered allmulticast mode
[  453.447866][T21937] veth9: entered promiscuous mode
[  453.528440][T21948] FAULT_INJECTION: forcing a failure.
[  453.528440][T21948] name failslab, interval 1, probability 0, space 0, times 0
[  453.553616][T21948] CPU: 1 UID: 0 PID: 21948 Comm: syz.3.4283 Not tainted syzkaller #0 PREEMPT(full) 
[  453.553646][T21948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  453.553657][T21948] Call Trace:
[  453.553666][T21948]  <TASK>
[  453.553674][T21948]  dump_stack_lvl+0xe8/0x150
[  453.553710][T21948]  should_fail_ex+0x412/0x560
[  453.553746][T21948]  should_failslab+0xa8/0x100
[  453.553785][T21948]  __kmalloc_cache_noprof+0x88/0x660
[  453.553811][T21948]  ? sctp_add_bind_addr+0x8c/0x370
[  453.553837][T21948]  sctp_add_bind_addr+0x8c/0x370
[  453.553863][T21948]  sctp_copy_local_addr_list+0x314/0x4f0
[  453.553888][T21948]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  453.553909][T21948]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  453.553935][T21948]  ? sctp_v4_is_any+0x35/0x60
[  453.553955][T21948]  ? sctp_copy_one_addr+0x93/0x360
[  453.553980][T21948]  sctp_bind_addr_copy+0xb3/0x3c0
[  453.554002][T21948]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  453.554033][T21948]  sctp_connect_new_asoc+0x2ff/0x6b0
[  453.554062][T21948]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  453.554095][T21948]  ? __local_bh_enable_ip+0xd0/0x130
[  453.554119][T21948]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  453.554143][T21948]  ? security_sctp_bind_connect+0x7e/0x2c0
[  453.554173][T21948]  sctp_sendmsg+0x1528/0x2c10
[  453.554215][T21948]  ? __pfx_sctp_sendmsg+0x10/0x10
[  453.554244][T21948]  ? aa_sk_perm+0x6d5/0x900
[  453.554281][T21948]  ? __pfx_aa_sk_perm+0x10/0x10
[  453.554313][T21948]  ? sock_rps_record_flow+0x19/0x400
[  453.554343][T21948]  ? inet_sendmsg+0x2f4/0x370
[  453.554373][T21948]  ____sys_sendmsg+0x80a/0x9f0
[  453.554410][T21948]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.554445][T21948]  ? import_iovec+0x73/0xa0
[  453.554473][T21948]  ___sys_sendmsg+0x2a5/0x360
[  453.554504][T21948]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.554535][T21948]  ? kstrtouint+0x6e/0xe0
[  453.554595][T21948]  ? __fget_files+0x2a/0x420
[  453.554612][T21948]  ? __fget_files+0x3a0/0x420
[  453.554642][T21948]  __sys_sendmmsg+0x27c/0x4e0
[  453.554673][T21948]  ? __pfx___sys_sendmmsg+0x10/0x10
[  453.554695][T21948]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  453.554752][T21948]  ? ksys_write+0x242/0x270
[  453.554785][T21948]  ? __pfx_ksys_write+0x10/0x10
[  453.554815][T21948]  __x64_sys_sendmmsg+0xa0/0xc0
[  453.554842][T21948]  do_syscall_64+0x14d/0xf80
[  453.554866][T21948]  ? trace_irq_disable+0x3b/0x150
[  453.554883][T21948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.554903][T21948]  ? clear_bhb_loop+0x40/0x90
[  453.554927][T21948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.554946][T21948] RIP: 0033:0x7fdec0d9c819
[  453.554966][T21948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.554982][T21948] RSP: 002b:00007fdec1ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  453.555004][T21948] RAX: ffffffffffffffda RBX: 00007fdec1015fa0 RCX: 00007fdec0d9c819
[  453.555018][T21948] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  453.555030][T21948] RBP: 00007fdec1ba3090 R08: 0000000000000000 R09: 0000000000000000
[  453.555042][T21948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  453.555053][T21948] R13: 00007fdec1016038 R14: 00007fdec1015fa0 R15: 00007ffc7a497d78
[  453.555088][T21948]  </TASK>
[  454.087966][T21970] netlink: 'syz.3.4287': attribute type 1 has an invalid length.
[  454.190274][T21974] netlink: 'syz.4.4290': attribute type 32 has an invalid length.
[  454.443921][T10804] lec:lec_start_xmit: lec0:No lecd attached
[  454.575391][T21991] veth0_to_bridge: entered allmulticast mode
[  454.696149][T22001] FAULT_INJECTION: forcing a failure.
[  454.696149][T22001] name failslab, interval 1, probability 0, space 0, times 0
[  454.783099][T22001] CPU: 1 UID: 0 PID: 22001 Comm: syz.3.4298 Not tainted syzkaller #0 PREEMPT(full) 
[  454.783127][T22001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  454.783139][T22001] Call Trace:
[  454.783146][T22001]  <TASK>
[  454.783154][T22001]  dump_stack_lvl+0xe8/0x150
[  454.783189][T22001]  should_fail_ex+0x412/0x560
[  454.783224][T22001]  should_failslab+0xa8/0x100
[  454.783253][T22001]  __kmalloc_cache_noprof+0x88/0x660
[  454.783277][T22001]  ? sctp_add_bind_addr+0x8c/0x370
[  454.783304][T22001]  sctp_add_bind_addr+0x8c/0x370
[  454.783328][T22001]  sctp_copy_local_addr_list+0x314/0x4f0
[  454.783354][T22001]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  454.783373][T22001]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  454.783399][T22001]  ? sctp_v4_is_any+0x35/0x60
[  454.783419][T22001]  ? sctp_copy_one_addr+0x93/0x360
[  454.783443][T22001]  sctp_bind_addr_copy+0xb3/0x3c0
[  454.783463][T22001]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  454.783493][T22001]  sctp_connect_new_asoc+0x2ff/0x6b0
[  454.783518][T22001]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  454.783551][T22001]  ? __local_bh_enable_ip+0xd0/0x130
[  454.783574][T22001]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  454.783597][T22001]  ? security_sctp_bind_connect+0x7e/0x2c0
[  454.783627][T22001]  sctp_sendmsg+0x1528/0x2c10
[  454.783668][T22001]  ? __pfx_sctp_sendmsg+0x10/0x10
[  454.783696][T22001]  ? aa_sk_perm+0x6d5/0x900
[  454.783731][T22001]  ? __pfx_aa_sk_perm+0x10/0x10
[  454.783761][T22001]  ? sock_rps_record_flow+0x19/0x400
[  454.783790][T22001]  ? inet_sendmsg+0x2f4/0x370
[  454.783817][T22001]  ____sys_sendmsg+0x80a/0x9f0
[  454.783854][T22001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  454.783888][T22001]  ? import_iovec+0x73/0xa0
[  454.783916][T22001]  ___sys_sendmsg+0x2a5/0x360
[  454.783946][T22001]  ? __pfx____sys_sendmsg+0x10/0x10
[  454.783975][T22001]  ? kstrtouint+0x6e/0xe0
[  454.784041][T22001]  ? __fget_files+0x2a/0x420
[  454.784058][T22001]  ? __fget_files+0x3a0/0x420
[  454.784087][T22001]  __sys_sendmmsg+0x27c/0x4e0
[  454.784119][T22001]  ? __pfx___sys_sendmmsg+0x10/0x10
[  454.784140][T22001]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  454.784195][T22001]  ? ksys_write+0x242/0x270
[  454.784220][T22001]  ? __pfx_ksys_write+0x10/0x10
[  454.784250][T22001]  __x64_sys_sendmmsg+0xa0/0xc0
[  454.784276][T22001]  do_syscall_64+0x14d/0xf80
[  454.784299][T22001]  ? trace_irq_disable+0x3b/0x150
[  454.784315][T22001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.784335][T22001]  ? clear_bhb_loop+0x40/0x90
[  454.784357][T22001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.784376][T22001] RIP: 0033:0x7fdec0d9c819
[  454.784394][T22001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.784410][T22001] RSP: 002b:00007fdec1ba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  454.784431][T22001] RAX: ffffffffffffffda RBX: 00007fdec1015fa0 RCX: 00007fdec0d9c819
[  454.784445][T22001] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003
[  454.784457][T22001] RBP: 00007fdec1ba3090 R08: 0000000000000000 R09: 0000000000000000
[  454.784469][T22001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  454.784480][T22001] R13: 00007fdec1016038 R14: 00007fdec1015fa0 R15: 00007ffc7a497d78
[  454.784513][T22001]  </TASK>
[  455.314873][T22013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.822216][T22058] team0: No ports can be present during mode change
[  456.012483][T22069] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  456.055412][T22069] bond9 (unregistering): Released all slaves
[  456.609256][T22094] __nla_validate_parse: 5 callbacks suppressed
[  456.609276][T22094] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4326'.
[  456.676410][T22101] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  456.690838][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'.
[  456.710113][T22099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.821661][T22105] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4332'.
[  456.844877][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4331'.
[  456.887499][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4335'.
[  456.893610][T22112] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4333'.
[  456.918156][T22109] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4334'.
[  457.027831][T22126] netlink: 'syz.4.4337': attribute type 22 has an invalid length.
[  457.060667][T22126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4337'.
[  457.090417][T22129] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  457.112281][T17068] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.121794][T17068] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.131016][T17068] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.140691][T17068] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.386694][T22141] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4342'.
[  457.397218][T22143] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4342'.
[  457.443499][T22145] bond5: entered allmulticast mode
[  457.448997][T22145] vti0: entered allmulticast mode
[  457.465643][T22145] bond5: left allmulticast mode
[  457.470540][T22145] vti0: left allmulticast mode
[  457.504780][T22150] syzkaller1: entered promiscuous mode
[  457.510568][T22150] syzkaller1: entered allmulticast mode
[  458.094457][T22175] netlink: 'syz.2.4353': attribute type 2 has an invalid length.
[  458.230105][T22183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.808191][T22212] bond2: (slave bond_slave_1): Device is not our slave
[  458.815728][T22212] bond2: option active_slave: invalid value (bond_slave_1)
[  458.827339][T22212] bond2 (unregistering): Released all slaves
[  459.301315][T22240] ip6t_srh: unknown srh invflags 4000
[  459.956493][T22276] 8021q: adding VLAN 0 to HW filter on device team0
[  459.989123][T22276] team0: Cannot enslave team device to itself
[  460.026644][T22274] netlink: 'syz.4.4377': attribute type 2 has an invalid length.
