last executing test programs:

11.0652024s ago: executing program 0 (id=4232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x4)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'\x00', {0x2, 0x0, @loopback}}) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x8, 0x506, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xd}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4040000)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newqdisc={0x5c, 0x15, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0]}}]}]}, 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000020014000480080002400000000008000140000000000900010073797a30000000001c0008800c00024000000000000000000c0001400000000000000000140000001000010000000000000000000000000a"], 0xa0}}, 0x0)

10.632979787s ago: executing program 0 (id=4233):
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001200)={{}, "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"})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3)
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x44}}, 0x40848c0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x700)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r7)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000020000000c000000180001801400020076657468315f766972745f776966690018000380"], 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000004300)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3}]}, 0x98}, 0x1, 0x7}, 0x0)
socket$inet6(0xa, 0x4, 0xb)

9.138955066s ago: executing program 0 (id=4244):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4) (async)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
close(0x3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) (async)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r5, 0x8) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000300)=0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r7=>0x0})
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async)
getpeername(r1, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000440)=0x80) (async)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1600000008000000020000000800000008000000", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="02000000040000000000001000000000d12100000000000001000000"], 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="000000ff7ff7ff009f8000000095090000000000000000e50088745563a02096dfe0b7742a1e5f1c000000000067ec17e6dc00000a27c6528e0e79062486f66cc9b895484a07817039cdee4022aa1a276528ba6c1252e93d6a341aab7376204bc5b8952b453e687ccd9520e186062ee31c3b6648769632ff5337c0312f73b48865c40a07"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x10, 0x0, 0x4, 0x8, 0x5, 0xc8e2]}, 0x0) (async)
syz_emit_ethernet(0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaa1f08004500009078000000139606fac1a15417ec63c5f94fe26f00000000000071c420000b907800d90a"], 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}}}}}}}, 0x0)

8.930961003s ago: executing program 0 (id=4246):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pi6   \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x8}, {0xb, 0x7}]}]}, {0x0, [0x5f]}}, &(0x7f0000000700)=""/183, 0x37, 0xb7, 0x0, 0x6}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x4, 0x8, 0x663, 0x40000, r0, 0x63a2, '\x00', r1, r2, 0x0, 0x3, 0x3, 0xc}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r5)
sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x26, 0xa8, @random="debff6db233feca2fec40e4b4a6a8f138965db4a1d54651a074ac287e3b662d5899f"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x48)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
r10 = accept4(r9, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r12, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)

8.790847775s ago: executing program 3 (id=4248):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x1ffc, {{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x101}}}, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x2, 0x3, 0x3, 0x1, 0x9}, 0x20)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)={0x3, 'veth0_to_bond\x00', {0x9}, 0x40})
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000140)=0x6, 0x4)
getsockname(r1, &(0x7f0000000180)=@ethernet={0x0, @local}, &(0x7f0000000200)=0x80)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0xb, 0x4)
r2 = socket$inet(0x2, 0x4, 0x9)
sendto$inet(r2, &(0x7f0000000280)="e7137f5118401edcb3c61b7734d47c6930585f02f52a7b111f9ddbea8fa8f3ead150c02e43a23f82168891667e564f2f1f4d4eb47be1c0ceec829d4480e0f9d7ab54c80cf172b30d30464c39e2ae57dae09562823b85b7e68d10ab01cdd38dd91ccec020634ec4c2874be33abaf522b60e84c5e83f344792406f5c8f55648ee3eea48794316c66e98b8ff21cfccb36578337fba27f62c5aee9e2ff2a6634f73727ac35ccac03293f33da990940", 0xad, 0x890, &(0x7f0000000340)={0x2, 0x4e22, @broadcast}, 0x10)
getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @multicast2}, 0x2a0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x8, 0x7fff, 0x9})
r4 = socket$netlink(0x10, 0x3, 0xa)
getpeername(r0, &(0x7f0000000500)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f0000000580)=0x80)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x40, 0x5a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x38}}, 0x20040080)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000700)={<r7=>0x0, 0x2}, &(0x7f0000000740)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={r7, @in={{0x2, 0x4e24, @broadcast}}, 0xfffffffb, 0x2, 0x1, 0x5, 0xcd, 0x3, 0x86}, 0x9c)
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000840)=""/14, &(0x7f0000000880)=0xe)
r8 = accept4(r1, 0x0, &(0x7f00000008c0), 0x80800)
sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)=@newtfilter={0x16c, 0x2c, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8, 0xe}, {0xa, 0x8}, {0x2, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x13c, 0x2, [@TCA_BASIC_ACT={0xf8, 0x3, [@m_ctinfo={0xf4, 0x11, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xca}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xf}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0xa8, 0x6, "84ffe4b65739cb365a702f28e525e43a8fa7e6669fd8ecbb17eb13d947ccbab5bca6f93f6e5a484c577de4117bb545300ab3c21649176cd8e9870e46c92494c30defdbf6bad5b995dccc26ee10fe0fd9f589de09f4e120b91956e91ad61f6f6ad20d34f2fe8403dfd80ff043fd1e61abd78fde2cbc6f4df63c121d0c273dee2b262c9d8ded73493196bd02f32aac0f043f505192da7f77c07c1ccf70ebe7963508781826"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x6, 0xb14, 0x4, {0x3, 0x2, 0x3, 0x1, 0x9}, {0x0, 0x1, 0x4, 0x4, 0xffff, 0x8a}, 0x0, 0x2, 0x6}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r4)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r9, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r9, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x35a}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x162}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7}]]}, 0x74}, 0x1, 0x0, 0x0, 0x20040090}, 0x40000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, r9, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000)
socket$inet6(0xa, 0x1, 0x32)
accept4(r10, &(0x7f0000000f00)=@ieee802154={0x24, @short}, &(0x7f0000000f80)=0x80, 0x80000)

2.771955175s ago: executing program 2 (id=4250):
r0 = socket(0x2b, 0x80801, 0x1)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
syz_emit_ethernet(0x82, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0x0, 0x10000, 0xffffffff}, @window={0x3, 0x0, 0x5}, @sack={0x5, 0x0, [0x1, 0x5]}]}}}}}}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001480)={&(0x7f0000000240)="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", &(0x7f0000001240)=""/248, &(0x7f0000001340)="f3bce3fb6abc629f6a412aa21c5e2256b290f1114de1fce2d4ab396b6c5cbf3a87b4890425e40b6f8e1c1e26acdda070b126ec2439f888f13989f3e758c36887c6cf437e0532730498ea2a60e4b6ae2e9cd2982815ea249b5ca750a16de06d417327673ded5d4a127d9099df82cdb46590df56c2381c9185672fc5767620907e617211ac1eae06a588f615ce6f081f45f56db83ba7b2d6339cffe75806980230c163c8e459ae154470d7", &(0x7f0000001400)="f088c21062a625981835d77c18ee8360f9622987106f32c1c1f1c71ab4fcbc45c6d589ba4837c3080f3ec8b6454a0b3c814470878871b553ecae7c485353b838c13de01a91af5f5b318f0ebd382c8fab74dfd48c783d", 0x4, r1, 0x4}, 0x38)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040))
syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[], 0x0)

2.678410663s ago: executing program 2 (id=4252):
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) (async, rerun: 64)
r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.643318456s ago: executing program 4 (id=4253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000000000000fe", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0)

2.497192709s ago: executing program 3 (id=4254):
syz_emit_ethernet(0x0, 0x0, 0x0)

2.49636844s ago: executing program 0 (id=4255):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r6=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}}, 0x0)

2.495577213s ago: executing program 1 (id=4256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
r2 = socket(0x10, 0x803, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{<r3=>r1, &(0x7f0000000180)=']\r(-&%-\x00', 0x502, &(0x7f00000001c0)={@_ha_fsid={[0x6, 0x1f00]}, {0x3, 0x1, 0x3, 0x8}}, 0x800, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xffffffff}, {[0x64, 0xc, 0x9, 0x1]}, 0xfffffffe, 0x1b, &(0x7f0000000280)=""/27})
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000340)={0x2, "45cb"}, 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r5, 0x89a2, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r4, 0x4, 0x81, 0x3, 0x5, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x700, 0x1, 0xffff8000}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0)

2.174422294s ago: executing program 2 (id=4257):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[], 0x18}}], 0x1, 0x0)
bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24)
r4 = accept(r3, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000300)=0x80)
setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000340)=0x2, 0x4)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x4, 0x1, 0xfe, 0x8000, 0x3, 0x9, 0x9, 0x9}})

1.932780942s ago: executing program 3 (id=4258):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x1fcc4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000043c0)=@ethtool_sfeatures={0x51}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x10, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.781111295s ago: executing program 4 (id=4259):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x0, 0x0, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0xffff, @private0, 0x9}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x8, @empty, 0x7}], 0x58)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028110000300709c897c82b10967232d63080002400000005ddefd0c000000006b0000000009000200739a7a32000000000900010073797a31000000001400058008000140000089170800024000000002140000001100010000000000000000000100000a00"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1.644382617s ago: executing program 1 (id=4260):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x42000, 0x1}, 0x50)
mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000)

1.546847943s ago: executing program 4 (id=4261):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r1, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x3c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x3, [@volatile={0x9, 0x0, 0x0, 0x9, 0x4}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @volatile={0x8, 0x0, 0x0, 0x9, 0x4}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x4}, @enum64={0xd, 0x4, 0x0, 0x13, 0x0, 0x4, [{0xa, 0x2, 0x3}, {0x7, 0x7, 0x3d8}, {0xf, 0x4537, 0x2}, {0x9, 0x200000, 0x9}]}, @enum64={0x3, 0x3, 0x0, 0x13, 0x1, 0x4, [{0xa, 0x7, 0x63}, {0xf, 0x6, 0xffffff00}, {0x7, 0x4, 0x2}]}]}, {0x0, [0x2e]}}, &(0x7f0000000100)=""/239, 0xd3, 0xef, 0x0, 0xef0, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x7, 0xffffffff, 0x800, r3, 0xff, '\x00', 0x0, r4, 0x4, 0x3, 0x3, 0x3}, 0x50)

1.34526133s ago: executing program 1 (id=4262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000400)={0x1f, @none}, 0x8)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x13, 0x0, 0xfdbc)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

1.210332227s ago: executing program 2 (id=4263):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r3) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x2bdc, 0x3, 0x6364, 0x1dfc, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x2ca, 0x1, 0x100, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r2, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880)

1.210088138s ago: executing program 3 (id=4264):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.147248891s ago: executing program 0 (id=4265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000800)=""/98, 0x62}, {&(0x7f0000000880)=""/84, 0x54}], 0x5, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd70c8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce971e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402", 0x80}, {&(0x7f0000000200)="49ca212b4ee03b192d1048f96cc5eae838645dd5da7cc767a7fa4a8b", 0x1c}], 0x2, 0x0, 0x0, 0x84}, 0x20000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e1f, 0x8, @loopback, 0xa}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x10, 0x0, 0x34)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
close(r2)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0)

1.041776495s ago: executing program 4 (id=4266):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60b3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4000000) (async, rerun: 64)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x26, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x32b122bd, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0x5, 0x4, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x97}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x97d2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x56}, 0x10, 0x2f8b1, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[r2, r2], &(0x7f0000000440)=[{0x4, 0x1, 0xf, 0x4}, {0x5, 0x2, 0xa, 0x3}, {0x4, 0x5, 0x1, 0x8}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) (async)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000100)=0x6328, 0x4) (async)
setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000000)=0xb2, 0x4) (async)
sendmmsg$inet6(r7, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async)
recvmmsg(r7, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002063, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='dvmrp0\x00', 0x10)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async)
sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)=ANY=[@ANYBLOB="01010000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf251300000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)

606.980194ms ago: executing program 1 (id=4267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0xff, 0x8, 0x0, 0x0, @private1, @mcast2, 0x1, 0x40, 0x9, 0x3}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r7=>r0, 0x6, 0x0, 0x7ff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x9, 0x6fcc1531}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff, r7], &(0x7f00000004c0)=[{0x4, 0x5, 0xc, 0x3}, {0x3, 0x4, 0x6, 0x1}, {0x1, 0x5, 0x6, 0x8}, {0x1, 0x4, 0x10, 0x1}]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)

606.854991ms ago: executing program 3 (id=4268):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