[  460.042814][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms
[  460.050879][    C0] lec:lec_tx_timeout: lec0
[  460.079385][T22289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.281478][T22301] netlink: 'syz.1.4383': attribute type 2 has an invalid length.
[  460.329769][T22301] �9: entered promiscuous mode
[  460.428234][T22306] syzkaller0: entered promiscuous mode
[  460.433921][T22306] syzkaller0: entered allmulticast mode
[  460.549003][T22316] openvswitch: netlink: Missing valid actions attribute.
[  460.556502][T22316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.616195][T22316] openvswitch: netlink: Missing valid actions attribute.
[  460.651179][T22316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.813864][T22329] netlink: 'syz.0.4393': attribute type 1 has an invalid length.
[  460.832350][T22329] netlink: 'syz.0.4393': attribute type 1 has an invalid length.
[  460.956706][T22328] bond0: Caught tx_queue_len zero misconfig
[  461.061620][T22343] syzkaller0: entered promiscuous mode
[  461.078949][T22343] syzkaller0: entered allmulticast mode
[  461.314988][T22362] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  461.469960][T22367] netlink: 'syz.4.4402': attribute type 12 has an invalid length.
[  461.496996][T22376] netlink: 'syz.3.4404': attribute type 2 has an invalid length.
[  461.523964][T22367] netlink: 'syz.4.4402': attribute type 29 has an invalid length.
[  461.552372][T22376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.714019][T22383] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  461.763245][T22384] netlink: 'syz.1.4406': attribute type 8 has an invalid length.
[  462.176751][T22417] __nla_validate_parse: 16 callbacks suppressed
[  462.176773][T22417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4412'.
[  462.267301][T22422] xt_hashlimit: size too large, truncated to 1048576
[  462.764025][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  463.277819][T22459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4423'.
[  463.291540][T22458] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4423'.
[  463.301637][T22458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4423'.
[  463.312273][T22458] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4423'.
[  463.324535][T22458] netlink: 'syz.4.4423': attribute type 5 has an invalid length.
[  463.794959][T22478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4430'.
[  463.804326][T22478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4430'.
[  465.286010][T22424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  465.760814][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4437'.
[  465.800440][T22515] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  465.808650][T22515] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  465.913993][T22521] netlink: 'syz.4.4440': attribute type 29 has an invalid length.
[  465.956028][T22521] netlink: 'syz.4.4440': attribute type 29 has an invalid length.
[  466.075693][T22532] netlink: 'syz.0.4442': attribute type 1 has an invalid length.
[  466.094259][T22532] netlink: 'syz.0.4442': attribute type 3 has an invalid length.
[  466.103718][T22532] netlink: 'syz.0.4442': attribute type 7 has an invalid length.
[  466.111698][T22532] netlink: 'syz.0.4442': attribute type 8 has an invalid length.
[  466.122702][T22532] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4442'.
[  466.157122][T22532] NCSI netlink: No device for ifindex 131092
[  466.320332][T22547] nbd: couldn't find a device at index 0
[  466.596103][T22557] netlink: 'syz.4.4449': attribute type 1 has an invalid length.
[  466.604727][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4449'.
[  466.614220][T22557] netlink: 'syz.4.4449': attribute type 1 has an invalid length.
[  467.038569][T22591] netlink: 'syz.3.4456': attribute type 11 has an invalid length.
[  467.103679][T22589] netlink: 'syz.1.4454': attribute type 1 has an invalid length.
[  467.142073][T22593] dvmrp0: entered allmulticast mode
[  467.235971][T22599] __nla_validate_parse: 10 callbacks suppressed
[  467.235994][T22599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4459'.
[  467.274529][T22602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'.
[  467.531247][T22617] netlink: 'syz.4.4464': attribute type 4 has an invalid length.
[  467.911089][T22642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  468.075031][T22642] syzkaller0: entered promiscuous mode
[  468.102150][T22642] syzkaller0: entered allmulticast mode
[  468.123525][T22642] tipc: Resetting bearer <eth:syzkaller0>
[  468.150354][T22645] IPv6: sit2: Disabled Multicast RS
[  468.167344][T22645] sit2: entered allmulticast mode
[  468.233455][T22655] nbd: illegal input index 2958377
[  468.346110][T22640] tipc: Resetting bearer <eth:syzkaller0>
[  470.469491][T22640] tipc: Disabling bearer <eth:syzkaller0>
[  470.554104][T22672] bond2: (slave bond_slave_1): Device is not our slave
[  470.561052][T22672] bond2: option active_slave: invalid value (bond_slave_1)
[  470.620725][T22672] bond2 (unregistering): Released all slaves
[  471.130485][T22710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.249587][T22712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.553972][T22684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  471.726666][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4489'.
[  471.845937][T22738] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4492'.
[  471.862288][T22729] validate_nla: 1 callbacks suppressed
[  471.862308][T22729] netlink: 'syz.4.4490': attribute type 7 has an invalid length.
[  471.886699][T22729] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4490'.
[  471.957139][T22743] batadv_slave_0: entered promiscuous mode
[  472.088196][T22750] sctp: [Deprecated]: syz.3.4496 (pid 22750) Use of int in max_burst socket option.
[  472.088196][T22750] Use struct sctp_assoc_value instead
[  472.232504][T22759] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  472.294988][T22763] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4499'.
[  472.315335][T22761] netlink: 'syz.3.4500': attribute type 11 has an invalid length.
[  472.323551][T22761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4500'.
[  472.350072][T22742] batadv_slave_0: left promiscuous mode
[  472.378440][T22761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4500'.
[  472.396725][T22761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4500'.
[  472.687688][T22786] netem: incorrect gi model size
[  472.713781][T22786] netem: change failed
[  472.731293][T22786] netlink: 'syz.0.4506': attribute type 1 has an invalid length.
[  472.744320][T22786] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4506'.
[  472.755116][T22790] ip6gre2: entered allmulticast mode
[  472.824868][T22794] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  472.928818][T22796] netlink: 'syz.3.4512': attribute type 3 has an invalid length.
[  472.950917][T22796] netlink: 'syz.3.4512': attribute type 1 has an invalid length.
[  472.955559][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'.
[  472.961696][T22796] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4512'.
[  472.967914][T22798] netlink: 'syz.4.4511': attribute type 6 has an invalid length.
[  472.984430][T22796] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode
[  472.985798][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4511'.
[  473.006989][T22796] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode
[  473.017505][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'.
[  473.028167][T22798] netlink: 'syz.4.4511': attribute type 6 has an invalid length.
[  473.037180][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4511'.
[  473.164476][T22803] mac80211_hwsim hwsim30 wlan1: Caught tx_queue_len zero misconfig
[  473.376558][   T51] Bluetooth: hci1: link tx timeout
[  473.382255][   T51] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  473.392588][   T51] Bluetooth: hci1: link tx timeout
[  473.398958][   T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  474.452705][T22875] netlink: 'syz.3.4533': attribute type 1 has an invalid length.
[  474.655212][T22878] team0: Caught tx_queue_len zero misconfig
[  475.482936][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  476.243058][T17067] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  476.255005][T22818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  476.776062][T17067] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  476.785759][T17067] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  476.796418][T17067] bond0 (unregistering): Released all slaves
[  476.809039][T17067] bond1 (unregistering): Released all slaves
[  476.826578][T17067] bond2 (unregistering): Released all slaves
[  476.841110][T17067] bond3 (unregistering): Released all slaves
[  476.860609][T17067] bond4 (unregistering): Released all slaves
[  476.875114][T17067] bond5 (unregistering): Released all slaves
[  476.889175][T17067] bond6 (unregistering): Released all slaves
[  476.910656][T17067] bond7 (unregistering): Released all slaves
[  476.930613][T17067] bond8 (unregistering): Released all slaves
[  476.945340][T17067] bond9 (unregistering): Released all slaves
[  477.112491][T22944] netlink: 'syz.2.4549': attribute type 4 has an invalid length.
[  477.133581][T22944] netlink: 'syz.2.4549': attribute type 4 has an invalid length.
[  477.192217][T17067] tipc: Left network mode
[  477.310014][T22949] gretap3: entered promiscuous mode
[  477.564439][T22952] syz.3.4553 (22952) used greatest stack depth: 17472 bytes left
[  477.577703][ T5833] Bluetooth: hci1: command 0x0405 tx timeout
[  477.666455][T22965] syzkaller0: entered promiscuous mode
[  477.671997][T22965] syzkaller0: entered allmulticast mode
[  477.686574][T22972] __nla_validate_parse: 6 callbacks suppressed
[  477.686596][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4559'.
[  477.688719][T22965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4556'.
[  477.732508][T22977] xt_SECMARK: invalid mode: 9
[  477.890294][T22986] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4561'.
[  477.910368][T22986] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4561'.
[  478.598549][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4574'.
[  478.920477][T23052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4578'.
[  478.929652][T23052] netlink: 'syz.0.4578': attribute type 7 has an invalid length.
[  478.938176][T23052] netlink: 'syz.0.4578': attribute type 8 has an invalid length.
[  478.956521][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4578'.
[  479.126951][T17067] pim6reg (unregistering): left allmulticast mode
[  479.792152][T23052] ip6gretap0: entered promiscuous mode
[  479.804674][T23052] gretap0: entered promiscuous mode
[  479.811022][T23052] erspan0: entered promiscuous mode
[  479.960843][T23076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4585'.
[  480.012569][T23078] FAULT_INJECTION: forcing a failure.