526.729991ms ago: executing program 4 (id=4269):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="c316664a0a7a9f5fea5a8cf758449148af3d1bdb2988d29dba3150c58d8e2b187523d757887ce68050033e7e903f83a05f27d8aa8351e6336851ced4e138223e6a3a19182a1a52749a7a64d118f595994de0e85c1748067659a8e43141c2eb3d376bf55eafa648ed09b9c403a459a2ffff1cf6efde837697fdf7c66c94678e7ac3609a5ee9948b7d73265186461414010f43a12154739d058edf2a4313a945be7d1a6bea50bfca533fba2fd5ec74cce37b44d93fe28a350dd811493663625aa4a5301c0b3b62a24df1b75817ab7b43e2c57ae1eb3111bf4b625a3babfbe135b610842bb3ced627f674ee55a3b2b6aacb726aab0bd8ff99cfb2e369c094722e1a7a09458b9c7f7418e6c27eba2ac861a7f5fc5b7bcb200e3f18471774c1ca7a065221d26f40ffb71d598ac379b5a62742e1752d8466dd99f8f47e6a2c58704f6b1d6d12e02bc3f0cee338282af213dc20c18c232c7d43634538224953939d7d5a5d6d22dfad2ded0642340e7f874369defb531c39ebf35e7d44af2ba5590ad685e8a369c16963422580f1a40bdbfd186e70d63314cb2338034160ba496ab9d2870adc79124178ef2e7ee68d9237cc30d488d3bd53ce689ff15020b19ddd1b72a3a9d850b7596298b1dacf7931f4c3a25f9983f9bb47fba455b6d1f6e36ba38e9d177c13c316661581a21008ea932e98212d39b1e5e750158fffc8fdfd35a71dbe74373aec4ee01b10ac6dd4fac67e64f668912f84f8236932999cdd9f4b0c6f340c72b190a8edb2df1a25999fcdb45c7989035ce25cf847a36dbd00b18b6714e8a610159d33519ea64d1382d218d548c927683fb54e6c841524dc7d287e76baa03628d62ea61da24da0c51aa29725e52c9778484c687fcaa73892f99c0db25bdf02d3aaa5b5d273af81832ebbe4dcaa35acc04eec134f96aa764fc58644fe3c83a88aef5e2f1d97d27da532d23fff522068f339915a47ee49d66217ce55230967407d326cf91756a8ab142455f67f1b72c09fc82f3bcff995a8a03c0e99823e65bf34e1e350d379177b08583df880a59de0b89d6836b46ca360cc531c94d9ec163b982302a4b2a455492e9de972028a98034e771d7683edf422f6a3385c20230a27849d6be69b715aeaf2b3891a8eef35aeee5ee3a16838143a55d09481036a6cfdb5b62ab984eebb92c261b26735338652521bee9dcc20508ab6d4164446f0c3d36cf4dc35c3856ad7a296a8f0e01daf9c92a3a14fb55dbb95b73adc6c122b384e6ae8894b1f9d2432fb0caf4235f53d54305710824fca682debaf862c3348c8a2bfa079b0031e7ae39f79b89a211efd0fccb66ca19263d0f4c7f8c670bc59b08e8ad2e6be484d317de5e29f12bf0204bb5cb71e5f58949b58d6b97d5fcc040316296031927ef57a874dac170bb1f1af3cf349ad0688d6ba773552c2f6ca07af7a5acbdee025e2ea8aee5e8be8c4ad75eaf9ebf26b44a3f475facc7b05e5a633715306d07f0f34c8c49b2897fbff80bc8d2140e5678af0282be0d51f2ca92c06b1c1b17449b6e9da24423f64c3192497a5af9a9e7bce14ee848fc0975a84f4a7be8d3f69cfb9ddcdbe5fb09a95a93d585503f1ecff9ff51e06b541e2b4601429214e224c8f019477e02e570790c88bb53baa4d458192c30ae132ac9716571e9c4d6acd8b6221f5187cafbec75c74fd6f31e275efe63419425761c7f82e54c15526e6fa5d8a44e003960f6a90eb55e9f129d6d63a6689f086c47781f0516e9e05d765016cf0d308161e86929d5a0a02b1c46416738129286cc94dd4f115483599392b5178cb9e5a5460aa0891c149eb70a2b4eb2625cf6eb84da2bcb3aef12ceef21d65e409c1ec4e089950c3fb205766d3398341a079a5dd6800a9c11a3a6540f16f0490b8e0a16c30831ecd9fd1470dbf4e2ae829b55a4aa6785fd33db030602fc9b13f501f245d1d22783299e41df7f635aab5edbcadffc362970dbbb8b364ddf26ed78871f9df10ba3f5c71a395c2187f31c4b4c716cecdb1c3d80afa35896af2d506ca6f4e56cc42e514cd49de71ee69596b5882727fce51c6020e4c37d0dc25beabb36c9ff1e4ed09b8d84b035ee8c9874a12e7ff75bbd0ebd7a3168d375b1160215a03ad2281d026c42647abf3352f7684bbbb3c3502cd0cbed1a3d3a57165dec6779fa40c0b43056e1234464465f098f30b2e6f4f1c5870784e1bfa79fa759aaa6e7300ec9d2f41cf72b1f6e74aa93bc53d9e5c4525c117b08f00246d90336a16c095f32c2b1517b5730be9a1333a1c0b188f9a19a283461598a781c2678a2d0a0d0ba0e43805044898eb251a591abc1c84f3149958e99d7d183f188e4bfc062ac52184719becfa930c3c7540851dd7d562789925c0e6d96b069daa4784caf47a7b9ea23b110d1586f12f92db38059050d5de5ed2e58cd93f99c1f19dff2dd32824355030df7feb5bab4ba58cd3cd12be4aa98aa6a726cfbe18ed7525ac0b15174ca65ee0a412d87ba02eccc9e2a856e1b41e0d8f552e673d1c45e3f95e03bad8a6b1d4b9e5c0946932ce130487e654c4fb90e1fb6dd33c33c2d48a", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001)
splice(r4, 0x0, r2, 0x0, 0x800, 0x0)
write$nci(r2, &(0x7f0000000000)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x7, 0x1}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async)
pipe(&(0x7f0000000200)) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
accept4$alg(r3, 0x0, 0x0, 0x0) (async)
sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async)
splice(r4, 0x0, r2, 0x0, 0x800, 0x0) (async)
write$nci(r2, &(0x7f0000000000)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x0, 0x3, 0x7, 0x7, 0x1}, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async)

445.929919ms ago: executing program 3 (id=4270):
sendmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000e00)=@phonet={0x23, 0x8, 0x4, 0x2}, 0x80, 0x0}}], 0x4, 0x40000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r4 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x4e22, 0x100, @mcast1, 0x1000003}}}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r0, 0x0, 0xa0, 0x1000, &(0x7f0000000100)="5378f0e662ad610574811467d195ad4fd6175b7e5943a8c55c9ae27a5ec4bdaea7669d9c91c9840d166ac96229c912b6f96d34fc398b810be971a760f6eec01a0674c5ada80e941cbf117144f973536962fa1f935814d5ca3af9ac130fe19e819d3e3458741d149d3b1dfe431d4b9d64c8644a4f3ce6051bd824c871894046150e547981929b828c1380a6f65afad389175e3782aea15bea403d3af0e10d7872", &(0x7f0000000e80)=""/4096, 0x4, 0x0, 0xab, 0x2, &(0x7f0000001e80)="fecf345f7dde6256c9472404c9de95f86b4448ba16cc288205f5d88e78587696aae392d01772b9d89d5f2cb0a3b4f6ed087cb7a0488b7646f042336f8daa9a7d76494bf93ff646a5d52d863d49a8888a197e981497517e355a60ce7bb00ebfb3055ea8be202d844a84493ed26e4333b200d807185d6baf4f1c14d2971c2faea002fa552c3eab06c3b10e0dc9a914f398a7a9fd9d8132b38fef9909053e6470ab06189aedb65f35936d7a40", &(0x7f0000001f40)="40a8", 0x6}, 0x50)
getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90)

332.238116ms ago: executing program 2 (id=4271):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
listen(r0, 0x7d4165c9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xd5)
listen(r3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1)

286.862007ms ago: executing program 1 (id=4272):
socket$igmp(0x2, 0x3, 0x2) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4)

225.041481ms ago: executing program 4 (id=4273):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b709, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0) (rerun: 32)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async, rerun: 64)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) (rerun: 64)
write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

105.263485ms ago: executing program 2 (id=4274):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) (async)
sendmmsg$alg(r6, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60fe999c0c2f044f8333028438bbf945070d290aa78a328d79addc16966ca29b99966324138b25de75739", 0xb1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000500)=0x2) (async)
close(r7) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000005c0)=0x2, 0x4) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000005400)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000053c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64=r6], 0x300c}, 0x1, 0x0, 0x0, 0x400c000}, 0x24040000) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000180001801400e2ff766c616e30000000000000000000000008000f0076f0ffff"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000000040000000a000000000000000000", @ANYRES32, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

0s ago: executing program 1 (id=4275):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)

kernel console output (not intermixed with test programs):

][T18658] RDX: 0000000004000080 RSI: 0000200000000040 RDI: 0000000000000003
[  412.893950][T18658] RBP: 00007fce382bf090 R08: 0000000000000000 R09: 0000000000000000
[  412.893961][T18658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.893971][T18658] R13: 00007fce37616038 R14: 00007fce37615fa0 R15: 00007ffe9cdba528
[  412.894001][T18658]  </TASK>
[  413.138495][    C1] net_ratelimit: 22736 callbacks suppressed
[  413.138513][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.166710][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.179068][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  413.191340][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.203725][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.216053][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  413.228357][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.240730][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.252995][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  413.265253][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  413.472977][T18663] netem: change failed
[  413.575040][T18665] netlink: 'syz.2.3423': attribute type 1 has an invalid length.
[  413.679529][T18666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3424'.
[  413.749641][T18665] bond2: entered promiscuous mode
[  413.772762][T18665] 8021q: adding VLAN 0 to HW filter on device bond2
[  413.939034][T18673] 8021q: adding VLAN 0 to HW filter on device bond2
[  413.979869][T18673] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  414.025967][T18673] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  414.223937][T18673] bond2: (slave vti0): making interface the new active one
[  414.243705][T18673] vti0: entered promiscuous mode
[  414.293693][T18673] bond2: (slave vti0): Enslaving as an active interface with an up link
[  414.428617][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  414.436462][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  414.664313][T18240] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  414.756208][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  414.792474][T18240] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  414.831986][T18697] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3429'.
[  414.854580][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  414.895182][T18240] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  414.983077][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  415.035312][T18240] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  415.171374][T18240] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  415.322064][T18698] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  415.365476][T18698] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  415.433277][T18700] nbd2: detected capacity change from 0 to 536870912
[  415.442449][ T5641] block nbd2: Receive control failed (result -32)
[  415.459391][T17507] block nbd2: Dead connection, failed to find a fallback
[  415.584667][T18722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3436'.
[  415.607805][T18722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3436'.
[  418.148429][    C1] net_ratelimit: 28949 callbacks suppressed
[  418.148449][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.166720][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.178867][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  418.191078][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.203384][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.215624][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  418.227868][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.240076][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.252274][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  418.264431][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.612855][T18742] syzkaller0: entered promiscuous mode
[  418.631433][T18742] syzkaller0: entered allmulticast mode
[  418.903875][T18240] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.156997][T18240] 8021q: adding VLAN 0 to HW filter on device team0
[  419.240498][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.247736][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.313588][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3447'.
[  419.379490][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.386711][ T8966] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.250153][T18779] syzkaller0: entered promiscuous mode
[  420.288773][T18779] syzkaller0: entered allmulticast mode
[  422.644888][T18784] bridge5: the hash_elasticity option has been deprecated and is always 16
[  422.894783][   T29] audit: type=1804 audit(1781364781.687:7): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3453" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=467 res=1 errno=0
[  422.946481][ T5739] IPVS: starting estimator thread 0...
[  422.971541][   T29] audit: type=1800 audit(1781364781.687:8): pid=18799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3453" name="cgroup.controllers" dev="tmpfs" ino=467 res=0 errno=0
[  423.048869][T18802] IPVS: using max 29 ests per chain, 69600 per kthread
[  423.158449][    C1] net_ratelimit: 24597 callbacks suppressed
[  423.158471][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  423.176685][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  423.189076][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  423.201377][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  423.213649][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  423.226061][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  423.238396][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  423.250684][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  423.263071][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  423.275357][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  428.168458][    C1] net_ratelimit: 30862 callbacks suppressed
[  428.168479][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  428.186661][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  428.198813][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  428.211072][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  428.223195][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  428.235368][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  428.247669][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  428.259973][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  428.272176][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  428.284457][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  429.838094][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'.
[  430.162184][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3466'.
[  430.514565][T18877] xt_socket: unknown flags 0x8
[  430.801336][T18887] netlink: 'syz.2.3474': attribute type 32 has an invalid length.
[  430.884751][T18889] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3473'.
[  431.061128][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'.
[  431.463555][T18240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.548289][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'.
[  431.715734][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3480'.
[  432.052412][T18924] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3482'.
[  432.154090][T18932] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3484'.
[  432.291421][T18930] syzkaller1: entered promiscuous mode
[  432.324602][T18930] syzkaller1: entered allmulticast mode
[  432.531757][T18937] netlink: 'syz.0.3485': attribute type 24 has an invalid length.
[  432.923437][T18240] veth0_vlan: entered promiscuous mode
[  432.995261][T18948] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  433.041502][T18240] veth1_vlan: entered promiscuous mode
[  433.178420][    C1] net_ratelimit: 23045 callbacks suppressed
[  433.178438][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.196620][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  433.208870][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.219997][T18240] veth0_macvtap: entered promiscuous mode
[  433.221201][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.238855][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  433.251107][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.263459][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.275736][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  433.287998][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.300369][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.300599][T18240] veth1_macvtap: entered promiscuous mode
[  433.505928][T18950] xt_hashlimit: size too large, truncated to 1048576
[  433.542335][T18240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.599561][T18957] tipc: Started in network mode
[  433.628295][T18957] tipc: Node identity 16d9aa1275d9, cluster identity 4711
[  433.662981][T18957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  433.697248][T18240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.721857][T18959] netlink: 'syz.1.3492': attribute type 1 has an invalid length.
[  433.814053][T18964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3492'.
[  433.966609][T18968] netlink: 'syz.2.3494': attribute type 1 has an invalid length.
[  433.986886][T18968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3494'.
[  434.008626][ T1001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.102705][T18956] tipc: Disabling bearer <eth:syzkaller0>
[  434.164443][T18964] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.187978][ T1001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.248918][ T1001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.305219][ T1001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.924246][T18987] netlink: 'syz.0.3499': attribute type 3 has an invalid length.
[  434.937812][T18987] __nla_validate_parse: 1 callbacks suppressed
[  434.937830][T18987] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3499'.
[  434.971147][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3499'.
[  435.417453][T18996] netlink: 'syz.0.3502': attribute type 1 has an invalid length.
[  435.695795][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.749080][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.081562][ T8977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.156132][ T8977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.497680][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3507'.
[  436.639611][   T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.648947][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3507'.
[  436.710528][   T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.765290][   T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.825469][T19029] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3327'.
[  436.842369][   T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.886768][T19029] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3327'.
[  437.483519][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'.
[  437.879246][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3517'.
[  437.999747][T19057] can: request_module (can-proto-0) failed.
[  438.188471][    C1] net_ratelimit: 23602 callbacks suppressed
[  438.188492][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.206763][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.219038][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  438.231289][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.243549][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.255838][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  438.267990][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.280311][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.292479][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  438.304700][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  438.991915][T19061] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3517'.
[  439.002819][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'.
[  439.504203][T19087] x_tables: duplicate underflow at hook 3
[  439.937169][T19104] netlink: 'syz.4.3532': attribute type 1 has an invalid length.
[  439.952196][T19104] __nla_validate_parse: 4 callbacks suppressed
[  439.952215][T19104] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3532'.
[  440.190996][T19110] FAULT_INJECTION: forcing a failure.
[  440.190996][T19110] name failslab, interval 1, probability 0, space 0, times 0
[  440.204059][T19110] CPU: 0 UID: 0 PID: 19110 Comm: syz.1.3534 Not tainted syzkaller #0 PREEMPT(full) 
[  440.204083][T19110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  440.204094][T19110] Call Trace:
[  440.204101][T19110]  <TASK>
[  440.204109][T19110]  dump_stack_lvl+0xe8/0x150
[  440.204136][T19110]  should_fail_ex+0x40c/0x560
[  440.204161][T19110]  should_failslab+0xa8/0x100
[  440.204222][T19110]  __kmalloc_noprof+0xe8/0x750
[  440.204246][T19110]  ? __pfx_dynamic_dname+0x10/0x10
[  440.204269][T19110]  ? tomoyo_encode+0x2ad/0x570
[  440.204301][T19110]  tomoyo_encode+0x2ad/0x570
[  440.204331][T19110]  tomoyo_realpath_from_path+0x5fa/0x640
[  440.204366][T19110]  ? tomoyo_path_number_perm+0x219/0x5f0
[  440.204389][T19110]  tomoyo_path_number_perm+0x246/0x5f0
[  440.204415][T19110]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  440.204436][T19110]  ? __lock_acquire+0x683/0x2cd0
[  440.204469][T19110]  ? hook_file_ioctl+0x1f0/0x5c0
[  440.204521][T19110]  ? __fget_files+0x2a/0x420
[  440.204547][T19110]  ? __fget_files+0x2a/0x420
[  440.204566][T19110]  ? __fget_files+0x3a2/0x420
[  440.204585][T19110]  ? __fget_files+0x2a/0x420
[  440.204610][T19110]  security_file_ioctl+0xc3/0x2a0
[  440.204634][T19110]  __se_sys_ioctl+0x47/0x170
[  440.204660][T19110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.204680][T19110]  do_syscall_64+0x174/0x580
[  440.204697][T19110]  ? trace_irq_disable+0x3b/0x140
[  440.204722][T19110]  ? clear_bhb_loop+0x40/0x90
[  440.204743][T19110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.204761][T19110] RIP: 0033:0x7f7004d9ce59
[  440.204779][T19110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.204793][T19110] RSP: 002b:00007f7005ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  440.204813][T19110] RAX: ffffffffffffffda RBX: 00007f7005015fa0 RCX: 00007f7004d9ce59
[  440.204826][T19110] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004
[  440.204838][T19110] RBP: 00007f7005ce4090 R08: 0000000000000000 R09: 0000000000000000
[  440.204849][T19110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.204860][T19110] R13: 00007f7005016038 R14: 00007f7005015fa0 R15: 00007ffc133dd428
[  440.204888][T19110]  </TASK>
[  440.204908][T19110] ERROR: Out of memory at tomoyo_realpath_from_path.
[  440.934934][T19129] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3539'.
[  440.972447][T19129] sctp: [Deprecated]: syz.2.3539 (pid 19129) Use of struct sctp_assoc_value in delayed_ack socket option.
[  440.972447][T19129] Use struct sctp_sack_info instead
[  441.062865][T19134] sctp: [Deprecated]: syz.4.3540 (pid 19134) Use of struct sctp_assoc_value in delayed_ack socket option.
[  441.062865][T19134] Use struct sctp_sack_info instead
[  441.732660][T19126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  441.856408][   T29] audit: type=1804 audit(1781364800.647:9): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3543" name="/newroot/125/cgroup.controllers" dev="tmpfs" ino=654 res=1 errno=0
[  441.944223][ T2175] IPVS: starting estimator thread 0...
[  442.069424][   T29] audit: type=1800 audit(1781364800.647:10): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3543" name="cgroup.controllers" dev="tmpfs" ino=654 res=0 errno=0
[  442.116107][T19147] IPVS: using max 28 ests per chain, 67200 per kthread
[  442.189734][T19149] macsec1: entered promiscuous mode
[  442.210883][T19149] bond0: entered promiscuous mode
[  442.222602][T19149] bond_slave_0: entered promiscuous mode
[  442.235569][T19149] bond_slave_1: entered promiscuous mode
[  442.243604][T19149] 8021q: adding VLAN 0 to HW filter on device macsec1
[  442.262167][T19149] bond0: left promiscuous mode
[  442.452708][ T2175] bond_slave_0: left promiscuous mode
[  442.460225][ T2175] bond_slave_1: left promiscuous mode
[  442.843382][T19152] syzkaller0: entered promiscuous mode
[  442.857165][T19152] syzkaller0: entered allmulticast mode
[  443.153598][T19178] xt_socket: unknown flags 0x8
[  443.190160][T19180] netlink: 'syz.1.3554': attribute type 21 has an invalid length.
[  443.198447][    C1] net_ratelimit: 24501 callbacks suppressed
[  443.198464][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.216748][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.229054][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  443.230592][T19180] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3554'.
[  443.241326][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.242060][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.242301][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  443.242525][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.242736][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.311884][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  443.324170][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.746221][   T29] audit: type=1804 audit(1781364802.537:11): pid=19196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3559" name="/newroot/128/cgroup.controllers" dev="tmpfs" ino=672 res=1 errno=0
[  443.788136][T19197] FAULT_INJECTION: forcing a failure.
[  443.788136][T19197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.833922][T19197] CPU: 0 UID: 0 PID: 19197 Comm: syz.4.3558 Not tainted syzkaller #0 PREEMPT(full) 
[  443.833948][T19197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  443.833958][T19197] Call Trace:
[  443.833965][T19197]  <TASK>
[  443.833973][T19197]  dump_stack_lvl+0xe8/0x150
[  443.834004][T19197]  should_fail_ex+0x40c/0x560
[  443.834029][T19197]  _copy_from_iter+0x1d3/0x1660
[  443.834053][T19197]  ? rcu_is_watching+0x15/0xb0
[  443.834078][T19197]  ? __pfx__copy_from_iter+0x10/0x10
[  443.834095][T19197]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[  443.834127][T19197]  ? netlink_sendmsg+0x650/0xb40
[  443.834151][T19197]  ? skb_put+0x112/0x210
[  443.834178][T19197]  netlink_sendmsg+0x6c0/0xb40
[  443.834212][T19197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.834241][T19197]  ? aa_sock_msg_perm+0xf1/0x1b0
[  443.834267][T19197]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  443.834298][T19197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.834324][T19197]  ____sys_sendmsg+0x9b9/0xa20
[  443.834349][T19197]  ? __might_fault+0xaf/0x130
[  443.834377][T19197]  ? __pfx_____sys_sendmsg+0x10/0x10