[  480.012569][T23078] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.072909][T23078] CPU: 1 UID: 0 PID: 23078 Comm: syz.0.4586 Not tainted syzkaller #0 PREEMPT(full) 
[  480.072937][T23078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  480.072949][T23078] Call Trace:
[  480.072957][T23078]  <TASK>
[  480.072966][T23078]  dump_stack_lvl+0xe8/0x150
[  480.073007][T23078]  should_fail_ex+0x412/0x560
[  480.073040][T23078]  _copy_to_user+0x31/0xb0
[  480.073066][T23078]  simple_read_from_buffer+0xe1/0x170
[  480.073102][T23078]  proc_fail_nth_read+0x1bb/0x230
[  480.073134][T23078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.073165][T23078]  ? rw_verify_area+0x2a6/0x4d0
[  480.073185][T23078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.073215][T23078]  vfs_read+0x20c/0xa70
[  480.073235][T23078]  ? fdget_pos+0x246/0x320
[  480.073259][T23078]  ? __pfx___mutex_lock+0x10/0x10
[  480.073287][T23078]  ? __pfx_vfs_read+0x10/0x10
[  480.073311][T23078]  ? __fget_files+0x2a/0x420
[  480.073333][T23078]  ? __fget_files+0x3a0/0x420
[  480.073350][T23078]  ? __fget_files+0x2a/0x420
[  480.073378][T23078]  ksys_read+0x150/0x270
[  480.073403][T23078]  ? __pfx_ksys_read+0x10/0x10
[  480.073438][T23078]  do_syscall_64+0x14d/0xf80
[  480.073462][T23078]  ? trace_irq_disable+0x3b/0x150
[  480.073479][T23078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.073499][T23078]  ? clear_bhb_loop+0x40/0x90
[  480.073524][T23078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.073543][T23078] RIP: 0033:0x7f3f4b15d04e
[  480.073563][T23078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  480.073580][T23078] RSP: 002b:00007f3f4c0b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  480.073602][T23078] RAX: ffffffffffffffda RBX: 00007f3f4c0b76c0 RCX: 00007f3f4b15d04e
[  480.073616][T23078] RDX: 000000000000000f RSI: 00007f3f4c0b70a0 RDI: 0000000000000004
[  480.073628][T23078] RBP: 00007f3f4c0b7090 R08: 0000000000000000 R09: 0000000000000000
[  480.073640][T23078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  480.073651][T23078] R13: 00007f3f4b416038 R14: 00007f3f4b415fa0 R15: 00007ffe85a0d918
[  480.073683][T23078]  </TASK>
[  480.294413][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.340455][T23084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  480.361757][T23085] netlink: 'syz.2.4588': attribute type 2 has an invalid length.
[  480.388182][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'.
[  480.397996][T23084] netlink: 'syz.4.4589': attribute type 1 has an invalid length.
[  480.424046][T23084] netlink: 'syz.4.4589': attribute type 2 has an invalid length.
[  480.705423][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'.
[  480.752476][T17067] IPVS: stop unused estimator thread 0...
[  480.871636][T23115] netlink: 'syz.0.4598': attribute type 1 has an invalid length.
[  480.948703][T23115] bond6: entered promiscuous mode
[  480.954564][T23115] 8021q: adding VLAN 0 to HW filter on device bond6
[  480.990355][T23115] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  481.025931][T23127] nbd: must specify at least one socket
[  481.050360][T23115] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  481.050551][T23129] netlink: 'syz.3.4603': attribute type 19 has an invalid length.
[  481.070338][T23115] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  481.145623][T23130] netlink: 'syz.4.4604': attribute type 39 has an invalid length.
[  481.169965][T23130] hsr_slave_1 (unregistering): left promiscuous mode
[  481.461283][T23149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.550719][T23164] syzkaller0: entered promiscuous mode
[  481.561516][T23164] syzkaller0: entered allmulticast mode
[  481.585389][T23164] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  481.697513][T23167] nftables ruleset with unbound set
[  482.034923][T23186] erspan0: entered promiscuous mode
[  482.040330][T23186] erspan0: entered allmulticast mode
[  482.546497][T23231] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001
[  482.637271][T23238] netlink: 'syz.0.4634': attribute type 2 has an invalid length.
[  483.066612][T23251] netlink: 'syz.3.4636': attribute type 1 has an invalid length.
[  483.083065][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.069442][T23204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  485.102870][T23246] netlink: 'syz.0.4635': attribute type 1 has an invalid length.
[  485.110844][T23246] __nla_validate_parse: 9 callbacks suppressed
[  485.110861][T23246] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4635'.
[  485.419708][T23271] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4643'.
[  485.957738][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4652'.
[  486.129173][T23306] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4656'.
[  486.163214][T23301] macvlan3: entered promiscuous mode
[  486.213066][T23301] macvlan3: entered allmulticast mode
[  486.234551][T23301] bond9: (slave macvlan3): Opening slave failed
[  486.923136][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.364614][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  489.075757][T23304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  489.341294][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4664'.
[  489.357293][T23348] netlink: 'syz.3.4665': attribute type 1 has an invalid length.
[  489.417355][T23354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4668'.
[  489.417688][T23348] 8021q: adding VLAN 0 to HW filter on device bond1
[  489.434407][T23350] x_tables: duplicate underflow at hook 1
[  489.619747][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'.
[  489.659276][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'.
[  490.092150][T23403] vlan1: entered promiscuous mode
[  490.130762][T23403] vlan1: left allmulticast mode
[  490.407373][T23413] netlink: 'syz.0.4686': attribute type 3 has an invalid length.
[  490.420505][T23413] netlink: 'syz.0.4686': attribute type 1 has an invalid length.
[  490.429171][T23413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4686'.
[  490.558401][T23441] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  490.768839][T23453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.779051][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4699'.
[  490.841004][T23459] netlink: 'syz.3.4698': attribute type 23 has an invalid length.
[  490.867497][T23458] netlink: 'syz.3.4698': attribute type 23 has an invalid length.
[  490.991234][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4701'.
[  491.584629][T23511] tipc: Resetting bearer <eth:ipvlan1>
[  491.624440][T23511] tipc: Resetting bearer <eth:ipvlan1>
[  491.941211][T23530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4721'.
[  491.994567][T23522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4719'.
[  492.134096][T23543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4725'.
[  492.185172][T23543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4725'.
[  492.297510][T23555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.386718][T23561] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  492.419299][T23563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4730'.
[  492.618828][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4733'.
[  493.242250][T23594] netlink: 'syz.0.4740': attribute type 1 has an invalid length.
[  493.261119][T23594] netlink: 'syz.0.4740': attribute type 2 has an invalid length.
[  493.392234][T23611] nbd: couldn't find a device at index 0
[  493.483052][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  493.610598][T23619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4748'.
[  494.548250][T23680] bond7: entered promiscuous mode
[  494.565077][T23680] 8021q: adding VLAN 0 to HW filter on device bond7
[  494.585026][T23687] bridge6: entered promiscuous mode
[  494.590691][T23687] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  494.601369][T23689] ieee802154 phy0 wpan0: encryption failed: -22
[  494.731923][T23698] tls_set_device_offload_rx: netdev not found
[  495.106851][T23717] netlink: 'syz.4.4775': attribute type 1 has an invalid length.
[  495.252488][T23723] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  495.287899][T23727] nbd: must specify an index to disconnect
[  495.295189][T23717] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface
[  495.346247][T23717] bond11 (unregistering): Released all slaves
[  495.784403][T23752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.920246][T23759] __nla_validate_parse: 9 callbacks suppressed
[  495.920267][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'.
[  495.936808][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'.
[  495.946300][T23758] openvswitch: netlink: Missing key (keys=40, expected=80)
[  495.954162][T23759] openvswitch: netlink: Missing key (keys=40, expected=80)
[  495.976082][T23758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4788'.
[  496.456251][T23785] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4795'.
[  496.595952][T23764] sctp: [Deprecated]: syz.4.4790 (pid 23764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  496.595952][T23764] Use struct sctp_sack_info instead
[  496.648808][T23801] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.4798'.
[  496.849659][T23813] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  496.880444][T23813] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  497.202211][T23836] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4809'.
[  497.233761][T23837] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4808'.
[  497.314581][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'.
[  497.913780][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'.
[  498.152435][T23876] netlink: 'syz.1.4817': attribute type 16 has an invalid length.
[  498.170313][T23876] netlink: 'syz.1.4817': attribute type 17 has an invalid length.
[  498.263972][T23876] erspan0: left promiscuous mode
[  498.271359][T23876] erspan0: left allmulticast mode
[  498.445299][T23876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  498.887589][T23892] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4821'.
[  499.083026][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.708310][T23914] tipc: Started in network mode
[  499.737125][T23914] tipc: Node identity , cluster identity 4711
[  499.783063][T23914] tipc: Failed to obtain node identity
[  499.788660][T23914] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  499.949383][T23922] netlink: 'syz.0.4830': attribute type 11 has an invalid length.
[  500.001250][T23926] netlink: 'syz.1.4832': attribute type 10 has an invalid length.
[  501.070116][T23945] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.077956][T23945] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.081250][T23956] __nla_validate_parse: 3 callbacks suppressed
[  501.081266][T23956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4842'.
[  501.244141][T23945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  501.262016][T23945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.355977][T23945] vlan2: left allmulticast mode
[  501.361773][T23945] bond1: left promiscuous mode
[  501.367140][T23945] bond1: left allmulticast mode
[  501.440431][T17067] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.471978][T17067] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.491577][T17067] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.528869][T17067] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.583277][T23976] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4845'.
[  501.607798][T23976] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4845'.
[  501.628074][T23976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.648003][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.665701][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  501.823232][T23985] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  501.900976][T23992] vlan4: entered allmulticast mode
[  501.951229][T23994] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4848'.
[  502.039835][T23994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.084307][T23994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.121050][T23994] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  502.163990][T23994] bridge_slave_1: left allmulticast mode
[  502.210983][T23994] bond0 (unregistering): Released all slaves
[  502.384310][T24010] –: renamed from vxcan1 (while UP)
[  502.908866][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4864'.
[  502.937354][T24038] netlink: 'syz.4.4864': attribute type 7 has an invalid length.
[  502.960885][T24038] netlink: 'syz.4.4864': attribute type 8 has an invalid length.
[  502.985203][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4864'.
[  503.216360][   T30] audit: type=1107 audit(1775286880.373:3): pid=24049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r4g<[ 2¯Y·
Ã{
xQפ8�!
[  503.216360][   T30] ]O ×\(y=|Ô“ŤV毮ÿj=3üÇLáEŽDŠÔH„V
[  503.216360][   T30] ^™úôò// Úb;'
[  503.278671][T24052] syzkaller0: entered promiscuous mode
[  503.287492][T24052] syzkaller0: entered allmulticast mode
[  503.355078][T24051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  503.585172][T24063] netlink: 'syz.1.4871': attribute type 8 has an invalid length.
[  503.687188][T24065] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  503.698716][T24067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'.
[  504.055523][T24080] SET target dimension over the limit!
[  504.317217][T24102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.597199][T24111] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  504.829068][T24123] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4891'.
[  506.419782][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'.
[  506.429597][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'.
[  506.520479][T24187] netlink: 'syz.0.4909': attribute type 18 has an invalid length.
[  506.552050][T24190] netlink: 'syz.4.4910': attribute type 22 has an invalid length.
[  506.566400][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4910'.
[  506.584580][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'.
[  506.594169][T24190] netlink: 'syz.4.4910': attribute type 22 has an invalid length.
[  506.602149][T24190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4910'.
[  506.611810][T24195] netlink: 'syz.3.4912': attribute type 3 has an invalid length.
[  506.636802][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'.
[  506.749192][T24202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4914'.
[  506.823860][T24207] netlink: 'syz.2.4916': attribute type 1 has an invalid length.
[  506.831809][T24207] netlink: 'syz.2.4916': attribute type 4 has an invalid length.
[  506.841030][T24207] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4916'.
[  507.082795][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms
[  507.091095][    C0] lec:lec_tx_timeout: lec0
[  507.413087][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.612115][T24251] syzkaller0: entered promiscuous mode
[  507.627109][T24258] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4926'.
[  507.672386][T24251] syzkaller0: entered allmulticast mode
[  507.850842][T24270] syzkaller1: entered promiscuous mode
[  507.863129][T24270] syzkaller1: entered allmulticast mode
[  507.893559][T24270] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  508.038936][T24276] veth5: entered promiscuous mode
[  508.086275][T24276] veth5: entered allmulticast mode
[  508.450507][T24299] xt_l2tp: v2 doesn't support IP mode
[  508.758328][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4941'.
[  508.810318][T24309] bridge7: port 1(veth7) entered blocking state
[  508.819128][T24309] bridge7: port 1(veth7) entered disabled state
[  508.826134][T24309] veth7: entered allmulticast mode
[  508.832979][T24309] veth7: entered promiscuous mode
[  508.885743][T24310] bridge7: port 2(veth9) entered blocking state
[  508.904614][T24310] bridge7: port 2(veth9) entered disabled state
[  508.917625][T24310] veth9: entered allmulticast mode
[  508.926422][T24310] veth9: entered promiscuous mode
[  509.443325][T24358] netlink: 'syz.2.4954': attribute type 1 has an invalid length.
[  509.550609][T24373] netlink: 'syz.1.4958': attribute type 1 has an invalid length.
[  509.598469][T24373] bond4: entered promiscuous mode
[  509.605635][T24373] 8021q: adding VLAN 0 to HW filter on device bond4
[  509.629669][T24375] 8021q: adding VLAN 0 to HW filter on device bond4
[  509.637211][T24375] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  509.648704][T24375] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  509.669495][T24375] bond4: (slave vcan0): making interface the new active one
[  509.677367][T24375] vcan0: entered promiscuous mode
[  509.684936][T24375] bond4: (slave vcan0): Enslaving as an active interface with an up link
[  510.462622][T24426] Bluetooth: MGMT ver 1.23
[  510.599887][T24431] netlink: 'syz.2.4973': attribute type 1 has an invalid length.
[  510.674573][T24433] vlan2: entered allmulticast mode
[  510.685076][T24433] gretap0: entered allmulticast mode
[  510.826400][ T5945] bond0: (slave bond_slave_0): interface is now down
[  510.827265][T24439] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.834553][ T5945] bond0: (slave bond_slave_1): interface is now down
[  510.862674][ T5945] bond0: now running without any active interface!
[  510.926004][T24443] netlink: 'syz.0.4979': attribute type 1 has an invalid length.
[  510.936354][T24443] netlink: 'syz.0.4979': attribute type 1 has an invalid length.
[  510.946683][T24445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.949892][T24443] netlink: Conntrack attr has 4 unknown bytes
[  510.972420][T24447] netlink: 'syz.4.4981': attribute type 4 has an invalid length.
[  511.181457][T24470] netlink: 'syz.1.4988': attribute type 8 has an invalid length.
[  511.582314][T24494] bridge5: entered promiscuous mode
[  511.601869][T24494] bridge5: entered allmulticast mode
[  511.619463][T24494] team0: Port device bridge5 added
[  511.634003][T24500] lo: Caught tx_queue_len zero misconfig
[  511.663703][T24494] __nla_validate_parse: 15 callbacks suppressed
[  511.663723][T24494] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4998'.
[  511.665169][T24496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'.
[  511.680296][T24494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4998'.
[  511.965518][T24520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  511.982822][T24520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5005'.
[  511.999236][T24520] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  512.010841][T24520] gretap4: entered promiscuous mode
[  512.040011][T24520] gretap4: entered allmulticast mode
[  512.205845][T24536] geneve2: entered promiscuous mode
[  512.306434][T24539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.700177][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5019'.
[  513.076377][ T5913] IPVS: starting estimator thread 0...
[  513.099512][T24584] bond2: entered promiscuous mode
[  513.105528][T24584] 8021q: adding VLAN 0 to HW filter on device bond2
[  513.179828][T24584] 8021q: adding VLAN 0 to HW filter on device bond2
[  513.186750][T24593] IPVS: using max 25 ests per chain, 60000 per kthread
[  513.195024][T24584] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  513.216092][T24584] bond2: (slave ip6gre2): Error -95 calling set_mac_address
[  513.469047][T24610] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5032'.
[  513.713148][T24631] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5035'.
[  514.411899][T24659] bond4: left promiscuous mode
[  514.417063][T24659] vcan0: left promiscuous mode
[  514.427382][T24659] bridge5: left promiscuous mode
[  514.432366][T24659] bridge5: left allmulticast mode
[  514.439770][T24659] geneve2: left promiscuous mode
[  514.452581][T24659] netlink: 'syz.1.5045': attribute type 21 has an invalid length.
[  514.461046][T24659] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5045'.
[  514.490153][T24659] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5045'.
[  514.631647][T24669] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5046'.
[  514.881707][T24680] No such timeout policy "syz0"
[  514.995303][T24689] lo: entered promiscuous mode
[  515.000805][T24689] tunl0: entered promiscuous mode
[  515.008570][T24689] gre0: entered promiscuous mode
[  515.015284][T24689] gretap0: entered promiscuous mode
[  515.023919][T24689] erspan0: entered promiscuous mode
[  515.029912][T24689] ip_vti0: entered promiscuous mode
[  515.186917][T24703] netlink: 'syz.1.5056': attribute type 1 has an invalid length.
[  515.249999][T24703] bond5: entered promiscuous mode
[  515.255828][T24703] 8021q: adding VLAN 0 to HW filter on device bond5
[  515.289933][T24703] 8021q: adding VLAN 0 to HW filter on device bond5
[  515.300254][T24703] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  515.311088][T24703] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  515.326627][T24703] bond5: (slave ip6gre1): making interface the new active one
[  515.335394][T24703] ip6gre1: entered promiscuous mode
[  515.344112][T24703] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  515.508074][T24719] netlink: 'syz.2.5063': attribute type 10 has an invalid length.
[  515.540910][T24719] bridge0: port 2(wlan1) entered blocking state
[  515.548079][T24719] bridge0: port 2(wlan1) entered disabled state
[  515.556229][T24719] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  515.565825][T24719] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode
[  515.756427][T24728] wireguard0: entered promiscuous mode
[  515.764124][T24728] wireguard0: entered allmulticast mode
[  515.773602][T24728] team0: Device wireguard0 is of different type
[  516.379461][T24772] syzkaller0: entered promiscuous mode
[  516.419175][T24772] 0: reclassify loop, rule prio 0, protocol 800
[  516.653776][T24789] netlink: 'syz.3.5084': attribute type 27 has an invalid length.
[  516.717965][T24789] __nla_validate_parse: 10 callbacks suppressed
[  516.717986][T24789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'.
[  516.993803][T24814] IPVS: set_ctl: invalid protocol: 2 172.20.20.58:20004
[  517.016838][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5090'.
[  517.312236][T24836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5094'.
[  517.375366][T24840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5094'.
[  518.063649][T24866] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5102'.
[  518.113193][T24865] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  518.300986][T24876] netlink: 'syz.4.5106': attribute type 1 has an invalid length.
[  518.313603][T24878] xt_CT: You must specify a L4 protocol and not use inversions on it
[  518.814004][T24909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.830093][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'.
[  518.866069][T24911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.925967][T24914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.217980][T10804] lec:lec_start_xmit: lec0:No lecd attached
[  519.313508][T24938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5124'.
[  519.342969][T24941] netlink: 'syz.2.5127': attribute type 21 has an invalid length.
[  519.361169][T24941] IPv6: NLM_F_CREATE should be specified when creating new route
[  519.371908][T24941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  519.379224][T24941] IPv6: NLM_F_CREATE should be set when creating new route
[  519.386588][T24941] IPv6: NLM_F_CREATE should be set when creating new route
[  519.393858][T24941] IPv6: NLM_F_CREATE should be set when creating new route
[  519.492601][T24946] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5129'.
[  519.578918][T24951] netlink: 'syz.2.5131': attribute type 1 has an invalid length.
[  519.647650][T24951] bond3: entered promiscuous mode
[  519.655326][T24951] 8021q: adding VLAN 0 to HW filter on device bond3
[  519.725212][T24951] 8021q: adding VLAN 0 to HW filter on device bond3
[  519.732427][T24951] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  519.753632][T24951] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  519.766659][T24951] bond3: (slave vcan0): making interface the new active one
[  519.774436][T24951] vcan0: entered promiscuous mode
[  519.781611][T24951] bond3: (slave vcan0): Enslaving as an active interface with an up link
[  519.883274][T24963] xt_TPROXY: Can be used only with -p tcp or -p udp
[  520.118235][T24983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5138'.
[  520.179437][T24985] netlink: 'syz.2.5140': attribute type 1 has an invalid length.
[  520.258796][T24985] 8021q: adding VLAN 0 to HW filter on device bond4
[  520.566381][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5147'.
[  520.585499][T25015] netlink: 'syz.4.5147': attribute type 18 has an invalid length.
[  520.604628][T25015] netlink: 'syz.4.5147': attribute type 18 has an invalid length.
[  520.938233][T25040] netlink: 'syz.1.5154': attribute type 1 has an invalid length.