[  443.834412][T19197]  ? import_iovec+0x73/0xa0
[  443.834436][T19197]  ___sys_sendmsg+0x2a5/0x360
[  443.834460][T19197]  ? __lock_acquire+0x683/0x2cd0
[  443.834483][T19197]  ? __pfx____sys_sendmsg+0x10/0x10
[  443.834541][T19197]  ? __fget_files+0x2a/0x420
[  443.834562][T19197]  ? __fget_files+0x3a2/0x420
[  443.834592][T19197]  __x64_sys_sendmsg+0x1bd/0x2a0
[  443.834621][T19197]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  443.834655][T19197]  ? __pfx_ksys_write+0x10/0x10
[  443.834688][T19197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.834707][T19197]  do_syscall_64+0x174/0x580
[  443.834725][T19197]  ? trace_irq_disable+0x3b/0x140
[  443.834749][T19197]  ? clear_bhb_loop+0x40/0x90
[  443.834771][T19197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.834788][T19197] RIP: 0033:0x7ff7b759ce59
[  443.834805][T19197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.834821][T19197] RSP: 002b:00007ff7b840b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.834840][T19197] RAX: ffffffffffffffda RBX: 00007ff7b7816090 RCX: 00007ff7b759ce59
[  443.834854][T19197] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  443.834865][T19197] RBP: 00007ff7b840b090 R08: 0000000000000000 R09: 0000000000000000
[  443.834876][T19197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.834886][T19197] R13: 00007ff7b7816128 R14: 00007ff7b7816090 R15: 00007ffe446ebc18
[  443.834916][T19197]  </TASK>
[  444.036098][   T29] audit: type=1800 audit(1781364802.577:12): pid=19196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3559" name="cgroup.controllers" dev="tmpfs" ino=672 res=0 errno=0
[  448.208615][    C1] net_ratelimit: 28560 callbacks suppressed
[  448.208636][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.226774][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  448.238920][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.251197][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.263311][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  448.275501][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.287751][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.299932][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  448.312192][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.324512][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  448.910259][T19205] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  449.272335][T19211] netlink: 'syz.1.3564': attribute type 11 has an invalid length.
[  449.478861][T19221] syzkaller0: entered promiscuous mode
[  449.521976][T19221] syzkaller0: entered allmulticast mode
[  449.699743][T19227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3567'.
[  449.716091][T19221] tipc: Started in network mode
[  449.746031][T19221] tipc: Node identity 4a8b3e785346, cluster identity 4711
[  449.785868][T19221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.859510][T19220] tipc: Resetting bearer <eth:syzkaller0>
[  450.021426][T19220] tipc: Disabling bearer <eth:syzkaller0>
[  450.379584][T19241] FAULT_INJECTION: forcing a failure.
[  450.379584][T19241] name failslab, interval 1, probability 0, space 0, times 0
[  450.505458][T19241] CPU: 0 UID: 0 PID: 19241 Comm: syz.0.3572 Not tainted syzkaller #0 PREEMPT(full) 
[  450.505483][T19241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  450.505494][T19241] Call Trace:
[  450.505501][T19241]  <TASK>
[  450.505508][T19241]  dump_stack_lvl+0xe8/0x150
[  450.505557][T19241]  should_fail_ex+0x40c/0x560
[  450.505583][T19241]  should_failslab+0xa8/0x100
[  450.505609][T19241]  ? skb_clone+0x212/0x3a0
[  450.505627][T19241]  kmem_cache_alloc_noprof+0x87/0x650
[  450.505660][T19241]  skb_clone+0x212/0x3a0
[  450.505679][T19241]  __netlink_deliver_tap+0x413/0x860
[  450.505716][T19241]  ? netlink_deliver_tap+0x2e/0x1b0
[  450.505743][T19241]  netlink_deliver_tap+0x19c/0x1b0
[  450.505768][T19241]  netlink_unicast+0x77f/0x940
[  450.505802][T19241]  netlink_sendmsg+0x813/0xb40
[  450.505838][T19241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.505866][T19241]  ? aa_sock_msg_perm+0xf1/0x1b0
[  450.505894][T19241]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  450.505916][T19241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  450.505942][T19241]  ____sys_sendmsg+0x9b9/0xa20
[  450.505968][T19241]  ? __might_fault+0xaf/0x130
[  450.505997][T19241]  ? __pfx_____sys_sendmsg+0x10/0x10
[  450.506032][T19241]  ? import_iovec+0x73/0xa0
[  450.506057][T19241]  ___sys_sendmsg+0x2a5/0x360
[  450.506082][T19241]  ? __lock_acquire+0x683/0x2cd0
[  450.506105][T19241]  ? __pfx____sys_sendmsg+0x10/0x10
[  450.506172][T19241]  ? __fget_files+0x2a/0x420
[  450.506193][T19241]  ? __fget_files+0x3a2/0x420
[  450.506225][T19241]  __x64_sys_sendmsg+0x1bd/0x2a0
[  450.506255][T19241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  450.506290][T19241]  ? __pfx_ksys_write+0x10/0x10
[  450.506323][T19241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.506342][T19241]  do_syscall_64+0x174/0x580
[  450.506362][T19241]  ? clear_bhb_loop+0x40/0x90
[  450.506384][T19241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.506401][T19241] RIP: 0033:0x7faaaff9ce59
[  450.506419][T19241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.506435][T19241] RSP: 002b:00007faab0e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.506456][T19241] RAX: ffffffffffffffda RBX: 00007faab0216090 RCX: 00007faaaff9ce59
[  450.506469][T19241] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  450.506481][T19241] RBP: 00007faab0e12090 R08: 0000000000000000 R09: 0000000000000000
[  450.506492][T19241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.506503][T19241] R13: 00007faab0216128 R14: 00007faab0216090 R15: 00007ffd180c8b68
[  450.506534][T19241]  </TASK>
[  450.908078][T19255] netlink: 'syz.0.3577': attribute type 1 has an invalid length.
[  450.917705][T19255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3577'.
[  451.095350][T19261] Bluetooth: MGMT ver 1.23
[  451.116173][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'.
[  451.211041][T19256] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3578'.
[  451.249987][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3579'.
[  451.309214][T19266] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3579'.
[  452.080537][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'.
[  452.377507][T19292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3587'.
[  453.215271][T19312] netlink: 'syz.1.3594': attribute type 1 has an invalid length.
[  453.218368][    C1] net_ratelimit: 23843 callbacks suppressed
[  453.218385][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.241067][T19312] netlink: 'syz.1.3594': attribute type 1 has an invalid length.
[  453.241219][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  453.261152][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.273541][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.285855][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  453.298193][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.310879][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.323183][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  453.335453][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.347814][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  453.423765][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3596'.
[  453.511227][T19319] batadv0: entered promiscuous mode
[  453.582003][T19319] macsec1: entered promiscuous mode
[  453.621176][T19322] netlink: 'syz.1.3598': attribute type 11 has an invalid length.
[  453.635975][T19319] 8021q: adding VLAN 0 to HW filter on device macsec1
[  453.688075][T19319] batadv0: left promiscuous mode
[  453.826630][T19323] netlink: 'syz.1.3598': attribute type 4 has an invalid length.
[  454.193431][T19330] tipc: Started in network mode
[  454.214819][T19330] tipc: Node identity 7e094427fc97, cluster identity 4711
[  454.232871][T19330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.249587][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3603'.
[  454.266961][T19334] syzkaller0: entered promiscuous mode
[  454.297972][T19334] syzkaller0: entered allmulticast mode
[  454.380407][T19329] tipc: Resetting bearer <eth:syzkaller0>
[  454.511427][T19329] tipc: Disabling bearer <eth:syzkaller0>
[  454.542174][T19339] syzkaller0: entered promiscuous mode
[  454.548254][T19339] syzkaller0: entered allmulticast mode
[  454.585362][T19345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  454.686958][T19347] FAULT_INJECTION: forcing a failure.
[  454.686958][T19347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.734639][T19347] CPU: 0 UID: 0 PID: 19347 Comm: syz.2.3606 Not tainted syzkaller #0 PREEMPT(full) 
[  454.734665][T19347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  454.734676][T19347] Call Trace:
[  454.734683][T19347]  <TASK>
[  454.734691][T19347]  dump_stack_lvl+0xe8/0x150
[  454.734718][T19347]  should_fail_ex+0x40c/0x560
[  454.734743][T19347]  _copy_from_iter+0x1d3/0x1660
[  454.734766][T19347]  ? unwind_next_frame+0x8f/0x2550
[  454.734829][T19347]  ? __lock_acquire+0x683/0x2cd0
[  454.734848][T19347]  ? __pfx__copy_from_iter+0x10/0x10
[  454.734881][T19347]  tun_get_user+0x269/0x4350
[  454.734942][T19347]  ? aa_file_perm+0x18b/0x15f0
[  454.734963][T19347]  ? aa_file_perm+0x4ed/0x15f0
[  454.734977][T19347]  ? __pfx_tun_get_user+0x10/0x10
[  454.735002][T19347]  ? __lock_acquire+0x683/0x2cd0
[  454.735019][T19347]  ? kstrtoull+0x12f/0x1d0
[  454.735047][T19347]  ? ref_tracker_alloc+0x341/0x4b0
[  454.735083][T19347]  ? get_pid_task+0x20/0x1f0
[  454.735111][T19347]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  454.735131][T19347]  ? tun_get+0x1c/0x2f0
[  454.735156][T19347]  ? tun_get+0x1c/0x2f0
[  454.735181][T19347]  ? tun_get+0x1c/0x2f0
[  454.735203][T19347]  ? tun_get+0x1c/0x2f0
[  454.735229][T19347]  tun_chr_write_iter+0x113/0x200
[  454.735255][T19347]  vfs_write+0x612/0xba0
[  454.735283][T19347]  ? __pfx_vfs_write+0x10/0x10
[  454.735315][T19347]  ? __fget_files+0x2a/0x420
[  454.735343][T19347]  ksys_write+0x150/0x270
[  454.735368][T19347]  ? __pfx_ksys_write+0x10/0x10
[  454.735396][T19347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.735414][T19347]  do_syscall_64+0x174/0x580
[  454.735430][T19347]  ? trace_irq_disable+0x3b/0x140
[  454.735454][T19347]  ? clear_bhb_loop+0x40/0x90
[  454.735475][T19347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.735491][T19347] RIP: 0033:0x7f7aa599ce59
[  454.735509][T19347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.735523][T19347] RSP: 002b:00007f7aa6898028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  454.735542][T19347] RAX: ffffffffffffffda RBX: 00007f7aa5c16090 RCX: 00007f7aa599ce59
[  454.735554][T19347] RDX: 000000000000003e RSI: 0000200000000100 RDI: 0000000000000003
[  454.735566][T19347] RBP: 00007f7aa6898090 R08: 0000000000000000 R09: 0000000000000000
[  454.735575][T19347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.735585][T19347] R13: 00007f7aa5c16128 R14: 00007f7aa5c16090 R15: 00007ffc54cb3f88
[  454.735615][T19347]  </TASK>
[  455.886732][T19368] __nla_validate_parse: 2 callbacks suppressed
[  455.886763][T19368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3611'.
[  458.228516][    C1] net_ratelimit: 26320 callbacks suppressed
[  458.228537][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  458.246684][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  458.259038][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  458.271264][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  458.283507][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  458.295868][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  458.308083][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  458.320291][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  458.332508][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  458.344708][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  460.236542][T19338] tipc: Resetting bearer <eth:syzkaller0>
[  460.363713][T19338] tipc: Disabling bearer <eth:syzkaller0>
[  460.421983][T19346] syzkaller1: entered promiscuous mode
[  460.443812][T19346] syzkaller1: entered allmulticast mode
[  460.534739][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'.
[  460.766552][ T5843] tipc: Node number set to 432881272
[  461.076236][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'.
[  461.315214][T19395] netlink: 'syz.3.3620': attribute type 268 has an invalid length.
[  461.345865][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'.
[  461.547523][T19404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3619'.
[  461.623134][   T29] audit: type=1804 audit(1781364820.407:13): pid=19406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3623" name="/newroot/141/cgroup.controllers" dev="tmpfs" ino=740 res=1 errno=0
[  461.675808][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3624'.
[  461.739709][   T29] audit: type=1800 audit(1781364820.417:14): pid=19406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3623" name="cgroup.controllers" dev="tmpfs" ino=740 res=0 errno=0
[  461.956110][T19412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  462.284010][T19425] bridge0: port 3(syz_tun) entered blocking state
[  462.321503][T19425] bridge0: port 3(syz_tun) entered disabled state
[  462.362466][T19425] syz_tun: entered allmulticast mode
[  462.405057][T19425] syz_tun: entered promiscuous mode
[  462.422684][T19425] bridge0: port 3(syz_tun) entered blocking state
[  462.429312][T19425] bridge0: port 3(syz_tun) entered forwarding state
[  462.677718][T19410] tipc: Disabling bearer <eth:syzkaller0>
[  463.238529][    C1] net_ratelimit: 25995 callbacks suppressed
[  463.238547][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.256706][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  463.268974][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.281338][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.293607][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  463.305904][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.318284][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.330644][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  463.342927][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.355291][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  463.883136][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'.
[  464.348123][T19492] netlink: 'syz.4.3647': attribute type 1 has an invalid length.
[  464.620991][T19480] tipc: Started in network mode
[  464.642474][T19480] tipc: Node identity d25d2e73af06, cluster identity 4711
[  464.695257][T19480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.761915][T19481] syzkaller0: entered promiscuous mode
[  464.794039][T19481] syzkaller0: entered allmulticast mode
[  464.884192][T19473] tipc: Resetting bearer <eth:syzkaller0>
[  465.072254][T19473] tipc: Disabling bearer <eth:syzkaller0>
[  465.214306][T19504] syzkaller0: entered promiscuous mode
[  465.267663][T19504] syzkaller0: entered allmulticast mode
[  465.446991][T19517] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3651'.
[  465.943438][T19536] netlink: 'syz.2.3656': attribute type 15 has an invalid length.
[  465.972873][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3656'.
[  466.204560][T19539] x_tables: duplicate underflow at hook 1
[  466.430334][T19547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3659'.
[  466.472691][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3661'.
[  466.526195][T19548] netlink: 'syz.0.3660': attribute type 1 has an invalid length.
[  466.552653][ T8975] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  466.593562][   T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  466.650433][T19555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3660'.
[  466.867175][   T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  466.881467][T19555] 8021q: adding VLAN 0 to HW filter on device bond1
[  466.899456][   T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  466.954508][T19564] macvtap0: entered allmulticast mode
[  466.983361][T19564] veth0_macvtap: entered allmulticast mode
[  467.436963][T19575] netlink: 'syz.3.3666': attribute type 1 has an invalid length.
[  468.248384][    C1] net_ratelimit: 23388 callbacks suppressed
[  468.248410][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  468.266590][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  468.278930][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  468.291187][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  468.303450][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  468.315822][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  468.328070][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  468.340342][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  468.352716][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  468.365019][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  470.265456][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3687'.
[  470.305734][T19657] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3687'.
[  471.939867][T19695] xt_hashlimit: max too large, truncated to 1048576
[  471.955698][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3695'.
[  472.530874][T19721] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3703'.
[  473.094847][T19646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  473.258473][    C1] net_ratelimit: 25396 callbacks suppressed
[  473.258493][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.276704][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  473.289018][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.297688][T19725] syzkaller0: entered promiscuous mode
[  473.301390][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.301651][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  473.331078][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.343427][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.349417][T19725] syzkaller0: entered allmulticast mode
[  473.355706][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  473.373232][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.385633][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.433298][T19725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3704'.
[  473.508238][T19725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3704'.
[  473.649940][T19734] netlink: 'syz.2.3707': attribute type 1 has an invalid length.
[  473.659757][T19734] netlink: 'syz.2.3707': attribute type 2 has an invalid length.
[  473.667608][T19734] netlink: 'syz.2.3707': attribute type 1 has an invalid length.
[  473.680689][T19734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3707'.
[  473.816728][T19728] 8021q: adding VLAN 0 to HW filter on device bond2
[  473.940556][T19729] 8021q: adding VLAN 0 to HW filter on device bond3
[  474.237256][T19752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3712'.
[  477.728865][ T4998] udevd[4998]: worker [17507] /devices/virtual/block/nbd2 is taking a long time
[  478.268487][    C1] net_ratelimit: 28697 callbacks suppressed
[  478.268508][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  478.286645][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  478.298775][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  478.311081][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  478.323316][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  478.335559][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  478.347835][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  478.359981][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  478.372183][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  478.384427][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.056192][T19752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3712'.
[  480.081306][T19754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3712'.
[  480.282440][T19754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3712'.
[  481.217337][T19793] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20003
[  482.134996][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3728'.
[  482.145309][T19810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3729'.
[  482.523660][T19822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3730'.
[  482.559126][T19822] netlink: 'syz.1.3730': attribute type 2 has an invalid length.
[  482.849888][T19831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3735'.
[  483.278473][    C1] net_ratelimit: 25820 callbacks suppressed
[  483.278492][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.296723][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  483.308968][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.321357][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.333595][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  483.345878][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.358243][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.370545][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  483.382787][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.395142][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  483.863714][T19854] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3740'.
[  483.946930][T19854] syzkaller1: entered promiscuous mode
[  483.973226][T19854] syzkaller1: entered allmulticast mode
[  484.568152][T19869] netlink: 'syz.0.3744': attribute type 1 has an invalid length.
[  484.585357][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  484.599714][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  485.133094][T19882] netlink: 'syz.2.3748': attribute type 3 has an invalid length.
[  485.616550][T19863] syz_tun: left promiscuous mode
[  485.666535][T19863] bridge0: port 3(team0) entered disabled state
[  485.673281][T19863] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.680983][T19863] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.795215][T19863] batman_adv: batadv0: Interface deactivated: dummy0
[  486.280928][T19863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.336832][T19863] batadv_slave_1: left promiscuous mode
[  486.790587][T19863] veth0_macvtap: left allmulticast mode
[  486.823366][T19863] macvtap0: left allmulticast mode
[  487.111957][T19874] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  487.143881][T19880] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.178879][ T8977] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.213530][ T8977] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.252742][ T8977] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.320958][ T8977] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.381391][ T8977] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.459924][ T8977] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.481599][T19899] __nla_validate_parse: 4 callbacks suppressed
[  487.481617][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'.
[  487.523537][T19898] netlink: 'syz.0.3752': attribute type 1 has an invalid length.
[  487.554417][ T8977] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.584846][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3754'.
[  487.633455][ T8977] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.670036][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3754'.
[  488.042710][T19904] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  488.106589][T19905] netlink: 'syz.1.3754': attribute type 1 has an invalid length.
[  488.157133][T19905] netlink: 'syz.1.3754': attribute type 2 has an invalid length.
[  488.191392][ T5641] Bluetooth: hci0: command 0x0406 tx timeout
[  488.256760][T19910] macvlan2: entered promiscuous mode
[  488.263480][T19910] macvlan2: entered allmulticast mode
[  488.270503][T19910] bond2: entered promiscuous mode
[  488.275994][T19910] bridge2: entered promiscuous mode
[  488.284762][T19910] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  488.288500][    C1] net_ratelimit: 23428 callbacks suppressed
[  488.288515][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  488.309763][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  488.322116][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  488.334416][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  488.346741][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  488.359096][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  488.371524][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  488.383801][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  488.396030][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  488.408281][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  488.500003][T19910] bond2: left promiscuous mode
[  488.518274][T19910] bridge2: left promiscuous mode
[  488.614356][T19934] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3759'.
[  488.724269][T19919] netlink: 'syz.4.3757': attribute type 22 has an invalid length.
[  488.753997][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'.
[  488.952528][T19935] syzkaller1: entered promiscuous mode
[  488.958620][T19919] netlink: 'syz.4.3757': attribute type 22 has an invalid length.
[  488.966797][T19935] syzkaller1: entered allmulticast mode
[  488.972585][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'.
[  488.988668][ T8977] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  489.022935][ T8977] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  489.053194][ T8977] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  489.073904][ T8977] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  489.738242][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'.
[  489.877901][T19962] pim6reg: entered allmulticast mode
[  490.071569][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'.
[  490.220229][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3771'.
[  490.803973][T19993] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3776'.
[  491.279002][T19994] syzkaller1: entered promiscuous mode
[  491.320883][T19994] syzkaller1: entered allmulticast mode
[  491.973706][T20016] bond0: entered promiscuous mode
[  492.003461][T20016] bond_slave_0: entered promiscuous mode
[  492.024537][T20016] bond_slave_1: entered promiscuous mode
[  492.164767][T20028] syzkaller0: entered promiscuous mode
[  492.221657][T20028] syzkaller0: entered allmulticast mode
[  492.405292][T20031] syzkaller1: entered promiscuous mode
[  492.424180][T20031] syzkaller1: entered allmulticast mode
[  493.298503][    C1] net_ratelimit: 22758 callbacks suppressed
[  493.298521][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.316738][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  493.329021][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.341449][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.353828][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  493.366125][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.378514][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.390763][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  493.395502][T20064] __nla_validate_parse: 4 callbacks suppressed
[  493.395518][T20064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3792'.
[  493.403038][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.430396][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  493.433438][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3792'.
[  493.452661][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3792'.
[  493.658923][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3795'.
[  494.095766][T20077] netlink: 'syz.2.3798': attribute type 1 has an invalid length.
[  494.137801][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'.
[  494.343693][T20077] 8021q: adding VLAN 0 to HW filter on device bond3
[  494.517789][T20089] syzkaller0: entered promiscuous mode
[  494.546219][T20089] syzkaller0: entered allmulticast mode
[  495.012217][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3807'.
[  495.278983][T20117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3807'.
[  495.474996][T20092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.498825][T20092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.934454][T20102] bond4: entered promiscuous mode
[  495.940371][T20102] 8021q: adding VLAN 0 to HW filter on device bond4
[  496.023865][T20124] syzkaller0: entered promiscuous mode
[  496.073849][T20124] syzkaller0: entered allmulticast mode
[  497.209575][T20092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.256388][T20092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.643451][T20173] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3819'.
[  497.705580][T20092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.747993][T20092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.308452][    C1] net_ratelimit: 22827 callbacks suppressed
[  498.308475][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.326736][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.338986][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  498.351247][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.363603][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.375863][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  498.388162][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.400517][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.412799][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  498.425070][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  498.471347][T20092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  498.554164][T20092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.665937][T20196] netlink: 'syz.0.3823': attribute type 11 has an invalid length.
[  498.704808][T20196] netlink: 'syz.0.3823': attribute type 11 has an invalid length.
[  498.733979][T20196] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3823'.
[  498.755961][T20178] syzkaller0: entered promiscuous mode
[  498.774296][T20178] syzkaller0: entered allmulticast mode
[  498.931601][T20193] syzkaller1: entered allmulticast mode
[  499.217610][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3825'.
[  499.668320][ T8965] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  499.713642][ T8965] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.002881][ T8965] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  500.012545][ T8965] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.039290][ T8965] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  500.064570][ T8965] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.157167][   T57] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  500.183764][   T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.353450][T20235] syz.1.3832: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  500.416696][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3832'.
[  500.446718][T20235] CPU: 0 UID: 0 PID: 20235 Comm: syz.1.3832 Not tainted syzkaller #0 PREEMPT(full) 
[  500.446750][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  500.446762][T20235] Call Trace:
[  500.446771][T20235]  <TASK>
[  500.446780][T20235]  dump_stack_lvl+0xe8/0x150
[  500.446813][T20235]  warn_alloc+0x249/0x340
[  500.446844][T20235]  ? __pfx_stack_trace_save+0x10/0x10
[  500.446879][T20235]  ? __pfx_warn_alloc+0x10/0x10
[  500.446917][T20235]  ? __kasan_kmalloc+0x93/0xb0
[  500.446945][T20235]  ? __kmalloc_cache_noprof+0x318/0x660
[  500.446972][T20235]  ? xskq_create+0x56/0x170
[  500.447122][T20235]  ? xsk_init_queue+0x8a/0xe0
[  500.447146][T20235]  ? xsk_setsockopt+0x52a/0x960
[  500.447170][T20235]  ? do_sock_setsockopt+0x17c/0x1b0
[  500.447200][T20235]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  500.447237][T20235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.447266][T20235]  __vmalloc_node_range_noprof+0x12c/0x1730
[  500.447323][T20235]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  500.447358][T20235]  ? __kasan_kmalloc+0x93/0xb0
[  500.447393][T20235]  vmalloc_user_noprof+0xad/0xe0
[  500.447421][T20235]  ? xskq_create+0xbf/0x170
[  500.447450][T20235]  xskq_create+0xbf/0x170
[  500.447481][T20235]  xsk_init_queue+0x8a/0xe0
[  500.447508][T20235]  xsk_setsockopt+0x52a/0x960
[  500.447533][T20235]  ? __fget_files+0x2a/0x420
[  500.447560][T20235]  ? __pfx_xsk_setsockopt+0x10/0x10
[  500.447587][T20235]  ? __pfx_aa_sk_perm+0x10/0x10
[  500.447620][T20235]  ? aa_sock_opt_perm+0xff/0x1a0
[  500.447653][T20235]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  500.447680][T20235]  ? __pfx_xsk_setsockopt+0x10/0x10
[  500.447708][T20235]  do_sock_setsockopt+0x17c/0x1b0
[  500.447740][T20235]  __x64_sys_setsockopt+0x13d/0x1b0
[  500.447771][T20235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.447793][T20235]  do_syscall_64+0x174/0x580
[  500.447812][T20235]  ? trace_irq_disable+0x3b/0x140
[  500.447843][T20235]  ? clear_bhb_loop+0x40/0x90
[  500.447869][T20235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.447889][T20235] RIP: 0033:0x7f7004d9ce59
[  500.447909][T20235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.447927][T20235] RSP: 002b:00007f7005ce4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  500.447950][T20235] RAX: ffffffffffffffda RBX: 00007f7005015fa0 RCX: 00007f7004d9ce59
[  500.447965][T20235] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  500.447978][T20235] RBP: 00007f7004e32d6f R08: 0000000000000004 R09: 0000000000000000
[  500.447990][T20235] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.448003][T20235] R13: 00007f7005016038 R14: 00007f7005015fa0 R15: 00007ffc133dd428
[  500.448037][T20235]  </TASK>
[  500.740426][T20235] Mem-Info:
[  500.743632][T20235] active_anon:6202 inactive_anon:0 isolated_anon:0
[  500.743632][T20235]  active_file:3524 inactive_file:40135 isolated_file:0
[  500.743632][T20235]  unevictable:768 dirty:60 writeback:0
[  500.743632][T20235]  slab_reclaimable:11256 slab_unreclaimable:122301
[  500.743632][T20235]  mapped:29633 shmem:1295 pagetables:1516
[  500.743632][T20235]  sec_pagetables:0 bounce:0
[  500.743632][T20235]  kernel_misc_reclaimable:0
[  500.743632][T20235]  free:1291914 free_pcp:11227 free_cma:0
[  500.789412][T20235] Node 0 active_anon:24808kB inactive_anon:0kB active_file:14096kB inactive_file:160336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118532kB dirty:236kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14808kB pagetables:5900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  500.824492][T20235] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  500.860684][T20235] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  500.890765][T20235] lowmem_reserve[]: 0 2493 2494 2494 2494
[  500.897346][T20235] Node 0 DMA32 free:1208196kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24808kB inactive_anon:0kB active_file:14096kB inactive_file:160336kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2553212kB mlocked:0kB bounce:0kB free_pcp:44552kB local_pcp:25308kB free_cma:0kB
[  500.931470][T20235] lowmem_reserve[]: 0 0 0 0 0
[  500.936219][T20235] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  500.965572][T20235] lowmem_reserve[]: 0 0 0 0 0
[  500.970355][T20235] Node 1 Normal free:3944100kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  501.008716][T20235] lowmem_reserve[]: 0 0 0 0 0
[  501.014090][T20235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  501.027034][T20235] Node 0 DMA32: 758*4kB (UME) 3921*8kB (UME) 2104*16kB (UM) 517*32kB (UME) 876*64kB (UME) 843*128kB (UME) 686*256kB (UME) 361*512kB (UME) 205*1024kB (UM) 76*2048kB (UM) 57*4096kB (M) = 1208064kB
[  501.073704][T20235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  501.085526][T20235] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 7*16kB (UM) 6*32kB (UM) 9*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944100kB
[  501.109762][T20235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.119676][T20235] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.129263][T20235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.139611][T20235] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.155162][T20235] 44950 total pagecache pages
[  501.161647][T20235] 0 pages in swap cache
[  501.166061][T20235] Free swap  = 124996kB
[  501.170748][T20235] Total swap = 124996kB
[  501.184744][T20235] 2097051 pages RAM
[  501.190003][T20235] 0 pages HighMem/MovableOnly
[  501.195468][T20235] 426960 pages reserved
[  501.200386][T20235] 0 pages cma reserved
[  501.652661][T20252] FAULT_INJECTION: forcing a failure.
[  501.652661][T20252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.701315][T20250] syzkaller0: entered promiscuous mode
[  501.710406][T20252] CPU: 0 UID: 0 PID: 20252 Comm: syz.0.3837 Not tainted syzkaller #0 PREEMPT(full) 
[  501.710432][T20252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  501.710443][T20252] Call Trace:
[  501.710450][T20252]  <TASK>
[  501.710458][T20252]  dump_stack_lvl+0xe8/0x150
[  501.710485][T20252]  should_fail_ex+0x40c/0x560
[  501.710511][T20252]  _copy_from_iter+0x1d3/0x1660
[  501.710535][T20252]  ? rcu_is_watching+0x15/0xb0
[  501.710561][T20252]  ? __pfx__copy_from_iter+0x10/0x10
[  501.710578][T20252]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[  501.710609][T20252]  ? netlink_sendmsg+0x650/0xb40
[  501.710635][T20252]  ? skb_put+0x112/0x210
[  501.710662][T20252]  netlink_sendmsg+0x6c0/0xb40
[  501.710695][T20252]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.710722][T20252]  ? aa_sock_msg_perm+0xf1/0x1b0
[  501.710749][T20252]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  501.710772][T20252]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.710798][T20252]  ____sys_sendmsg+0x9b9/0xa20