[  521.343244][T25069] netlink: 'syz.2.5162': attribute type 1 has an invalid length.
[  521.916841][T25108] netlink: 'syz.4.5170': attribute type 11 has an invalid length.
[  521.927575][T25108] __nla_validate_parse: 6 callbacks suppressed
[  521.927595][T25108] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5170'.
[  522.022597][T25114] IPv6: sit1: Disabled Multicast RS
[  522.057003][T25117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'.
[  522.066765][T25117] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5174'.
[  522.076161][T25117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5174'.
[  522.380686][T25135] xt_hashlimit: size too large, truncated to 1048576
[  522.426436][T25141] netlink: 'syz.4.5179': attribute type 1 has an invalid length.
[  522.554369][T25141] 8021q: adding VLAN 0 to HW filter on device bond11
[  522.575361][T25151] bond11: (slave gretap2): making interface the new active one
[  522.588927][T25151] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  522.613922][T25159] netlink: 'syz.0.5186': attribute type 9 has an invalid length.
[  522.747408][T25169] netlink: 'syz.3.5187': attribute type 21 has an invalid length.
[  522.758729][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5188'.
[  522.768536][T25169] IPv6: NLM_F_CREATE should be specified when creating new route
[  522.795483][T25169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  522.802849][T25169] IPv6: NLM_F_CREATE should be set when creating new route
[  522.810258][T25169] IPv6: NLM_F_CREATE should be set when creating new route
[  522.817566][T25169] IPv6: NLM_F_CREATE should be set when creating new route
[  523.403015][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.768565][T25223] "syz.2.5200" (25223) uses obsolete ecb(arc4) skcipher
[  524.093559][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5203'.
[  524.100903][T25229] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  524.124894][T25229] bond0 (unregistering): Released all slaves
[  524.232774][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  524.241048][    C0] lec:lec_tx_timeout: lec0
[  524.283313][T25244] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5206'.
[  524.435200][T25252] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5209'.
[  524.481874][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'.
[  524.616158][T25270] netlink: 'syz.4.5213': attribute type 3 has an invalid length.
[  524.870336][T25283] ieee802154 phy0 wpan0: encryption failed: -22
[  525.069226][T25293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5220'.
[  525.412450][T25315] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  525.581316][T25331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.742110][T25341] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  525.985733][T25362] tipc: New replicast peer: 255.255.255.255
[  525.992618][T25362] tipc: Enabled bearer <udp:syz2>, priority 10
[  526.192900][T25377] xt_l2tp: v2 doesn't support IP mode
[  526.267760][T25382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  526.362058][T25386] netlink: 'syz.0.5247': attribute type 1 has an invalid length.
[  526.693948][T25413] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  527.222343][T25444] __nla_validate_parse: 11 callbacks suppressed
[  527.222360][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5266'.
[  527.462068][T25458] syzkaller0: entered promiscuous mode
[  527.467740][T25458] syzkaller0: entered allmulticast mode
[  527.479938][T25462] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  527.514145][T25464] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  527.606480][T25469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5274'.
[  527.631644][T25473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5275'.
[  527.637124][T25469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5274'.
[  527.834654][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5278'.
[  527.860484][T25482] netlink: 'syz.2.5278': attribute type 1 has an invalid length.
[  527.869174][T25482] netlink: 'syz.2.5278': attribute type 1 has an invalid length.
[  527.877562][T25482] netlink: 'syz.2.5278': attribute type 2 has an invalid length.
[  527.899642][T25482] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5278'.
[  527.958387][T25486] netlink: 'syz.3.5281': attribute type 1 has an invalid length.
[  528.035126][T25492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5281'.
[  528.365303][T25508] ip6tnl0: Caught tx_queue_len zero misconfig
[  528.388280][T25508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5287'.
[  528.467405][T25515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5288'.
[  528.502392][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5290'.
[  528.512637][T25521] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  528.918911][T25544] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.100732][T25548] smc: net device team0 applied user defined pnetid SYZ2
[  529.343791][T25556] ip6t_srh: unknown srh match flags  4000
[  529.372060][T25558] openvswitch: netlink: IPv4 tun info is not correct
[  529.591444][T25563] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  529.613620][T25563] tipc: Enabled bearer <udp:syz0>, priority 10
[  529.767864][T25570] netlink: 'syz.4.5305': attribute type 1 has an invalid length.
[  529.799010][T25576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.832273][T25570] 8021q: adding VLAN 0 to HW filter on device bond12
[  529.917899][T25570] netlink: 'syz.4.5305': attribute type 1 has an invalid length.
[  530.998594][T25626] syzkaller0: entered promiscuous mode
[  531.010077][T25626] syzkaller0: entered allmulticast mode
[  531.036039][T25625] simple: basic_22
[  531.040164][T25625] simple: basic_44
[  531.043921][T25625] simple: basic_66
[  531.047637][T25625] simple: basic_88
[  531.051357][T25625] simple: basic_110
[  531.055223][T25625] simple: basic_132
[  531.059040][T25625] simple: basic_154
[  531.062887][T25625] simple: basic_176
[  531.066709][T25625] simple: basic_198
[  531.070526][T25625] simple: basic_220
[  531.074377][T25625] simple: basic_242
[  531.078186][T25625] simple: basic_264
[  531.081996][T25625] simple: basic_286
[  531.085826][T25625] simple: basic_308
[  531.089625][T25625] simple: basic_330
[  531.093456][T25625] simple: basic_352
[  531.097277][T25625] simple: basic_374
[  531.101072][T25625] simple: basic_396
[  531.104944][T25625] simple: basic_418
[  531.108762][T25625] simple: basic_440
[  531.112554][T25625] simple: basic_462
[  531.116369][T25625] simple: basic_484
[  531.120171][T25625] simple: basic_506
[  531.123989][T25625] simple: basic_528
[  531.127888][T25625] simple: basic_550
[  531.131682][T25625] simple: basic_572
[  531.135604][T25625] simple: basic_594
[  531.139490][T25625] simple: basic_616
[  531.143408][T25625] simple: basic_638
[  531.147260][T25625] simple: basic_660
[  531.151055][T25625] simple: basic_682
[  531.154888][T25625] simple: basic_704
[  531.158700][T25625] TC_ACT_REPEAT abuse ?
[  531.330532][T25645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.389260][T25646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.567717][T25671] __nla_validate_parse: 5 callbacks suppressed
[  532.567739][T25671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5333'.
[  532.585253][T25671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5333'.
[  532.754740][T25681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5336'.
[  532.941138][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'.
[  533.002585][T25702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'.
[  533.087543][T25699] geneve2: entered promiscuous mode
[  533.103330][ T5945] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 55377 - 0
[  533.122151][ T5945] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 55377 - 0
[  533.141618][ T5945] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 55377 - 0
[  533.161579][ T5945] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 55377 - 0
[  533.209989][T25702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5343'.
[  533.311309][T25707] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5345'.
[  533.324592][T25707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5345'.
[  533.341318][T25707] hsr_slave_0: left promiscuous mode
[  533.354675][T25707] hsr_slave_1: left promiscuous mode
[  533.517436][T25717] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  533.600115][T25721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5350'.
[  533.622909][T25721] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  533.645133][T25718] bond13: Unable to set down delay as MII monitoring is disabled
[  533.660356][T25718] bond13 (unregistering): Released all slaves
[  533.711162][T25722] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  533.724018][T25722] bond5 (unregistering): Released all slaves
[  533.770867][T25725] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5352'.
[  534.032300][T25750] tipc: Failed to remove unknown binding: 66,0,0/1677900325:3769123646/3769123648
[  534.041979][T25750] tipc: Failed to remove unknown binding: 66,0,0/1677900325:3769123646/3769123647
[  534.052473][T25751] tipc: Failed to remove unknown binding: 66,0,0/1677900325:3769123646/3769123648
[  534.066146][T25751] tipc: Failed to remove unknown binding: 66,0,0/1677900325:3769123646/3769123647
[  534.075800][T25750] tipc: Failed to remove unknown binding: 66,0,0/1677900325:3769123646/3769123648
[  534.087564][T25750] tipc: Failed to remove unknown binding: 66,0,0/1677900325:3769123646/3769123647
[  534.175018][T25762] netlink: 'syz.4.5360': attribute type 3 has an invalid length.
[  534.930239][T25799] 8021q: VLANs not supported on ip_vti0
[  535.208432][T17070] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  535.223010][T17070] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  535.235819][T17070] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  535.251614][T17070] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  535.765356][T25835] netlink: 'syz.0.5381': attribute type 1 has an invalid length.
[  535.775892][T25835] netlink: 'syz.0.5381': attribute type 2 has an invalid length.
[  535.928303][T25843] bond0: entered promiscuous mode
[  535.934295][T25843] bond_slave_0: entered promiscuous mode
[  535.940332][T25843] bond_slave_1: entered promiscuous mode
[  535.947420][T25843] bridge_slave_1: entered promiscuous mode
[  535.955662][T25843] bond0: left promiscuous mode
[  535.960566][T25843] bond_slave_0: left promiscuous mode
[  535.967071][T25843] bond_slave_1: left promiscuous mode
[  535.974463][T25843] bridge_slave_1: left promiscuous mode
[  536.169161][T25848] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  536.182156][T25848] bond5 (unregistering): Released all slaves
[  538.587811][T25823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  538.790578][T25872] __nla_validate_parse: 9 callbacks suppressed
[  538.790601][T25872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5393'.
[  539.041449][T25882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5399'.
[  539.122127][T25889] x_tables: ip_tables: icmp match: only valid for protocol 1
[  539.233040][T25898] netlink: 'syz.1.5406': attribute type 21 has an invalid length.
[  539.242589][T25898] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5406'.
[  539.277108][T25898] netlink: 'syz.1.5406': attribute type 8 has an invalid length.
[  539.310247][T25898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5406'.
[  539.673356][T25922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5411'.
[  539.698824][T25922] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5411'.
[  539.799274][T25928] bond5: entered allmulticast mode
[  539.804807][T25928] vti0: entered allmulticast mode
[  540.046741][T25923] bond5: left allmulticast mode
[  540.068068][T25923] vti0: left allmulticast mode
[  540.333488][T25963] netlink: 'syz.3.5424': attribute type 1 has an invalid length.