[  501.710824][T20252]  ? __might_fault+0xaf/0x130
[  501.710852][T20252]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.710886][T20252]  ? import_iovec+0x73/0xa0
[  501.710910][T20252]  ___sys_sendmsg+0x2a5/0x360
[  501.710938][T20252]  ? __lock_acquire+0x683/0x2cd0
[  501.710960][T20252]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.710984][T20252]  ? __lock_acquire+0x683/0x2cd0
[  501.711006][T20252]  ? kstrtouint+0x6e/0xe0
[  501.711071][T20252]  __sys_sendmmsg+0x27c/0x4e0
[  501.711102][T20252]  ? __pfx___sys_sendmmsg+0x10/0x10
[  501.711134][T20252]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  501.711264][T20252]  ? ksys_write+0x242/0x270
[  501.711291][T20252]  ? __pfx_ksys_write+0x10/0x10
[  501.711322][T20252]  __x64_sys_sendmmsg+0xa0/0xc0
[  501.711347][T20252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.711366][T20252]  do_syscall_64+0x174/0x580
[  501.711384][T20252]  ? clear_bhb_loop+0x40/0x90
[  501.711406][T20252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.711424][T20252] RIP: 0033:0x7faaaff9ce59
[  501.711441][T20252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.711456][T20252] RSP: 002b:00007faab0e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  501.711475][T20252] RAX: ffffffffffffffda RBX: 00007faab0215fa0 RCX: 00007faaaff9ce59
[  501.711489][T20252] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  501.711501][T20252] RBP: 00007faab0e33090 R08: 0000000000000000 R09: 0000000000000000
[  501.711512][T20252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  501.711523][T20252] R13: 00007faab0216038 R14: 00007faab0215fa0 R15: 00007ffd180c8b68
[  501.711553][T20252]  </TASK>
[  501.731127][T20250] syzkaller0: entered allmulticast mode
[  503.214569][T20286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3846'.
[  503.251677][T20286] syzkaller1: entered promiscuous mode
[  503.266368][T20286] syzkaller1: entered allmulticast mode
[  503.318409][    C1] net_ratelimit: 21996 callbacks suppressed
[  503.318429][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  503.336630][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  503.348893][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  503.361291][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  503.373595][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  503.385885][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  503.398255][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  503.410514][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  503.422819][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  503.435181][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  504.174592][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3852'.
[  504.279317][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'.
[  505.525329][T20360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3855'.
[  506.094088][T20383] geneve2: entered promiscuous mode
[  506.104068][T20383] geneve2: entered allmulticast mode
[  506.159780][   T29] audit: type=1804 audit(1781364864.947:15): pid=20385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3862" name="/newroot/174/cgroup.controllers" dev="tmpfs" ino=905 res=1 errno=0
[  506.249734][   T29] audit: type=1800 audit(1781364864.947:16): pid=20385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3862" name="cgroup.controllers" dev="tmpfs" ino=905 res=0 errno=0
[  506.358782][T20390] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3863'.
[  506.829534][T20399] syzkaller0: entered promiscuous mode
[  506.837588][T20399] syzkaller0: entered allmulticast mode
[  506.856413][T20391] syzkaller1: entered promiscuous mode
[  506.872186][T20391] syzkaller1: entered allmulticast mode
[  507.727001][T20427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.971491][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'.
[  508.004117][T20429] syzkaller0: entered promiscuous mode
[  508.021285][T20429] syzkaller0: entered allmulticast mode
[  508.070997][T20443] netlink: 'syz.4.3875': attribute type 16 has an invalid length.
[  508.084560][T20422] tipc: Resetting bearer <eth:syzkaller0>
[  508.114216][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3875'.
[  508.281787][T20422] tipc: Disabling bearer <eth:syzkaller0>
[  508.328398][    C1] net_ratelimit: 21684 callbacks suppressed
[  508.328420][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.346636][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  508.358920][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.371303][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.383565][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  508.395877][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.408224][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.414017][T20454] netlink: 'syz.1.3879': attribute type 11 has an invalid length.
[  508.420505][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  508.440436][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.452797][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  508.607822][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3877'.
[  508.637885][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3877'.
[  508.883316][T20457] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.890636][T20457] bridge0: port 2(bridge_slave_1) entered listening state
[  508.899772][T20457] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.906952][T20457] bridge0: port 1(bridge_slave_0) entered listening state
[  509.108123][T20457] 8021q: adding VLAN 0 to HW filter on device bond2
[  509.811923][T20492] netlink: 'syz.3.3889': attribute type 266 has an invalid length.
[  509.852436][T20494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3888'.
[  509.873238][T20496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3889'.
[  511.097035][T20528] netlink: 'syz.2.3898': attribute type 21 has an invalid length.
[  511.143637][T20528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3898'.
[  511.777736][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'.
[  512.158614][T20552] syzkaller0: entered promiscuous mode
[  512.191547][T20552] syzkaller0: entered allmulticast mode
[  512.700070][T20559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.726247][T20564] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3910'.
[  512.888847][T20551] tipc: Resetting bearer <eth:syzkaller0>
[  513.014640][T20572] x_tables: duplicate underflow at hook 2
[  513.200071][T20551] tipc: Disabling bearer <eth:syzkaller0>
[  513.235021][T20585] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3913'.
[  513.269275][T20585] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3913'.
[  513.338482][    C1] net_ratelimit: 22581 callbacks suppressed
[  513.338502][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.356803][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.368987][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  513.381252][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.393627][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.405912][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  513.418195][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.430556][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.442891][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  513.455181][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  513.637778][T20582] h: entered promiscuous mode
[  513.982987][ T5740] IPVS: starting estimator thread 0...
[  514.108625][T20604] IPVS: using max 27 ests per chain, 64800 per kthread
[  515.922478][T20591] wireguard0: entered promiscuous mode
[  516.241745][T20611] bond3: option resend_igmp: invalid value (32767)
[  516.251779][T20611] bond3: option resend_igmp: allowed values 0 - 255
[  516.650937][T20611] bond3 (unregistering): Released all slaves
[  517.480776][T20639] netlink: 'syz.2.3929': attribute type 1 has an invalid length.
[  517.663622][T20646] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3931'.
[  517.719228][T20646] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3931'.
[  517.796722][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3930'.
[  518.334125][T20668] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3934'.
[  518.348376][    C1] net_ratelimit: 28580 callbacks suppressed
[  518.348398][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.366669][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.378919][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  518.391166][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.403484][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.415795][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  518.428090][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.440439][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.452719][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  518.464948][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  518.738520][T20672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  518.821010][T20681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3938'.
[  519.066291][T20687] syzkaller0: entered promiscuous mode
[  519.080838][T20687] syzkaller0: entered allmulticast mode
[  519.175738][T20685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.227585][T20683] tipc: Resetting bearer <eth:syzkaller0>
[  519.372860][T20683] tipc: Disabling bearer <eth:syzkaller0>
[  519.708902][T20715] syzkaller1: entered promiscuous mode
[  519.723817][T20715] syzkaller1: entered allmulticast mode
[  519.986725][T20720] xt_limit: Overflow, try lower: 604147548/4200216962
[  520.048104][T20719] batadv0: entered promiscuous mode
[  520.062079][T20719] macsec1: entered promiscuous mode
[  520.078053][T20719] 8021q: adding VLAN 0 to HW filter on device macsec1
[  520.127296][T20719] batadv0: left promiscuous mode
[  521.053308][T20740] syzkaller0: entered promiscuous mode
[  521.060139][T20740] syzkaller0: entered allmulticast mode
[  521.144546][T20744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  521.198943][T20736] tipc: Resetting bearer <eth:syzkaller0>
[  521.339637][T20736] tipc: Disabling bearer <eth:syzkaller0>
[  521.506649][T20746] syzkaller1: entered promiscuous mode
[  521.516009][T20753] xt_CT: You must specify a L4 protocol and not use inversions on it
[  521.539901][T20746] syzkaller1: entered allmulticast mode
[  521.833724][T20762] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3962'.
[  522.470631][T20763] netlink: 'syz.2.3961': attribute type 1 has an invalid length.
[  522.486541][T20763] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3961'.
[  522.499976][T20780] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  522.775521][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3969'.
[  522.878142][T20789] netlink: 'syz.4.3971': attribute type 1 has an invalid length.
[  523.327556][T20789] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.358513][    C1] net_ratelimit: 23235 callbacks suppressed
[  523.358534][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.376850][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.389156][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  523.401451][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.413880][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.426164][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  523.438514][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.450882][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.463177][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  523.475468][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  523.749165][T20818] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3976'.
[  523.984009][T20830] Bluetooth: MGMT ver 1.23
[  524.127101][T20826] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3977'.
[  524.961720][T20856] syzkaller0: entered promiscuous mode
[  525.000575][T20856] syzkaller0: entered allmulticast mode
[  525.141922][T20856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.208199][T20851] tipc: Resetting bearer <eth:syzkaller0>
[  525.649432][T20851] tipc: Disabling bearer <eth:syzkaller0>
[  525.781056][T20881] netlink: 'syz.3.3994': attribute type 1 has an invalid length.
[  525.851868][T20883] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  525.975342][T20890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3994'.
[  526.844824][T20918] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4000'.
[  526.862496][T20888] bond4: (slave geneve2): making interface the new active one
[  526.880502][T20888] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  526.909710][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3993'.
[  526.969765][T20890] 8021q: adding VLAN 0 to HW filter on device bond4
[  527.015768][T20893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3994'.
[  527.058572][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'.
[  527.069762][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  527.267426][ T2175] tipc: Node number set to 2191410215
[  527.281601][ T8956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  527.324567][ T8956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  527.521183][ T8956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  527.578631][ T8956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  527.777318][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'.
[  527.849792][T20939] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4004'.
[  528.223629][T20950] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20000
[  528.318834][T20953] netlink: 'syz.3.4009': attribute type 1 has an invalid length.
[  528.358270][T20953] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4009'.
[  528.368393][    C1] net_ratelimit: 22417 callbacks suppressed
[  528.368411][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.368636][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  528.368850][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.410766][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.423047][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  528.435318][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.439490][T20953] netlink: 'syz.3.4009': attribute type 1 has an invalid length.
[  528.447692][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.467368][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  528.479659][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.492057][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  528.505594][T20953] netlink: 'syz.3.4009': attribute type 8 has an invalid length.
[  528.538693][T20953] netlink: 606 bytes leftover after parsing attributes in process `syz.3.4009'.
[  528.583285][T20953] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4009'.
[  528.816629][T20960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4010'.
[  529.997789][T20998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4021'.
[  530.024223][T21000] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4020'.
[  530.191248][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4022'.
[  530.232250][T21005] nbd: must specify at least one socket
[  530.257568][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'.
[  530.530688][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4024'.
[  530.573067][T21010] tipc: MTU too low for tipc bearer
[  533.059552][T21071] __nla_validate_parse: 4 callbacks suppressed
[  533.059572][T21071] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4041'.
[  533.115102][T21076] syzkaller0: entered promiscuous mode
[  533.137432][T21076] syzkaller0: entered allmulticast mode
[  533.378351][    C1] net_ratelimit: 22334 callbacks suppressed
[  533.378373][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  533.396550][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  533.408891][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  533.421149][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  533.433499][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  533.445779][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  533.458141][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  533.470391][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  533.482703][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  533.494950][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  533.510063][T21076] tipc: Started in network mode
[  533.638656][T21076] tipc: Node identity 82387bbc232, cluster identity 4711
[  533.660327][T21076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.689356][T21080] netlink: 'syz.4.4045': attribute type 11 has an invalid length.
[  533.705993][T21080] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4045'.
[  533.773259][T21075] tipc: Resetting bearer <eth:syzkaller0>
[  534.082254][T21075] tipc: Disabling bearer <eth:syzkaller0>
[  534.514708][T21116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4052'.
[  534.984520][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4056'.
[  535.483445][T21143] IPVS: length: 199 != 8
[  535.650026][T21145] netlink: 'syz.1.4062': attribute type 4 has an invalid length.
[  536.086392][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'.
[  536.537737][T21183] netlink: 'syz.3.4070': attribute type 1 has an invalid length.
[  536.664833][T21185] netlink: 'syz.3.4070': attribute type 1 has an invalid length.
[  536.751347][T21185] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4070'.
[  536.785850][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4071'.
[  537.064406][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4073'.
[  538.131675][T21233] xt_CT: You must specify a L4 protocol and not use inversions on it
[  538.156036][T21234] veth0: entered promiscuous mode
[  538.198555][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4082'.
[  538.315891][T21233] netlink: 'syz.4.4080': attribute type 1 has an invalid length.
[  538.388471][    C1] net_ratelimit: 22188 callbacks suppressed
[  538.388491][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  538.406676][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  538.415820][T21233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4080'.
[  538.418990][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  538.419198][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  538.419391][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  538.464519][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  538.476904][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  538.489163][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  538.501506][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  538.513764][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  538.558543][T21241] netlink: 'syz.4.4080': attribute type 1 has an invalid length.
[  538.613488][T21241] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4080'.
[  539.231068][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  539.240397][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  539.388502][ T5641] Bluetooth: hci3: command 0x0405 tx timeout
[  539.528530][T21272] syzkaller0: entered promiscuous mode
[  539.544242][T21272] syzkaller0: entered allmulticast mode
[  539.657619][T21277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.710030][T21270] tipc: Resetting bearer <eth:syzkaller0>
[  539.883134][T21270] tipc: Disabling bearer <eth:syzkaller0>
[  539.971380][T21276] netlink: 'syz.2.4090': attribute type 1 has an invalid length.
[  540.000681][T21276] netlink: 'syz.2.4090': attribute type 3 has an invalid length.
[  540.031170][T21276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4090'.
[  540.099135][T21286] smc: net device team0 applied user defined pnetid SYZ2
[  540.352999][T21296] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4094'.
[  540.427946][T21298] ip6erspan0: entered allmulticast mode
[  540.504265][T21298] netlink: 'syz.1.4095': attribute type 4 has an invalid length.
[  540.545181][T21304] syzkaller1: entered promiscuous mode
[  540.581502][T21304] syzkaller1: entered allmulticast mode
[  540.586135][T21298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4095'.
[  541.506839][T21332] netlink: 'syz.0.4102': attribute type 2 has an invalid length.
[  542.282507][T21347] netlink: 'syz.1.4107': attribute type 3 has an invalid length.
[  542.342391][T21345] netlink: 'syz.0.4105': attribute type 1 has an invalid length.
[  542.394602][T21345] netlink: 'syz.0.4105': attribute type 1 has an invalid length.
[  542.421500][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4107'.
[  542.647271][T21357] syzkaller0: entered promiscuous mode
[  542.683169][T21357] syzkaller0: entered allmulticast mode
[  543.053041][T21366] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4112'.
[  543.069967][T21368] netlink: 'syz.3.4111': attribute type 4 has an invalid length.
[  543.207032][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4111'.
[  543.261210][T21371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4112'.
[  543.398466][    C1] net_ratelimit: 22169 callbacks suppressed
[  543.398485][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  543.417464][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  543.429723][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  543.442121][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  543.454404][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  543.466771][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  543.479068][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  543.491510][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  543.503773][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  543.516178][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  544.986544][T21420] syzkaller0: entered promiscuous mode
[  545.025170][T21420] syzkaller0: entered allmulticast mode
[  545.161968][T21436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4121'.
[  545.850503][T21450] syzkaller0: entered promiscuous mode
[  545.910236][T21450] syzkaller0: entered allmulticast mode
[  546.090289][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4131'.
[  546.694860][T21472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4136'.
[  547.134418][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'.
[  547.180019][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4140'.
[  547.417013][T21494] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4142'.
[  547.592749][ T8962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.640172][ T8962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.051896][T21514] macvlan0: entered promiscuous mode
[  548.174843][T21516] syzkaller0: entered promiscuous mode
[  548.221577][T21516] syzkaller0: entered allmulticast mode
[  548.408561][    C1] net_ratelimit: 22528 callbacks suppressed
[  548.408583][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  548.427104][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  548.439388][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  548.451789][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  548.464074][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  548.476447][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  548.488712][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  548.501058][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  548.513329][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  548.525671][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  552.025672][T21546] xt_l2tp: wrong L2TP version: 0
[  552.976684][T21568] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  553.021767][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'.
[  553.032236][T21571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4161'.
[  553.063715][T21568] bond2 (unregistering): Released all slaves
[  553.087373][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'.
[  553.307907][T21580] netlink: 'syz.2.4163': attribute type 1 has an invalid length.
[  553.418343][    C1] net_ratelimit: 19229 callbacks suppressed
[  553.418361][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  553.436640][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  553.448915][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  553.461775][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  553.474346][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  553.486705][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  553.498938][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  553.507040][   T29] audit: type=1804 audit(1781364912.297:17): pid=21585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4165" name="/newroot/260/cgroup.controllers" dev="tmpfs" ino=1344 res=1 errno=0
[  553.511275][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  553.511724][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  553.558574][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  553.589192][   T29] audit: type=1800 audit(1781364912.337:18): pid=21585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4165" name="cgroup.controllers" dev="tmpfs" ino=1344 res=0 errno=0
[  553.715222][T21587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4166'.
[  553.824012][T21589] syzkaller0: entered promiscuous mode
[  553.830680][T21589] syzkaller0: entered allmulticast mode
[  555.457395][T21604] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4172'.
[  555.507903][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4173'.
[  555.610661][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'.
[  555.799992][   T29] audit: type=1804 audit(1781364914.587:19): pid=21613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4176" name="/newroot/120/cgroup.controllers" dev="tmpfs" ino=624 res=1 errno=0
[  555.828075][T21611] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4174'.
[  555.876760][T21609] vlan2: entered allmulticast mode
[  555.912449][T21609] bond0: entered allmulticast mode
[  555.931706][   T29] audit: type=1800 audit(1781364914.617:20): pid=21613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4176" name="cgroup.controllers" dev="tmpfs" ino=624 res=0 errno=0
[  555.949651][T21609] bond_slave_0: entered allmulticast mode
[  556.048582][T21609] bond_slave_1: entered allmulticast mode
[  557.047218][T21651] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4185'.
[  557.237685][T21645] syzkaller0: entered promiscuous mode
[  557.271996][T21645] syzkaller0: entered allmulticast mode
[  557.565423][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4187'.
[  558.117196][   T29] audit: type=1804 audit(1781364916.907:21): pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4191" name="/newroot/269/cgroup.controllers" dev="tmpfs" ino=1391 res=1 errno=0
[  558.167018][T21679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4192'.
[  558.181354][T21679] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4192'.
[  558.211508][   T29] audit: type=1800 audit(1781364916.907:22): pid=21677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4191" name="cgroup.controllers" dev="tmpfs" ino=1391 res=0 errno=0
[  558.250433][T21679] netlink: 'syz.1.4192': attribute type 6 has an invalid length.
[  558.263733][T21681] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  558.279226][T21679] netlink: 'syz.1.4192': attribute type 5 has an invalid length.
[  558.308148][T21679] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4192'.
[  558.428474][    C1] net_ratelimit: 20636 callbacks suppressed
[  558.428492][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  558.446692][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  558.459052][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  558.471641][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  558.484040][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  558.496335][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  558.508712][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  558.521295][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  558.533686][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  558.545952][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  559.046724][T21699] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.136383][T21699] bridge_slave_0 (unregistering): left allmulticast mode
[  559.161584][T21699] bridge_slave_0 (unregistering): left promiscuous mode
[  559.183906][T21699] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.503315][T21719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4195'.
[  560.637677][T21740] syzkaller0: entered promiscuous mode
[  560.646985][T21740] syzkaller0: entered allmulticast mode
[  561.185228][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4200'.
[  561.447184][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4202'.
[  561.469197][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4202'.
[  561.571592][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4203'.
[  561.612661][T21754] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2
[  561.622124][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4203'.
[  561.643149][T21754] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4203'.
[  561.655596][T21754] unsupported nlmsg_type 40
[  561.735792][   T29] audit: type=1804 audit(1781364920.527:23): pid=21756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4204" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=646 res=1 errno=0
[  561.806749][   T29] audit: type=1800 audit(1781364920.597:24): pid=21756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4204" name="cgroup.controllers" dev="tmpfs" ino=646 res=0 errno=0
[  562.822732][T21787] FAULT_INJECTION: forcing a failure.
[  562.822732][T21787] name failslab, interval 1, probability 0, space 0, times 0
[  562.871174][T21787] CPU: 0 UID: 0 PID: 21787 Comm: syz.1.4215 Not tainted syzkaller #0 PREEMPT(full) 
[  562.871201][T21787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  562.871212][T21787] Call Trace:
[  562.871219][T21787]  <TASK>
[  562.871229][T21787]  dump_stack_lvl+0xe8/0x150
[  562.871258][T21787]  should_fail_ex+0x40c/0x560
[  562.871284][T21787]  should_failslab+0xa8/0x100
[  562.871313][T21787]  ? dst_alloc+0x105/0x170
[  562.871436][T21787]  kmem_cache_alloc_noprof+0x87/0x650
[  562.871462][T21787]  ? __copy_skb_header+0xa3/0x4a0
[  562.871493][T21787]  dst_alloc+0x105/0x170
[  562.871516][T21787]  rt_dst_clone+0x52/0x680
[  562.871596][T21787]  ip_mc_finish_output+0xea/0x2e0
[  562.871656][T21787]  ip_mc_output+0x254/0x580
[  562.871678][T21787]  ip_send_skb+0x45/0xc0
[  562.871698][T21787]  udp_send_skb+0x7f7/0xfb0
[  562.871768][T21787]  udp_sendmsg+0x64a/0x2140
[  562.871788][T21787]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  562.871827][T21787]  ? __pfx_udp_sendmsg+0x10/0x10
[  562.871867][T21787]  ? aa_sk_perm+0x6d5/0x900
[  562.871898][T21787]  ? __pfx_aa_sk_perm+0x10/0x10
[  562.871919][T21787]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  562.871949][T21787]  ? __fget_files+0x3a2/0x420
[  562.871969][T21787]  ? sock_rps_record_flow+0x19/0x350
[  562.872038][T21787]  ? __pfx_inet_sendmsg+0x10/0x10
[  562.872058][T21787]  ? inet_sendmsg+0x23e/0x320
[  562.872076][T21787]  ? __pfx_inet_sendmsg+0x10/0x10
[  562.872096][T21787]  __sys_sendto+0x5de/0x710
[  562.872131][T21787]  ? __pfx___sys_sendto+0x10/0x10
[  562.872156][T21787]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  562.872188][T21787]  ? __fget_files+0x3a2/0x420
[  562.872220][T21787]  ? ksys_write+0x242/0x270
[  562.872246][T21787]  ? __pfx_ksys_write+0x10/0x10
[  562.872276][T21787]  __x64_sys_sendto+0xde/0x100
[  562.872300][T21787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.872320][T21787]  do_syscall_64+0x174/0x580
[  562.872337][T21787]  ? trace_irq_disable+0x3b/0x140
[  562.872361][T21787]  ? clear_bhb_loop+0x40/0x90
[  562.872384][T21787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.872401][T21787] RIP: 0033:0x7f7004d9ce59
[  562.872419][T21787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.872434][T21787] RSP: 002b:00007f7005ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  562.872454][T21787] RAX: ffffffffffffffda RBX: 00007f7005015fa0 RCX: 00007f7004d9ce59
[  562.872467][T21787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  562.872478][T21787] RBP: 00007f7005ce4090 R08: 0000000000000000 R09: 0000000000000000
[  562.872489][T21787] R10: 0000000032000800 R11: 0000000000000246 R12: 0000000000000001
[  562.872500][T21787] R13: 00007f7005016038 R14: 00007f7005015fa0 R15: 00007ffc133dd428
[  562.872530][T21787]  </TASK>
[  563.422369][T21798] __nla_validate_parse: 1 callbacks suppressed
[  563.422387][T21798] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4218'.
[  563.438352][    C1] net_ratelimit: 22736 callbacks suppressed
[  563.438369][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  563.456626][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  563.468894][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  563.481278][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  563.493594][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  563.505975][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  563.518309][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  563.530641][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  563.542879][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  563.555241][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  565.176955][T21774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  565.725427][T21818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.820272][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'.
[  566.653344][T21854] veth1_macvtap: entered promiscuous mode
[  566.814242][T21854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4233'.
[  566.826113][T21860] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4238'.
[  566.858097][T21861] netlink: 'syz.2.4237': attribute type 29 has an invalid length.
[  567.216980][T21861] syzkaller0: entered promiscuous mode
[  567.242661][T21861] syzkaller0: entered allmulticast mode
[  567.373439][T21879] FAULT_INJECTION: forcing a failure.
[  567.373439][T21879] name failslab, interval 1, probability 0, space 0, times 0
[  567.388011][T21879] CPU: 0 UID: 0 PID: 21879 Comm: syz.1.4242 Not tainted syzkaller #0 PREEMPT(full) 
[  567.388037][T21879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  567.388048][T21879] Call Trace:
[  567.388061][T21879]  <TASK>
[  567.388069][T21879]  dump_stack_lvl+0xe8/0x150
[  567.388097][T21879]  should_fail_ex+0x40c/0x560
[  567.388123][T21879]  should_failslab+0xa8/0x100
[  567.388151][T21879]  ? skb_clone+0x212/0x3a0
[  567.388169][T21879]  kmem_cache_alloc_noprof+0x87/0x650
[  567.388202][T21879]  ? dev_queue_xmit_nit+0x2d/0xac0
[  567.388345][T21879]  skb_clone+0x212/0x3a0
[  567.388360][T21879]  ? dev_queue_xmit_nit+0x593/0xac0
[  567.388387][T21879]  dev_queue_xmit_nit+0x28d/0xac0
[  567.388411][T21879]  ? dev_queue_xmit_nit+0x2d/0xac0
[  567.388444][T21879]  dev_hard_start_xmit+0x1c1/0x830
[  567.388480][T21879]  __dev_queue_xmit+0x1435/0x37f0
[  567.388498][T21879]  ? is_bpf_text_address+0x292/0x2b0
[  567.388525][T21879]  ? __local_bh_enable_ip+0xd0/0x130
[  567.388556][T21879]  ? lockdep_hardirqs_on+0x7a/0x110
[  567.388581][T21879]  ? __dev_queue_xmit+0x29b/0x37f0
[  567.388597][T21879]  ? ipt_do_table+0x2b9/0x15d0
[  567.388686][T21879]  ? neigh_connected_output+0x1e7/0x470
[  567.388710][T21879]  ? __pfx___dev_queue_xmit+0x10/0x10
[  567.388729][T21879]  ? neigh_connected_output+0x1e7/0x470
[  567.388760][T21879]  ? read_seqbegin+0xac/0x180
[  567.388779][T21879]  ? neigh_connected_output+0x1e7/0x470
[  567.388801][T21879]  ? lockdep_hardirqs_on+0x7a/0x110
[  567.388852][T21879]  ? ip_finish_output2+0x3de/0x10b0
[  567.388872][T21879]  ip_finish_output2+0xc4b/0x10b0
[  567.388893][T21879]  ? ip_finish_output2+0x3de/0x10b0
[  567.388924][T21879]  ip_do_fragment+0x1117/0x1770
[  567.388957][T21879]  ? __pfx_ip_finish_output2+0x10/0x10
[  567.388990][T21879]  ip_send_skb+0x45/0xc0
[  567.389011][T21879]  udp_send_skb+0x7f7/0xfb0
[  567.389045][T21879]  udp_sendmsg+0x64a/0x2140
[  567.389066][T21879]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  567.389109][T21879]  ? __pfx_udp_sendmsg+0x10/0x10
[  567.389148][T21879]  ? aa_sk_perm+0x6d5/0x900
[  567.389188][T21879]  ? __pfx_aa_sk_perm+0x10/0x10
[  567.389210][T21879]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  567.389241][T21879]  ? __fget_files+0x3a2/0x420
[  567.389260][T21879]  ? sock_rps_record_flow+0x19/0x350
[  567.389278][T21879]  ? __pfx_inet_sendmsg+0x10/0x10
[  567.389298][T21879]  ? inet_sendmsg+0x23e/0x320
[  567.389318][T21879]  ? __pfx_inet_sendmsg+0x10/0x10
[  567.389338][T21879]  __sys_sendto+0x5de/0x710
[  567.389365][T21879]  ? __pfx___sys_sendto+0x10/0x10
[  567.389386][T21879]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  567.389419][T21879]  ? __fget_files+0x3a2/0x420
[  567.389452][T21879]  ? ksys_write+0x242/0x270
[  567.389479][T21879]  ? __pfx_ksys_write+0x10/0x10
[  567.389510][T21879]  __x64_sys_sendto+0xde/0x100
[  567.389534][T21879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.389554][T21879]  do_syscall_64+0x174/0x580
[  567.389571][T21879]  ? trace_irq_disable+0x3b/0x140
[  567.389595][T21879]  ? clear_bhb_loop+0x40/0x90
[  567.389618][T21879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.389636][T21879] RIP: 0033:0x7f7004d9ce59
[  567.389654][T21879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.389669][T21879] RSP: 002b:00007f7005ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  567.389688][T21879] RAX: ffffffffffffffda RBX: 00007f7005015fa0 RCX: 00007f7004d9ce59