[  540.383658][T25963] 8021q: adding VLAN 0 to HW filter on device bond2
[  540.439427][T25963] bond2: (slave veth11): Enslaving as an active interface with a down link
[  540.501211][T25963] vlan4: entered allmulticast mode
[  540.513877][T25963] bond2: (slave vlan4): Opening slave failed
[  540.542186][T25979] nbd: couldn't find a device at index 0
[  540.751751][T25990] netlink: 'syz.2.5432': attribute type 1 has an invalid length.
[  540.778648][T25990] netlink: 'syz.2.5432': attribute type 11 has an invalid length.
[  540.798710][T25990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5432'.
[  540.852254][T25992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5433'.
[  540.871468][T25998] syzkaller1: tun_chr_ioctl cmd 1074025677
[  540.891813][T25998] syzkaller1: Refused to change device type
[  540.994824][T26006] netlink: 'syz.3.5437': attribute type 1 has an invalid length.
[  541.003175][T26006] netlink: 'syz.3.5437': attribute type 3 has an invalid length.
[  541.008256][T26010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5438'.
[  541.011683][T26006] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5437'.
[  541.046410][T26006] NCSI netlink: No device for ifindex 813332851
[  541.155139][T26015] Cannot find del_set index 49151 as target
[  541.210706][T26015] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  541.233540][T26015] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  541.321771][T26018] sctp: [Deprecated]: syz.3.5443 (pid 26018) Use of int in max_burst socket option.
[  541.321771][T26018] Use struct sctp_assoc_value instead
[  541.458587][T26034] xt_CT: You must specify a L4 protocol and not use inversions on it
[  541.720065][T26046] gre2: entered promiscuous mode
[  541.762320][T26046] gre2: entered allmulticast mode
[  542.056169][T26069] openvswitch: netlink: IP tunnel dst address not specified
[  542.065374][T26069] ipt_rpfilter: unknown options
[  542.142054][T26072] syzkaller0: entered promiscuous mode
[  542.151329][T26072] syzkaller0: entered allmulticast mode
[  542.161023][T26073] simple: basic_22
[  542.165157][T26073] simple: basic_44
[  542.169026][T26073] simple: basic_66
[  542.172813][T26073] simple: basic_88
[  542.176648][T26073] simple: basic_110
[  542.180576][T26073] simple: basic_132
[  542.184463][T26073] simple: basic_154
[  542.188301][T26073] simple: basic_176
[  542.192137][T26073] simple: basic_198
[  542.196038][T26073] simple: basic_220
[  542.199865][T26073] simple: basic_242
[  542.203740][T26073] simple: basic_264
[  542.207566][T26073] simple: basic_286
[  542.211424][T26073] simple: basic_308
[  542.215309][T26073] simple: basic_330
[  542.219140][T26073] simple: basic_352
[  542.223025][T26073] simple: basic_374
[  542.226927][T26073] simple: basic_396
[  542.230762][T26073] simple: basic_418
[  542.234641][T26073] simple: basic_440
[  542.238469][T26073] simple: basic_462
[  542.242317][T26073] simple: basic_484
[  542.246203][T26073] simple: basic_506
[  542.250121][T26073] simple: basic_528
[  542.253755][T26077] team0: Device batadv1 failed to change mtu
[  542.254004][T26073] simple: basic_550
[  542.260561][T26077] sctp: [Deprecated]: syz.3.5460 (pid 26077) Use of int in maxseg socket option.
[  542.260561][T26077] Use struct sctp_assoc_value instead
[  542.263982][T26073] simple: basic_572
[  542.264025][T26073] simple: basic_594
[  542.264035][T26073] simple: basic_616
[  542.264045][T26073] simple: basic_638
[  542.264054][T26073] simple: basic_660
[  542.264064][T26073] simple: basic_682
[  542.264073][T26073] simple: basic_704
[  542.264084][T26073] TC_ACT_REPEAT abuse ?
[  542.312389][T26072] simple: basic_726
[  542.316282][T26072] simple: basic_748
[  542.320204][T26072] simple: basic_770
[  542.324105][T26072] simple: basic_792
[  542.328038][T26072] simple: basic_814
[  542.331865][T26072] simple: basic_836
[  542.335762][T26072] simple: basic_858
[  542.337836][T26083] netlink: 'syz.3.5460': attribute type 1 has an invalid length.
[  542.339585][T26072] simple: basic_880
[  542.339601][T26072] simple: basic_902
[  542.339612][T26072] simple: basic_924
[  542.358879][T26072] simple: basic_946
[  542.362146][T26083] netlink: 'syz.3.5460': attribute type 1 has an invalid length.
[  542.362751][T26072] simple: basic_968
[  542.362765][T26072] simple: basic_990
[  542.362775][T26072] simple: basic_1012
[  542.362786][T26072] simple: basic_1034
[  542.362796][T26072] simple: basic_1056
[  542.362806][T26072] simple: basic_1078
[  542.362815][T26072] simple: basic_1100
[  542.362825][T26072] simple: basic_1122
[  542.362835][T26072] simple: basic_1144
[  542.362845][T26072] simple: basic_1166
[  542.362855][T26072] simple: basic_1188
[  542.362866][T26072] simple: basic_1210
[  542.362876][T26072] simple: basic_1232
[  542.362886][T26072] simple: basic_1254
[  542.362896][T26072] simple: basic_1276
[  542.362906][T26072] simple: basic_1298
[  542.362916][T26072] simple: basic_1320
[  542.362925][T26072] simple: basic_1342
[  542.362935][T26072] simple: basic_1364
[  542.362945][T26072] simple: basic_1386
[  542.362954][T26072] simple: basic_1408
[  542.362966][T26072] TC_ACT_REPEAT abuse ?
[  543.071965][T26121] syzkaller0: entered promiscuous mode
[  543.078082][T26121] syzkaller0: entered allmulticast mode
[  543.159919][T26128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.443596][T26095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  545.515360][T26170] xt_CT: You must specify a L4 protocol and not use inversions on it
[  545.673854][T26185] sctp: [Deprecated]: syz.3.5487 (pid 26185) Use of int in max_burst socket option.
[  545.673854][T26185] Use struct sctp_assoc_value instead
[  545.716970][T26185] sctp: [Deprecated]: syz.3.5487 (pid 26185) Use of int in max_burst socket option.
[  545.716970][T26185] Use struct sctp_assoc_value instead
[  545.797251][T26197] __nla_validate_parse: 14 callbacks suppressed
[  545.797272][T26197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5488'.
[  546.138594][T26219] netlink: 'syz.4.5499': attribute type 1 has an invalid length.
[  546.191161][T26215] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.5495'.
[  546.204237][T26215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5495'.
[  546.218286][T26215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5495'.
[  546.269522][T26226] openvswitch: netlink: IP tunnel TTL not specified.
[  546.448854][T26239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.453944][T26235] xfrm1: entered allmulticast mode
[  546.460109][T26239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.528834][T26244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.906501][T26263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  547.069000][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5513'.
[  547.076930][T26276] netlink: 'syz.0.5515': attribute type 2 has an invalid length.
[  547.088153][T26274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5514'.
[  547.107860][T26274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5514'.
[  547.410631][T26297] syzkaller0: entered promiscuous mode
[  547.416911][T26297] syzkaller0: entered allmulticast mode
[  547.442497][T26297] netlink: 'syz.2.5521': attribute type 39 has an invalid length.
[  547.444869][T26293] x_tables: duplicate underflow at hook 1
[  547.459605][T26297] hsr_slave_1 (unregistering): left promiscuous mode
[  547.649667][T26313] netlink: 'syz.4.5524': attribute type 1 has an invalid length.
[  547.678488][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'.
[  547.716139][T26313] 8021q: adding VLAN 0 to HW filter on device bond13
[  547.727459][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'.
[  547.741335][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5525'.
[  547.773229][T26317] syzkaller0: entered promiscuous mode
[  547.783024][T26317] syzkaller0: entered allmulticast mode
[  547.799565][T26312] bridge9: entered promiscuous mode
[  547.805856][T26312] bridge9: entered allmulticast mode
[  548.156460][T26336] syzkaller1: entered promiscuous mode
[  548.175838][T26336] syzkaller1: entered allmulticast mode
[  548.187495][T26336] netlink: 'syz.2.5535': attribute type 1 has an invalid length.
[  548.203261][T26336] netlink: 'syz.2.5535': attribute type 7 has an invalid length.
[  548.213582][T26336] netlink: 'syz.2.5535': attribute type 8 has an invalid length.
[  548.232096][T26336] NCSI netlink: No device for ifindex 65584
[  548.353329][T26350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.668235][T26369] bond9: Removing last ns target with arp_interval on
[  549.034919][T26385] netlink: 'syz.3.5550': attribute type 11 has an invalid length.
[  549.320002][T26401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.843976][T26424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.875467][T26424] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.046681][T26484] Can't find ip_set type hash:ip,por4,net
[  551.201816][T26482] __nla_validate_parse: 11 callbacks suppressed
[  551.201837][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'.
[  551.226121][T26491] IPVS: Unknown mcast interface: vcan0
[  551.363665][T26502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5582'.
[  551.386551][T26502] ieee802154 phy0 wpan0: encryption failed: -22
[  551.394107][T26507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.410264][T26502] sit3: entered promiscuous mode
[  551.417649][T26502] sit3: entered allmulticast mode
[  551.511796][T26515] netlink: 'syz.0.5587': attribute type 2 has an invalid length.
[  551.564644][T26515] !: entered promiscuous mode
[  551.611523][T26524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.770090][T26533] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  552.022380][T26552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5600'.
[  552.074302][T26556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5600'.
[  552.766534][T26552] F: renamed from gre0
[  552.779131][T26552] F: entered allmulticast mode
[  552.784648][T26554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5601'.
[  553.286999][T26584] syzkaller0: entered promiscuous mode
[  553.292551][T26584] syzkaller0: entered allmulticast mode
[  553.433915][T26593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5609'.
[  553.515698][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5609'.
[  553.745490][T26605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5614'.
[  553.919373][T26619] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5617'.
[  554.232469][T26632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5621'.
[  554.715646][T26652] netlink: 'syz.3.5629': attribute type 10 has an invalid length.