[  567.389701][T21879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  567.389712][T21879] RBP: 00007f7005ce4090 R08: 0000000000000000 R09: 0000000000000000
[  567.389723][T21879] R10: 0000000032000800 R11: 0000000000000246 R12: 0000000000000001
[  567.389734][T21879] R13: 00007f7005016038 R14: 00007f7005015fa0 R15: 00007ffc133dd428
[  567.389767][T21879]  </TASK>
[  568.158947][T21891] netlink: 'syz.1.4245': attribute type 1 has an invalid length.
[  568.196313][T21894] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4246'.
[  568.214290][T21891] netlink: 476 bytes leftover after parsing attributes in process `syz.1.4245'.
[  568.254206][T21891] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4245'.
[  568.269477][T21897] sctp: [Deprecated]: syz.0.4246 (pid 21897) Use of int in max_burst socket option.
[  568.269477][T21897] Use struct sctp_assoc_value instead
[  568.448455][    C1] net_ratelimit: 27094 callbacks suppressed
[  568.448475][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  568.466666][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  568.479020][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  568.491270][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  568.503578][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  568.515832][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  568.528191][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  568.540454][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  568.552813][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  568.565108][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  569.308540][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  569.315830][    C0] bridge0: topology change detected, propagating
[  573.458312][    C1] net_ratelimit: 30315 callbacks suppressed
[  573.458333][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  573.476570][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  573.488810][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  573.501175][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  573.513319][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  573.525643][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  573.537877][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  573.550189][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  573.562320][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:40:4f:eb:62:68, vlan:0)
[  573.574633][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  574.763287][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'.
[  574.978864][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'.
[  575.081462][T21927] bond3: option xmit_hash_policy: invalid value (64)
[  575.144366][T21927] bond3 (unregistering): Released all slaves
[  575.384251][T21926] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  575.557222][T21926] bond3 (unregistering): Released all slaves
[  576.112713][T21954] bond3 (unregistering): Released all slaves
[  576.614388][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4267'.
[  576.998705][   T30] INFO: task udevd:17507 blocked for more than 143 seconds.
[  577.028111][   T30]       Not tainted syzkaller #0
[  577.062472][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  577.118194][   T30] task:udevd           state:D stack:23464 pid:17507 tgid:17507 ppid:4998   task_flags:0x400140 flags:0x00080000
[  577.182151][   T30] Call Trace:
[  577.194654][   T30]  <TASK>
[  577.200035][   T30]  __schedule+0x1840/0x57a0
[  577.204831][   T30]  ? irqentry_exit+0x218/0x8e0
[  577.243345][   T30]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  577.278202][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  577.316074][   T30]  ? __blk_flush_plug+0x416/0x4d0
[  577.350632][   T30]  ? __pfx___schedule+0x10/0x10
[  577.370014][   T30]  ? schedule+0x90/0x360
[  577.403116][   T30]  schedule+0x164/0x360
[  577.423129][   T30]  schedule_timeout+0x152/0x2c0
[  577.439749][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  577.457606][   T30]  ? __pfx_process_timeout+0x10/0x10
[  577.478433][   T30]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[  577.496356][   T30]  ? prepare_to_wait_event+0x436/0x480
[  577.511507][   T30]  nbd_queue_rq+0x889/0x1150
[  577.522289][   T30]  ? __pfx_nbd_queue_rq+0x10/0x10
[  577.539003][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  577.551985][   T30]  blk_mq_dispatch_rq_list+0x499/0x1990
[  577.563733][   T30]  ? sbitmap_get+0x229/0x390
[  577.584427][   T30]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[  577.605560][   T30]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  577.675193][   T30]  __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  577.682155][   T30]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  577.689565][   T30]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  577.696013][   T30]  blk_mq_sched_dispatch_requests+0xd7/0x190
[  577.702781][   T30]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[  577.708186][   T30]  blk_mq_run_hw_queue+0x348/0x4f0
[  577.715634][   T30]  blk_mq_dispatch_list+0xd11/0xe10
[  577.721530][   T30]  ? bdev_count_inflight+0x1cf/0x210
[  577.727003][   T30]  ? blk_mq_dispatch_list+0x250/0xe10
[  577.735855][   T30]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[  577.742155][   T30]  ? rcu_is_watching+0x15/0xb0
[  577.747055][   T30]  blk_mq_flush_plug_list+0x45f/0x540
[  577.754525][   T30]  ? blk_add_rq_to_plug+0x300/0x450
[  577.760252][   T30]  ? blk_mq_submit_bio+0x1c70/0x2a70
[  577.765767][   T30]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  577.773467][   T30]  ? blk_mq_submit_bio+0x306/0x2a70
[  577.779250][   T30]  __blk_flush_plug+0x3ed/0x4d0
[  577.784242][   T30]  ? __pfx___blk_flush_plug+0x10/0x10
[  577.790171][   T30]  ? blkg_get+0x20/0x1d0
[  577.794582][   T30]  __submit_bio+0x465/0x560
[  577.800742][   T30]  ? __pfx___submit_bio+0x10/0x10
[  577.805897][   T30]  ? bio_associate_blkg+0x6d/0x230
[  577.811715][   T30]  submit_bio_noacct_nocheck+0x2f4/0xa40
[  577.817467][   T30]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  577.824384][   T30]  ? submit_bio_noacct+0xf7b/0x1b20
[  577.829963][   T30]  ? blkcg_set_ioprio+0x16b/0x2a0
[  577.835171][   T30]  block_read_full_folio+0x7b7/0x830
[  577.851567][   T30]  ? __pfx_blkdev_get_block+0x10/0x10
[  577.860464][   T30]  filemap_read_folio+0x12c/0x3a0
[  577.865667][   T30]  ? __pfx_blkdev_read_folio+0x10/0x10
[  577.871924][   T30]  ? __pfx_filemap_read_folio+0x10/0x10
[  577.877597][   T30]  ? filemap_add_folio+0x350/0x530
[  577.883426][   T30]  do_read_cache_folio+0x354/0x590
[  577.889168][   T30]  ? __pfx_blkdev_read_folio+0x10/0x10
[  577.894832][   T30]  read_part_sector+0xb6/0x2b0
[  577.901285][   T30]  adfspart_check_ICS+0xb1/0x960
[  577.906407][   T30]  ? seq_buf_printf+0x212/0x2d0
[  577.911873][   T30]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  577.918757][   T30]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  577.924441][   T30]  ? alloc_pages_mpol+0x24a/0x380
[  577.930168][   T30]  bdev_disk_changed+0x82b/0x1780
[  577.935343][   T30]  ? __pfx_bdev_disk_changed+0x10/0x10
[  577.941515][   T30]  blkdev_get_whole+0x372/0x510
[  577.946505][   T30]  bdev_open+0x324/0xd70
[  577.954728][   T30]  blkdev_open+0x461/0x600
[  577.959654][   T30]  ? __pfx_blkdev_open+0x10/0x10
[  577.964764][   T30]  do_dentry_open+0x816/0x1380
[  577.971202][   T30]  vfs_open+0x3b/0x340
[  577.975431][   T30]  ? path_openat+0x2e23/0x3890
[  577.981076][   T30]  path_openat+0x2e3b/0x3890
[  577.985847][   T30]  ? arch_stack_walk+0xfb/0x150
[  577.991317][   T30]  ? do_getname+0x2e/0x250
[  577.995953][   T30]  ? stack_depot_save_flags+0x33/0x800
[  578.003209][   T30]  ? __pfx_path_openat+0x10/0x10
[  578.008750][   T30]  ? __x64_sys_openat+0x138/0x170
[  578.013907][   T30]  ? __lock_acquire+0x683/0x2cd0
[  578.019508][   T30]  do_file_open+0x23e/0x4a0
[  578.024158][   T30]  ? __pfx_do_file_open+0x10/0x10
[  578.034801][   T30]  ? alloc_fd+0x62e/0x6a0
[  578.039745][   T30]  do_sys_openat2+0x113/0x200
[  578.044622][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  578.050562][   T30]  __x64_sys_openat+0x138/0x170
[  578.055909][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.066238][   T30]  do_syscall_64+0x174/0x580
[  578.071209][   T30]  ? clear_bhb_loop+0x40/0x90
[  578.076013][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.082678][   T30] RIP: 0033:0x7fb8236a7407
[  578.087216][   T30] RSP: 002b:00007fff48fe5c90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  578.096352][   T30] RAX: ffffffffffffffda RBX: 00007fb823e02880 RCX: 00007fb8236a7407
[  578.105876][   T30] RDX: 00000000000a0800 RSI: 0000563322369430 RDI: ffffffffffffff9c
[  578.114417][   T30] RBP: 0000563322368910 R08: 0000000000000000 R09: 0000000000000000
[  578.122996][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563322385f10
[  578.131552][   T30] R13: 0000563322376190 R14: 0000000000000000 R15: 0000563322385f10
[  578.140106][   T30]  </TASK>
[  578.167196][   T30] 
[  578.167196][   T30] Showing all locks held in the system:
[  578.179440][   T30] 1 lock held by khungtaskd/30:
[  578.184482][   T30]  #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  578.198445][   T30] 2 locks held by getty/5383:
[  578.203390][   T30]  #0: ffff8880375170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  578.244516][   T30]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380
[  578.255498][   T30] 8 locks held by kworker/u8:13/8955:
[  578.261284][   T30] 3 locks held by udevd/17507:
[  578.266229][   T30]  #0: ffff888027f05350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  578.291783][   T30]  #1: ffff888027121c98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[  578.303412][   T30]  #2: ffff888027fde178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150
[  578.314163][   T30] 1 lock held by syz.2.4274/22006:
[  578.319770][   T30]  #0: ffff888059a300d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100
[  578.356456][   T30] 
[  578.364701][   T30] =============================================
[  578.364701][   T30] 
[  578.384121][   T30] NMI backtrace for cpu 0
[  578.384143][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  578.384162][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  578.384173][   T30] Call Trace:
[  578.384179][   T30]  <TASK>
[  578.384187][   T30]  dump_stack_lvl+0xe8/0x150
[  578.384214][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  578.384237][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  578.384293][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  578.384317][   T30]  sys_info+0x135/0x170
[  578.384397][   T30]  watchdog+0xfd7/0x1030
[  578.384435][   T30]  ? watchdog+0x1c7/0x1030
[  578.384463][   T30]  kthread+0x389/0x470
[  578.384486][   T30]  ? __pfx_watchdog+0x10/0x10
[  578.384507][   T30]  ? __pfx_kthread+0x10/0x10
[  578.384529][   T30]  ret_from_fork+0x514/0xb70
[  578.384551][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  578.384569][   T30]  ? __switch_to+0xc89/0x1420
[  578.384596][   T30]  ? __pfx_kthread+0x10/0x10
[  578.384619][   T30]  ret_from_fork_asm+0x1a/0x30
[  578.384654][   T30]  </TASK>
[  578.384661][   T30] Sending NMI from CPU 0 to CPUs 1:
[  578.468502][    C1] net_ratelimit: 24200 callbacks suppressed
[  578.468519][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  578.468676][    C1] NMI backtrace for cpu 1
[  578.468689][    C1] CPU: 1 UID: 0 PID: 8955 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  578.468706][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  578.468716][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  578.468786][    C1] RIP: 0010:io_serial_out+0x7c/0xc0
[  578.468823][    C1] Code: 73 82 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8c b1 ed fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  578.468836][    C1] RSP: 0018:ffffc90000a07e10 EFLAGS: 00000002
[  578.468848][    C1] RAX: 0000000000000033 RBX: 0000000000000033 RCX: 0000000000000000
[  578.468858][    C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020
[  578.468868][    C1] RBP: 00000000000003f8 R08: ffff888140aa8237 R09: 1ffff11028155046
[  578.468878][    C1] R10: dffffc0000000000 R11: ffffffff8542cbe0 R12: dffffc0000000000
[  578.468890][    C1] R13: ffffffff9a45d9a8 R14: ffffffff9a773ac0 R15: 0000000000000000
[  578.468900][    C1] FS:  0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000
[  578.468913][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.468923][    C1] CR2: 00007f7005017dac CR3: 0000000037a7c000 CR4: 00000000003526f0
[  578.468938][    C1] Call Trace:
[  578.468944][    C1]  <IRQ>
[  578.468953][    C1]  serial8250_console_write+0x1438/0x1bd0
[  578.468982][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  578.469003][    C1]  ? console_flush_all+0x123/0xaf0
[  578.469026][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  578.469047][    C1]  ? console_flush_all+0x123/0xaf0
[  578.469065][    C1]  console_flush_all+0x6ea/0xaf0
[  578.469086][    C1]  ? console_flush_all+0x123/0xaf0
[  578.469112][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  578.469134][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  578.469156][    C1]  console_unlock+0xd1/0x1c0
[  578.469174][    C1]  ? vprintk_emit+0x2cf/0x560
[  578.469191][    C1]  ? __pfx_console_unlock+0x10/0x10
[  578.469211][    C1]  ? vprintk_emit+0x2cf/0x560
[  578.469227][    C1]  ? vprintk_emit+0x2cf/0x560
[  578.469244][    C1]  vprintk_emit+0x485/0x560
[  578.469263][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  578.469281][    C1]  ? _printk_deferred+0xe9/0x140
[  578.469304][    C1]  _printk+0xdd/0x130
[  578.469324][    C1]  ? __pfx__printk+0x10/0x10
[  578.469342][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  578.469364][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  578.469385][    C1]  ? ___ratelimit+0x584/0x8e0
[  578.469406][    C1]  br_fdb_update+0x657/0x6c0
[  578.469507][    C1]  ? skb_ext_add+0x148/0x8e0
[  578.469527][    C1]  ? __pfx_br_fdb_update+0x10/0x10
[  578.469550][    C1]  br_handle_frame_finish+0x579/0x1930
[  578.469592][    C1]  ? skb_ext_add+0x148/0x8e0
[  578.469617][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  578.469635][    C1]  ? ip6t_do_table+0x1d1/0x15b0
[  578.469682][    C1]  ? __pfx_ip6t_do_table+0x10/0x10
[  578.469701][    C1]  ? nf_hook_slow+0x176/0x220
[  578.469746][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  578.469761][    C1]  br_nf_hook_thresh+0x3dd/0x4c0
[  578.469804][    C1]  ? lock_acquire+0x106/0x350
[  578.469823][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  578.469839][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  578.469854][    C1]  ? ila_nf_input+0xa43/0xb30
[  578.469871][    C1]  ? ila_nf_input+0xe6/0xb30
[  578.469890][    C1]  br_nf_pre_routing_finish_ipv6+0x90c/0xc40
[  578.469930][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  578.469950][    C1]  br_nf_pre_routing_ipv6+0x382/0x6f0
[  578.469967][    C1]  ? br_nf_pre_routing_ipv6+0x43d/0x6f0
[  578.469983][    C1]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  578.470000][    C1]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  578.470016][    C1]  ? br_nf_pre_routing+0x720/0x14b0
[  578.470033][    C1]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  578.470048][    C1]  br_handle_frame+0x1272/0x1510
[  578.470068][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  578.470084][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  578.470104][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  578.470118][    C1]  __netif_receive_skb_core+0x989/0x30b0
[  578.470170][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  578.470196][    C1]  ? process_backlog+0x3c3/0x1860
[  578.470217][    C1]  ? process_backlog+0x3c3/0x1860
[  578.470234][    C1]  ? process_backlog+0x3c3/0x1860
[  578.470254][    C1]  process_backlog+0x706/0x1860
[  578.470274][    C1]  ? process_backlog+0x3c3/0x1860
[  578.470297][    C1]  __napi_poll+0xaa/0x330
[  578.470316][    C1]  net_rx_action+0x61d/0xf50
[  578.470339][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  578.470356][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  578.470380][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  578.470403][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  578.470429][    C1]  handle_softirqs+0x225/0x840
[  578.470446][    C1]  ? do_softirq+0x76/0xd0
[  578.470468][    C1]  ? nsim_dev_trap_report_work+0x7a4/0xb40
[  578.470485][    C1]  do_softirq+0x76/0xd0
[  578.470498][    C1]  </IRQ>
[  578.470503][    C1]  <TASK>
[  578.470509][    C1]  __local_bh_enable_ip+0xf8/0x130
[  578.470523][    C1]  nsim_dev_trap_report_work+0x7a4/0xb40
[  578.470547][    C1]  ? process_scheduled_works+0xa20/0x14e0
[  578.470562][    C1]  process_scheduled_works+0xa8e/0x14e0
[  578.470589][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  578.470614][    C1]  ? assign_work+0x3cf/0x5d0
[  578.470637][    C1]  worker_thread+0xa47/0xfb0
[  578.470664][    C1]  kthread+0x389/0x470
[  578.470682][    C1]  ? __pfx_worker_thread+0x10/0x10
[  578.470696][    C1]  ? __pfx_kthread+0x10/0x10
[  578.470714][    C1]  ret_from_fork+0x514/0xb70
[  578.470730][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  578.470745][    C1]  ? __switch_to+0xc89/0x1420
[  578.470766][    C1]  ? __pfx_kthread+0x10/0x10
[  578.470783][    C1]  ret_from_fork_asm+0x1a/0x30
[  578.470809][    C1]  </TASK>
[  578.523745][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  578.523769][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  578.523789][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  578.523800][   T30] Call Trace:
[  578.523808][   T30]  <TASK>
[  578.523816][   T30]  vpanic+0x56c/0xa60
[  578.523842][   T30]  ? __pfx___schedule+0x10/0x10
[  578.523869][   T30]  ? __pfx_vpanic+0x10/0x10
[  578.523897][   T30]  panic+0xc5/0xd0
[  578.523916][   T30]  ? __pfx_panic+0x10/0x10
[  578.523933][   T30]  ? preempt_schedule_common+0x82/0xd0
[  578.523991][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  578.524015][   T30]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  578.524041][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  578.524067][   T30]  watchdog+0x1030/0x1030
[  578.524099][   T30]  ? watchdog+0x1c7/0x1030
[  578.524128][   T30]  kthread+0x389/0x470
[  578.524152][   T30]  ? __pfx_watchdog+0x10/0x10
[  578.524173][   T30]  ? __pfx_kthread+0x10/0x10
[  578.524196][   T30]  ret_from_fork+0x514/0xb70
[  578.524217][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  578.524236][   T30]  ? __switch_to+0xc89/0x1420
[  578.524263][   T30]  ? __pfx_kthread+0x10/0x10
[  578.524285][   T30]  ret_from_fork_asm+0x1a/0x30
[  578.524319][   T30]  </TASK>
[  578.529396][   T30] Kernel Offset: disabled