[  555.166489][T26672] bridge10: entered promiscuous mode
[  555.172153][T26672] bridge10: entered allmulticast mode
[  555.187253][T26672] team0: Port device bridge10 added
[  555.208858][T26675] bridge0: port 3(team0) entered blocking state
[  555.224741][T26675] bridge0: port 3(team0) entered disabled state
[  555.237965][T26675] team0: entered allmulticast mode
[  555.251191][T26675] team_slave_0: entered allmulticast mode
[  555.267957][T26675] team_slave_1: entered allmulticast mode
[  555.281314][T26675] bridge5: entered allmulticast mode
[  555.312527][T26675] team0: entered promiscuous mode
[  555.325705][T26675] team_slave_0: entered promiscuous mode
[  555.355078][T26675] team_slave_1: entered promiscuous mode
[  555.381577][T26675] bridge5: entered promiscuous mode
[  556.313494][T26719] ip6tnl0: left allmulticast mode
[  556.564498][T26737] __nla_validate_parse: 8 callbacks suppressed
[  556.564522][T26737] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5653'.
[  556.627114][T26735] netlink: 'syz.2.5652': attribute type 15 has an invalid length.
[  556.869872][T26757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5662'.
[  556.914722][T26757] bond14: entered promiscuous mode
[  556.921276][T26757] 8021q: adding VLAN 0 to HW filter on device bond14
[  556.977249][T26757] 8021q: adding VLAN 0 to HW filter on device bond14
[  556.986167][T26757] bond14: (slave sit4): The slave device specified does not support setting the MAC address
[  557.003303][T26757] bond14: (slave sit4): Error -95 calling set_mac_address
[  557.036159][T26769] syzkaller0: entered promiscuous mode
[  557.041911][T26769] syzkaller0: entered allmulticast mode
[  557.107205][T26775] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5667'.
[  557.279510][T26780] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5670'.
[  557.484071][ T5833] Bluetooth: hci1: command 0x0405 tx timeout
[  558.363476][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  558.370816][T26727] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  558.379694][T26727] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  558.526780][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5687'.
[  558.535799][T26834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5687'.
[  558.607497][T26838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5688'.
[  559.038395][T26870] netlink: 'syz.0.5700': attribute type 1 has an invalid length.
[  559.050974][T26872] netlink: 'syz.0.5700': attribute type 1 has an invalid length.
[  559.130053][T26727] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  559.136300][T26727] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  559.171492][T26727] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  559.188639][T26727] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  559.217368][T26727] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  559.244059][T26727] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  559.269936][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5704'.
[  559.279449][T26888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5704'.
[  559.283559][T26727] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  559.289123][T26888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5704'.
[  559.297103][T26727] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  559.369542][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  559.380324][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  559.393743][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  559.421407][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  559.441531][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  559.466358][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  559.478063][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  559.488806][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  559.497784][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  559.521772][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  559.681085][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  559.855907][T26906] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  559.866271][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.102006][T26923] netlink: 'syz.3.5713': attribute type 11 has an invalid length.
[  560.148948][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.260019][T26921] veth5: entered promiscuous mode
[  560.308761][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.366064][T26933] syzkaller0: entered promiscuous mode
[  560.371684][T26933] syzkaller0: entered allmulticast mode
[  560.416080][T26936] openvswitch: netlink: Flow key attribute not present in set flow.
[  560.459460][T26939] 0·: renamed from hsr_slave_1
[  560.484270][T26939] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  560.590535][T26944] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  560.651335][T26953] openvswitch: netlink: IP tunnel dst address not specified
[  560.680800][T26953] openvswitch: netlink: IP tunnel dst address not specified
[  560.695438][T26953] openvswitch: netlink: IP tunnel dst address not specified
[  560.706030][T26953] openvswitch: netlink: IP tunnel dst address not specified
[  560.713816][T26953] openvswitch: netlink: IP tunnel dst address not specified
[  560.724044][T26953] openvswitch: netlink: IP tunnel dst address not specified
[  560.925653][T26964] xt_cgroup: invalid path, errno=-2
[  561.152971][T26964] netlink: 'syz.0.5728': attribute type 1 has an invalid length.
[  561.196226][   T36] bridge_slave_1: left allmulticast mode
[  561.201936][   T36] bridge_slave_1: left promiscuous mode
[  561.216248][T26979] netlink: 'syz.1.5732': attribute type 1 has an invalid length.
[  561.248146][T26979] netlink: 'syz.1.5732': attribute type 1 has an invalid length.
[  561.271182][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.303876][   T36] bridge_slave_0: left allmulticast mode
[  561.309588][   T36] bridge_slave_0: left promiscuous mode
[  561.330078][T26989] netlink: 'syz.2.5733': attribute type 21 has an invalid length.
[  561.332967][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.563206][   T51] Bluetooth: hci0: command tx timeout
[  561.749924][   T36] bond5 (unregistering): (slave vti0): Releasing backup interface
[  561.814603][   T36] bond11 (unregistering): (slave gretap2): Releasing active interface
[  562.127925][   T36] bond1 (unregistering): Released all slaves
[  562.141921][   T36] bond2 (unregistering): Released all slaves
[  562.156011][   T36] bond0 (unregistering): Released all slaves
[  562.169088][   T36] bond3 (unregistering): Released all slaves
[  562.184074][   T36] bond4 (unregistering): Released all slaves
[  562.207755][   T36] bond5 (unregistering): Released all slaves
[  562.221120][   T36] bond6 (unregistering): Released all slaves
[  562.235652][   T36] bond7 (unregistering): Released all slaves
[  562.248975][   T36] bond8 (unregistering): Released all slaves
[  562.262262][   T36] bond9 (unregistering): Released all slaves
[  562.280805][   T36] bond10 (unregistering): Released all slaves
[  562.303103][   T36] bond11 (unregistering): Released all slaves
[  562.316786][   T36] bond12 (unregistering): Released all slaves
[  562.330185][   T36] bond13 (unregistering): Released all slaves
[  562.343953][   T36] bond14 (unregistering): Released all slaves
[  562.371681][T26989] __nla_validate_parse: 7 callbacks suppressed
[  562.371743][T26989] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5733'.
[  562.533690][T26788] chnl_net:caif_netlink_parms(): no params data found
[  562.801269][   T36] tipc: Disabling bearer <eth:ipvlan1>
[  562.853324][   T36] tipc: Disabling bearer <udp:syz2>
[  562.868739][   T36] tipc: Left network mode
[  562.953236][T27040] IPVS: length: 8 != 1152
[  563.095610][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  563.104589][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[  563.578565][T27067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'.
[  563.648272][   T51] Bluetooth: hci0: command tx timeout
[  563.699133][T26788] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.755823][T26788] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.791034][T26788] bridge_slave_0: entered allmulticast mode
[  563.807272][T26788] bridge_slave_0: entered promiscuous mode
[  563.894995][T26788] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.903519][T26788] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.911162][T26788] bridge_slave_1: entered allmulticast mode
[  563.920278][T26788] bridge_slave_1: entered promiscuous mode
[  564.163761][T26788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.202142][T26788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.239304][T27087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5750'.
[  564.260933][T27081] tipc: Failed to obtain node identity
[  564.270064][T27081] tipc: Enabling of bearer <ib:veth1_to_hsr> rejected, failed to enable media
[  564.329214][T27090] syzkaller0: entered promiscuous mode
[  564.338241][T27090] syzkaller0: entered allmulticast mode
[  564.459652][T27100] netlink: 'syz.3.5753': attribute type 1 has an invalid length.
[  564.488047][T27100] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5753'.
[  564.581256][T26788] team0: Port device team_slave_0 added
[  564.644644][T26788] team0: Port device team_slave_1 added
[  564.899512][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5758'.
[  564.902896][   T36] hsr_slave_0: left promiscuous mode
[  564.923954][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.931282][T27121] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5759'.
[  564.953624][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.976360][T27124] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5760'.
[  565.008747][T27126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5758'.
[  565.295218][ T5945] smc: removing ib device syz1
[  565.555818][   T36] team0 (unregistering): Port device team_slave_1 removed
[  565.608957][   T36] team0 (unregistering): Port device team_slave_0 removed
[  565.726812][   T51] Bluetooth: hci0: command tx timeout
[  565.933422][T26788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.947318][T26788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.988265][T26788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.019798][T26788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.033313][T27162] ieee802154 phy0 wpan0: encryption failed: -22
[  566.035484][T26788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.066920][T26788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.081477][T27126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.107398][ T1539] ==================================================================
[  566.115515][ T1539] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  566.124298][ T1539] Read of size 8 at addr ffff88807b74a2f0 by task kworker/0:2/1539
[  566.132196][ T1539] 
[  566.134535][ T1539] CPU: 0 UID: 0 PID: 1539 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  566.134555][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  566.134567][ T1539] Workqueue: events smc_ib_port_event_work
[  566.134588][ T1539] Call Trace:
[  566.134596][ T1539]  <TASK>
[  566.134604][ T1539]  dump_stack_lvl+0xe8/0x150
[  566.134626][ T1539]  print_report+0xba/0x230
[  566.134643][ T1539]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  566.134662][ T1539]  kasan_report+0x117/0x150
[  566.134682][ T1539]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  566.134703][ T1539]  __ethtool_get_link_ksettings+0x5e/0x170
[  566.134722][ T1539]  ib_get_eth_speed+0x180/0x7f0
[  566.134745][ T1539]  ? rxe_query_port+0x7e/0x3d0
[  566.134766][ T1539]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  566.134792][ T1539]  ? do_raw_spin_unlock+0xf5/0x210
[  566.134812][ T1539]  rxe_query_port+0x93/0x3d0
[  566.134833][ T1539]  ib_query_port+0x170/0x830
[  566.134850][ T1539]  smc_ib_port_event_work+0x15a/0x940
[  566.134869][ T1539]  ? process_scheduled_works+0xa8d/0x18c0
[  566.134888][ T1539]  ? process_scheduled_works+0xa8d/0x18c0
[  566.134906][ T1539]  process_scheduled_works+0xb6e/0x18c0
[  566.134935][ T1539]  ? __pfx_process_scheduled_works+0x10/0x10
[  566.134956][ T1539]  ? assign_work+0x3d5/0x5e0
[  566.134976][ T1539]  worker_thread+0xa53/0xfc0
[  566.135004][ T1539]  kthread+0x388/0x470
[  566.135026][ T1539]  ? __pfx_worker_thread+0x10/0x10
[  566.135044][ T1539]  ? __pfx_kthread+0x10/0x10
[  566.135059][ T1539]  ret_from_fork+0x51e/0xb90
[  566.135078][ T1539]  ? __pfx_ret_from_fork+0x10/0x10
[  566.135096][ T1539]  ? __switch_to+0xc7d/0x1450
[  566.135113][ T1539]  ? __pfx_kthread+0x10/0x10
[  566.135127][ T1539]  ret_from_fork_asm+0x1a/0x30
[  566.135153][ T1539]  </TASK>
[  566.135159][ T1539] 
[  566.308135][ T1539] Allocated by task 16113:
[  566.312558][ T1539]  kasan_save_track+0x3e/0x80
[  566.317243][ T1539]  __kasan_kmalloc+0x93/0xb0
[  566.321840][ T1539]  __kvmalloc_node_noprof+0x528/0x8a0
[  566.327306][ T1539]  alloc_netdev_mqs+0xa6/0x11b0
[  566.332167][ T1539]  rtnl_create_link+0x31f/0xd70
[  566.337027][ T1539]  rtnl_newlink_create+0x277/0xb70
[  566.342142][ T1539]  rtnl_newlink+0x1666/0x1be0
[  566.346820][ T1539]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  566.351779][ T1539]  netlink_rcv_skb+0x232/0x4b0
[  566.356541][ T1539]  netlink_unicast+0x80f/0x9b0
[  566.361321][ T1539]  netlink_sendmsg+0x813/0xb40
[  566.366085][ T1539]  __sys_sendto+0x672/0x710
[  566.370594][ T1539]  __x64_sys_sendto+0xde/0x100
[  566.375359][ T1539]  do_syscall_64+0x14d/0xf80
[  566.379956][ T1539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.385850][ T1539] 
[  566.388173][ T1539] Freed by task 36:
[  566.391974][ T1539]  kasan_save_track+0x3e/0x80
[  566.396672][ T1539]  kasan_save_free_info+0x46/0x50
[  566.401749][ T1539]  __kasan_slab_free+0x5c/0x80
[  566.406550][ T1539]  kfree+0x1c1/0x630
[  566.410457][ T1539]  device_release+0xc4/0x1f0
[  566.415063][ T1539]  kobject_put+0x228/0x560
[  566.419501][ T1539]  netdev_run_todo+0xc75/0xde0
[  566.424274][ T1539]  default_device_exit_batch+0x986/0xa00
[  566.429910][ T1539]  ops_undo_list+0x52b/0x940
[  566.434591][ T1539]  cleanup_net+0x56b/0x800
[  566.439009][ T1539]  process_scheduled_works+0xb6e/0x18c0
[  566.444567][ T1539]  worker_thread+0xa53/0xfc0
[  566.449166][ T1539]  kthread+0x388/0x470
[  566.453233][ T1539]  ret_from_fork+0x51e/0xb90
[  566.457827][ T1539]  ret_from_fork_asm+0x1a/0x30
[  566.462601][ T1539] 
[  566.465021][ T1539] The buggy address belongs to the object at ffff88807b74a000
[  566.465021][ T1539]  which belongs to the cache kmalloc-cg-4k of size 4096
[  566.479344][ T1539] The buggy address is located 752 bytes inside of
[  566.479344][ T1539]  freed 4096-byte region [ffff88807b74a000, ffff88807b74b000)
[  566.493240][ T1539] 
[  566.495583][ T1539] The buggy address belongs to the physical page:
[  566.502108][ T1539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b748
[  566.510878][ T1539] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  566.519476][ T1539] memcg:ffff88807b749011
[  566.523718][ T1539] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  566.531267][ T1539] page_type: f5(slab)
[  566.535259][ T1539] raw: 00fff00000000040 ffff88813fe02500 dead000000000100 dead000000000122
[  566.543856][ T1539] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807b749011
[  566.552441][ T1539] head: 00fff00000000040 ffff88813fe02500 dead000000000100 dead000000000122
[  566.561198][ T1539] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807b749011
[  566.569915][ T1539] head: 00fff00000000003 ffffea0001edd201 00000000ffffffff 00000000ffffffff
[  566.578590][ T1539] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  566.587262][ T1539] page dumped because: kasan: bad access detected
[  566.593675][ T1539] page_owner tracks the page as allocated
[  566.599388][ T1539] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16113, tgid 16113 (syz-executor), ts 322988176207, free_ts 322934395613
[  566.621095][ T1539]  post_alloc_hook+0x231/0x280
[  566.625868][ T1539]  get_page_from_freelist+0x24dc/0x2580
[  566.631418][ T1539]  __alloc_frozen_pages_noprof+0x18d/0x380
[  566.637312][ T1539]  allocate_slab+0x77/0x660
[  566.641822][ T1539]  refill_objects+0x331/0x3c0
[  566.646598][ T1539]  __pcs_replace_empty_main+0x2e6/0x730
[  566.652153][ T1539]  __kmalloc_node_track_caller_noprof+0x572/0x7b0
[  566.658583][ T1539]  kmemdup_noprof+0x2b/0x70
[  566.663097][ T1539]  __addrconf_sysctl_register+0xa7/0x4d0
[  566.668737][ T1539]  addrconf_sysctl_register+0x168/0x1c0
[  566.674285][ T1539]  ipv6_add_dev+0xd26/0x13a0
[  566.678874][ T1539]  addrconf_notify+0x771/0x1050
[  566.683815][ T1539]  notifier_call_chain+0x1be/0x400
[  566.688939][ T1539]  register_netdevice+0x173a/0x1cf0
[  566.694147][ T1539]  virt_wifi_newlink+0x3e8/0x820
[  566.699094][ T1539]  rtnl_newlink_create+0x329/0xb70
[  566.704206][ T1539] page last free pid 16113 tgid 16113 stack trace:
[  566.710706][ T1539]  __free_frozen_pages+0xc2b/0xdb0
[  566.715831][ T1539]  __slab_free+0x263/0x2b0
[  566.720260][ T1539]  qlist_free_all+0x97/0x100
[  566.724863][ T1539]  kasan_quarantine_reduce+0x148/0x160
[  566.730324][ T1539]  __kasan_slab_alloc+0x22/0x80
[  566.735186][ T1539]  kmem_cache_alloc_noprof+0x2bc/0x650
[  566.740650][ T1539]  __kernfs_new_node+0xe9/0x8e0
[  566.745599][ T1539]  kernfs_new_node+0x102/0x210
[  566.750373][ T1539]  __kernfs_create_file+0x4b/0x2e0
[  566.755488][ T1539]  sysfs_add_file_mode_ns+0x238/0x300
[  566.760864][ T1539]  internal_create_group+0x673/0x1180
[  566.766253][ T1539]  sysfs_create_groups+0x59/0x120
[  566.771309][ T1539]  net_rx_queue_update_kobjects+0x283/0x740
[  566.777222][ T1539]  netdev_register_kobject+0x21f/0x310
[  566.782707][ T1539]  register_netdevice+0x12c0/0x1cf0
[  566.787939][ T1539]  veth_newlink+0x67b/0xb70
[  566.792463][ T1539] 
[  566.794787][ T1539] Memory state around the buggy address:
[  566.800504][ T1539]  ffff88807b74a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  566.808568][ T1539]  ffff88807b74a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  566.816637][ T1539] >ffff88807b74a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  566.824700][ T1539]                                                              ^
[  566.832767][ T1539]  ffff88807b74a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  566.840830][ T1539]  ffff88807b74a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  566.848912][ T1539] ==================================================================
[  566.892870][ T1539] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  566.900131][ T1539] CPU: 0 UID: 0 PID: 1539 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  566.909622][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  566.919691][ T1539] Workqueue: events smc_ib_port_event_work
[  566.925523][ T1539] Call Trace:
[  566.928809][ T1539]  <TASK>
[  566.931829][ T1539]  vpanic+0x56c/0xa60
[  566.935860][ T1539]  ? __pfx_vpanic+0x10/0x10
[  566.940376][ T1539]  ? __pfx___schedule+0x10/0x10
[  566.945304][ T1539]  panic+0xc5/0xd0
[  566.949033][ T1539]  ? __pfx_panic+0x10/0x10
[  566.953457][ T1539]  ? preempt_schedule_common+0x82/0xd0
[  566.958923][ T1539]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  566.964996][ T1539]  check_panic_on_warn+0x89/0xb0
[  566.969978][ T1539]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  566.975965][ T1539]  end_report+0x73/0x180
[  566.980220][ T1539]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  566.986226][ T1539]  kasan_report+0x128/0x150
[  566.990744][ T1539]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  566.996742][ T1539]  __ethtool_get_link_ksettings+0x5e/0x170
[  567.002747][ T1539]  ib_get_eth_speed+0x180/0x7f0
[  567.007656][ T1539]  ? rxe_query_port+0x7e/0x3d0
[  567.012441][ T1539]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  567.017959][ T1539]  ? do_raw_spin_unlock+0xf5/0x210
[  567.023187][ T1539]  rxe_query_port+0x93/0x3d0
[  567.027788][ T1539]  ib_query_port+0x170/0x830
[  567.032385][ T1539]  smc_ib_port_event_work+0x15a/0x940
[  567.037769][ T1539]  ? process_scheduled_works+0xa8d/0x18c0
[  567.043595][ T1539]  ? process_scheduled_works+0xa8d/0x18c0
[  567.049336][ T1539]  process_scheduled_works+0xb6e/0x18c0
[  567.054928][ T1539]  ? __pfx_process_scheduled_works+0x10/0x10
[  567.060942][ T1539]  ? assign_work+0x3d5/0x5e0
[  567.065559][ T1539]  worker_thread+0xa53/0xfc0
[  567.070200][ T1539]  kthread+0x388/0x470
[  567.074278][ T1539]  ? __pfx_worker_thread+0x10/0x10
[  567.079576][ T1539]  ? __pfx_kthread+0x10/0x10
[  567.084256][ T1539]  ret_from_fork+0x51e/0xb90
[  567.088857][ T1539]  ? __pfx_ret_from_fork+0x10/0x10
[  567.093995][ T1539]  ? __switch_to+0xc7d/0x1450
[  567.098710][ T1539]  ? __pfx_kthread+0x10/0x10
[  567.103326][ T1539]  ret_from_fork_asm+0x1a/0x30
[  567.108114][ T1539]  </TASK>
[  567.111319][ T1539] Kernel Offset: disabled
[  567.115641][ T1539] Rebooting in 86400 seconds..